$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/9MriyjXmQC4gm2Q2OEl8p9pvpD8.roa File: 9MriyjXmQC4gm2Q2OEl8p9pvpD8.roa (raw, json) Hash identifier: 6PRHiUQ0+bpxrvKiuC3q2UdOS3wQIhrOcNQVUy5l0Ik= Subject key identifier: F4:CA:E2:CA:35:E6:40:2E:20:9B:64:36:38:49:7C:A7:DA:6F:A4:3F Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 19EC Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/9MriyjXmQC4gm2Q2OEl8p9pvpD8.roa Signing time: Fri 22 Aug 2025 08:53:31 +0000 ROA not before: Fri 22 Aug 2025 08:53:31 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131602 IP address blocks: 106.105.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 20:59:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6636 (0x19ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 22 08:53:31 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=F4CAE2CA35E6402E209B643638497CA7DA6FA43F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6f:0c:46:cc:a4:bb:49:6a:67:05:dd:c6:8f: 9c:88:61:36:0e:76:3c:cb:c2:7a:fb:e8:af:d2:a1: 0c:0d:2d:fc:dd:d6:1e:ea:7b:af:5d:4c:31:77:72: 6a:dc:8d:ba:51:16:98:e8:69:5b:44:1f:db:97:d0: 4a:a3:78:27:fe:6f:e9:02:54:c8:54:79:fc:58:f1: ee:82:33:79:3f:82:88:7b:7f:f2:fc:48:7e:17:72: 64:0d:84:a8:20:23:5b:e7:88:66:6d:a5:19:32:71: 45:02:45:f5:a5:1d:8c:9c:1f:27:6c:79:b1:e2:54: 2a:93:37:de:1f:9e:6f:5d:f9:94:9d:94:32:91:b0: 2c:b0:d7:4b:94:0f:a6:6a:3e:25:4d:cb:08:b7:cb: 7e:ce:e9:98:27:af:99:18:00:de:91:db:b0:97:5d: 32:67:91:71:fb:f2:0a:11:37:92:9b:92:43:de:78: 3b:1e:0d:6a:40:1f:bb:96:00:e3:87:f9:ef:28:de: 46:e4:72:08:3c:77:a0:03:57:81:0a:36:12:df:6f: 8a:09:09:50:0b:7b:10:be:77:26:ec:b9:e5:8c:63: f2:9e:f0:d7:05:68:f8:35:0d:3d:92:c2:de:cd:c0: 7c:76:ed:11:2d:07:d6:5b:e7:a7:31:59:68:16:73: ed:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:CA:E2:CA:35:E6:40:2E:20:9B:64:36:38:49:7C:A7:DA:6F:A4:3F X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/9MriyjXmQC4gm2Q2OEl8p9pvpD8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.105.192.0/19 Signature Algorithm: sha256WithRSAEncryption 12:15:86:3f:53:17:4f:14:ce:3b:14:b3:8f:f5:a0:df:33:67: a1:48:1f:9c:09:6b:0e:bc:84:87:d2:c1:5a:a2:a9:ba:0e:a9: 1f:42:c0:50:06:1e:c2:a1:35:97:af:6c:8e:3e:39:ac:d0:b9: 23:e7:94:fc:89:74:0f:2e:2b:3a:ae:3b:cb:e6:49:62:33:b9: 85:51:8c:1d:ad:ca:e6:2d:4e:39:05:b7:a4:71:64:21:39:29: 7b:c8:8e:89:81:e3:8f:ec:93:59:e0:7a:29:8c:21:48:63:7d: eb:93:b6:7d:35:5e:2f:fe:a8:d5:5f:64:66:2d:f2:4f:ca:c2: 59:b6:76:bf:ee:67:dd:e6:d4:7b:1f:e6:b1:b3:22:f0:eb:c3: cc:2a:88:3b:20:ea:f7:82:3d:b6:29:f8:d0:c9:01:30:95:40: f3:40:ce:08:f0:14:99:9f:c2:fa:88:88:63:21:ef:bf:a0:eb: 59:ad:92:8f:60:d3:7f:b8:40:ae:de:28:ae:b9:27:96:db:80: 83:33:e7:2b:08:6a:40:d3:2e:c0:dd:d6:8b:ca:e9:7c:3a:c4: 75:a0:ef:ae:4e:52:b5:87:f5:c8:74:4e:e6:29:77:9b:dd:be: ff:ea:2d:b7:d0:f3:6c:46:8b:87:ad:c9:38:be:57:73:ba:41: aa:2d:8f:40 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICGewwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4MjIw ODUzMzFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEY0Q0FFMkNBMzVFNjQw MkUyMDlCNjQzNjM4NDk3Q0E3REE2RkE0M0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAbwxGzKS7SWpnBd3Gj5yIYTYOdjzLwnr76K/SoQwNLfzd1h7q e69dTDF3cmrcjbpRFpjoaVtEH9uX0EqjeCf+b+kCVMhUefxY8e6CM3k/goh7f/L8 SH4XcmQNhKggI1vniGZtpRkycUUCRfWlHYycHydsebHiVCqTN94fnm9d+ZSdlDKR sCyw10uUD6ZqPiVNywi3y37O6Zgnr5kYAN6R27CXXTJnkXH78goRN5KbkkPeeDse DWpAH7uWAOOH+e8o3kbkcgg8d6ADV4EKNhLfb4oJCVALexC+dybsueWMY/Ke8NcF aPg1DT2Swt7NwHx27REtB9Zb56cxWWgWc+0zAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU9MriyjXmQC4gm2Q2OEl8p9pvpD8wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvOU1yaXlqWG1RQzRnbTJRMk9FbDhw OXB2cEQ4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBWppwDAN BgkqhkiG9w0BAQsFAAOCAQEAEhWGP1MXTxTOOxSzj/Wg3zNnoUgfnAlrDryEh9LB WqKpug6pH0LAUAYewqE1l69sjj45rNC5I+eU/Il0Dy4rOq47y+ZJYjO5hVGMHa3K 5i1OOQW3pHFkITkpe8iOiYHjj+yTWeB6KYwhSGN965O2fTVeL/6o1V9kZi3yT8rC WbZ2v+5n3ebUex/msbMi8OvDzCqIOyDq94I9tin40MkBMJVA80DOCPAUmZ/C+oiI YyHvv6DrWa2Sj2DTf7hArt4orrknltuAgzPnKwhqQNMuwN3Wi8rpfDrEdaDvrk5S tYf1yHRO5il3m92+/+ott9DzbEaLh63JOL5Xc7pBqi2PQA== -----END CERTIFICATE-----Generated at Wed Nov 5 18:01:32 2025 by rpki-client