$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/JJL2szjel7Kymk6EhwTrOvmO26c.roa File: JJL2szjel7Kymk6EhwTrOvmO26c.roa (raw, json) Hash identifier: fOiOyLP1x/CXjC/g017S1AyzXXftzevrHuBO1akXivg= Subject key identifier: 24:92:F6:B3:38:DE:97:B2:B2:9A:4E:84:87:04:EB:3A:F9:8E:DB:A7 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 19CB Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/JJL2szjel7Kymk6EhwTrOvmO26c.roa Signing time: Fri 22 Aug 2025 08:53:23 +0000 ROA not before: Fri 22 Aug 2025 08:53:23 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9919 IP address blocks: 220.229.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 11:29:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6603 (0x19cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 22 08:53:23 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=2492F6B338DE97B2B29A4E848704EB3AF98EDBA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:23:ae:c3:eb:6e:39:46:bd:34:ad:6c:51:ae: 4c:55:52:91:89:ac:db:41:51:4c:e2:20:fd:95:5d: a6:7f:dc:16:2b:4b:4d:81:7a:c5:4d:a3:4f:a4:87: c7:ae:a6:1f:7d:de:14:42:13:6f:e4:a9:30:39:2e: 05:f2:48:6b:3b:7f:de:57:fe:d9:45:dc:15:0e:87: 12:f3:c6:37:dd:b2:18:05:85:37:eb:b9:21:c1:bb: 90:0f:46:43:6b:82:4e:86:30:0a:a4:93:ca:b7:1b: cf:b0:da:17:81:87:ea:d5:e1:84:08:39:56:94:b9: 9d:68:45:62:03:0d:4e:96:c8:9b:92:e4:87:9b:18: 66:fe:df:86:af:da:fe:c3:a9:f6:59:b9:7c:9a:08: 15:c9:84:58:23:3c:a0:27:f0:51:dc:45:3b:62:71: 4e:a1:59:6c:39:f9:96:bf:f2:4a:9a:f2:5a:12:f8: 18:ce:f9:d7:91:8d:b1:7d:4b:33:c9:32:18:97:e9: 77:63:8f:75:87:21:99:ed:e2:16:2b:0b:d4:66:97: 30:83:84:af:9f:cb:8b:8b:1e:de:bc:f7:33:a3:f6: 5b:9d:46:bd:5e:65:50:0d:67:f8:af:92:87:b7:fc: b2:49:5b:66:fa:ef:83:c6:18:b0:cf:84:1d:93:db: a3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:92:F6:B3:38:DE:97:B2:B2:9A:4E:84:87:04:EB:3A:F9:8E:DB:A7 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/JJL2szjel7Kymk6EhwTrOvmO26c.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 220.229.0.0/16 Signature Algorithm: sha256WithRSAEncryption 1c:63:02:61:61:79:45:c5:02:df:9a:0e:f7:9c:7a:f9:cb:d7: b4:b9:7c:14:e9:10:35:2b:d3:6d:e0:23:3f:d5:c3:67:10:b8: 5b:f3:59:4d:c4:d7:4e:85:ed:08:46:ca:3c:8a:77:1f:5b:24: b9:41:ce:89:1d:60:94:b5:82:eb:02:44:76:d6:4a:78:f3:a9: 2c:0b:bf:7f:f0:69:7b:61:14:64:d3:de:3d:44:d3:72:b8:97: 8a:41:85:e3:68:69:23:c2:db:9a:db:71:0d:a6:bf:bc:3b:7b: e6:a4:33:bb:36:07:e4:ed:ed:ae:ac:91:db:93:61:4f:e1:d4: 3b:9b:5b:91:bc:9f:5a:d6:0f:79:8a:b6:d5:16:46:13:1d:8c: eb:86:58:39:ef:0a:2b:e6:f6:fd:c3:3b:55:36:30:8d:6a:3f: fd:6c:a9:55:e2:30:35:d9:25:eb:b4:fa:e1:74:dc:2d:dc:4d: c1:72:23:89:9e:f8:14:e4:d0:29:da:2e:84:20:b6:95:ed:d5: 57:c6:d7:ac:e5:c9:61:de:ad:69:19:ec:2e:6b:d3:95:a4:8d: 2d:03:d3:39:c5:73:f0:d8:30:58:b3:29:05:cc:56:2c:1c:89: bb:82:62:fa:d4:29:76:78:93:36:58:a7:f8:f5:16:67:2f:e0: 2c:e0:dd:77 -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICGcswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4MjIw ODUzMjNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDI0OTJGNkIzMzhERTk3 QjJCMjlBNEU4NDg3MDRFQjNBRjk4RURCQTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEI67D6245Rr00rWxRrkxVUpGJrNtBUUziIP2VXaZ/3BYrS02B esVNo0+kh8euph993hRCE2/kqTA5LgXySGs7f95X/tlF3BUOhxLzxjfdshgFhTfr uSHBu5APRkNrgk6GMAqkk8q3G8+w2heBh+rV4YQIOVaUuZ1oRWIDDU6WyJuS5Ieb GGb+34av2v7DqfZZuXyaCBXJhFgjPKAn8FHcRTticU6hWWw5+Za/8kqa8loS+BjO +deRjbF9SzPJMhiX6Xdjj3WHIZnt4hYrC9RmlzCDhK+fy4uLHt689zOj9ludRr1e ZVANZ/ivkoe3/LJJW2b674PGGLDPhB2T26OJAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQUJJL2szjel7Kymk6EhwTrOvmO26cwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvSkpMMnN6amVsN0t5bWs2RWh3VHJP dm1PMjZjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDANzlMA0G CSqGSIb3DQEBCwUAA4IBAQAcYwJhYXlFxQLfmg73nHr5y9e0uXwU6RA1K9Nt4CM/ 1cNnELhb81lNxNdOhe0IRso8incfWyS5Qc6JHWCUtYLrAkR21kp486ksC79/8Gl7 YRRk0949RNNyuJeKQYXjaGkjwtua23ENpr+8O3vmpDO7Ngfk7e2urJHbk2FP4dQ7 m1uRvJ9a1g95irbVFkYTHYzrhlg57wor5vb9wztVNjCNaj/9bKlV4jA12SXrtPrh dNwt3E3BciOJnvgU5NAp2i6EILaV7dVXxtes5clh3q1pGewua9OVpI0tA9M5xXPw 2DBYsykFzFYsHIm7gmL61Cl2eJM2WKf49RZnL+As4N13 -----END CERTIFICATE-----Generated at Wed Nov 5 11:28:28 2025 by rpki-client