$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/6oGuT2jaUT3JrqHJUdqvXPhDneM.roa File: 6oGuT2jaUT3JrqHJUdqvXPhDneM.roa (raw, json) Hash identifier: 3nreF3/66MY9fzUGUiYTjQ2kl2LTkuOL8BglNd6V7gE= Subject key identifier: EA:81:AE:4F:68:DA:51:3D:C9:AE:A1:C9:51:DA:AF:5C:F8:43:9D:E3 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1A71 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/6oGuT2jaUT3JrqHJUdqvXPhDneM.roa Signing time: Fri 22 Aug 2025 08:54:05 +0000 ROA not before: Fri 22 Aug 2025 08:54:05 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 4780 IP address blocks: 106.104.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 06:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6769 (0x1a71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 22 08:54:05 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=EA81AE4F68DA513DC9AEA1C951DAAF5CF8439DE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:a5:6b:5d:62:08:f7:6d:45:c2:45:75:fd:d6: 5b:fb:4a:e3:a2:8d:e2:17:95:4c:c1:a1:7f:25:4a: 41:a0:0e:78:be:c7:de:71:12:4f:48:03:44:e6:62: 91:95:72:9e:d3:f7:e8:b5:83:d2:3f:b4:99:0c:eb: 28:59:02:b6:4c:1a:75:98:fc:7d:56:ce:14:2f:fa: 50:f1:7a:c8:a2:d9:fd:44:7e:84:a2:57:e1:93:d3: bc:2e:33:1f:a4:0e:04:3c:9d:c8:e8:bd:c9:b4:4d: 2f:82:30:ea:04:5a:25:2e:fe:4a:23:70:66:14:47: 35:0c:35:51:24:c6:07:2f:60:67:bc:fb:91:86:f2: 53:18:76:80:ce:b9:e5:82:2b:29:3a:f4:54:ea:63: a4:af:bc:3a:0a:3c:25:eb:02:f2:2a:f0:e2:ce:69: f3:05:56:3b:06:d3:ec:d8:68:61:94:13:e3:60:15: 3a:34:15:33:ad:f0:da:3e:d1:9f:54:f8:9c:bf:03: a5:5c:7f:06:15:1c:93:58:38:fb:be:cd:d8:2c:be: 37:26:c7:4d:f3:0d:69:2f:d9:3d:be:4a:80:9b:74: 4f:66:29:6a:f7:ba:1c:95:3c:f4:88:93:fd:3e:80: 86:22:f3:cc:d5:1b:cc:6b:81:f2:97:d1:6a:57:b0: 0f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:81:AE:4F:68:DA:51:3D:C9:AE:A1:C9:51:DA:AF:5C:F8:43:9D:E3 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/6oGuT2jaUT3JrqHJUdqvXPhDneM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.104.0.0/16 Signature Algorithm: sha256WithRSAEncryption 32:4e:fb:20:82:e4:87:df:56:39:c4:55:90:e7:37:90:63:07: ee:db:51:71:20:81:63:94:01:d2:f1:8d:2d:de:42:63:ef:f8: 0a:32:d5:48:fc:55:e5:00:d6:33:cd:15:be:08:ba:6a:c5:34: 4d:de:57:0c:d4:60:58:d4:e6:5b:70:f2:0e:ae:c0:82:0c:45: 61:53:d5:ff:37:04:27:88:14:20:18:8e:56:ef:ef:7c:7f:56: 98:18:4d:dd:08:54:c3:b7:04:b4:60:aa:2b:05:46:6f:2f:d3: 1c:8c:3e:ef:ce:a9:a0:3c:a8:9f:fc:2a:ac:5b:0b:f4:0b:c8: 05:fd:5a:f1:3e:b2:62:48:20:74:c7:e4:59:c5:7e:56:d9:0e: 14:30:fa:36:8c:0d:bd:a2:3a:bd:e8:3b:fb:c7:31:8f:e5:3d: 85:6e:d3:32:a6:91:7d:37:a6:68:fa:cc:43:3b:b4:92:d1:fa: e1:7a:65:d4:f0:8a:a5:e7:38:f5:6a:04:ee:09:58:ed:8c:1c: 03:8b:35:a9:d0:00:dc:6a:11:15:5b:b1:fe:76:ea:ff:3c:10: c0:a5:2f:b0:1f:11:22:3a:06:3a:8c:1b:0d:22:9e:a9:9e:fc: c0:d2:dd:36:70:a3:e6:cf:73:cf:6a:cd:41:f7:04:95:2b:58: eb:c4:e3:7c -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICGnEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4MjIw ODU0MDVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEVBODFBRTRGNjhEQTUx M0RDOUFFQTFDOTUxREFBRjVDRjg0MzlERTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDnpWtdYgj3bUXCRXX91lv7SuOijeIXlUzBoX8lSkGgDni+x95x Ek9IA0TmYpGVcp7T9+i1g9I/tJkM6yhZArZMGnWY/H1WzhQv+lDxesii2f1EfoSi V+GT07wuMx+kDgQ8ncjovcm0TS+CMOoEWiUu/kojcGYURzUMNVEkxgcvYGe8+5GG 8lMYdoDOueWCKyk69FTqY6SvvDoKPCXrAvIq8OLOafMFVjsG0+zYaGGUE+NgFTo0 FTOt8No+0Z9U+Jy/A6VcfwYVHJNYOPu+zdgsvjcmx03zDWkv2T2+SoCbdE9mKWr3 uhyVPPSIk/0+gIYi88zVG8xrgfKX0WpXsA9FAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQU6oGuT2jaUT3JrqHJUdqvXPhDneMwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvNm9HdVQyamFVVDNKcnFISlVkcXZY UGhEbmVNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAGpoMA0G CSqGSIb3DQEBCwUAA4IBAQAyTvsgguSH31Y5xFWQ5zeQYwfu21FxIIFjlAHS8Y0t 3kJj7/gKMtVI/FXlANYzzRW+CLpqxTRN3lcM1GBY1OZbcPIOrsCCDEVhU9X/NwQn iBQgGI5W7+98f1aYGE3dCFTDtwS0YKorBUZvL9McjD7vzqmgPKif/CqsWwv0C8gF /VrxPrJiSCB0x+RZxX5W2Q4UMPo2jA29ojq96Dv7xzGP5T2FbtMyppF9N6Zo+sxD O7SS0frhemXU8Iql5zj1agTuCVjtjBwDizWp0ADcahEVW7H+dur/PBDApS+wHxEi OgY6jBsNIp6pnvzA0t02cKPmz3PPas1B9wSVK1jrxON8 -----END CERTIFICATE-----Generated at Wed Nov 5 04:42:57 2025 by rpki-client