$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/mviKCqLl3hRlyLCKn12d02jHcbA.roa File: mviKCqLl3hRlyLCKn12d02jHcbA.roa (raw, json) Hash identifier: IPtwf07lKrvn2sEeuSK9u9T8IFXfMM0jCSaLLKMYjD8= Subject key identifier: 9A:F8:8A:0A:A2:E5:DE:14:65:C8:B0:8A:9F:5D:9D:D3:68:C7:71:B0 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 19C1 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/mviKCqLl3hRlyLCKn12d02jHcbA.roa Signing time: Fri 22 Aug 2025 08:53:20 +0000 ROA not before: Fri 22 Aug 2025 08:53:20 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 4780 IP address blocks: 2001:cd8::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 06:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6593 (0x19c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 22 08:53:20 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=9AF88A0AA2E5DE1465C8B08A9F5D9DD368C771B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:55:d1:fe:1a:e4:31:cb:cc:4b:47:76:60:62: 9f:f7:28:2c:10:c1:54:98:f9:1f:38:04:2a:c6:5d: 64:5c:1e:da:1c:e6:7e:07:fc:c8:00:3d:9c:6f:09: c3:66:0b:b3:0c:77:66:9a:7b:88:17:d2:bf:49:e8: d4:4a:56:af:ab:1e:78:06:72:32:5c:50:b3:95:4a: 42:63:b1:88:51:57:51:60:d0:46:aa:46:25:6e:fd: 50:87:a9:3a:34:77:de:b0:91:4a:d5:c9:d4:14:9c: b9:f1:08:fe:65:0a:6c:bd:d1:1a:94:8c:38:9d:fe: b9:f1:f5:b4:6c:83:ad:eb:2b:13:91:c0:d0:a3:6b: f3:9c:b3:60:73:e9:73:14:47:08:ec:bc:a9:5a:b4: c5:17:9a:2c:98:92:3b:40:83:c1:05:58:ce:80:a5: 58:2a:db:18:8e:e4:9f:94:83:5e:59:60:4a:c2:c0: 08:fd:c6:ec:ac:e4:d1:41:43:5c:1e:28:bb:ec:98: 30:dd:ea:ab:da:2c:53:90:64:d0:15:a5:d4:70:bc: 67:e6:fb:aa:d9:7f:a5:d1:71:b0:11:b0:c0:88:e5: 36:8a:f2:26:4b:ef:eb:af:80:fe:e5:76:c7:a2:68: 84:0c:2a:46:9f:0a:33:80:62:22:67:92:48:e9:c1: 1c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:F8:8A:0A:A2:E5:DE:14:65:C8:B0:8A:9F:5D:9D:D3:68:C7:71:B0 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/mviKCqLl3hRlyLCKn12d02jHcbA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2001:cd8::/32 Signature Algorithm: sha256WithRSAEncryption 34:32:0c:22:cb:b3:27:0c:a8:9e:66:71:ba:1b:fe:7e:71:17: 98:5c:58:05:87:58:6a:1e:a1:99:a7:6f:95:c3:17:55:3a:77: a3:9a:5f:40:39:97:c4:b8:c8:1c:09:6f:74:c1:6e:0f:2f:b2: 33:36:30:62:bf:22:97:ee:6a:4a:2f:b9:db:16:1b:fc:57:e7: ff:86:a2:a5:45:85:27:df:00:d3:24:31:88:35:e3:7a:2f:91: fb:bf:c2:cf:51:91:9f:cf:84:71:b0:c3:8f:7e:02:cc:77:f1: bd:62:37:9e:25:09:0d:bb:ef:e9:fd:a6:20:be:07:df:03:f1: f1:19:e8:d0:2c:d1:d4:2d:10:2d:28:8e:ae:f6:66:c9:ac:2d: 4c:11:df:1d:6b:4e:11:20:66:7d:41:fb:62:d4:63:3c:b2:90: 20:72:b5:a3:b3:20:8f:e1:5f:4a:05:c5:3f:d4:01:d6:9a:73: aa:1f:d8:5c:77:08:51:2c:53:64:ca:0d:73:e1:f6:3c:ab:e1: 2d:3f:8b:43:9b:26:a7:1d:26:e2:73:20:56:d0:e2:62:6e:d8: dd:c5:4c:8a:4f:ac:70:40:27:48:5c:80:77:2c:80:13:1a:b8: 60:de:4b:d3:b2:93:08:18:56:65:ea:28:37:30:0f:1c:9f:9b: cb:9f:0a:7b -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICGcEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4MjIw ODUzMjBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDlBRjg4QTBBQTJFNURF MTQ2NUM4QjA4QTlGNUQ5REQzNjhDNzcxQjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCZVdH+GuQxy8xLR3ZgYp/3KCwQwVSY+R84BCrGXWRcHtoc5n4H /MgAPZxvCcNmC7MMd2aae4gX0r9J6NRKVq+rHngGcjJcULOVSkJjsYhRV1Fg0Eaq RiVu/VCHqTo0d96wkUrVydQUnLnxCP5lCmy90RqUjDid/rnx9bRsg63rKxORwNCj a/Ocs2Bz6XMURwjsvKlatMUXmiyYkjtAg8EFWM6ApVgq2xiO5J+Ug15ZYErCwAj9 xuys5NFBQ1weKLvsmDDd6qvaLFOQZNAVpdRwvGfm+6rZf6XRcbARsMCI5TaK8iZL 7+uvgP7ldseiaIQMKkafCjOAYiJnkkjpwRw9AgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUmviKCqLl3hRlyLCKn12d02jHcbAwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvbXZpS0NxTGwzaFJseUxDS24xMmQw MmpIY2JBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACABDNgw DQYJKoZIhvcNAQELBQADggEBADQyDCLLsycMqJ5mcbob/n5xF5hcWAWHWGoeoZmn b5XDF1U6d6OaX0A5l8S4yBwJb3TBbg8vsjM2MGK/IpfuakovudsWG/xX5/+GoqVF hSffANMkMYg143ovkfu/ws9RkZ/PhHGww49+Asx38b1iN54lCQ277+n9piC+B98D 8fEZ6NAs0dQtEC0ojq72ZsmsLUwR3x1rThEgZn1B+2LUYzyykCBytaOzII/hX0oF xT/UAdaac6of2Fx3CFEsU2TKDXPh9jyr4S0/i0ObJqcdJuJzIFbQ4mJu2N3FTIpP rHBAJ0hcgHcsgBMauGDeS9OykwgYVmXqKDcwDxyfm8ufCns= -----END CERTIFICATE-----Generated at Wed Nov 5 04:22:20 2025 by rpki-client