$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/2Fo0A8mYmC-NJyjnz2FJwT__tfI.roa File: 2Fo0A8mYmC-NJyjnz2FJwT__tfI.roa (raw, json) Hash identifier: kNY/2HfHM6aRqCoBcneDkBb1gxVccdUV3+bIxZ/5o1Y= Subject key identifier: D8:5A:34:03:C9:98:98:2F:8D:27:28:E7:CF:61:49:C1:3F:FF:B5:F2 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1A87 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/2Fo0A8mYmC-NJyjnz2FJwT__tfI.roa Signing time: Wed 27 Aug 2025 09:10:03 +0000 ROA not before: Wed 27 Aug 2025 09:10:03 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18049 IP address blocks: 61.61.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6791 (0x1a87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 27 09:10:03 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=D85A3403C998982F8D2728E7CF6149C13FFFB5F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a3:b3:0e:b2:e5:8c:be:50:7d:89:0c:6b:1b: fc:e5:dd:c6:17:2f:57:17:30:20:fa:15:4e:b4:e4: 59:aa:0b:69:32:42:d2:0b:14:55:21:e3:de:75:59: 08:a5:d8:02:e2:95:9f:33:c1:fd:61:a9:22:09:a7: 0a:23:ad:5a:66:b2:c8:20:cb:00:6d:e7:69:a7:f8: e3:7a:05:90:15:ca:ba:f1:26:77:9e:eb:2d:0a:bd: e2:87:a4:4a:aa:ff:f9:16:89:65:49:b4:0e:5a:92: ee:f7:d6:c7:8d:15:4f:cb:75:4f:9c:14:0b:39:28: 02:60:cc:58:84:b9:89:86:25:44:5a:b5:23:d6:d6: e4:6c:6e:ae:a7:f3:14:9e:d3:35:84:d2:b4:61:71: 97:9e:fb:1a:84:28:70:63:57:ce:2b:05:e5:4c:cd: b1:06:3b:b5:71:8c:2c:66:1a:71:10:8b:60:7f:01: 00:77:e4:ee:ed:05:3e:ba:76:dc:8b:82:e6:d4:2c: de:0f:38:24:77:9e:11:86:1a:a3:3d:64:f9:a9:b4: 76:05:62:8c:3d:60:39:f0:50:b8:18:25:69:85:8c: 5c:63:ef:5b:4a:71:de:a5:a0:d7:f7:f4:8d:a1:4d: a6:20:30:8d:86:b8:ff:ba:f7:f7:f6:e4:b6:fa:c2: f2:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:5A:34:03:C9:98:98:2F:8D:27:28:E7:CF:61:49:C1:3F:FF:B5:F2 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/2Fo0A8mYmC-NJyjnz2FJwT__tfI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.61.64.0/22 Signature Algorithm: sha256WithRSAEncryption 59:7f:74:73:23:91:a5:1e:a9:e5:1b:d5:31:74:b3:35:ec:f1: 01:9c:5a:53:57:78:01:2a:81:d5:c2:66:39:42:26:49:1e:da: 57:70:ae:7e:e8:72:ff:76:d1:7a:86:2d:d0:51:44:7f:70:72: 31:ee:78:39:b8:a8:d1:90:ed:8d:7b:f6:b0:9b:18:97:fa:cd: 80:c5:ed:b5:c1:64:d9:fb:d2:66:f6:0c:d3:85:09:b1:ce:b2: 71:a8:9e:35:3d:bf:b2:71:b1:e6:07:79:90:a0:50:7d:7f:dd: 20:80:77:78:6c:cd:14:79:b1:77:f4:e1:b7:e5:c0:58:5d:49: 7d:43:bb:67:bc:f2:96:30:2c:bd:48:8b:fe:c2:82:3a:43:f8: ef:14:1a:83:73:e4:12:81:0e:0e:97:6e:9a:4d:30:fe:d2:1f: f6:bb:53:b3:4d:11:a5:e3:0a:9f:90:8b:4a:9b:37:84:bc:77: ef:7e:46:9f:66:3d:e1:c2:cf:ec:52:3c:1d:8c:35:0d:f8:bb: ee:59:04:4b:35:f5:a1:85:6f:03:68:2e:7e:ac:16:38:ef:bb: 86:0a:9e:f7:29:1c:26:ef:b2:88:1e:ea:5f:a8:f9:10:68:72: 29:57:99:38:c5:05:93:4b:d0:11:29:d9:d4:3c:1b:62:af:e2: 48:c4:2d:3a -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICGocwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4Mjcw OTEwMDNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEQ4NUEzNDAzQzk5ODk4 MkY4RDI3MjhFN0NGNjE0OUMxM0ZGRkI1RjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDgo7MOsuWMvlB9iQxrG/zl3cYXL1cXMCD6FU605FmqC2kyQtIL FFUh4951WQil2ALilZ8zwf1hqSIJpwojrVpmssggywBt52mn+ON6BZAVyrrxJnee 6y0KveKHpEqq//kWiWVJtA5aku731seNFU/LdU+cFAs5KAJgzFiEuYmGJURatSPW 1uRsbq6n8xSe0zWE0rRhcZee+xqEKHBjV84rBeVMzbEGO7VxjCxmGnEQi2B/AQB3 5O7tBT66dtyLgubULN4POCR3nhGGGqM9ZPmptHYFYow9YDnwULgYJWmFjFxj71tK cd6loNf39I2hTaYgMI2GuP+69/f25Lb6wvJrAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU2Fo0A8mYmC+NJyjnz2FJwT//tfIwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvMkZvMEE4bVltQy1OSnlqbnoyRkp3 VF9fdGZJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAj09QDAN BgkqhkiG9w0BAQsFAAOCAQEAWX90cyORpR6p5RvVMXSzNezxAZxaU1d4ASqB1cJm OUImSR7aV3Cufuhy/3bReoYt0FFEf3ByMe54Obio0ZDtjXv2sJsYl/rNgMXttcFk 2fvSZvYM04UJsc6ycaieNT2/snGx5gd5kKBQfX/dIIB3eGzNFHmxd/Tht+XAWF1J fUO7Z7zyljAsvUiL/sKCOkP47xQag3PkEoEODpdumk0w/tIf9rtTs00RpeMKn5CL Sps3hLx3735Gn2Y94cLP7FI8HYw1Dfi77lkESzX1oYVvA2gufqwWOO+7hgqe9ykc Ju+yiB7qX6j5EGhyKVeZOMUFk0vQESnZ1DwbYq/iSMQtOg== -----END CERTIFICATE-----Generated at Wed Nov 5 23:24:05 2025 by rpki-client