$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/sEwxXz1saaXi3JrHhAiJpwochhk.roa File: sEwxXz1saaXi3JrHhAiJpwochhk.roa (raw, json) Hash identifier: Qh4F3slPzNu4oJT4hY9Q0258xA6GPPvHFoTx44jBgDM= Subject key identifier: B0:4C:31:5F:3D:6C:69:A5:E2:DC:9A:C7:84:08:89:A7:0A:1C:86:19 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1A60 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/sEwxXz1saaXi3JrHhAiJpwochhk.roa Signing time: Fri 22 Aug 2025 08:54:00 +0000 ROA not before: Fri 22 Aug 2025 08:54:00 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131602 IP address blocks: 123.205.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6752 (0x1a60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 22 08:54:00 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=B04C315F3D6C69A5E2DC9AC7840889A70A1C8619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:93:db:bf:7e:e2:c3:23:ab:ab:fb:78:16:4b: 6b:ac:5b:3a:1c:4c:27:12:95:2a:81:80:1e:06:88: 8f:30:e2:4d:96:80:63:b0:35:88:f8:5d:27:ca:cb: 79:fc:ee:50:80:c0:2f:04:60:63:10:e6:51:86:6d: fb:92:a8:52:68:e1:8d:12:98:2e:1a:2f:62:25:21: 88:fe:a8:4d:14:fe:4c:4b:d9:bd:20:b6:6b:4d:b3: ec:74:b6:43:d4:19:e1:63:89:af:75:b2:2c:d9:af: 8b:00:d6:cb:b0:da:36:c6:33:4a:62:88:f3:0d:a0: ab:41:68:13:8c:7a:1e:94:2f:18:1b:60:39:2f:3b: bd:8a:03:48:87:65:4c:fa:46:b7:7f:dd:5c:a3:d1: 16:db:83:20:ab:75:3e:70:02:8c:38:ad:ea:08:f9: 5e:9e:b7:89:0d:7a:da:82:64:9c:0e:f7:07:a5:65: c2:5a:6c:3d:43:44:8d:14:94:d9:69:06:e3:ad:19: fc:f2:ac:3b:67:8d:04:e1:33:cf:48:f5:d9:17:ce: f2:6c:11:05:75:eb:9d:e3:c4:1b:a2:f5:0a:71:5f: 99:d9:02:8c:79:04:62:00:4f:49:3d:29:12:76:43: 7f:39:89:fb:0e:31:6b:34:4b:c5:6d:d6:06:f7:9a: 94:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:4C:31:5F:3D:6C:69:A5:E2:DC:9A:C7:84:08:89:A7:0A:1C:86:19 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/sEwxXz1saaXi3JrHhAiJpwochhk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.205.160.0/20 Signature Algorithm: sha256WithRSAEncryption 11:87:11:dd:a7:84:aa:45:a5:3e:a3:36:88:2a:ba:c0:ac:ed: 11:72:cc:37:69:99:84:1d:a4:8e:c7:03:aa:b8:32:9c:75:23: 26:24:bc:56:03:91:b1:00:8d:e5:f2:8c:2c:6d:8f:da:a1:f0: 66:8d:07:02:a6:f0:fc:6a:63:6c:ad:a2:4d:34:a5:65:b9:bc: 43:de:7a:aa:1b:9e:c9:2a:6f:99:06:85:c3:3f:24:59:e7:73: 90:c0:33:9c:4a:27:e5:da:27:1d:9e:63:85:f3:c5:8c:91:13: 2e:a1:cb:9d:1d:b2:4d:e3:80:cb:bf:44:56:f4:10:e8:3e:86: 15:fa:68:e3:c8:4e:ea:e1:2a:bd:c7:3c:dd:ca:95:87:87:66: b9:4e:95:82:66:d6:d0:91:64:aa:bf:cd:b4:00:22:58:51:b7: c8:93:6e:e6:a1:68:7b:46:d0:0f:c9:c4:f9:46:2e:e2:04:e3: f4:cb:0f:90:39:3f:7d:1d:f2:01:36:f6:7f:a1:26:6f:f6:f8: 36:ad:4a:7d:59:14:fd:f7:e6:7e:68:df:8e:85:ba:7d:91:1e: a3:4c:71:9b:2d:c3:ed:98:3d:c6:80:b2:d0:74:75:a9:9d:92: e2:5d:11:2d:3a:7e:c0:8c:59:76:dd:96:ce:39:29:c5:29:66: a5:79:12:7d -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICGmAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4MjIw ODU0MDBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEIwNEMzMTVGM0Q2QzY5 QTVFMkRDOUFDNzg0MDg4OUE3MEExQzg2MTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGk9u/fuLDI6ur+3gWS2usWzocTCcSlSqBgB4GiI8w4k2WgGOw NYj4XSfKy3n87lCAwC8EYGMQ5lGGbfuSqFJo4Y0SmC4aL2IlIYj+qE0U/kxL2b0g tmtNs+x0tkPUGeFjia91sizZr4sA1suw2jbGM0piiPMNoKtBaBOMeh6ULxgbYDkv O72KA0iHZUz6Rrd/3Vyj0RbbgyCrdT5wAow4reoI+V6et4kNetqCZJwO9welZcJa bD1DRI0UlNlpBuOtGfzyrDtnjQThM89I9dkXzvJsEQV1653jxBui9QpxX5nZAox5 BGIAT0k9KRJ2Q385ifsOMWs0S8Vt1gb3mpShAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUsEwxXz1saaXi3JrHhAiJpwochhkwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvc0V3eFh6MXNhYVhpM0pySGhBaUpw d29jaGhrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBHvNoDAN BgkqhkiG9w0BAQsFAAOCAQEAEYcR3aeEqkWlPqM2iCq6wKztEXLMN2mZhB2kjscD qrgynHUjJiS8VgORsQCN5fKMLG2P2qHwZo0HAqbw/GpjbK2iTTSlZbm8Q956qhue ySpvmQaFwz8kWedzkMAznEon5donHZ5jhfPFjJETLqHLnR2yTeOAy79EVvQQ6D6G Ffpo48hO6uEqvcc83cqVh4dmuU6VgmbW0JFkqr/NtAAiWFG3yJNu5qFoe0bQD8nE +UYu4gTj9MsPkDk/fR3yATb2f6Emb/b4Nq1KfVkU/ffmfmjfjoW6fZEeo0xxmy3D 7Zg9xoCy0HR1qZ2S4l0RLTp+wIxZdt2WzjkpxSlmpXkSfQ== -----END CERTIFICATE-----Generated at Sun Aug 24 13:52:13 2025 by rpki-client