$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/ON7_1wLsjuQAmBa3P09ZNL1ctd0.roa File: ON7_1wLsjuQAmBa3P09ZNL1ctd0.roa (raw, json) Hash identifier: CWgUyO1QjQ2zhOKRzU7mc9XSK5OUhvcQcEvr+p4hUs8= Subject key identifier: 38:DE:FF:D7:02:EC:8E:E4:00:98:16:B7:3F:4F:59:34:BD:5C:B5:DD Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1A9D Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ON7_1wLsjuQAmBa3P09ZNL1ctd0.roa Signing time: Wed 27 Aug 2025 09:14:05 +0000 ROA not before: Wed 27 Aug 2025 09:14:05 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9919 IP address blocks: 61.61.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 06:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6813 (0x1a9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 27 09:14:05 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=38DEFFD702EC8EE4009816B73F4F5934BD5CB5DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:11:bd:db:12:02:35:0e:3c:5c:05:91:cb:3d: 71:1b:2a:91:25:72:5c:03:bd:06:43:f2:fe:b8:72: e0:17:56:2b:aa:cb:b1:f2:3f:2f:b3:16:23:54:ab: 20:14:66:95:d9:b2:09:7d:29:e3:6c:b8:a0:4d:ea: 52:24:ff:7e:e9:73:2e:97:d8:73:8e:85:00:fd:49: db:41:07:07:37:d2:73:78:2f:54:5c:7a:84:38:bf: 81:9d:3f:83:13:a9:99:8b:1c:10:b4:25:f7:53:60: 2a:8d:2b:e6:8f:b1:da:fc:8a:61:ba:e8:73:cc:bc: 98:45:47:4d:63:34:6d:53:06:96:cf:d1:12:c7:98: 3c:19:f9:0b:1e:dc:6e:4f:d3:12:86:89:d6:f9:d9: 90:d8:8f:f4:ff:3f:37:8e:64:46:27:80:e7:a9:0c: 71:41:8e:3b:a7:b3:cc:3e:6e:9e:a9:e6:f6:7e:d4: d5:b0:f0:62:89:04:e9:86:f2:54:12:96:df:34:a2: d7:a5:e0:d1:68:99:2b:d6:a6:c1:22:10:4e:d4:95: af:0a:ba:1b:73:b4:3d:ab:11:ba:94:90:a4:82:06: 6d:ee:64:4d:9c:74:c3:c5:7a:3f:ab:72:28:c3:29: a0:15:43:a3:91:f3:09:bb:08:68:d7:b8:a8:58:1d: 77:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:DE:FF:D7:02:EC:8E:E4:00:98:16:B7:3F:4F:59:34:BD:5C:B5:DD X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ON7_1wLsjuQAmBa3P09ZNL1ctd0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.61.0.0/17 Signature Algorithm: sha256WithRSAEncryption 09:6f:4b:f6:ba:b6:e2:88:08:a2:fe:f2:8e:1a:78:a4:04:56: 2b:c3:73:83:7c:a0:c9:45:a3:9e:ca:48:ab:ee:9e:0d:84:eb: d5:4e:dc:df:69:3b:14:44:73:38:c5:41:67:ff:e2:b2:eb:59: ff:8b:b5:11:42:09:fb:08:5d:15:e8:b5:0b:3e:81:d4:ce:72: 88:66:89:a3:26:77:c5:8b:6e:16:8f:2e:78:0d:53:12:6b:0b: c1:79:0c:52:5b:ba:54:0e:74:16:79:01:f2:55:21:17:3b:10: aa:8a:aa:4d:cb:28:32:a6:8a:e5:7e:93:ae:23:36:f6:c5:10: 86:6f:0e:f0:20:51:b3:e7:be:7a:9c:2b:66:3f:99:ad:30:30: b0:bf:f0:c4:d9:8c:0e:94:f1:b4:18:42:53:0d:c2:04:1e:9e: 50:34:d9:71:27:be:df:db:b9:11:a1:d0:a5:85:19:27:06:92: 7e:5f:a8:3b:82:44:67:c4:77:41:96:4f:6d:4f:2d:ff:1e:ae: 1f:3d:ee:77:c5:85:3d:22:94:6a:fd:34:3d:f9:82:4c:0c:13: 19:8e:f4:af:b7:a4:c4:e3:7f:1c:47:00:43:e1:22:10:82:ec: db:ee:34:af:78:cc:19:da:b3:53:c0:bf:9a:92:6c:4d:d1:43: 47:4b:18:d3 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICGp0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4Mjcw OTE0MDVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDM4REVGRkQ3MDJFQzhF RTQwMDk4MTZCNzNGNEY1OTM0QkQ1Q0I1REQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqEb3bEgI1DjxcBZHLPXEbKpElclwDvQZD8v64cuAXViuqy7Hy Py+zFiNUqyAUZpXZsgl9KeNsuKBN6lIk/37pcy6X2HOOhQD9SdtBBwc30nN4L1Rc eoQ4v4GdP4MTqZmLHBC0JfdTYCqNK+aPsdr8imG66HPMvJhFR01jNG1TBpbP0RLH mDwZ+Qse3G5P0xKGidb52ZDYj/T/PzeOZEYngOepDHFBjjuns8w+bp6p5vZ+1NWw 8GKJBOmG8lQSlt80otel4NFomSvWpsEiEE7Ula8KuhtztD2rEbqUkKSCBm3uZE2c dMPFej+rcijDKaAVQ6OR8wm7CGjXuKhYHXc7AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUON7/1wLsjuQAmBa3P09ZNL1ctd0wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvT043XzF3THNqdVFBbUJhM1AwOVpO TDFjdGQwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBz09ADAN BgkqhkiG9w0BAQsFAAOCAQEACW9L9rq24ogIov7yjhp4pARWK8Nzg3ygyUWjnspI q+6eDYTr1U7c32k7FERzOMVBZ//isutZ/4u1EUIJ+whdFei1Cz6B1M5yiGaJoyZ3 xYtuFo8ueA1TEmsLwXkMUlu6VA50FnkB8lUhFzsQqoqqTcsoMqaK5X6TriM29sUQ hm8O8CBRs+e+epwrZj+ZrTAwsL/wxNmMDpTxtBhCUw3CBB6eUDTZcSe+39u5EaHQ pYUZJwaSfl+oO4JEZ8R3QZZPbU8t/x6uHz3ud8WFPSKUav00PfmCTAwTGY70r7ek xON/HEcAQ+EiEILs2+40r3jMGdqzU8C/mpJsTdFDR0sY0w== -----END CERTIFICATE-----Generated at Wed Nov 5 06:21:05 2025 by rpki-client