$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/ujNk2F0WBTNWPThrpt8YtJwXS-Q.roa File: ujNk2F0WBTNWPThrpt8YtJwXS-Q.roa (raw, json) Hash identifier: nEtlyK47iJcMbmLLLUVNBsTjQyt2rL6Ro15rR9pLWEo= Subject key identifier: BA:33:64:D8:5D:16:05:33:56:3D:38:6B:A6:DF:18:B4:9C:17:4B:E4 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 196F Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ujNk2F0WBTNWPThrpt8YtJwXS-Q.roa Signing time: Fri 22 Aug 2025 08:52:59 +0000 ROA not before: Fri 22 Aug 2025 08:52:59 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131602 IP address blocks: 106.105.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 20:59:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6511 (0x196f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 22 08:52:59 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=BA3364D85D160533563D386BA6DF18B49C174BE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fe:81:7a:0a:ab:33:b9:fc:f3:bb:5e:b2:c7: e9:a5:24:49:96:8b:bb:e8:b0:d3:53:09:02:a2:ca: 5b:7f:2e:22:ce:7a:5c:41:51:1f:06:09:38:03:2c: af:4e:4a:ff:b8:25:ff:30:cd:d4:69:79:a4:42:69: ca:e7:05:04:8b:72:87:22:f2:23:1b:3e:d6:03:13: 5b:79:43:5e:31:d2:6c:fc:1a:6f:1d:7c:1d:87:ae: d7:0e:25:e4:cd:e2:18:96:bf:7f:79:92:c2:b6:22: 77:75:c8:39:12:97:2e:f1:46:fa:54:8a:dd:98:8a: 82:54:1d:af:af:37:36:90:06:0d:d0:26:a2:9c:bb: f5:bb:3a:c4:4c:33:19:70:14:49:6f:ad:39:38:37: 8f:13:a4:44:5f:7a:9e:4f:04:7d:c0:6e:e9:60:14: 56:8a:88:a5:9e:2f:1e:6c:e2:ee:ed:19:ea:b3:b4: 0b:e1:8d:05:5b:0b:85:65:dc:85:e4:e0:fa:b3:a6: ac:e4:8e:58:7a:31:9f:27:7d:e2:5a:6a:a2:7c:16: 0d:60:9a:28:70:36:63:57:d2:12:83:bc:2c:85:e6: ae:41:36:d3:98:1f:d0:60:ac:ee:d0:ca:83:f4:aa: b1:89:46:8e:51:00:73:04:ab:c3:e1:16:ad:d2:70: 4a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:33:64:D8:5D:16:05:33:56:3D:38:6B:A6:DF:18:B4:9C:17:4B:E4 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ujNk2F0WBTNWPThrpt8YtJwXS-Q.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.105.128.0/19 Signature Algorithm: sha256WithRSAEncryption 00:02:3f:c8:4c:05:f8:f5:f0:9f:cc:06:af:f5:59:6d:fd:f8: 9a:04:68:60:9c:df:c4:3f:a9:a1:41:42:98:5f:55:20:80:11: 07:a6:49:86:e2:85:c3:c9:0e:a3:b8:71:58:a3:c9:e5:0d:19: 41:b4:18:ea:b8:71:f6:bb:5a:90:de:28:dd:b4:8c:9e:1d:6a: 04:b7:5f:9e:db:8c:3a:fe:27:dd:b5:22:96:a7:82:5a:de:d7: f9:44:e8:d9:7c:57:9a:be:d7:6f:2d:e7:d0:6f:88:fe:46:d4: 44:06:fa:63:91:a9:1a:de:dd:88:2b:bb:d0:32:a1:12:13:7d: 9f:c7:43:25:c7:6a:8e:31:e1:5b:7b:04:66:7c:34:1c:cf:84: 0b:58:03:3e:3a:d5:0b:07:1b:c7:04:5a:fc:0b:1f:29:4d:8a: 2d:95:f8:4b:44:0b:17:10:45:66:1c:b9:0d:48:1a:4e:0a:5f: 54:e2:75:fe:f9:8d:54:68:9a:7a:59:d4:ba:f0:ee:25:fb:a6: 8c:4b:f1:fb:35:c1:1b:fd:24:a9:21:c3:f7:31:0c:bb:9a:20: ef:d1:54:30:9f:21:45:a9:d1:b4:e8:b2:d9:b8:62:df:2e:70: 7b:94:30:20:b4:78:06:84:2d:07:1d:d3:c4:ca:05:c3:a6:ae: 19:98:40:2e -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICGW8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4MjIw ODUyNTlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEJBMzM2NEQ4NUQxNjA1 MzM1NjNEMzg2QkE2REYxOEI0OUMxNzRCRTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCl/oF6Cqszufzzu16yx+mlJEmWi7vosNNTCQKiylt/LiLOelxB UR8GCTgDLK9OSv+4Jf8wzdRpeaRCacrnBQSLcoci8iMbPtYDE1t5Q14x0mz8Gm8d fB2HrtcOJeTN4hiWv395ksK2Ind1yDkSly7xRvpUit2YioJUHa+vNzaQBg3QJqKc u/W7OsRMMxlwFElvrTk4N48TpERfep5PBH3AbulgFFaKiKWeLx5s4u7tGeqztAvh jQVbC4Vl3IXk4Pqzpqzkjlh6MZ8nfeJaaqJ8Fg1gmihwNmNX0hKDvCyF5q5BNtOY H9BgrO7QyoP0qrGJRo5RAHMEq8PhFq3ScErlAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUujNk2F0WBTNWPThrpt8YtJwXS+QwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvdWpOazJGMFdCVE5XUFRocnB0OFl0 SndYUy1RLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBWppgDAN BgkqhkiG9w0BAQsFAAOCAQEAAAI/yEwF+PXwn8wGr/VZbf34mgRoYJzfxD+poUFC mF9VIIARB6ZJhuKFw8kOo7hxWKPJ5Q0ZQbQY6rhx9rtakN4o3bSMnh1qBLdfntuM Ov4n3bUilqeCWt7X+UTo2XxXmr7Xby3n0G+I/kbURAb6Y5GpGt7diCu70DKhEhN9 n8dDJcdqjjHhW3sEZnw0HM+EC1gDPjrVCwcbxwRa/AsfKU2KLZX4S0QLFxBFZhy5 DUgaTgpfVOJ1/vmNVGiaelnUuvDuJfumjEvx+zXBG/0kqSHD9zEMu5og79FUMJ8h RanRtOiy2bhi3y5we5QwILR4BoQtBx3TxMoFw6auGZhALg== -----END CERTIFICATE-----Generated at Wed Nov 5 18:01:33 2025 by rpki-client