$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/NC8W9F1317TdMXQlKM410oP5Z2s.roa File: NC8W9F1317TdMXQlKM410oP5Z2s.roa (raw, json) Hash identifier: FllbLD3vl9HJFBIIUwcbqqaLyBbWsV+uuTB3lraUnd4= Subject key identifier: 34:2F:16:F4:5D:77:D7:B4:DD:31:74:25:28:CE:35:D2:83:F9:67:6B Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1A58 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/NC8W9F1317TdMXQlKM410oP5Z2s.roa Signing time: Fri 22 Aug 2025 08:53:58 +0000 ROA not before: Fri 22 Aug 2025 08:53:58 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9919 IP address blocks: 218.211.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 06:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6744 (0x1a58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 22 08:53:58 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=342F16F45D77D7B4DD31742528CE35D283F9676B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2e:eb:15:15:49:0e:65:68:99:fb:a4:2e:c8: a2:e7:cf:0f:3e:21:35:6d:7c:a0:e0:82:4b:42:e3: bc:87:9d:ab:4e:41:97:52:b0:0d:ed:a5:69:e6:45: 1c:38:ba:d5:f5:fd:99:25:32:31:a3:ff:96:11:63: 1f:5a:ff:3d:cc:09:5e:7a:82:e7:0b:9f:8d:96:5b: 30:6d:d1:96:a9:67:b8:ae:0d:b5:b8:a8:4f:29:ac: 26:3e:78:f6:64:67:45:b5:6e:47:65:bc:ff:e3:6b: b2:ef:72:17:5f:c1:96:01:5a:a0:3c:41:b2:06:fa: e3:97:07:7c:5d:dc:40:5b:ee:cb:e5:43:e4:89:0a: 6d:ce:16:c8:9b:28:ee:94:60:9a:6f:25:e5:6a:bd: 28:82:b6:58:7f:c3:69:34:e8:c0:a2:f0:7b:96:7e: 0d:bd:23:1f:77:a1:5e:09:59:a0:15:9c:5f:91:34: ac:1f:0d:72:a2:5c:8f:e0:b0:84:63:f1:d9:01:1a: 33:46:f8:78:6f:b7:f8:7a:d3:74:df:f4:f2:13:95: 79:7c:b3:e4:d8:35:5b:a7:47:ff:3e:23:18:a1:fa: ae:9a:c3:31:f3:72:01:8f:48:a1:ff:07:1c:6e:d9: ea:ac:a3:e6:18:cf:18:0a:dd:3f:37:9f:e1:a4:4b: c1:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:2F:16:F4:5D:77:D7:B4:DD:31:74:25:28:CE:35:D2:83:F9:67:6B X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/NC8W9F1317TdMXQlKM410oP5Z2s.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 218.211.0.0/16 Signature Algorithm: sha256WithRSAEncryption b1:d6:1b:e1:bb:f1:e4:6e:12:73:75:ed:51:64:cd:83:76:27: 46:4f:61:b8:8a:98:47:5f:00:1c:25:5b:8d:82:15:5b:f5:73: d0:0f:d2:63:97:cf:fe:c0:ce:3a:e4:b9:31:0c:68:fa:79:c6: 85:da:d9:15:8f:61:ae:57:83:7c:d0:88:99:6f:73:03:86:a8: 36:88:b7:a7:69:4b:9e:06:53:56:e8:7a:3b:11:fb:f4:a6:75: b0:0f:fd:6a:c1:05:06:a7:f3:10:a0:25:a8:54:d2:b1:5d:4c: 2b:59:41:75:28:1b:b0:95:01:39:fd:cc:87:cb:4a:b7:13:13: 9b:c0:12:39:2f:60:a1:14:6f:13:36:6e:a9:ed:a4:66:33:db: 6f:7c:ef:d6:16:b5:a3:26:49:01:04:22:01:b4:cd:97:f4:88: b7:33:7d:3c:74:a3:4e:19:da:2c:92:33:d5:39:51:d2:82:6f: b4:69:65:84:d3:04:69:45:53:8a:d6:fa:85:a3:bb:d0:90:66: ee:89:9b:8d:5c:70:15:36:a0:26:f6:54:f5:25:aa:a0:04:d3: c8:0a:8b:8b:09:74:d7:b4:1a:42:e6:b7:bf:f3:f1:55:b8:2d: de:19:76:bd:2c:b9:36:7f:31:78:f0:d6:28:ce:41:69:04:35: ed:2d:98:0a -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICGlgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4MjIw ODUzNThaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDM0MkYxNkY0NUQ3N0Q3 QjRERDMxNzQyNTI4Q0UzNUQyODNGOTY3NkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCfLusVFUkOZWiZ+6QuyKLnzw8+ITVtfKDggktC47yHnatOQZdS sA3tpWnmRRw4utX1/ZklMjGj/5YRYx9a/z3MCV56gucLn42WWzBt0ZapZ7iuDbW4 qE8prCY+ePZkZ0W1bkdlvP/ja7LvchdfwZYBWqA8QbIG+uOXB3xd3EBb7svlQ+SJ Cm3OFsibKO6UYJpvJeVqvSiCtlh/w2k06MCi8HuWfg29Ix93oV4JWaAVnF+RNKwf DXKiXI/gsIRj8dkBGjNG+Hhvt/h603Tf9PITlXl8s+TYNVunR/8+Ixih+q6awzHz cgGPSKH/Bxxu2eqso+YYzxgK3T83n+GkS8EfAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQUNC8W9F1317TdMXQlKM410oP5Z2swHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvTkM4VzlGMTMxN1RkTVhRbEtNNDEw b1A1WjJzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDANrTMA0G CSqGSIb3DQEBCwUAA4IBAQCx1hvhu/HkbhJzde1RZM2DdidGT2G4iphHXwAcJVuN ghVb9XPQD9Jjl8/+wM465LkxDGj6ecaF2tkVj2GuV4N80IiZb3MDhqg2iLenaUue BlNW6Ho7Efv0pnWwD/1qwQUGp/MQoCWoVNKxXUwrWUF1KBuwlQE5/cyHy0q3ExOb wBI5L2ChFG8TNm6p7aRmM9tvfO/WFrWjJkkBBCIBtM2X9Ii3M308dKNOGdoskjPV OVHSgm+0aWWE0wRpRVOK1vqFo7vQkGbuiZuNXHAVNqAm9lT1JaqgBNPICouLCXTX tBpC5re/8/FVuC3eGXa9LLk2fzF48NYozkFpBDXtLZgK -----END CERTIFICATE-----Generated at Wed Nov 5 06:21:47 2025 by rpki-client