$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/drsKVxNwRMiLnrGka4gRNpE8EEQ.roa File: drsKVxNwRMiLnrGka4gRNpE8EEQ.roa (raw, json) Hash identifier: rI8o6ccYMoCDvalelj2Du5NC2oEX+OsvBNByCQTDvCw= Subject key identifier: 76:BB:0A:57:13:70:44:C8:8B:9E:B1:A4:6B:88:11:36:91:3C:10:44 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1A6B Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/drsKVxNwRMiLnrGka4gRNpE8EEQ.roa Signing time: Fri 22 Aug 2025 08:54:04 +0000 ROA not before: Fri 22 Aug 2025 08:54:04 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131597 IP address blocks: 106.105.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 20:59:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6763 (0x1a6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 22 08:54:04 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=76BB0A57137044C88B9EB1A46B881136913C1044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:78:2c:02:8f:01:d6:38:93:0f:b8:32:90:98: dc:7c:c2:f9:f5:a6:f9:af:2a:7e:a0:bb:af:ff:8f: a9:cc:4a:23:3a:ab:e8:1b:20:4b:6c:14:40:6c:71: 27:d2:84:ff:04:03:98:24:5c:8a:f3:03:0c:5d:10: 64:fd:45:c6:26:82:01:b8:f5:bf:e8:ae:79:33:04: 53:0e:fb:26:28:09:b1:3a:7c:05:fb:c6:9f:30:ed: 59:55:47:16:3d:0b:d2:2a:8a:21:24:04:84:02:9b: 01:6d:12:58:14:35:67:3e:47:58:60:36:b4:d7:e8: 73:3b:4c:94:a3:75:a4:51:17:02:83:66:95:b9:d7: c2:50:7c:62:ed:12:05:8f:6d:33:f5:68:06:cc:51: 6f:b4:20:b8:db:ce:50:38:67:88:c2:9f:8d:3f:6d: f7:14:ab:63:98:fe:81:aa:95:a3:c1:6d:00:cc:3a: 23:7b:40:05:ce:00:05:e7:8d:5d:d6:89:7d:10:9f: 23:75:9f:83:eb:64:f6:8e:cd:3c:63:8b:e1:de:ac: 59:2b:15:f8:10:33:6c:5f:40:8e:f3:b3:08:96:70: 7c:81:96:3a:2b:b2:c3:23:80:39:f0:1e:40:fa:f5: 66:f1:c3:df:c5:8e:f3:29:0b:b7:8c:69:33:cf:13: 33:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:BB:0A:57:13:70:44:C8:8B:9E:B1:A4:6B:88:11:36:91:3C:10:44 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/drsKVxNwRMiLnrGka4gRNpE8EEQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.105.232.0/21 Signature Algorithm: sha256WithRSAEncryption 99:5a:45:41:09:2e:02:c4:ea:e5:d3:d4:31:3c:fb:5e:da:46: 72:f2:21:d2:80:26:99:33:e4:67:80:9f:d2:0c:4c:00:9a:d7: e7:53:ab:65:5b:e4:ed:3e:37:66:89:0c:c4:6a:c7:b1:5b:e2: a3:36:6b:d1:87:49:73:eb:81:2e:f9:44:36:66:69:9b:e0:bb: fc:6e:ef:b4:98:f3:a4:71:99:08:46:80:6f:8b:22:cf:fd:fd: c4:77:ef:6b:44:81:32:c7:a5:c0:e6:0e:9b:f5:13:e1:cc:2a: fa:1f:c5:64:41:81:ce:33:41:98:f5:c5:e6:da:42:2e:00:91: 6a:03:e1:31:17:2b:b2:15:c2:01:99:29:61:2e:33:78:1c:61: 33:ad:a1:00:6f:1e:a4:1c:c9:b1:8f:d4:a0:44:e3:dd:7b:a7: b1:47:34:e3:f1:1b:1d:d7:9a:06:00:2e:cd:0e:17:cc:46:50: e7:67:29:2b:95:70:c3:40:2e:9d:bc:09:d7:2a:17:1d:b3:5f: 81:ab:80:98:b7:c5:78:dd:a2:ea:81:e2:89:88:8d:ea:0d:f3: 54:6e:88:fc:0b:5b:4c:18:47:42:1f:0f:87:82:a2:61:74:69: dd:0a:36:10:3b:b6:a6:e5:2c:ff:43:c6:96:fd:ea:e8:9e:7c: 83:8d:78:e1 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICGmswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4MjIw ODU0MDRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDc2QkIwQTU3MTM3MDQ0 Qzg4QjlFQjFBNDZCODgxMTM2OTEzQzEwNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCeCwCjwHWOJMPuDKQmNx8wvn1pvmvKn6gu6//j6nMSiM6q+gb IEtsFEBscSfShP8EA5gkXIrzAwxdEGT9RcYmggG49b/ornkzBFMO+yYoCbE6fAX7 xp8w7VlVRxY9C9IqiiEkBIQCmwFtElgUNWc+R1hgNrTX6HM7TJSjdaRRFwKDZpW5 18JQfGLtEgWPbTP1aAbMUW+0ILjbzlA4Z4jCn40/bfcUq2OY/oGqlaPBbQDMOiN7 QAXOAAXnjV3WiX0QnyN1n4PrZPaOzTxji+HerFkrFfgQM2xfQI7zswiWcHyBljor ssMjgDnwHkD69Wbxw9/FjvMpC7eMaTPPEzMbAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUdrsKVxNwRMiLnrGka4gRNpE8EEQwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvZHJzS1Z4TndSTWlMbnJHa2E0Z1JO cEU4RUVRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA2pp6DAN BgkqhkiG9w0BAQsFAAOCAQEAmVpFQQkuAsTq5dPUMTz7XtpGcvIh0oAmmTPkZ4Cf 0gxMAJrX51OrZVvk7T43ZokMxGrHsVviozZr0YdJc+uBLvlENmZpm+C7/G7vtJjz pHGZCEaAb4siz/39xHfva0SBMselwOYOm/UT4cwq+h/FZEGBzjNBmPXF5tpCLgCR agPhMRcrshXCAZkpYS4zeBxhM62hAG8epBzJsY/UoETj3XunsUc04/EbHdeaBgAu zQ4XzEZQ52cpK5Vww0AunbwJ1yoXHbNfgauAmLfFeN2i6oHiiYiN6g3zVG6I/Atb TBhHQh8Ph4KiYXRp3Qo2EDu2puUs/0PGlv3q6J58g4144Q== -----END CERTIFICATE-----Generated at Wed Nov 5 18:01:34 2025 by rpki-client