$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNTT/nbaM_8PCv_PQBAvolzCxwnVBvHc.roa File: nbaM_8PCv_PQBAvolzCxwnVBvHc.roa (raw, json) Hash identifier: 3UTXX/cyo00+6JIGt5v1UbYQ07cvwbSXUD5UQ7LYUBg= Subject key identifier: 9D:B6:8C:FF:C3:C2:BF:F3:D0:04:0B:E8:97:30:B1:C2:75:41:BC:77 Certificate issuer: /CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214 Certificate serial: 0DE9 Authority key identifier: 9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/nbaM_8PCv_PQBAvolzCxwnVBvHc.roa Signing time: Fri 22 Aug 2025 08:52:09 +0000 ROA not before: Fri 22 Aug 2025 08:52:09 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 2914 IP address blocks: 122.255.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3561 (0xde9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214 Validity Not Before: Aug 22 08:52:09 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=9DB68CFFC3C2BFF3D0040BE89730B1C27541BC77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:53:58:93:c7:27:07:0a:1c:8c:fe:44:59:c6: 2b:b3:8e:72:96:d1:62:3f:e6:36:21:1e:0d:d3:0c: c1:56:25:96:14:78:89:cc:4f:d6:89:74:a1:e9:70: 65:21:b7:d5:a1:6d:31:f2:17:75:ac:98:1c:de:a9: cf:15:9e:74:8b:eb:f3:76:55:6e:9e:f6:31:d8:98: a6:d0:66:6a:2f:8b:ee:e6:d2:57:93:de:d3:e7:cc: c1:6e:ee:7c:24:70:dc:de:87:7a:cd:b9:cc:e4:8f: 2b:41:e7:5f:bd:b5:1a:c9:bc:11:97:2b:a6:ca:b0: 39:19:fa:da:ed:81:9e:d9:a6:bc:4a:3e:d2:c1:8f: c3:08:a1:cf:8a:62:4f:6d:d3:26:44:55:5c:3f:43: f8:1a:52:58:b9:0a:a6:79:54:0f:4e:cb:14:4b:63: f6:3c:84:1f:bb:2a:33:8d:f6:e8:fb:52:cc:c2:6d: 70:c8:11:d5:bc:f5:d7:a3:91:6c:b1:d0:92:ec:83: 75:3a:1a:87:da:4d:6d:c1:7d:25:28:29:98:7a:d3: 2d:81:71:f9:f0:8f:90:08:24:e8:38:0c:f1:b8:83: 7f:4c:5b:94:95:02:86:58:d8:cf:57:ae:0b:38:7d: 27:06:a5:a4:1b:07:33:b2:ad:c0:31:66:58:ea:73: e1:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:B6:8C:FF:C3:C2:BF:F3:D0:04:0B:E8:97:30:B1:C2:75:41:BC:77 X509v3 Authority Key Identifier: keyid:9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/nbaM_8PCv_PQBAvolzCxwnVBvHc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.255.80.0/20 Signature Algorithm: sha256WithRSAEncryption 28:86:78:fa:db:58:62:a7:37:f7:95:2a:20:d7:06:6c:ae:5e: b4:05:53:37:2d:cb:94:ff:12:66:4a:ff:c9:4f:66:2f:4b:58: 67:f6:68:4a:1e:34:02:6b:4d:7b:90:c1:58:25:51:e4:a5:dd: d3:23:9c:fb:b5:84:c6:c5:70:b6:74:10:bc:4c:0e:56:49:5d: 82:40:b9:72:20:e3:ad:31:1b:72:b1:9e:6b:17:c7:17:29:bb: da:03:ae:32:72:d7:3a:3e:a2:ac:4c:af:32:d5:19:a9:af:7c: 8b:b2:37:d0:08:a6:84:4c:30:9f:8b:f3:5a:58:8f:2b:93:f9: 0b:ed:4e:9e:a9:a6:86:63:db:68:68:13:15:a0:19:45:46:88: 41:6a:01:c9:57:a1:28:1d:f3:fa:bb:d0:63:d6:1a:1b:47:86: c7:36:34:2e:7b:24:15:5d:7e:87:d6:0a:74:55:98:1c:96:a5: 85:8a:f5:06:72:79:27:1a:df:fe:1d:73:e8:f1:8e:b6:ec:2c: c8:06:b3:2c:bb:f2:fb:db:62:03:0a:0d:ab:bd:39:e0:39:ab: f1:32:39:df:11:42:a2:2f:77:2d:b9:c8:21:20:2f:7a:77:10: 68:3c:64:e4:78:bf:98:6e:ce:87:79:4d:78:15:7d:cb:ca:fb: 16:79:d5:26 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDekwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUUy Njk3RkE3MDI1MkY4M0Y0MUQxMjFFQzBCNUNCNDU4QjZGRjIxNDAeFw0yNTA4MjIw ODUyMDlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDlEQjY4Q0ZGQzNDMkJG RjNEMDA0MEJFODk3MzBCMUMyNzU0MUJDNzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCjU1iTxycHChyM/kRZxiuzjnKW0WI/5jYhHg3TDMFWJZYUeInM T9aJdKHpcGUht9WhbTHyF3WsmBzeqc8VnnSL6/N2VW6e9jHYmKbQZmovi+7m0leT 3tPnzMFu7nwkcNzeh3rNuczkjytB51+9tRrJvBGXK6bKsDkZ+trtgZ7ZprxKPtLB j8MIoc+KYk9t0yZEVVw/Q/gaUli5CqZ5VA9OyxRLY/Y8hB+7KjON9uj7UszCbXDI EdW89dejkWyx0JLsg3U6GofaTW3BfSUoKZh60y2Bcfnwj5AIJOg4DPG4g39MW5SV AoZY2M9Xrgs4fScGpaQbBzOyrcAxZljqc+EnAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUnbaM/8PCv/PQBAvolzCxwnVBvHcwHwYDVR0jBBgwFoAUniaX+nAlL4P0HRIe wLXLRYtv8hQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOVFQv bmlhWC1uQWxMNFAwSFJJZXdMWExSWXR2OGhRLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9uaWFYLW5BbEw0UDBIUklld0xYTFJZdHY4aFEuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UV05UVC9uYmFNXzhQQ3ZfUFFCQXZvbHpD eHduVkJ2SGMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEev9Q MA0GCSqGSIb3DQEBCwUAA4IBAQAohnj621hipzf3lSog1wZsrl60BVM3LcuU/xJm Sv/JT2YvS1hn9mhKHjQCa017kMFYJVHkpd3TI5z7tYTGxXC2dBC8TA5WSV2CQLly IOOtMRtysZ5rF8cXKbvaA64yctc6PqKsTK8y1Rmpr3yLsjfQCKaETDCfi/NaWI8r k/kL7U6eqaaGY9toaBMVoBlFRohBagHJV6EoHfP6u9Bj1hobR4bHNjQueyQVXX6H 1gp0VZgclqWFivUGcnknGt/+HXPo8Y627CzIBrMsu/L722IDCg2rvTngOavxMjnf EUKiL3ctucghIC96dxBoPGTkeL+Ybs6HeU14FX3LyvsWedUm -----END CERTIFICATE-----Generated at Sun Aug 24 09:43:22 2025 by rpki-client