$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/foAvAo4xuNpShVEp9YW5AJFMlJo.roa File: foAvAo4xuNpShVEp9YW5AJFMlJo.roa (raw, json) Hash identifier: EEaZBvz+gB4t67kGrWh5aO1hYmSbIZsF6My+k+w1Tf4= Subject key identifier: 7E:80:2F:02:8E:31:B8:DA:52:85:51:29:F5:85:B9:00:91:4C:94:9A Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 19BB Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/foAvAo4xuNpShVEp9YW5AJFMlJo.roa Signing time: Fri 22 Aug 2025 08:53:18 +0000 ROA not before: Fri 22 Aug 2025 08:53:18 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18049 IP address blocks: 106.107.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6587 (0x19bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 22 08:53:18 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=7E802F028E31B8DA52855129F585B900914C949A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ae:ec:7f:05:59:15:31:02:3e:6e:64:a1:8c: 1b:4f:47:20:9e:cf:fc:40:e4:fa:f7:2e:37:3d:1f: 90:6a:64:ca:40:2d:3a:57:db:ee:ea:38:22:66:76: 4e:92:cf:83:c2:36:2d:c7:99:e8:5b:e3:3d:65:ff: 99:5f:12:24:fa:5c:52:ca:47:55:99:f8:e8:09:53: 8d:53:8d:ec:02:7b:43:b6:09:c8:e7:e1:70:c5:36: d7:07:65:88:1b:46:fb:61:17:25:43:3d:e8:7e:6d: f2:6d:dc:e3:0e:ea:bb:6e:fb:e0:b8:1f:13:3f:cc: 7c:4a:a6:9f:e3:c1:d1:66:c9:7f:50:5d:55:4b:bf: d1:42:65:c6:a6:53:29:1c:4a:2e:3a:8b:c0:fa:1a: 76:68:8b:11:ab:0a:e3:ae:a0:9e:dd:d0:27:c0:f5: 71:ac:e8:5b:08:7d:95:ca:b3:10:0b:f7:74:1e:e6: df:98:d5:23:ba:65:b6:1e:1a:f6:6c:2b:ef:89:35: 9c:8d:a4:9e:89:dc:54:58:9d:14:b9:17:36:d0:c7: bb:12:b8:59:d9:16:d4:da:29:07:5a:d4:f3:5d:06: e2:5f:28:9e:e6:f2:34:5e:3f:ff:8f:18:26:68:01: 91:e7:e7:fc:64:c3:c0:c4:be:ad:fd:8b:ea:26:c4: 33:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:80:2F:02:8E:31:B8:DA:52:85:51:29:F5:85:B9:00:91:4C:94:9A X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/foAvAo4xuNpShVEp9YW5AJFMlJo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.107.128.0/20 Signature Algorithm: sha256WithRSAEncryption 9a:41:bf:a6:82:38:5c:64:18:b9:92:b9:b4:73:ad:85:ff:50: a9:35:dd:c3:08:93:73:89:aa:58:17:71:5f:3a:dc:fd:1e:3b: 3d:df:e3:1d:bd:0e:78:53:c8:61:33:b6:13:00:5b:bd:84:99: 97:91:40:7e:42:a4:41:38:70:f0:9d:11:b7:68:5c:ed:7e:9f: b9:6b:34:d1:d4:4e:1b:c5:c2:9f:e5:a7:7d:2a:12:67:9d:1d: 14:e5:9f:87:bd:59:e2:08:4a:47:af:83:12:72:ca:35:a7:1e: f0:a4:e6:33:18:23:18:d0:18:10:dc:39:d7:6e:71:2c:b8:a9: 65:c0:39:47:17:88:15:e4:03:7e:c5:f9:be:86:1e:f2:50:c8: fa:40:f3:cf:6b:ca:b8:fb:ab:79:a7:3c:7d:18:81:63:31:e1: 8e:05:00:ae:f2:bb:2b:30:ba:31:73:f8:8d:25:c1:96:e3:06: 54:26:59:19:73:c5:8a:3a:6e:73:11:05:96:61:59:cb:2b:cd: b7:cd:6d:37:7e:2c:5e:3e:e9:fc:a2:d9:3d:0a:97:23:68:d0: 44:67:66:c4:52:3a:99:7b:25:9e:e4:50:21:90:b6:03:cd:0a: e3:b4:75:a5:61:88:36:7f:4b:99:07:35:9d:76:91:e9:cd:b5: 0d:19:77:5e -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICGbswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4MjIw ODUzMThaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDdFODAyRjAyOEUzMUI4 REE1Mjg1NTEyOUY1ODVCOTAwOTE0Qzk0OUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDprux/BVkVMQI+bmShjBtPRyCez/xA5Pr3Ljc9H5BqZMpALTpX 2+7qOCJmdk6Sz4PCNi3Hmehb4z1l/5lfEiT6XFLKR1WZ+OgJU41TjewCe0O2Ccjn 4XDFNtcHZYgbRvthFyVDPeh+bfJt3OMO6rtu++C4HxM/zHxKpp/jwdFmyX9QXVVL v9FCZcamUykcSi46i8D6GnZoixGrCuOuoJ7d0CfA9XGs6FsIfZXKsxAL93Qe5t+Y 1SO6ZbYeGvZsK++JNZyNpJ6J3FRYnRS5FzbQx7sSuFnZFtTaKQda1PNdBuJfKJ7m 8jReP/+PGCZoAZHn5/xkw8DEvq39i+omxDMpAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUfoAvAo4xuNpShVEp9YW5AJFMlJowHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvZm9BdkFvNHh1TnBTaFZFcDlZVzVB SkZNbEpvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBGprgDAN BgkqhkiG9w0BAQsFAAOCAQEAmkG/poI4XGQYuZK5tHOthf9QqTXdwwiTc4mqWBdx Xzrc/R47Pd/jHb0OeFPIYTO2EwBbvYSZl5FAfkKkQThw8J0Rt2hc7X6fuWs00dRO G8XCn+WnfSoSZ50dFOWfh71Z4ghKR6+DEnLKNace8KTmMxgjGNAYENw5125xLLip ZcA5RxeIFeQDfsX5voYe8lDI+kDzz2vKuPureac8fRiBYzHhjgUArvK7KzC6MXP4 jSXBluMGVCZZGXPFijpucxEFlmFZyyvNt81tN34sXj7p/KLZPQqXI2jQRGdmxFI6 mXslnuRQIZC2A80K47R1pWGINn9LmQc1nXaR6c21DRl3Xg== -----END CERTIFICATE-----Generated at Wed Nov 5 22:09:01 2025 by rpki-client