$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/t14bab5zNdH-ePqNNtbp1Ta2eYc.roa File: t14bab5zNdH-ePqNNtbp1Ta2eYc.roa (raw, json) Hash identifier: X3MuGhf7JEwM6s8yuUr+tCU7FXUN/7ZX2k9SFXw52wU= Subject key identifier: B7:5E:1B:69:BE:73:35:D1:FE:78:FA:8D:36:D6:E9:D5:36:B6:79:87 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1979 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/t14bab5zNdH-ePqNNtbp1Ta2eYc.roa Signing time: Fri 22 Aug 2025 08:53:01 +0000 ROA not before: Fri 22 Aug 2025 08:53:01 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131627 IP address blocks: 106.105.108.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6521 (0x1979) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 22 08:53:01 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=B75E1B69BE7335D1FE78FA8D36D6E9D536B67987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e1:3e:b0:47:8d:09:fc:b6:01:d9:8d:e9:33: f0:46:5a:45:1f:af:ff:ab:49:51:a6:c6:c7:60:64: 1a:5f:c8:4d:97:ab:3f:ca:8e:c0:aa:64:d2:f7:53: 2f:f8:71:e7:f6:e6:ed:a0:3c:8e:fc:f7:c1:eb:e8: 60:10:13:33:36:7a:12:ec:26:3d:73:33:2c:46:ab: 4f:0d:04:30:f1:c2:6a:b1:a6:e4:1e:fc:f1:f5:8d: 01:3c:3b:77:60:c7:c4:bb:af:5b:13:88:74:54:f5: 36:91:ca:0a:15:d8:d7:48:11:95:00:4c:bd:09:ff: ab:79:17:3a:8a:5e:c5:70:71:cf:f3:c5:2c:2f:48: 2d:d3:e6:6f:23:63:10:05:2c:be:9e:bc:61:e2:b4: d1:8f:53:b3:42:0d:1b:d8:86:2a:f3:76:49:21:80: 7c:9f:ee:cc:84:4a:17:97:a9:20:96:a0:a8:6b:6a: 76:30:db:a5:18:b1:87:74:c9:4d:93:70:43:b9:0f: 12:e5:45:bd:2c:46:bc:7c:28:31:75:30:e4:b8:d9: 28:fd:4f:95:ac:b1:25:73:7f:1b:7a:27:b9:08:9b: 67:13:91:96:4f:c3:5e:96:dc:ff:12:d0:8b:8a:2b: f3:77:a7:3c:40:68:ae:f3:66:90:5d:2b:f7:f6:27: 67:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:5E:1B:69:BE:73:35:D1:FE:78:FA:8D:36:D6:E9:D5:36:B6:79:87 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/t14bab5zNdH-ePqNNtbp1Ta2eYc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.105.108.0/23 Signature Algorithm: sha256WithRSAEncryption 25:67:d0:28:a2:0d:57:a0:27:fd:7c:4a:0b:47:34:75:24:51: 21:3a:7d:cc:83:56:af:96:2c:27:da:92:c1:7d:c9:41:02:2e: 6d:94:e1:f8:39:ac:25:99:b1:b4:9e:ec:0a:a8:0f:84:15:3b: 80:3a:b9:d6:ce:52:54:db:5d:15:03:6b:df:27:58:d8:d4:1a: 31:a5:0c:dd:25:e4:3f:c0:4a:91:1a:b9:f8:4e:05:16:05:40: 2f:f4:d1:31:84:43:28:36:9f:9b:47:d6:74:8b:63:82:09:e1: 9d:6b:2a:ad:df:dc:88:e4:5e:de:8c:01:3c:fb:2d:59:43:08: d8:17:09:cd:3d:4f:a1:9b:e6:2c:ec:f9:31:66:ee:98:ca:0f: 9f:89:30:ba:9c:27:7a:f9:17:0f:5b:dd:d3:42:ae:5a:d4:6a: 6c:20:60:bd:a1:f7:ec:e5:ae:ee:31:7d:c5:f1:5c:0c:df:90: cc:e8:05:87:71:48:82:e7:9e:46:36:0d:cd:87:22:48:a9:91: 6a:dc:82:09:bc:b2:81:db:2b:91:e7:90:b2:20:60:70:e8:ea: 20:c6:19:a6:67:31:fa:5c:3d:50:84:2b:b0:31:3e:e9:5a:f6: 45:9b:18:21:3c:ec:b4:b0:6e:f7:5a:7e:60:16:41:fe:62:d6: 25:df:e9:08 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICGXkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4MjIw ODUzMDFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEI3NUUxQjY5QkU3MzM1 RDFGRTc4RkE4RDM2RDZFOUQ1MzZCNjc5ODcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDg4T6wR40J/LYB2Y3pM/BGWkUfr/+rSVGmxsdgZBpfyE2Xqz/K jsCqZNL3Uy/4cef25u2gPI7898Hr6GAQEzM2ehLsJj1zMyxGq08NBDDxwmqxpuQe /PH1jQE8O3dgx8S7r1sTiHRU9TaRygoV2NdIEZUATL0J/6t5FzqKXsVwcc/zxSwv SC3T5m8jYxAFLL6evGHitNGPU7NCDRvYhirzdkkhgHyf7syESheXqSCWoKhranYw 26UYsYd0yU2TcEO5DxLlRb0sRrx8KDF1MOS42Sj9T5WssSVzfxt6J7kIm2cTkZZP w16W3P8S0IuKK/N3pzxAaK7zZpBdK/f2J2ctAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUt14bab5zNdH+ePqNNtbp1Ta2eYcwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvdDE0YmFiNXpOZEgtZVBxTk50YnAx VGEyZVljLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWppbDAN BgkqhkiG9w0BAQsFAAOCAQEAJWfQKKINV6An/XxKC0c0dSRRITp9zINWr5YsJ9qS wX3JQQIubZTh+DmsJZmxtJ7sCqgPhBU7gDq51s5SVNtdFQNr3ydY2NQaMaUM3SXk P8BKkRq5+E4FFgVAL/TRMYRDKDafm0fWdItjggnhnWsqrd/ciORe3owBPPstWUMI 2BcJzT1PoZvmLOz5MWbumMoPn4kwupwnevkXD1vd00KuWtRqbCBgvaH37OWu7jF9 xfFcDN+QzOgFh3FIgueeRjYNzYciSKmRatyCCbyygdsrkeeQsiBgcOjqIMYZpmcx +lw9UIQrsDE+6Vr2RZsYITzstLBu91p+YBZB/mLWJd/pCA== -----END CERTIFICATE-----Generated at Wed Nov 5 20:44:59 2025 by rpki-client