$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/q7YmJaAyedPnRuodme0iBCOG8O4.roa File: q7YmJaAyedPnRuodme0iBCOG8O4.roa (raw, json) Hash identifier: PbTQ6PwNxUiM98h3T+XkfdR6IfSCM1d+C7mElmN6qt4= Subject key identifier: AB:B6:26:25:A0:32:79:D3:E7:46:EA:1D:99:ED:22:04:23:86:F0:EE Certificate issuer: /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665 Certificate serial: 1079 Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/q7YmJaAyedPnRuodme0iBCOG8O4.roa Signing time: Fri 22 Aug 2025 08:54:18 +0000 ROA not before: Fri 22 Aug 2025 08:54:18 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 4780 IP address blocks: 192.72.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4217 (0x1079) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665 Validity Not Before: Aug 22 08:54:18 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=ABB62625A03279D3E746EA1D99ED22042386F0EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0d:86:29:e5:dc:45:75:25:2d:b1:65:db:4e: 3f:a2:3c:61:6e:07:7a:2f:60:02:bb:77:70:d2:4c: 5e:12:75:a3:bc:95:e8:a8:61:83:d0:61:7d:47:e2: ab:3c:b8:44:41:01:b7:fb:6c:03:c5:6a:18:66:b2: 20:aa:17:a8:15:03:ee:19:8a:38:c4:f9:07:44:86: 3b:b4:f6:fe:fb:13:48:ae:d3:61:ff:1c:dc:90:7a: 48:fe:73:52:93:de:9b:9f:f1:e0:52:15:7c:37:4a: 5b:2b:35:91:42:df:00:cb:5c:24:83:c1:d6:e0:4e: 57:3e:98:2e:9c:83:30:03:14:87:f9:88:19:ef:1a: 90:93:7a:71:41:08:0e:94:6a:f9:6e:e7:a7:dc:06: b6:4b:46:ea:f1:57:1b:6d:9b:9d:ab:15:30:49:6c: 65:b2:32:76:a8:d7:0f:69:79:74:eb:53:84:6e:56: 2b:34:f2:f1:64:c6:18:8f:b5:26:88:90:72:c8:4e: 7b:11:63:c3:99:2a:85:65:33:c9:47:c5:9a:34:ce: 37:99:70:92:61:d9:6d:fa:82:4f:25:43:c1:b3:cd: e8:27:34:6e:1d:77:25:ad:8b:60:7e:30:ef:c9:1a: 36:b7:3a:73:ad:9c:30:eb:1d:db:ce:ca:21:7e:58: 66:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:B6:26:25:A0:32:79:D3:E7:46:EA:1D:99:ED:22:04:23:86:F0:EE X509v3 Authority Key Identifier: keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/q7YmJaAyedPnRuodme0iBCOG8O4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 192.72.4.0/22 Signature Algorithm: sha256WithRSAEncryption 13:e5:63:6e:05:05:af:b0:77:1a:13:95:41:90:87:6a:f4:b0: 34:3b:a2:6a:9e:8e:2e:60:fa:c3:16:c7:29:62:da:9b:a5:82: 33:18:00:92:d9:52:eb:4a:fb:e4:67:44:9b:50:6d:8e:1e:4e: a0:8b:ed:ec:dc:87:cf:e2:a4:fc:54:5f:1d:3e:38:e8:5a:2b: 26:a7:56:df:8a:bb:58:44:9f:cd:61:5e:26:36:1f:33:e0:1f: 6e:dc:4c:a1:ac:83:98:ba:56:52:56:cf:e8:5e:70:5b:b1:07: 7d:a1:60:86:b1:52:27:aa:f1:df:8c:14:ff:b9:37:61:dd:e1: 69:0b:63:53:9c:41:c0:c5:0f:94:24:f4:85:98:34:28:2a:f6: 71:36:e8:7c:99:5e:6b:de:80:0d:e7:5d:55:40:f4:8b:0b:48: 17:f4:6c:fe:89:70:33:ba:0d:68:4b:2e:0d:4e:3b:15:af:f4: 4b:73:e0:3f:71:a4:df:67:f6:b0:d1:7d:3c:3c:88:fa:28:aa: 6c:42:e2:fd:d4:ab:80:00:b9:4d:61:5c:f6:eb:7f:62:3c:3b: 65:d5:3d:35:16:87:c1:99:03:6c:9a:0c:a8:ce:9e:ed:c1:36: e1:a8:7e:7d:9e:1c:88:b3:d3:62:78:16:d0:1d:e5:dd:93:66: 06:66:f5:29 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEHkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjRB NjVBMEVCODY2OTIxOUM0MTg1NDQyRDQ5RkM5RDZGODI1QjY2NTAeFw0yNTA4MjIw ODU0MThaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEFCQjYyNjI1QTAzMjc5 RDNFNzQ2RUExRDk5RUQyMjA0MjM4NkYwRUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDDYYp5dxFdSUtsWXbTj+iPGFuB3ovYAK7d3DSTF4SdaO8leio YYPQYX1H4qs8uERBAbf7bAPFahhmsiCqF6gVA+4ZijjE+QdEhju09v77E0iu02H/ HNyQekj+c1KT3puf8eBSFXw3SlsrNZFC3wDLXCSDwdbgTlc+mC6cgzADFIf5iBnv GpCTenFBCA6Uavlu56fcBrZLRurxVxttm52rFTBJbGWyMnao1w9peXTrU4RuVis0 8vFkxhiPtSaIkHLITnsRY8OZKoVlM8lHxZo0zjeZcJJh2W36gk8lQ8GzzegnNG4d dyWti2B+MO/JGja3OnOtnDDrHdvOyiF+WGYFAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUq7YmJaAyedPnRuodme0iBCOG8O4wHwYDVR0jBBgwFoAUtKZaDrhmkhnEGFRC 1J/J1vgltmUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy90 S1phRHJobWtobkVHRlJDMUpfSjF2Z2x0bVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L3RLWmFEcmhta2huRUdGUkMxSl9KMXZnbHRtVS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvcTdZbUphQXllZFBuUnVvZG1lMGlC Q09HOE80LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsBIBDAN BgkqhkiG9w0BAQsFAAOCAQEAE+VjbgUFr7B3GhOVQZCHavSwNDuiap6OLmD6wxbH KWLam6WCMxgAktlS60r75GdEm1Btjh5OoIvt7NyHz+Kk/FRfHT446ForJqdW34q7 WESfzWFeJjYfM+AfbtxMoayDmLpWUlbP6F5wW7EHfaFghrFSJ6rx34wU/7k3Yd3h aQtjU5xBwMUPlCT0hZg0KCr2cTbofJlea96ADeddVUD0iwtIF/Rs/olwM7oNaEsu DU47Fa/0S3PgP3Gk32f2sNF9PDyI+iiqbELi/dSrgAC5TWFc9ut/Yjw7ZdU9NRaH wZkDbJoMqM6e7cE24ah+fZ4ciLPTYngW0B3l3ZNmBmb1KQ== -----END CERTIFICATE-----Generated at Sun Aug 24 09:39:55 2025 by rpki-client