$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/mziNQId17_dZyrcIJyTsYbg3kDQ.roa File: mziNQId17_dZyrcIJyTsYbg3kDQ.roa (raw, json) Hash identifier: PW0Ealx8Hyl5/qw+5Dkv6drz6MI65ZcpkkRxhNNI7zQ= Subject key identifier: 9B:38:8D:40:87:75:EF:F7:59:CA:B7:08:27:24:EC:61:B8:37:90:34 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1A42 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/mziNQId17_dZyrcIJyTsYbg3kDQ.roa Signing time: Fri 22 Aug 2025 08:53:53 +0000 ROA not before: Fri 22 Aug 2025 08:53:53 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131627 IP address blocks: 45.64.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 20:59:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6722 (0x1a42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 22 08:53:53 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=9B388D408775EFF759CAB7082724EC61B8379034 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:aa:90:20:8f:16:e0:05:fc:7f:85:21:97:a3: b6:cb:86:76:c6:a9:59:96:43:10:f7:c0:61:fd:bb: 30:ef:0a:0e:e9:f8:67:72:65:8e:6d:4f:a5:f9:b0: 2d:ca:b3:9d:3b:f4:c7:4b:14:23:41:32:7c:12:44: b1:38:9e:be:ae:73:7d:a5:7f:d7:90:95:b8:27:09: 36:5d:63:36:44:e7:c5:59:00:c2:d8:f4:04:15:ba: 3a:20:7b:fe:ec:b5:23:8d:bf:fe:ec:30:bb:65:f9: ff:0e:ca:58:d2:67:21:5c:9c:22:9e:e2:ec:6e:94: 0e:16:0a:64:c9:ce:51:bc:52:60:a8:f5:1c:91:d1: d3:1b:13:88:98:27:93:97:c2:b1:3a:7e:bc:3c:8d: 21:85:9b:69:62:1f:bf:96:97:a5:82:ba:95:48:de: 30:15:03:d6:f5:18:1f:a6:73:08:ee:93:d4:ea:77: 4b:b4:1c:b7:7e:dd:51:ad:6e:af:f9:c1:6f:2a:80: b0:30:85:59:ff:a2:53:36:37:e0:3d:b7:46:9a:db: 9a:bb:da:b3:80:91:1e:dd:0e:f6:76:4b:fc:67:73: 9f:e1:6e:a6:1f:b1:89:10:6f:dd:39:73:24:c9:3d: 5f:7c:31:8a:84:79:0b:d2:65:ff:29:64:dc:82:10: 43:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:38:8D:40:87:75:EF:F7:59:CA:B7:08:27:24:EC:61:B8:37:90:34 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/mziNQId17_dZyrcIJyTsYbg3kDQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.64.228.0/22 Signature Algorithm: sha256WithRSAEncryption 52:07:c9:bc:4f:79:42:20:08:99:2a:55:36:4e:02:7c:15:3a: 32:57:2f:9e:ed:d9:a1:f0:b3:10:b4:6c:7d:2c:96:d1:0d:1b: 2b:61:a1:9e:fa:fb:40:13:cf:bf:fa:6e:07:0a:f6:ce:b5:bd: 06:d1:6f:88:ba:49:95:67:03:f9:5b:b2:2a:36:5c:92:65:9d: 60:1d:7d:80:d8:61:3d:e2:d3:73:a0:fe:c0:a0:e9:ad:8f:77: 21:64:97:99:86:c2:06:c9:05:fc:a7:ba:84:3a:8b:ec:f5:e3: 12:ea:1e:84:f3:be:5f:ac:4e:2d:98:69:e5:9d:a6:62:8a:4a: 68:3b:ae:da:3f:a3:d2:1d:d7:40:f6:bc:3b:66:3d:f4:df:1a: 07:5d:b7:3a:22:d0:44:99:de:48:fc:4d:2d:a7:bc:a1:08:7e: d8:60:ce:52:60:06:7d:11:00:ce:58:d4:82:24:ba:2e:d8:3d: 93:6c:09:73:80:47:88:2c:39:9e:3f:09:10:e6:14:3f:63:e4: 2e:7e:86:e7:e3:ac:a9:14:e7:a0:48:bb:b0:82:8a:3e:92:7b: 64:5c:0d:59:a5:29:40:87:73:86:5c:58:a0:77:aa:2e:49:eb: 48:9d:3e:35:71:84:60:96:ec:57:be:64:af:18:93:b0:a4:df: 7c:75:b3:f3 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICGkIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4MjIw ODUzNTNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDlCMzg4RDQwODc3NUVG Rjc1OUNBQjcwODI3MjRFQzYxQjgzNzkwMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCfqpAgjxbgBfx/hSGXo7bLhnbGqVmWQxD3wGH9uzDvCg7p+Gdy ZY5tT6X5sC3Ks5079MdLFCNBMnwSRLE4nr6uc32lf9eQlbgnCTZdYzZE58VZAMLY 9AQVujoge/7stSONv/7sMLtl+f8OyljSZyFcnCKe4uxulA4WCmTJzlG8UmCo9RyR 0dMbE4iYJ5OXwrE6frw8jSGFm2liH7+Wl6WCupVI3jAVA9b1GB+mcwjuk9Tqd0u0 HLd+3VGtbq/5wW8qgLAwhVn/olM2N+A9t0aa25q72rOAkR7dDvZ2S/xnc5/hbqYf sYkQb905cyTJPV98MYqEeQvSZf8pZNyCEEMXAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUmziNQId17/dZyrcIJyTsYbg3kDQwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvbXppTlFJZDE3X2RaeXJjSUp5VHNZ Ymcza0RRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi1A5DAN BgkqhkiG9w0BAQsFAAOCAQEAUgfJvE95QiAImSpVNk4CfBU6Mlcvnu3ZofCzELRs fSyW0Q0bK2Ghnvr7QBPPv/puBwr2zrW9BtFviLpJlWcD+VuyKjZckmWdYB19gNhh PeLTc6D+wKDprY93IWSXmYbCBskF/Ke6hDqL7PXjEuoehPO+X6xOLZhp5Z2mYopK aDuu2j+j0h3XQPa8O2Y99N8aB123OiLQRJneSPxNLae8oQh+2GDOUmAGfREAzljU giS6Ltg9k2wJc4BHiCw5nj8JEOYUP2PkLn6G5+OsqRTnoEi7sIKKPpJ7ZFwNWaUp QIdzhlxYoHeqLknrSJ0+NXGEYJbsV75krxiTsKTffHWz8w== -----END CERTIFICATE-----Generated at Wed Nov 5 18:01:30 2025 by rpki-client