$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/pasY7n19aLK3lYgbaqWe7rudwGE.roa File: pasY7n19aLK3lYgbaqWe7rudwGE.roa (raw, json) Hash identifier: +UcfB6Zb0ROja7+KVDuNgz8PtyQAFJO1awXMGdHoxI0= Subject key identifier: A5:AB:18:EE:7D:7D:68:B2:B7:95:88:1B:6A:A5:9E:EE:BB:9D:C0:61 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 196E Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/pasY7n19aLK3lYgbaqWe7rudwGE.roa Signing time: Fri 22 Aug 2025 08:52:59 +0000 ROA not before: Fri 22 Aug 2025 08:52:59 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38851 IP address blocks: 113.196.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6510 (0x196e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 22 08:52:59 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=A5AB18EE7D7D68B2B795881B6AA59EEEBB9DC061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:58:28:d2:62:32:81:e7:85:89:20:c2:63:2b: 36:9e:05:82:52:65:01:40:f7:e6:d8:a4:fe:d5:c1: b5:51:82:78:51:8a:1b:43:cc:03:2a:bc:b1:53:2e: 11:fe:f4:52:71:ee:ec:5e:36:b2:b2:b8:0f:b5:aa: e1:df:1c:06:bc:86:17:32:77:69:01:f8:27:42:5e: 2e:f0:8a:7d:ae:3d:73:2c:6f:99:ce:d0:5c:c8:fa: 99:fe:94:c2:75:b3:f8:a9:7e:9f:c7:6f:a0:86:df: 23:53:9e:d7:c8:2e:1a:9a:f9:6e:2d:66:ec:8f:8c: ad:92:cc:c9:d6:2a:1c:53:89:e2:60:1c:82:06:24: e4:25:3a:63:7a:c0:53:e6:e7:21:6d:3d:93:1f:75: b5:b1:8b:cb:d3:c6:0f:68:d2:1f:25:8c:4e:b3:c1: b7:96:85:f4:7f:bb:73:f0:3c:a2:1e:11:84:2a:fa: 4c:60:e7:5a:db:ef:7f:e2:43:56:53:52:19:2f:ed: 64:3b:51:1f:d0:2c:f2:0f:ca:f3:29:24:fd:7e:14: 29:e6:f3:d0:b8:16:8f:23:07:60:2e:77:1e:4d:9f: fa:40:a2:dc:41:51:2e:7e:1b:aa:e1:ad:19:4d:f2: f2:45:7d:f8:0c:2a:9c:e4:cf:3f:0b:fa:13:bd:89: ad:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:AB:18:EE:7D:7D:68:B2:B7:95:88:1B:6A:A5:9E:EE:BB:9D:C0:61 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/pasY7n19aLK3lYgbaqWe7rudwGE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.196.144.0/21 Signature Algorithm: sha256WithRSAEncryption 4e:54:22:b6:2f:b5:61:91:a6:c1:a8:e5:35:1c:92:b0:69:45: 98:f4:15:21:c4:ed:35:ea:35:d8:f9:79:1c:ff:ca:0c:7f:58: 1e:33:90:d7:a9:10:1d:fa:24:78:dd:7c:5f:f1:d5:03:57:55: f4:49:b0:50:cd:e1:af:20:bd:66:b5:50:67:23:d3:1e:7e:f3: 24:98:3f:46:b0:5f:c4:c0:58:76:9b:9d:77:49:a7:46:91:b1: fc:c0:e5:b9:85:36:b0:27:07:3e:be:c5:d3:68:88:72:a3:15: 12:4e:5e:5c:45:1e:c5:61:f1:96:9c:8f:24:8e:10:2d:54:04: 13:6d:73:54:83:b7:7b:ab:5f:b1:be:07:93:e4:4d:77:88:16: 72:50:85:6b:50:be:3b:a6:e2:5f:cf:0a:b3:ce:5a:5b:3a:2f: 1b:5d:cc:57:09:e8:75:da:1d:df:9f:86:fd:4a:21:cb:a3:3a: e1:83:12:45:bc:22:d8:80:e5:75:c6:d6:f2:9b:04:e1:68:50: 09:3b:a3:73:5e:58:9f:78:05:05:57:04:17:4b:bd:f7:9a:65: 81:59:a3:fe:83:14:c8:8f:a7:f5:3e:70:70:51:cb:e1:6f:f6: 76:e6:e2:bc:b8:78:f4:9f:03:a0:32:f4:ca:6b:89:b3:6e:64: 63:43:1d:08 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICGW4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4MjIw ODUyNTlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEE1QUIxOEVFN0Q3RDY4 QjJCNzk1ODgxQjZBQTU5RUVFQkI5REMwNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9WCjSYjKB54WJIMJjKzaeBYJSZQFA9+bYpP7VwbVRgnhRihtD zAMqvLFTLhH+9FJx7uxeNrKyuA+1quHfHAa8hhcyd2kB+CdCXi7win2uPXMsb5nO 0FzI+pn+lMJ1s/ipfp/Hb6CG3yNTntfILhqa+W4tZuyPjK2SzMnWKhxTieJgHIIG JOQlOmN6wFPm5yFtPZMfdbWxi8vTxg9o0h8ljE6zwbeWhfR/u3PwPKIeEYQq+kxg 51rb73/iQ1ZTUhkv7WQ7UR/QLPIPyvMpJP1+FCnm89C4Fo8jB2Audx5Nn/pAotxB US5+G6rhrRlN8vJFffgMKpzkzz8L+hO9ia0zAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUpasY7n19aLK3lYgbaqWe7rudwGEwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvcGFzWTduMTlhTEszbFlnYmFxV2U3 cnVkd0dFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA3HEkDAN BgkqhkiG9w0BAQsFAAOCAQEATlQiti+1YZGmwajlNRySsGlFmPQVIcTtNeo12Pl5 HP/KDH9YHjOQ16kQHfokeN18X/HVA1dV9EmwUM3hryC9ZrVQZyPTHn7zJJg/RrBf xMBYdpudd0mnRpGx/MDluYU2sCcHPr7F02iIcqMVEk5eXEUexWHxlpyPJI4QLVQE E21zVIO3e6tfsb4Hk+RNd4gWclCFa1C+O6biX88Ks85aWzovG13MVwnoddod35+G /Uohy6M64YMSRbwi2IDldcbW8psE4WhQCTujc15Yn3gFBVcEF0u995plgVmj/oMU yI+n9T5wcFHL4W/2dubivLh49J8DoDL0ymuJs25kY0MdCA== -----END CERTIFICATE-----Generated at Sun Aug 24 07:03:38 2025 by rpki-client