$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/HRiwHGa2RuKrN_31FjBc6_PMLbU.roa File: HRiwHGa2RuKrN_31FjBc6_PMLbU.roa (raw, json) Hash identifier: NTMNj2MNqv/ZcW3tTNCayuYyv4W7yciJZgjJtn5Etnw= Subject key identifier: 1D:18:B0:1C:66:B6:46:E2:AB:37:FD:F5:16:30:5C:EB:F3:CC:2D:B5 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1972 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/HRiwHGa2RuKrN_31FjBc6_PMLbU.roa Signing time: Fri 22 Aug 2025 08:53:00 +0000 ROA not before: Fri 22 Aug 2025 08:53:00 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9919 IP address blocks: 122.146.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 06:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6514 (0x1972) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 22 08:53:00 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=1D18B01C66B646E2AB37FDF516305CEBF3CC2DB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:80:62:89:3b:f7:e3:41:59:8d:44:24:64:06: e0:43:d9:a0:f4:0f:ba:50:f6:83:5f:79:ff:0e:1e: 43:7a:e5:0d:2b:4b:65:05:68:42:9d:e3:e3:38:db: 57:93:c3:d0:23:81:4e:ca:3b:7d:89:dc:67:0c:e0: cc:f7:b5:99:ca:9e:32:d1:1d:29:b1:0e:00:33:a6: 78:bb:46:6d:d8:b7:07:7e:48:b5:cf:71:40:b4:52: 2d:2a:b7:e6:2f:0d:5d:40:fe:42:bb:89:8b:ac:d5: 5b:9c:a3:69:00:c3:8c:e3:00:2d:9f:d9:4a:a3:e1: 9b:52:28:12:b7:c1:d6:0e:f6:ca:78:2b:84:26:26: c3:53:5d:1a:23:64:62:3c:1a:81:64:a6:f5:8f:84: bd:48:27:45:4b:9b:1c:2e:e4:ec:39:ba:a4:80:41: 8f:97:5e:5a:ce:86:d2:85:6d:3c:d4:88:66:58:c4: 72:6f:73:3f:c3:67:29:65:df:96:75:9b:ab:03:63: 74:d3:dd:da:7c:51:d9:60:ae:f0:73:36:6f:56:45: 22:ed:97:9b:cc:09:7d:d8:c2:23:65:16:57:9d:61: 18:91:64:31:36:fa:9a:b2:8e:f4:25:17:bd:44:44: 5a:ca:46:27:1f:27:c8:11:1a:d7:fa:b1:d5:7d:31: d0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:18:B0:1C:66:B6:46:E2:AB:37:FD:F5:16:30:5C:EB:F3:CC:2D:B5 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/HRiwHGa2RuKrN_31FjBc6_PMLbU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.146.0.0/15 Signature Algorithm: sha256WithRSAEncryption cb:6c:ea:fb:c4:fe:ae:fc:3b:78:45:91:01:2b:02:98:00:4b: 49:28:84:84:97:d6:31:8c:5c:1e:b5:82:8a:47:18:ff:48:f3: 61:d4:bd:b4:59:29:d8:f7:cc:10:fd:b4:b9:52:76:ae:84:a6: 0f:40:1d:bb:06:87:94:06:4c:f9:54:3f:eb:17:bb:d4:a6:63: 1b:e6:3d:b9:a0:ff:78:ea:ae:bb:9b:5e:68:89:5a:07:c8:0d: f3:f5:54:26:34:eb:88:5a:53:c4:c0:ea:b9:58:60:c4:6b:24: 1d:27:e8:9e:1e:59:21:39:62:23:14:35:72:2f:5f:fa:59:7c: af:97:99:e1:f6:85:3a:da:cc:0b:69:bb:25:0a:c0:fd:b5:7e: 90:ce:87:85:a8:63:1c:95:2c:19:ff:05:66:c1:cd:cd:23:c8: e7:e3:7c:13:6b:0e:42:a8:3e:c6:ec:17:e7:36:f7:3b:fc:2a: bf:05:64:9c:df:93:91:54:7b:70:93:2b:71:26:9f:02:3e:93: 87:7f:6d:85:4d:62:41:74:1d:9b:80:4b:71:51:12:cc:ed:31: ac:39:ec:70:fa:ad:a7:97:ea:e8:39:76:35:b1:a5:9d:09:e4: b6:d1:43:f2:16:58:ab:df:98:71:99:c5:1e:dd:be:8e:27:06: d6:69:eb:c6 -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICGXIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4MjIw ODUzMDBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDFEMThCMDFDNjZCNjQ2 RTJBQjM3RkRGNTE2MzA1Q0VCRjNDQzJEQjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDxgGKJO/fjQVmNRCRkBuBD2aD0D7pQ9oNfef8OHkN65Q0rS2UF aEKd4+M421eTw9AjgU7KO32J3GcM4Mz3tZnKnjLRHSmxDgAzpni7Rm3Ytwd+SLXP cUC0Ui0qt+YvDV1A/kK7iYus1Vuco2kAw4zjAC2f2Uqj4ZtSKBK3wdYO9sp4K4Qm JsNTXRojZGI8GoFkpvWPhL1IJ0VLmxwu5Ow5uqSAQY+XXlrOhtKFbTzUiGZYxHJv cz/DZyll35Z1m6sDY3TT3dp8UdlgrvBzNm9WRSLtl5vMCX3YwiNlFledYRiRZDE2 +pqyjvQlF71ERFrKRicfJ8gRGtf6sdV9MdAHAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQUHRiwHGa2RuKrN/31FjBc6/PMLbUwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvSFJpd0hHYTJSdUtyTl8zMUZqQmM2 X1BNTGJVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAXqSMA0G CSqGSIb3DQEBCwUAA4IBAQDLbOr7xP6u/Dt4RZEBKwKYAEtJKISEl9YxjFwetYKK Rxj/SPNh1L20WSnY98wQ/bS5UnauhKYPQB27BoeUBkz5VD/rF7vUpmMb5j25oP94 6q67m15oiVoHyA3z9VQmNOuIWlPEwOq5WGDEayQdJ+ieHlkhOWIjFDVyL1/6WXyv l5nh9oU62swLabslCsD9tX6QzoeFqGMclSwZ/wVmwc3NI8jn43wTaw5CqD7G7Bfn Nvc7/Cq/BWSc35ORVHtwkytxJp8CPpOHf22FTWJBdB2bgEtxURLM7TGsOexw+q2n l+roOXY1saWdCeS20UPyFlir35hxmcUe3b6OJwbWaevG -----END CERTIFICATE-----Generated at Wed Nov 5 06:21:09 2025 by rpki-client