$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/rqNZ1BrYMOdtK_1nUXz4e60srLE.roa File: rqNZ1BrYMOdtK_1nUXz4e60srLE.roa (raw, json) Hash identifier: MGboIk5sLvHQ70obM4jEUcS4gauSxaGRkHFh9MNl+Qw= Subject key identifier: AE:A3:59:D4:1A:D8:30:E7:6D:2B:FD:67:51:7C:F8:7B:AD:2C:AC:B1 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 19B3 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/rqNZ1BrYMOdtK_1nUXz4e60srLE.roa Signing time: Fri 22 Aug 2025 08:53:16 +0000 ROA not before: Fri 22 Aug 2025 08:53:16 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18049 IP address blocks: 175.183.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6579 (0x19b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 22 08:53:16 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=AEA359D41AD830E76D2BFD67517CF87BAD2CACB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a5:05:f5:2b:7e:17:7d:94:25:89:42:1b:6b: 2a:78:51:53:0b:8a:8a:0b:44:2e:1a:e3:61:18:9a: 4c:3f:3a:44:41:17:39:63:81:82:90:aa:04:db:b1: 75:e8:d0:b6:b6:90:e6:52:0d:68:d6:9e:68:c0:34: 59:03:c4:5e:a8:80:10:90:af:ba:43:04:56:61:0b: d2:2e:8e:96:92:2e:61:9d:87:8a:f0:b0:ff:ca:a5: 7b:76:74:11:5a:09:88:13:34:b6:e1:88:e9:7e:10: 4d:5e:28:1a:37:1e:0c:eb:bb:3d:30:76:64:02:47: 0c:4f:52:34:b3:9a:fb:b4:22:d1:80:95:62:75:08: 96:4e:bb:c2:2d:3c:70:ae:ae:71:cc:58:47:5f:2e: 24:e8:3a:fe:b1:74:45:3e:51:63:c6:02:51:07:f6: 55:37:d2:80:86:95:f4:05:d0:7a:45:cd:6c:a0:5a: bb:eb:bc:38:eb:b4:c7:a8:ee:80:ba:57:81:9a:d1: 4a:a9:df:16:dd:63:00:c9:09:df:60:a5:1c:96:37: b3:2c:0d:e7:26:04:38:20:2b:b1:87:b7:c6:f6:0b: 00:cc:a1:78:99:fa:c2:ee:dc:db:a9:74:9d:56:ef: 21:ec:05:d8:82:b7:20:61:37:5d:15:cc:68:37:33: db:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:A3:59:D4:1A:D8:30:E7:6D:2B:FD:67:51:7C:F8:7B:AD:2C:AC:B1 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/rqNZ1BrYMOdtK_1nUXz4e60srLE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 175.183.64.0/19 Signature Algorithm: sha256WithRSAEncryption bb:e2:a9:e3:2d:af:12:c0:8f:56:1c:da:b0:2c:44:81:f1:90: c8:d9:76:ac:7e:cb:2c:11:51:81:ba:dc:24:0c:32:a9:85:c6: f3:06:8f:03:22:20:02:07:1b:65:32:6e:a1:a0:eb:e1:a2:71: 96:bb:05:f6:b7:04:4a:33:ab:56:fd:9d:b2:ec:b9:28:cb:94: 57:24:a0:cb:cb:f4:6f:bc:43:b0:30:4f:d0:9f:8d:fe:92:ae: 0b:ca:1c:fc:67:49:e1:d0:f8:9f:dd:72:71:e9:6d:00:94:c0: 97:7e:06:72:15:aa:f5:c2:40:88:10:77:67:57:6d:39:b0:7a: 43:b5:06:25:8d:3e:bb:02:ce:cb:e0:98:81:37:a0:ce:63:be: 24:a8:c1:48:50:03:aa:bb:87:89:f0:78:26:4f:e0:b2:32:d3: 4c:f6:49:91:64:d2:db:89:fe:ba:1b:ed:a1:87:28:8c:d5:c4: a7:16:d1:85:c8:58:85:b4:82:07:c2:d7:f1:8a:a0:a9:5d:0c: 7c:0b:03:3d:fc:7a:4d:b7:fd:8f:04:5b:f0:49:e0:8a:82:bf: 44:1b:77:6f:67:5c:8b:b9:84:ef:b6:c0:90:b5:d0:d2:42:9e: 45:a9:7e:78:a8:f6:9d:d9:65:39:b5:1c:eb:90:e9:09:c7:df: 06:c7:83:cd -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICGbMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4MjIw ODUzMTZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEFFQTM1OUQ0MUFEODMw RTc2RDJCRkQ2NzUxN0NGODdCQUQyQ0FDQjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCupQX1K34XfZQliUIbayp4UVMLiooLRC4a42EYmkw/OkRBFzlj gYKQqgTbsXXo0La2kOZSDWjWnmjANFkDxF6ogBCQr7pDBFZhC9IujpaSLmGdh4rw sP/KpXt2dBFaCYgTNLbhiOl+EE1eKBo3Hgzruz0wdmQCRwxPUjSzmvu0ItGAlWJ1 CJZOu8ItPHCurnHMWEdfLiToOv6xdEU+UWPGAlEH9lU30oCGlfQF0HpFzWygWrvr vDjrtMeo7oC6V4Ga0Uqp3xbdYwDJCd9gpRyWN7MsDecmBDggK7GHt8b2CwDMoXiZ +sLu3NupdJ1W7yHsBdiCtyBhN10VzGg3M9uPAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUrqNZ1BrYMOdtK/1nUXz4e60srLEwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvcnFOWjFCcllNT2R0S18xblVYejRl NjBzckxFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBa+3QDAN BgkqhkiG9w0BAQsFAAOCAQEAu+Kp4y2vEsCPVhzasCxEgfGQyNl2rH7LLBFRgbrc JAwyqYXG8waPAyIgAgcbZTJuoaDr4aJxlrsF9rcESjOrVv2dsuy5KMuUVySgy8v0 b7xDsDBP0J+N/pKuC8oc/GdJ4dD4n91yceltAJTAl34GchWq9cJAiBB3Z1dtObB6 Q7UGJY0+uwLOy+CYgTegzmO+JKjBSFADqruHifB4Jk/gsjLTTPZJkWTS24n+uhvt oYcojNXEpxbRhchYhbSCB8LX8YqgqV0MfAsDPfx6Tbf9jwRb8EngioK/RBt3b2dc i7mE77bAkLXQ0kKeRal+eKj2ndllObUc65DpCcffBseDzQ== -----END CERTIFICATE-----Generated at Sun Aug 24 13:52:13 2025 by rpki-client