$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/_bYUf2TIZixqqw6ZBdbh7yYwcNk.roa File: _bYUf2TIZixqqw6ZBdbh7yYwcNk.roa (raw, json) Hash identifier: 2UGoSZPGICDhOJtBkIFMs1X2HIPfpe37iaD65iWAwHg= Subject key identifier: FD:B6:14:7F:64:C8:66:2C:6A:AB:0E:99:05:D6:E1:EF:26:30:70:D9 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 19DF Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/_bYUf2TIZixqqw6ZBdbh7yYwcNk.roa Signing time: Fri 22 Aug 2025 08:53:28 +0000 ROA not before: Fri 22 Aug 2025 08:53:28 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9919 IP address blocks: 221.169.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 06:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6623 (0x19df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 22 08:53:28 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=FDB6147F64C8662C6AAB0E9905D6E1EF263070D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e1:2c:af:7b:9c:8f:0d:a0:a3:eb:da:cf:67: 76:dc:60:c0:c2:97:77:0a:b9:5a:67:00:c0:3a:be: 3b:bd:e7:53:e9:31:28:c0:38:ab:f1:d5:37:34:e9: 6c:ec:a2:36:01:d5:b6:05:19:8b:81:26:de:ed:15: e4:b3:85:18:57:8b:be:a6:f1:fe:39:c6:43:0a:10: 35:d9:31:89:55:99:51:68:5a:8a:b1:48:65:6c:0b: 9c:96:19:49:f1:b9:12:77:bf:cc:e3:e1:fc:a7:f1: a9:2a:e4:b9:00:a0:ef:60:03:1d:aa:02:d0:92:cf: 03:b7:f7:6f:43:b6:b1:a2:14:10:a4:70:e8:3b:09: f5:9f:e8:8b:54:8f:b6:76:f2:95:23:d6:06:fe:4c: 96:11:8a:b3:c9:8b:0d:1d:e2:7e:02:63:f1:0b:24: 6d:1e:11:09:89:e2:4e:7a:7f:5a:dd:06:c2:23:6f: 4f:6a:fd:37:21:57:49:11:3b:50:39:49:cd:96:c7: 52:4e:ee:9f:11:8f:99:03:06:00:cb:45:96:14:58: bc:ed:5e:9b:26:b2:31:09:73:86:00:47:8f:28:65: 9b:3d:08:fd:08:f5:a8:83:db:4f:d8:31:57:c7:62: 3b:a6:97:22:3e:d2:8f:72:af:79:db:d9:ce:3d:a2: fa:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:B6:14:7F:64:C8:66:2C:6A:AB:0E:99:05:D6:E1:EF:26:30:70:D9 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/_bYUf2TIZixqqw6ZBdbh7yYwcNk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 221.169.0.0/16 Signature Algorithm: sha256WithRSAEncryption 02:21:88:39:ea:69:6f:18:61:d0:87:84:a8:36:f2:6c:dd:d4: dc:20:a8:62:59:f0:97:c5:53:25:ad:c3:ef:d5:db:05:c5:6d: e7:a1:41:98:dd:89:53:30:da:7f:a0:47:83:ea:69:0b:00:06: d0:87:b4:9a:0f:f5:65:00:0d:b3:4c:85:9e:56:bb:bf:f0:a4: e5:97:90:68:0d:2e:4f:90:ff:8b:28:82:89:f4:eb:e0:0a:73: a3:df:5d:55:eb:7b:b6:c3:35:cf:88:2c:e7:03:eb:18:d3:18: 48:2c:5f:d3:cd:b2:f5:fe:c0:e5:bb:ad:87:82:7d:af:24:c8: 1e:d0:aa:2b:29:75:48:0c:00:53:95:d1:4c:aa:36:2c:a1:21: 62:c6:84:ab:0a:2d:aa:61:42:90:13:87:69:52:65:f4:12:87: c3:6f:18:9b:d5:30:30:e6:17:f4:a6:49:75:c1:04:6b:5d:e7: e9:4d:bc:09:8e:58:1f:43:7b:7f:5d:9e:36:d4:6c:40:bc:32: 21:9a:e3:07:48:6a:1a:22:cf:3f:47:a2:66:9c:76:5a:f6:15: 76:47:c8:af:54:7f:92:1a:85:a5:0f:60:ee:07:94:51:a9:45: 16:d7:0d:8e:98:8a:2b:17:6c:17:0e:68:f3:b0:83:22:45:9a: 49:4e:a6:82 -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICGd8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4MjIw ODUzMjhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEZEQjYxNDdGNjRDODY2 MkM2QUFCMEU5OTA1RDZFMUVGMjYzMDcwRDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDY4Syve5yPDaCj69rPZ3bcYMDCl3cKuVpnAMA6vju951PpMSjA OKvx1Tc06WzsojYB1bYFGYuBJt7tFeSzhRhXi76m8f45xkMKEDXZMYlVmVFoWoqx SGVsC5yWGUnxuRJ3v8zj4fyn8akq5LkAoO9gAx2qAtCSzwO3929DtrGiFBCkcOg7 CfWf6ItUj7Z28pUj1gb+TJYRirPJiw0d4n4CY/ELJG0eEQmJ4k56f1rdBsIjb09q /TchV0kRO1A5Sc2Wx1JO7p8Rj5kDBgDLRZYUWLztXpsmsjEJc4YAR48oZZs9CP0I 9aiD20/YMVfHYjumlyI+0o9yr3nb2c49ovrTAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQU/bYUf2TIZixqqw6ZBdbh7yYwcNkwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvX2JZVWYyVElaaXhxcXc2WkJkYmg3 eVl3Y05rLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAN2pMA0G CSqGSIb3DQEBCwUAA4IBAQACIYg56mlvGGHQh4SoNvJs3dTcIKhiWfCXxVMlrcPv 1dsFxW3noUGY3YlTMNp/oEeD6mkLAAbQh7SaD/VlAA2zTIWeVru/8KTll5BoDS5P kP+LKIKJ9OvgCnOj311V63u2wzXPiCznA+sY0xhILF/TzbL1/sDlu62Hgn2vJMge 0KorKXVIDABTldFMqjYsoSFixoSrCi2qYUKQE4dpUmX0EofDbxib1TAw5hf0pkl1 wQRrXefpTbwJjlgfQ3t/XZ421GxAvDIhmuMHSGoaIs8/R6JmnHZa9hV2R8ivVH+S GoWlD2DuB5RRqUUW1w2OmIorF2wXDmjzsIMiRZpJTqaC -----END CERTIFICATE-----Generated at Wed Nov 5 06:20:55 2025 by rpki-client