$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/T20U1LwcZGrh8MNIaO_kiPDdQY0.roa File: T20U1LwcZGrh8MNIaO_kiPDdQY0.roa (raw, json) Hash identifier: 7eJPuNtqJsUaoUua+FaVGmQoOQWOWKHaPx7ikSNPoFw= Subject key identifier: 4F:6D:14:D4:BC:1C:64:6A:E1:F0:C3:48:68:EF:E4:88:F0:DD:41:8D Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 19B0 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/T20U1LwcZGrh8MNIaO_kiPDdQY0.roa Signing time: Fri 22 Aug 2025 08:53:15 +0000 ROA not before: Fri 22 Aug 2025 08:53:15 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 4780 IP address blocks: 2001:4580::/26 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 06:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6576 (0x19b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 22 08:53:15 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=4F6D14D4BC1C646AE1F0C34868EFE488F0DD418D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a3:bb:27:05:ac:85:8e:e8:ec:f0:17:fd:07: 24:99:c0:fc:d1:aa:e0:01:2f:d3:6d:42:80:00:7b: fe:7a:9e:0b:63:f4:2b:89:9a:39:17:fe:2d:a4:34: 43:72:55:b6:1a:5c:5c:86:62:97:95:b4:42:d6:b1: 23:91:7e:32:c3:15:47:18:e7:87:35:7a:0f:d1:f7: b6:d5:fa:8d:b8:da:a7:72:d5:c7:c8:70:09:ec:dd: 34:01:d4:12:33:ae:0b:41:45:2a:03:46:0d:b3:87: f9:2a:cd:cf:6a:b1:1b:9a:67:71:cf:36:30:d7:e9: c0:2a:1e:b1:37:a4:0d:b4:be:aa:e0:43:49:92:47: af:6e:a5:13:10:0e:83:87:e6:9c:26:1f:d3:5a:b9: d2:0a:5b:1f:69:69:fb:a0:1a:74:90:76:0e:2b:b9: 57:c9:4d:a2:21:9e:f1:35:25:24:03:41:d5:7a:70: a0:45:ca:4a:b0:37:2d:f7:4a:e0:52:32:d6:0f:46: 4b:b0:47:df:d7:b0:96:55:91:62:96:eb:3b:be:74: 7c:b7:01:b2:84:05:90:57:af:84:55:18:82:df:65: f2:5b:48:e7:99:45:af:2a:55:8c:e8:85:b7:b5:09: 9d:9b:ca:59:91:c8:55:60:bc:6c:96:43:46:c1:49: c2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:6D:14:D4:BC:1C:64:6A:E1:F0:C3:48:68:EF:E4:88:F0:DD:41:8D X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/T20U1LwcZGrh8MNIaO_kiPDdQY0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2001:4580::/26 Signature Algorithm: sha256WithRSAEncryption a8:40:86:b7:9a:1e:ad:a0:e2:b6:4c:5a:df:59:55:4a:70:72: fd:e1:2f:a9:a7:c2:a4:75:93:91:e9:4d:a5:f1:c8:da:ec:bb: 86:52:aa:61:51:77:0e:f5:6d:51:86:fa:84:a4:23:25:91:6d: 50:eb:1f:d1:3a:76:15:95:c9:f8:d0:88:2b:3f:cc:52:b3:5f: 1d:7d:dc:0a:35:5f:0f:e2:8f:01:d3:a6:9b:fc:82:a4:22:0c: 4e:4c:2a:3e:97:fe:d1:72:df:1f:48:b1:ba:77:8e:67:f6:02: 18:97:06:fd:21:f5:ca:e9:1c:22:cf:f1:a7:82:63:90:ec:21: 9e:82:68:15:a7:23:a7:07:db:e3:35:50:ab:ff:b1:8a:18:16: 95:f5:39:b4:c1:44:a7:f2:fb:ce:c7:7a:7a:ec:67:e1:94:68: 07:e3:13:7f:0b:2d:5b:92:96:35:3a:84:ce:dd:6f:22:67:fc: bf:ca:0b:f0:b3:b3:de:63:71:69:22:0a:92:6e:a6:8d:4a:c8: b5:af:f4:64:d4:ae:d3:79:92:47:f5:d5:02:1f:00:f5:94:c5: a5:0a:42:6f:8b:a1:bc:37:7f:dd:82:5d:cd:2b:a6:d4:6d:a2: c5:de:18:b4:50:42:25:b3:dc:61:08:9b:f9:1b:aa:6a:3f:fd: 6b:a3:96:e5 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICGbAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4MjIw ODUzMTVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDRGNkQxNEQ0QkMxQzY0 NkFFMUYwQzM0ODY4RUZFNDg4RjBERDQxOEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCoo7snBayFjujs8Bf9BySZwPzRquABL9NtQoAAe/56ngtj9CuJ mjkX/i2kNENyVbYaXFyGYpeVtELWsSORfjLDFUcY54c1eg/R97bV+o242qdy1cfI cAns3TQB1BIzrgtBRSoDRg2zh/kqzc9qsRuaZ3HPNjDX6cAqHrE3pA20vqrgQ0mS R69upRMQDoOH5pwmH9NaudIKWx9pafugGnSQdg4ruVfJTaIhnvE1JSQDQdV6cKBF ykqwNy33SuBSMtYPRkuwR9/XsJZVkWKW6zu+dHy3AbKEBZBXr4RVGILfZfJbSOeZ Ra8qVYzohbe1CZ2bylmRyFVgvGyWQ0bBScJLAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUT20U1LwcZGrh8MNIaO/kiPDdQY0wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvVDIwVTFMd2NaR3JoOE1OSWFPX2tp UERkUVkwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFBiABRYAw DQYJKoZIhvcNAQELBQADggEBAKhAhreaHq2g4rZMWt9ZVUpwcv3hL6mnwqR1k5Hp TaXxyNrsu4ZSqmFRdw71bVGG+oSkIyWRbVDrH9E6dhWVyfjQiCs/zFKzXx193Ao1 Xw/ijwHTppv8gqQiDE5MKj6X/tFy3x9Isbp3jmf2AhiXBv0h9crpHCLP8aeCY5Ds IZ6CaBWnI6cH2+M1UKv/sYoYFpX1ObTBRKfy+87HenrsZ+GUaAfjE38LLVuSljU6 hM7dbyJn/L/KC/Czs95jcWkiCpJupo1KyLWv9GTUrtN5kkf11QIfAPWUxaUKQm+L obw3f92CXc0rptRtosXeGLRQQiWz3GEIm/kbqmo//WujluU= -----END CERTIFICATE-----Generated at Wed Nov 5 04:42:41 2025 by rpki-client