$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/4kQBq9cqQe85Gzc8Pcs5c10cX8s.roa File: 4kQBq9cqQe85Gzc8Pcs5c10cX8s.roa (raw, json) Hash identifier: pxuYI1UCvXFAQlCKPNclCHDxROCD35YnC8WdfvZy1Q4= Subject key identifier: E2:44:01:AB:D7:2A:41:EF:39:1B:37:3C:3D:CB:39:73:5D:1C:5F:CB Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 19FB Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/4kQBq9cqQe85Gzc8Pcs5c10cX8s.roa Signing time: Fri 22 Aug 2025 08:53:35 +0000 ROA not before: Fri 22 Aug 2025 08:53:35 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18049 IP address blocks: 106.107.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6651 (0x19fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 22 08:53:35 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=E24401ABD72A41EF391B373C3DCB39735D1C5FCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:96:8b:69:3b:a1:25:6d:9d:b6:07:2d:26:b3: a5:e5:28:32:c6:a8:67:f2:85:76:65:c2:ba:fd:f5: 2d:a2:d5:35:2f:61:52:e1:4a:db:2c:92:8d:0c:0c: 79:2d:ac:07:67:77:5a:54:ae:eb:c6:36:22:19:c6: 05:f9:ab:77:6d:3a:d1:9c:83:e1:82:96:cf:c1:f5: aa:ec:1c:e1:a4:07:d1:e4:57:48:0a:d0:0a:00:1d: 49:dd:dc:ea:10:7f:9d:2e:e5:3d:ce:0a:5e:9d:2f: 5c:ad:26:af:08:9c:0e:2d:17:af:55:18:71:71:b1: 41:a4:ef:c3:69:65:54:53:ac:07:b0:f8:b6:cb:a5: 77:4f:a7:8f:78:5f:85:41:dd:1b:77:41:41:0f:24: 06:5d:67:a3:4b:28:c6:49:3a:fb:85:84:23:22:16: 5c:84:f5:a4:56:3d:ca:81:53:8e:eb:cd:c4:94:e2: 09:be:1a:20:17:86:14:a0:91:7d:46:cf:ba:24:58: 34:da:a1:0a:55:00:9b:72:5c:e3:66:0d:35:ed:d9: b1:ef:f3:08:71:95:3a:d4:c6:42:bd:e8:65:66:4e: 98:6a:5a:11:5e:9c:4b:0f:3a:bc:5e:c5:ef:4a:49: cf:37:43:46:96:69:85:15:48:b2:0a:01:b9:ff:47: dc:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:44:01:AB:D7:2A:41:EF:39:1B:37:3C:3D:CB:39:73:5D:1C:5F:CB X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/4kQBq9cqQe85Gzc8Pcs5c10cX8s.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.107.176.0/20 Signature Algorithm: sha256WithRSAEncryption 83:66:30:44:d3:1d:b5:95:13:85:d2:84:31:74:0a:e8:b2:c3: 97:ee:6c:d3:7d:16:14:32:10:06:02:af:c9:0b:ad:11:9c:22: 6c:24:2c:a4:e2:09:23:77:fb:bd:d2:6e:a7:48:64:32:e8:fa: c5:02:0c:21:13:60:e8:f1:15:4e:50:ee:d3:21:0a:a1:fc:5a: 53:37:1c:e7:f3:d7:0b:3f:8a:dc:bd:47:13:b1:34:b7:ec:d7: 40:75:e0:d3:09:ac:78:34:0c:db:a5:f8:38:ce:28:9e:c1:b6: aa:d7:43:9c:49:71:7b:53:b4:00:55:36:02:aa:8b:77:32:7b: 32:e7:2b:13:ba:30:99:1d:5c:b6:2e:df:f1:8f:e6:3c:41:65: db:53:73:38:ae:8b:9c:24:c9:b8:ad:1d:d1:24:27:75:aa:9e: 0f:f7:d7:c2:c9:91:b0:a2:68:20:97:d9:4c:dd:cc:c1:5f:87: 79:76:9f:3b:57:6c:8a:d8:ca:0c:a1:a4:f3:fe:54:9d:01:81: a7:74:79:34:6d:1b:d5:3c:d4:f8:60:d5:a7:99:b3:8b:c6:15: 3f:01:7d:96:12:65:d3:35:59:a9:40:86:c0:ee:5a:6c:f3:f7: 9b:61:51:d4:8f:0a:ba:d2:e1:d4:80:34:7c:fc:14:8c:80:bc: 25:ed:d0:ae -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICGfswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4MjIw ODUzMzVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEUyNDQwMUFCRDcyQTQx RUYzOTFCMzczQzNEQ0IzOTczNUQxQzVGQ0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCdlotpO6ElbZ22By0ms6XlKDLGqGfyhXZlwrr99S2i1TUvYVLh Stssko0MDHktrAdnd1pUruvGNiIZxgX5q3dtOtGcg+GCls/B9arsHOGkB9HkV0gK 0AoAHUnd3OoQf50u5T3OCl6dL1ytJq8InA4tF69VGHFxsUGk78NpZVRTrAew+LbL pXdPp494X4VB3Rt3QUEPJAZdZ6NLKMZJOvuFhCMiFlyE9aRWPcqBU47rzcSU4gm+ GiAXhhSgkX1Gz7okWDTaoQpVAJtyXONmDTXt2bHv8whxlTrUxkK96GVmTphqWhFe nEsPOrxexe9KSc83Q0aWaYUVSLIKAbn/R9wnAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU4kQBq9cqQe85Gzc8Pcs5c10cX8swHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvNGtRQnE5Y3FRZTg1R3pjOFBjczVj MTBjWDhzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBGprsDAN BgkqhkiG9w0BAQsFAAOCAQEAg2YwRNMdtZUThdKEMXQK6LLDl+5s030WFDIQBgKv yQutEZwibCQspOIJI3f7vdJup0hkMuj6xQIMIRNg6PEVTlDu0yEKofxaUzcc5/PX Cz+K3L1HE7E0t+zXQHXg0wmseDQM26X4OM4onsG2qtdDnElxe1O0AFU2AqqLdzJ7 MucrE7owmR1cti7f8Y/mPEFl21NzOK6LnCTJuK0d0SQndaqeD/fXwsmRsKJoIJfZ TN3MwV+HeXafO1dsitjKDKGk8/5UnQGBp3R5NG0b1TzU+GDVp5mzi8YVPwF9lhJl 0zVZqUCGwO5abPP3m2FR1I8KutLh1IA0fPwUjIC8Je3Qrg== -----END CERTIFICATE-----Generated at Wed Nov 5 23:25:19 2025 by rpki-client