$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/eaV4m2cLV83Z6E4cJTvq-LbaA9o.roa File: eaV4m2cLV83Z6E4cJTvq-LbaA9o.roa (raw, json) Hash identifier: ark+H6gNFDYSYO987dHciwBzW1jkS+K+QtmxZNCI1cc= Subject key identifier: 79:A5:78:9B:67:0B:57:CD:D9:E8:4E:1C:25:3B:EA:F8:B6:DA:03:DA Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1AC3 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/eaV4m2cLV83Z6E4cJTvq-LbaA9o.roa Signing time: Wed 27 Aug 2025 09:19:53 +0000 ROA not before: Wed 27 Aug 2025 09:19:53 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131602 IP address blocks: 211.78.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 20:59:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6851 (0x1ac3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 27 09:19:53 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=79A5789B670B57CDD9E84E1C253BEAF8B6DA03DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f2:02:d8:28:9f:86:01:eb:2b:34:6c:b3:48: 20:12:2b:73:24:9a:4e:8c:7e:57:a3:92:01:47:46: 75:67:ab:c5:03:f5:6d:30:14:5c:78:85:de:cc:8b: a3:9a:04:3d:f2:b4:9c:cb:28:99:54:c4:51:d9:61: e6:22:93:29:c2:94:86:17:c7:bb:54:e5:ae:bf:c6: 28:ef:d2:21:4e:18:d7:6d:b8:d9:3f:d2:59:56:42: 52:45:fc:2b:83:03:70:2a:1c:95:5c:97:99:f0:09: cb:cc:e6:cd:72:32:22:34:5b:a5:a6:90:1c:74:b7: 7a:36:68:58:bd:c7:31:e0:e9:3c:9e:f1:00:57:af: 09:36:ba:72:d9:aa:a8:84:e4:18:f1:8f:f4:a7:ae: 6d:2f:d9:53:6a:00:a6:c0:4b:49:09:48:e3:59:03: 8e:1b:94:53:c4:7a:dc:d2:ce:a5:ac:a7:e4:0e:65: 54:b0:77:54:ee:fd:f8:de:90:e9:10:a8:91:81:3c: 3c:59:fc:3f:8f:84:b3:7f:52:ba:70:58:13:35:be: c0:14:75:11:12:99:e5:38:46:c3:e7:0a:77:71:03: 5c:87:24:7b:d0:73:d2:54:90:a6:40:16:b5:1e:c5: 37:03:ee:cf:de:13:d3:5e:a1:77:65:48:95:92:c3: ff:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:A5:78:9B:67:0B:57:CD:D9:E8:4E:1C:25:3B:EA:F8:B6:DA:03:DA X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/eaV4m2cLV83Z6E4cJTvq-LbaA9o.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.78.4.0/22 Signature Algorithm: sha256WithRSAEncryption 45:15:d5:8e:dd:1b:d8:9e:f6:b1:dd:b8:f1:dd:85:db:20:f7: 68:72:23:40:c0:e5:5a:8a:5e:e7:6e:64:80:41:58:87:0a:04: a6:77:44:30:c3:48:97:e4:71:00:28:08:5c:b7:b5:4b:d6:2e: 59:33:f6:77:e9:bc:83:d1:dc:99:2e:b3:8d:65:bb:90:fa:90: 1c:4f:9e:29:07:25:9b:18:bf:92:b3:43:83:cc:0d:26:22:35: 3e:98:5a:7f:6a:bc:76:df:ee:b4:df:a1:26:8b:fc:bc:c8:38: 82:ea:38:77:c7:0e:86:13:0a:ad:7d:7d:4e:ba:ae:55:0a:22: cd:28:52:62:ce:b0:cc:4f:5c:30:ee:7e:44:2d:c3:29:33:1e: 93:e6:0e:29:4f:a0:d2:b7:e6:a4:33:b4:0c:11:9f:33:34:59: 0d:16:72:96:6f:c9:82:fb:20:5c:37:03:05:65:d9:a0:75:ca: f6:f1:ba:58:17:c2:53:49:4e:12:5a:81:23:ee:a9:be:29:0c: b9:34:e2:8b:ce:0c:ff:fe:cf:26:ce:80:0b:c5:d9:bf:bf:58: a8:d4:bc:19:21:30:cd:d3:05:91:8a:c8:24:8f:8e:f9:d2:3c: 0c:93:e2:cc:a4:37:be:4a:6d:00:39:47:e1:b2:52:0e:8c:72: a8:6d:75:10 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICGsMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4Mjcw OTE5NTNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDc5QTU3ODlCNjcwQjU3 Q0REOUU4NEUxQzI1M0JFQUY4QjZEQTAzREEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDH8gLYKJ+GAesrNGyzSCASK3Mkmk6MflejkgFHRnVnq8UD9W0w FFx4hd7Mi6OaBD3ytJzLKJlUxFHZYeYikynClIYXx7tU5a6/xijv0iFOGNdtuNk/ 0llWQlJF/CuDA3AqHJVcl5nwCcvM5s1yMiI0W6WmkBx0t3o2aFi9xzHg6Tye8QBX rwk2unLZqqiE5Bjxj/Snrm0v2VNqAKbAS0kJSONZA44blFPEetzSzqWsp+QOZVSw d1Tu/fjekOkQqJGBPDxZ/D+PhLN/UrpwWBM1vsAUdRESmeU4RsPnCndxA1yHJHvQ c9JUkKZAFrUexTcD7s/eE9NeoXdlSJWSw/8LAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUeaV4m2cLV83Z6E4cJTvq+LbaA9owHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvZWFWNG0yY0xWODNaNkU0Y0pUdnEt TGJhQTlvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAtNOBDAN BgkqhkiG9w0BAQsFAAOCAQEARRXVjt0b2J72sd248d2F2yD3aHIjQMDlWope525k gEFYhwoEpndEMMNIl+RxACgIXLe1S9YuWTP2d+m8g9HcmS6zjWW7kPqQHE+eKQcl mxi/krNDg8wNJiI1Pphaf2q8dt/utN+hJov8vMg4guo4d8cOhhMKrX19TrquVQoi zShSYs6wzE9cMO5+RC3DKTMek+YOKU+g0rfmpDO0DBGfMzRZDRZylm/JgvsgXDcD BWXZoHXK9vG6WBfCU0lOElqBI+6pvikMuTTii84M//7PJs6AC8XZv79YqNS8GSEw zdMFkYrIJI+O+dI8DJPizKQ3vkptADlH4bJSDoxyqG11EA== -----END CERTIFICATE-----Generated at Wed Nov 5 18:01:50 2025 by rpki-client