$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/5lkfkaiHVsb0e2vJFvnz39m6Soo.roa File: 5lkfkaiHVsb0e2vJFvnz39m6Soo.roa (raw, json) Hash identifier: YQXSOipIY+re62biXpo2/vqUzhiqp/I1MqzKpXXnoQE= Subject key identifier: E6:59:1F:91:A8:87:56:C6:F4:7B:6B:C9:16:F9:F3:DF:D9:BA:4A:8A Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1A01 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/5lkfkaiHVsb0e2vJFvnz39m6Soo.roa Signing time: Fri 22 Aug 2025 08:53:37 +0000 ROA not before: Fri 22 Aug 2025 08:53:37 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 4780 IP address blocks: 123.205.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 06:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6657 (0x1a01) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 22 08:53:37 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=E6591F91A88756C6F47B6BC916F9F3DFD9BA4A8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:49:98:ff:95:db:3d:90:d8:76:93:fe:e0:fe: 23:6d:04:c8:35:64:6c:1a:77:27:aa:cf:20:2c:33: 0e:88:ec:f5:05:41:89:fd:0c:cf:24:fd:97:c2:82: fc:32:eb:fc:f9:38:ad:68:16:74:17:6a:3f:fd:13: b5:1d:a5:8b:c9:5a:40:4c:e8:48:41:38:e1:5d:7c: c0:9c:27:f2:7e:54:f6:62:f4:55:88:60:7a:e9:74: d1:ff:07:d2:de:84:9c:ba:60:09:1d:a5:b6:48:ff: 42:51:56:7a:1a:54:43:e0:1e:56:bc:b1:36:a4:89: 02:df:81:0b:5b:c9:82:49:79:ab:9a:53:d4:a2:56: d1:45:0a:6f:67:22:cc:fd:33:0a:46:fa:db:4b:21: 72:cb:ce:f9:15:6c:74:c8:4c:ff:61:81:64:9e:4f: 6d:49:ed:91:0a:91:88:03:93:d8:3b:f0:6f:8d:de: 74:f6:e3:4b:45:1f:08:02:ab:45:3a:bd:68:7f:02: e5:f8:c1:a9:7d:74:21:35:90:b8:62:3d:ea:fb:c8: 7d:56:08:52:f6:13:25:4e:53:6f:21:96:a4:e8:ef: b0:ae:6c:39:aa:76:5a:2e:2c:04:76:8a:dc:f3:00: 11:03:59:be:07:08:1b:a8:46:ad:ef:67:b8:65:55: 0a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:59:1F:91:A8:87:56:C6:F4:7B:6B:C9:16:F9:F3:DF:D9:BA:4A:8A X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/5lkfkaiHVsb0e2vJFvnz39m6Soo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.205.0.0/16 Signature Algorithm: sha256WithRSAEncryption 1f:9b:33:ee:f9:36:73:f2:6b:7f:47:f7:bf:5b:37:ae:db:cf: 0e:66:5e:75:75:e6:3e:0c:b4:76:f9:92:63:6d:e5:7c:2c:f0: 53:88:7a:f5:2d:5c:2b:4c:bc:46:24:a6:dd:23:2c:d0:af:f7: a4:2f:fb:57:93:dd:d5:21:b7:38:ab:69:23:d2:6a:56:68:01: e2:4e:ca:73:81:af:10:37:91:c3:57:71:51:04:68:09:c6:ee: f7:05:af:e4:ab:9e:77:86:f8:b1:59:52:eb:7e:7a:86:c4:a3: af:bd:2b:df:3d:28:2e:ee:86:94:10:be:35:a3:06:71:3b:3b: b2:9d:4d:45:d8:af:c8:fc:8a:89:c7:b1:c5:d0:cb:1c:a7:31: 3b:7d:ff:eb:1d:e8:65:f7:7b:a9:0b:67:a6:80:8d:5a:fa:11: 5b:30:45:6d:54:f4:13:35:47:80:a8:1e:e7:6d:56:41:b9:2f: 00:4c:16:86:c0:63:8d:4d:b5:24:b2:3d:9e:1b:09:32:d4:33: 85:34:16:50:bb:b6:63:20:b7:5b:88:92:c1:3e:dd:fe:1b:ee: c0:3e:90:27:97:4f:1c:1f:9e:70:e7:ff:79:9b:b2:b5:81:a3: 22:b0:c9:75:b9:71:9c:06:07:bc:83:04:60:92:79:fe:b6:07: 13:4e:07:af -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICGgEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4MjIw ODUzMzdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEU2NTkxRjkxQTg4NzU2 QzZGNDdCNkJDOTE2RjlGM0RGRDlCQTRBOEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQChSZj/lds9kNh2k/7g/iNtBMg1ZGwadyeqzyAsMw6I7PUFQYn9 DM8k/ZfCgvwy6/z5OK1oFnQXaj/9E7UdpYvJWkBM6EhBOOFdfMCcJ/J+VPZi9FWI YHrpdNH/B9LehJy6YAkdpbZI/0JRVnoaVEPgHla8sTakiQLfgQtbyYJJeauaU9Si VtFFCm9nIsz9MwpG+ttLIXLLzvkVbHTITP9hgWSeT21J7ZEKkYgDk9g78G+N3nT2 40tFHwgCq0U6vWh/AuX4wal9dCE1kLhiPer7yH1WCFL2EyVOU28hlqTo77CubDmq dlouLAR2itzzABEDWb4HCBuoRq3vZ7hlVQoTAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQU5lkfkaiHVsb0e2vJFvnz39m6SoowHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvNWxrZmthaUhWc2IwZTJ2SkZ2bnoz OW02U29vLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAHvNMA0G CSqGSIb3DQEBCwUAA4IBAQAfmzPu+TZz8mt/R/e/Wzeu288OZl51deY+DLR2+ZJj beV8LPBTiHr1LVwrTLxGJKbdIyzQr/ekL/tXk93VIbc4q2kj0mpWaAHiTspzga8Q N5HDV3FRBGgJxu73Ba/kq553hvixWVLrfnqGxKOvvSvfPSgu7oaUEL41owZxOzuy nU1F2K/I/IqJx7HF0MscpzE7ff/rHehl93upC2emgI1a+hFbMEVtVPQTNUeAqB7n bVZBuS8ATBaGwGONTbUksj2eGwky1DOFNBZQu7ZjILdbiJLBPt3+G+7APpAnl08c H55w5/95m7K1gaMisMl1uXGcBge8gwRgknn+tgcTTgev -----END CERTIFICATE-----Generated at Wed Nov 5 04:42:29 2025 by rpki-client