$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/9lIesEshTLUy0nKZoJbRUbBtBXw.roa File: 9lIesEshTLUy0nKZoJbRUbBtBXw.roa (raw, json) Hash identifier: 0gtj9vJjQAIznM2KXZhS3xkSZOsIjTq48jY4XoHOyKQ= Subject key identifier: F6:52:1E:B0:4B:21:4C:B5:32:D2:72:99:A0:96:D1:51:B0:6D:05:7C Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1984 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/9lIesEshTLUy0nKZoJbRUbBtBXw.roa Signing time: Fri 22 Aug 2025 08:53:04 +0000 ROA not before: Fri 22 Aug 2025 08:53:04 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9919 IP address blocks: 220.229.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 06:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6532 (0x1984) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 22 08:53:04 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=F6521EB04B214CB532D27299A096D151B06D057C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:49:23:a4:f7:2f:0b:9f:8b:71:d7:a2:a5:50: b3:0f:19:82:63:5d:32:a7:16:19:a6:e5:19:73:3d: 0a:4f:35:d1:ba:6a:bc:13:5e:2a:70:f4:ad:62:00: 85:dd:3a:03:45:7b:7f:19:9e:6d:50:0a:8c:c2:d9: 55:95:91:a5:e5:2a:88:25:62:d8:bd:ad:48:ee:50: 6f:c5:83:aa:8c:bf:3a:83:16:f6:d9:97:2a:3b:5c: 94:52:2a:1e:ab:2f:01:83:e2:3a:44:02:79:b9:85: 61:9a:c9:35:26:b9:2c:69:2a:f1:60:a2:72:56:8a: fd:ad:ea:98:c0:46:37:f1:6a:27:fa:7b:b9:f4:94: 32:5e:b4:80:b6:97:68:93:56:5e:0e:89:b9:7c:39: 30:d7:18:0d:b8:0a:f1:6f:6a:d4:99:6b:82:d7:70: 31:4e:d7:6c:77:e2:e0:a5:e5:1c:cd:f5:e4:02:df: e1:87:90:03:b7:4e:d8:1f:3d:3a:3f:55:28:65:2a: 04:c3:58:d3:b8:a0:3a:f3:f9:ab:61:83:e3:6e:d4: af:75:71:85:43:84:fc:aa:d6:a0:5e:a3:55:b5:b9: d7:ec:4c:bd:09:e4:4d:39:65:74:d9:0b:8e:d8:30: 28:49:21:9b:f6:2b:4d:3b:46:54:22:74:7b:d3:4f: a7:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:52:1E:B0:4B:21:4C:B5:32:D2:72:99:A0:96:D1:51:B0:6D:05:7C X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/9lIesEshTLUy0nKZoJbRUbBtBXw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 220.229.0.0/18 Signature Algorithm: sha256WithRSAEncryption 10:55:9e:75:d7:70:28:72:c1:02:16:76:a4:54:c7:55:e8:af: 90:af:82:74:ae:90:ba:45:2d:09:e0:11:3d:e5:b1:f4:61:fb: 49:e0:b3:c6:91:8e:41:c8:17:1f:36:3c:60:58:3b:40:30:dc: 06:c5:7e:b1:e8:9c:0b:8e:4d:96:1b:52:1a:43:73:43:82:e9: 5d:5c:2d:6e:59:65:a1:32:f2:d8:00:ad:9c:18:7a:e9:29:ff: 40:d7:e4:16:2a:d1:8e:2e:06:25:67:b8:87:e9:ad:1b:57:90: fa:d6:68:2c:f6:76:6a:40:82:0f:aa:3c:4a:23:10:15:2e:af: 8a:c0:43:20:20:cd:eb:93:0b:7d:ab:a5:16:ca:77:5e:c5:ba: 92:17:eb:16:59:93:be:c4:6e:8a:4d:ec:09:60:2e:0c:00:12: af:29:4b:0d:f5:ad:a6:1d:24:6c:98:fd:8e:5f:98:a2:e5:95: 60:97:f2:5e:6c:e7:d8:51:c7:b8:2e:3f:49:30:88:71:88:33: 48:cd:0b:e3:bd:6f:08:b4:38:61:34:93:d6:72:8a:cb:87:62: a4:78:53:d2:08:49:f0:0c:35:ae:56:6b:85:cd:c8:f8:f0:5b: 2b:ca:f5:e7:27:60:36:90:08:8a:d2:c5:83:d5:8a:7e:46:bf: 01:2e:7a:df -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICGYQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4MjIw ODUzMDRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEY2NTIxRUIwNEIyMTRD QjUzMkQyNzI5OUEwOTZEMTUxQjA2RDA1N0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSSSOk9y8Ln4tx16KlULMPGYJjXTKnFhmm5RlzPQpPNdG6arwT Xipw9K1iAIXdOgNFe38Znm1QCozC2VWVkaXlKoglYti9rUjuUG/Fg6qMvzqDFvbZ lyo7XJRSKh6rLwGD4jpEAnm5hWGayTUmuSxpKvFgonJWiv2t6pjARjfxaif6e7n0 lDJetIC2l2iTVl4Oibl8OTDXGA24CvFvatSZa4LXcDFO12x34uCl5RzN9eQC3+GH kAO3TtgfPTo/VShlKgTDWNO4oDrz+athg+Nu1K91cYVDhPyq1qBeo1W1udfsTL0J 5E05ZXTZC47YMChJIZv2K007RlQidHvTT6f3AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU9lIesEshTLUy0nKZoJbRUbBtBXwwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvOWxJZXNFc2hUTFV5MG5LWm9KYlJV YkJ0Qlh3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBtzlADAN BgkqhkiG9w0BAQsFAAOCAQEAEFWedddwKHLBAhZ2pFTHVeivkK+CdK6QukUtCeAR PeWx9GH7SeCzxpGOQcgXHzY8YFg7QDDcBsV+seicC45NlhtSGkNzQ4LpXVwtblll oTLy2ACtnBh66Sn/QNfkFirRji4GJWe4h+mtG1eQ+tZoLPZ2akCCD6o8SiMQFS6v isBDICDN65MLfaulFsp3XsW6khfrFlmTvsRuik3sCWAuDAASrylLDfWtph0kbJj9 jl+YouWVYJfyXmzn2FHHuC4/STCIcYgzSM0L471vCLQ4YTST1nKKy4dipHhT0ghJ 8Aw1rlZrhc3I+PBbK8r15ydgNpAIitLFg9WKfka/AS563w== -----END CERTIFICATE-----Generated at Wed Nov 5 06:16:05 2025 by rpki-client