$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/AjN-E_V1NgU3gZ1GNsyhh_zokYg.roa File: AjN-E_V1NgU3gZ1GNsyhh_zokYg.roa (raw, json) Hash identifier: wbNdBK2y0Ir7M1g4iE6wKZ2EKmlGIdBrMDzNGk0mC9k= Subject key identifier: 02:33:7E:13:F5:75:36:05:37:81:9D:46:36:CC:A1:87:FC:E8:91:88 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1A3A Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/AjN-E_V1NgU3gZ1GNsyhh_zokYg.roa Signing time: Fri 22 Aug 2025 08:53:50 +0000 ROA not before: Fri 22 Aug 2025 08:53:50 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131602 IP address blocks: 60.245.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 20:59:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6714 (0x1a3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 22 08:53:50 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=02337E13F575360537819D4636CCA187FCE89188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:36:ac:e1:cb:87:bc:9f:b9:db:a5:76:a7:48: ed:7a:a0:6d:3c:be:b1:f1:68:62:db:dc:b7:be:a6: 8a:ac:cc:97:98:f7:d6:85:77:f2:06:02:33:68:b2: 86:b3:59:8b:83:6f:25:b0:ad:b0:f9:c1:5a:b7:0d: f8:f5:28:4f:fd:3a:01:f7:e9:d6:5a:c6:bf:c5:ee: f1:3a:f1:d6:3e:41:3d:97:29:74:b7:c5:e8:15:50: 3a:bc:02:a6:cc:ea:3f:46:f7:af:72:89:78:bb:99: cd:d9:f0:bb:05:bc:61:c6:51:d7:44:3e:d7:e3:29: e2:98:ed:03:ab:ca:2b:5f:40:8c:e2:ee:dd:bc:fa: f3:0c:86:76:83:e9:4d:f8:1b:84:59:8a:bb:90:28: 2e:45:ab:f4:a8:ce:a2:fe:f9:05:4d:67:24:95:14: e4:72:09:ef:f6:b4:e6:fb:e5:84:5d:87:ef:6d:21: 9f:9d:49:1d:fa:d7:f4:0e:fc:20:53:62:df:b9:65: 0a:af:84:7a:86:cb:b8:01:2f:6a:ad:84:dd:57:41: 1a:cc:94:76:1c:55:50:6a:2f:ec:57:fe:14:79:ce: 69:75:a8:ea:77:e8:de:f7:87:66:52:03:b5:c1:26: 75:53:fe:d1:9e:b2:3d:7f:26:03:70:1a:f9:ef:bf: bb:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:33:7E:13:F5:75:36:05:37:81:9D:46:36:CC:A1:87:FC:E8:91:88 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/AjN-E_V1NgU3gZ1GNsyhh_zokYg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 60.245.96.0/20 Signature Algorithm: sha256WithRSAEncryption 1a:bd:0f:6f:46:50:f5:69:66:e8:88:14:9f:42:67:00:72:0c: 1b:40:3e:bc:06:58:aa:2c:f3:ef:a3:a4:ac:74:20:d0:46:16: 16:19:75:8b:36:b1:7b:f8:be:e6:03:3d:1f:cc:bc:73:a9:ec: a2:71:a9:7b:5c:71:ba:18:dd:bc:1c:69:e8:0b:e1:99:7b:bb: dc:93:e7:f0:09:c1:99:6b:bc:d9:92:4d:4b:40:fa:3c:18:d9: 19:74:48:c6:02:20:be:31:5d:5a:8c:82:81:53:02:f3:3a:9b: ad:05:1a:f0:f0:60:15:b3:44:12:c2:15:10:86:0b:d2:98:be: bd:8c:3b:08:52:20:88:72:4b:6d:13:2b:d8:74:d3:18:e0:7f: 04:fd:e6:57:f7:36:97:91:27:11:ba:20:0f:e2:dc:ae:16:86: f4:fd:82:98:5c:1b:75:58:81:7c:f4:be:d2:f1:cb:35:8c:bd: 2e:bf:d7:e9:b1:7b:49:47:e2:8f:10:d3:5c:1d:8d:40:c5:05: ab:f0:68:7b:c6:61:82:b5:5d:c0:bc:a2:9d:ab:c9:f7:34:1a: 1a:14:9d:96:8d:ca:76:7c:0c:4a:23:6b:f0:f4:f8:a1:5d:f1: 5f:8c:78:76:01:60:40:77:eb:c7:36:a8:6a:e4:f3:08:93:65: 3d:14:94:58 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICGjowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4MjIw ODUzNTBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDAyMzM3RTEzRjU3NTM2 MDUzNzgxOUQ0NjM2Q0NBMTg3RkNFODkxODgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGNqzhy4e8n7nbpXanSO16oG08vrHxaGLb3Le+poqszJeY99aF d/IGAjNosoazWYuDbyWwrbD5wVq3Dfj1KE/9OgH36dZaxr/F7vE68dY+QT2XKXS3 xegVUDq8AqbM6j9G969yiXi7mc3Z8LsFvGHGUddEPtfjKeKY7QOryitfQIzi7t28 +vMMhnaD6U34G4RZiruQKC5Fq/SozqL++QVNZySVFORyCe/2tOb75YRdh+9tIZ+d SR361/QO/CBTYt+5ZQqvhHqGy7gBL2qthN1XQRrMlHYcVVBqL+xX/hR5zml1qOp3 6N73h2ZSA7XBJnVT/tGesj1/JgNwGvnvv7t/AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUAjN+E/V1NgU3gZ1GNsyhh/zokYgwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvQWpOLUVfVjFOZ1UzZ1oxR05zeWho X3pva1lnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBDz1YDAN BgkqhkiG9w0BAQsFAAOCAQEAGr0Pb0ZQ9Wlm6IgUn0JnAHIMG0A+vAZYqizz76Ok rHQg0EYWFhl1izaxe/i+5gM9H8y8c6nsonGpe1xxuhjdvBxp6AvhmXu73JPn8AnB mWu82ZJNS0D6PBjZGXRIxgIgvjFdWoyCgVMC8zqbrQUa8PBgFbNEEsIVEIYL0pi+ vYw7CFIgiHJLbRMr2HTTGOB/BP3mV/c2l5EnEbogD+LcrhaG9P2CmFwbdViBfPS+ 0vHLNYy9Lr/X6bF7SUfijxDTXB2NQMUFq/Boe8ZhgrVdwLyinavJ9zQaGhSdlo3K dnwMSiNr8PT4oV3xX4x4dgFgQHfrxzaoauTzCJNlPRSUWA== -----END CERTIFICATE-----Generated at Wed Nov 5 18:01:32 2025 by rpki-client