$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/XH-97660D1uplppoRqbY4vpwoHQ.roa File: XH-97660D1uplppoRqbY4vpwoHQ.roa (raw, json) Hash identifier: q4s/q7iD5TtW1Fbx5itjp3x61ae/RJH16TGn011vQbk= Subject key identifier: 5C:7F:BD:EF:AE:B4:0F:5B:A9:96:9A:68:46:A6:D8:E2:FA:70:A0:74 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1A6F Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/XH-97660D1uplppoRqbY4vpwoHQ.roa Signing time: Fri 22 Aug 2025 08:54:05 +0000 ROA not before: Fri 22 Aug 2025 08:54:05 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 4780 IP address blocks: 220.228.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 06:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6767 (0x1a6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 22 08:54:05 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=5C7FBDEFAEB40F5BA9969A6846A6D8E2FA70A074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:d9:67:cd:22:85:71:c1:5b:df:c4:a1:93:35: 4b:19:a6:d0:60:f2:0e:90:a0:85:ea:e6:8d:28:92: 49:86:a6:22:ac:e9:22:34:63:30:d0:31:4d:d3:50: d3:28:77:d8:2a:2e:be:41:6a:24:b5:c6:17:fd:5d: f3:97:f2:e6:48:c4:78:e3:c6:ed:e1:3e:b6:f6:46: 78:63:88:8b:7d:5c:31:c7:6b:ca:75:ec:63:df:aa: b8:72:91:c8:64:58:ca:14:45:64:ea:e3:95:b9:2a: 1e:eb:1e:ba:8b:60:ca:58:ae:56:50:2e:11:e7:84: 9d:06:00:ef:97:63:06:2d:64:1c:80:fa:b9:33:12: 01:fa:e2:0c:8a:f5:b2:5f:8f:6e:7b:70:85:1f:d9: 21:71:51:84:a9:a9:e5:26:66:1e:9f:5f:c9:be:e8: ec:5d:35:67:29:a8:7c:65:c7:a4:9f:09:c3:43:4f: 9b:7e:ca:87:16:14:32:60:dc:bc:1e:b4:b6:a1:de: ea:4e:fc:07:ce:0c:6b:49:a9:b4:a0:8f:69:cb:d1: ec:8d:80:b2:af:83:25:90:b3:ac:6c:db:4c:8e:0c: 71:6c:a4:ba:1d:22:ab:05:20:93:b5:39:b5:41:2b: 1c:2f:b6:92:85:a1:71:e2:03:9c:f3:54:63:d7:e2: 47:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:7F:BD:EF:AE:B4:0F:5B:A9:96:9A:68:46:A6:D8:E2:FA:70:A0:74 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/XH-97660D1uplppoRqbY4vpwoHQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 220.228.0.0/15 Signature Algorithm: sha256WithRSAEncryption b0:4b:5f:e9:7f:db:9c:32:58:48:9c:d2:79:e1:4a:25:9e:40: be:5f:4a:76:5d:46:c1:96:ff:f2:b1:5e:4a:18:e9:2d:cc:77: 5e:ac:78:0d:ac:20:89:d1:2f:d8:5c:e5:00:0d:fc:0d:e3:a4: be:be:da:f3:f0:72:27:57:28:b2:80:8e:74:d1:1c:16:52:e8: d7:05:50:a6:70:03:ad:f7:ca:e9:b4:8e:be:9b:42:dd:98:47: 0b:ca:38:84:a6:28:b5:43:57:42:29:3c:21:5f:c3:25:2b:6e: 61:d6:ff:f2:5d:52:19:6f:83:fb:cb:43:66:f5:7c:ef:12:d2: 07:27:45:37:6b:91:5c:94:3e:20:85:4c:56:46:88:62:fc:0c: fd:10:f7:2e:3a:5c:85:8e:2c:bb:ce:8b:59:96:a1:e1:47:59: 08:ff:73:41:95:9f:49:f1:a4:fe:e3:ac:da:dd:35:3c:00:5e: ea:26:e7:6a:a0:32:4b:33:d8:34:eb:91:b3:80:c3:df:00:2f: 63:26:bd:6e:0d:ca:46:19:69:9d:91:4b:40:5f:45:e5:8f:6d: fd:ab:52:05:eb:18:36:87:53:70:ee:d4:6d:73:8a:a0:d6:01: 70:36:ff:9d:3f:07:db:a6:7a:9e:09:54:83:00:cf:fc:c7:0c: 6c:42:a0:0b -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICGm8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4MjIw ODU0MDVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDVDN0ZCREVGQUVCNDBG NUJBOTk2OUE2ODQ2QTZEOEUyRkE3MEEwNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDo2WfNIoVxwVvfxKGTNUsZptBg8g6QoIXq5o0okkmGpiKs6SI0 YzDQMU3TUNMod9gqLr5BaiS1xhf9XfOX8uZIxHjjxu3hPrb2RnhjiIt9XDHHa8p1 7GPfqrhykchkWMoURWTq45W5Kh7rHrqLYMpYrlZQLhHnhJ0GAO+XYwYtZByA+rkz EgH64gyK9bJfj257cIUf2SFxUYSpqeUmZh6fX8m+6OxdNWcpqHxlx6SfCcNDT5t+ yocWFDJg3LwetLah3upO/AfODGtJqbSgj2nL0eyNgLKvgyWQs6xs20yODHFspLod IqsFIJO1ObVBKxwvtpKFoXHiA5zzVGPX4keFAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQUXH+97660D1uplppoRqbY4vpwoHQwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvWEgtOTc2NjBEMXVwbHBwb1JxYlk0 dnB3b0hRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAdzkMA0G CSqGSIb3DQEBCwUAA4IBAQCwS1/pf9ucMlhInNJ54UolnkC+X0p2XUbBlv/ysV5K GOktzHderHgNrCCJ0S/YXOUADfwN46S+vtrz8HInVyiygI500RwWUujXBVCmcAOt 98rptI6+m0LdmEcLyjiEpii1Q1dCKTwhX8MlK25h1v/yXVIZb4P7y0Nm9XzvEtIH J0U3a5FclD4ghUxWRohi/Az9EPcuOlyFjiy7zotZlqHhR1kI/3NBlZ9J8aT+46za 3TU8AF7qJudqoDJLM9g065GzgMPfAC9jJr1uDcpGGWmdkUtAX0Xlj239q1IF6xg2 h1Nw7tRtc4qg1gFwNv+dPwfbpnqeCVSDAM/8xwxsQqAL -----END CERTIFICATE-----Generated at Wed Nov 5 04:41:25 2025 by rpki-client