$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/hd-YrxKsbHKm3Un2_56q8smBGWI.roa File: hd-YrxKsbHKm3Un2_56q8smBGWI.roa (raw, json) Hash identifier: BMfXkNMyDruXa1FVLAxShpi929dojNxPfLAMxW05CCQ= Subject key identifier: 85:DF:98:AF:12:AC:6C:72:A6:DD:49:F6:FF:9E:AA:F2:C9:81:19:62 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1AB7 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/hd-YrxKsbHKm3Un2_56q8smBGWI.roa Signing time: Wed 27 Aug 2025 09:18:41 +0000 ROA not before: Wed 27 Aug 2025 09:18:41 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18049 IP address blocks: 61.61.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 20:59:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6839 (0x1ab7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 27 09:18:41 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=85DF98AF12AC6C72A6DD49F6FF9EAAF2C9811962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:84:f4:5f:c3:2f:93:fa:17:f6:7f:3d:f1:d9: 16:0b:25:79:dd:d4:df:73:e2:13:2c:0e:51:97:27: be:78:fd:0b:be:b3:cf:2a:bc:1f:70:5d:d7:c1:6f: f8:d9:9f:52:2f:bb:10:20:a0:e6:41:ad:dc:39:c8: 0a:14:a2:fc:0a:6c:36:58:6b:9c:20:cb:9b:ad:d9: 12:62:5d:a5:96:f3:96:9a:c8:8e:8a:aa:3e:43:d2: 88:00:18:1c:f0:94:99:fc:cf:7c:1a:39:39:17:f9: 4d:e2:e3:f9:37:bc:07:01:7d:ac:48:eb:3f:14:0a: 7c:4d:69:77:cf:95:2a:f6:53:3e:2a:e3:39:20:84: 20:fe:54:b6:44:73:8e:6d:70:e2:ab:18:00:1d:aa: 80:a0:d2:e5:7a:c8:de:62:ee:9b:21:b8:d3:51:0a: ac:72:66:f6:2c:36:7a:11:4f:26:91:65:2c:17:85: 26:fd:59:28:07:55:7c:48:68:14:2f:fe:da:63:96: 01:7c:cd:4d:23:50:cf:75:90:67:e0:73:29:05:ec: ad:12:43:81:fd:63:89:d7:df:ae:a3:67:f4:e3:64: cd:c4:95:c6:ec:75:cd:50:57:e8:3a:ab:d5:0f:01: fe:a9:1a:97:51:07:72:74:ae:ff:46:ae:74:7c:cf: b7:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:DF:98:AF:12:AC:6C:72:A6:DD:49:F6:FF:9E:AA:F2:C9:81:19:62 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/hd-YrxKsbHKm3Un2_56q8smBGWI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.61.44.0/22 Signature Algorithm: sha256WithRSAEncryption c4:86:32:24:6f:35:2c:03:ea:eb:90:cc:31:6e:d4:cd:da:9a: 1d:86:a1:a4:6d:8c:b9:cd:44:a0:da:5e:35:b3:63:39:5d:6d: 49:ee:5b:95:83:b9:e8:cf:fe:75:a1:1e:86:62:bd:22:9f:cf: 3f:6f:1e:70:3e:2d:6f:d4:c2:5f:53:58:b1:98:93:bf:14:95: 1a:da:44:16:0d:31:c8:fa:6d:0e:98:4c:78:a4:65:94:1b:9d: 09:b0:78:f5:23:dd:76:c0:1b:a6:28:ff:0a:bb:74:f9:e3:62: 5e:8c:b3:a5:d3:16:1e:af:ce:4a:c4:28:9b:61:89:0a:a6:a1: ea:ca:0d:b2:26:2b:24:37:91:7e:1c:3c:74:86:28:b8:cd:7c: f4:56:0a:dd:c2:30:d8:1f:c6:32:20:1d:19:81:0d:b0:b7:5c: 13:89:42:5b:b2:16:d5:dd:e7:77:35:51:0c:fe:36:f7:df:51: d5:15:d0:7c:50:4c:22:40:e6:0a:74:94:23:c5:be:f3:1f:03: b1:83:6c:9b:b8:76:5e:7b:d7:4b:6a:95:46:b5:f6:b0:45:a1: c4:ac:12:aa:8e:a5:86:3d:cb:f4:5d:dd:b5:4e:3d:3f:9c:05: f5:64:9e:3e:5e:49:2c:4a:bb:77:76:ce:c2:11:f0:33:f5:b6: 85:ef:08:ec -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICGrcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4Mjcw OTE4NDFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDg1REY5OEFGMTJBQzZD NzJBNkRENDlGNkZGOUVBQUYyQzk4MTE5NjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4hPRfwy+T+hf2fz3x2RYLJXnd1N9z4hMsDlGXJ754/Qu+s88q vB9wXdfBb/jZn1IvuxAgoOZBrdw5yAoUovwKbDZYa5wgy5ut2RJiXaWW85aayI6K qj5D0ogAGBzwlJn8z3waOTkX+U3i4/k3vAcBfaxI6z8UCnxNaXfPlSr2Uz4q4zkg hCD+VLZEc45tcOKrGAAdqoCg0uV6yN5i7pshuNNRCqxyZvYsNnoRTyaRZSwXhSb9 WSgHVXxIaBQv/tpjlgF8zU0jUM91kGfgcykF7K0SQ4H9Y4nX366jZ/TjZM3Elcbs dc1QV+g6q9UPAf6pGpdRB3J0rv9GrnR8z7dzAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUhd+YrxKsbHKm3Un2/56q8smBGWIwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvaGQtWXJ4S3NiSEttM1VuMl81NnE4 c21CR1dJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAj09LDAN BgkqhkiG9w0BAQsFAAOCAQEAxIYyJG81LAPq65DMMW7UzdqaHYahpG2Muc1EoNpe NbNjOV1tSe5blYO56M/+daEehmK9Ip/PP28ecD4tb9TCX1NYsZiTvxSVGtpEFg0x yPptDphMeKRllBudCbB49SPddsAbpij/Crt0+eNiXoyzpdMWHq/OSsQom2GJCqah 6soNsiYrJDeRfhw8dIYouM189FYK3cIw2B/GMiAdGYENsLdcE4lCW7IW1d3ndzVR DP42999R1RXQfFBMIkDmCnSUI8W+8x8DsYNsm7h2XnvXS2qVRrX2sEWhxKwSqo6l hj3L9F3dtU49P5wF9WSePl5JLEq7d3bOwhHwM/W2he8I7A== -----END CERTIFICATE-----Generated at Wed Nov 5 18:01:29 2025 by rpki-client