$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/xxZgbpdKqnkiMrG6lxWOBUBA3QY.roa File: xxZgbpdKqnkiMrG6lxWOBUBA3QY.roa (raw, json) Hash identifier: P+cbtwbGZk4APv/6GbbZuO7O0qK/a7oRZKaU/6AbCao= Subject key identifier: C7:16:60:6E:97:4A:AA:79:22:32:B1:BA:97:15:8E:05:40:40:DD:06 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1A1B Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/xxZgbpdKqnkiMrG6lxWOBUBA3QY.roa Signing time: Fri 22 Aug 2025 08:53:44 +0000 ROA not before: Fri 22 Aug 2025 08:53:44 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9919 IP address blocks: 218.32.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 06:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6683 (0x1a1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 22 08:53:44 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=C716606E974AAA792232B1BA97158E054040DD06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:04:f7:9b:16:1d:7a:17:3e:3c:a8:c1:33:8e: 24:5e:79:15:0d:66:ea:2b:87:55:db:6b:e4:8e:06: 41:7f:b4:bd:eb:ba:d8:c1:a9:ba:4d:fe:c7:da:5f: 2f:c3:dd:7c:63:c1:4a:82:db:f6:53:aa:7f:3b:97: be:fa:1c:4c:1e:87:fd:5f:1a:7d:a7:7a:3e:de:13: f6:aa:e8:2d:6b:55:12:df:2a:6d:ed:a6:b3:47:77: 73:a3:e9:2c:15:89:42:48:4c:2e:89:fb:57:2c:5f: 77:a8:a9:bd:1b:2f:51:db:57:96:34:ab:3a:e0:fb: 7b:f2:71:4a:4c:cb:b3:af:44:b9:90:a2:18:3b:6f: 63:62:5a:cc:f2:9b:4b:43:51:72:81:29:15:c4:cc: 74:6a:b5:9c:41:c2:a7:35:d8:06:45:2a:b9:52:8c: 75:ab:2a:f9:d3:42:e3:33:72:e6:83:c0:7c:b5:d5: 5b:d3:86:10:37:27:22:34:43:6f:d4:33:8b:8d:d6: f2:11:5e:56:27:50:fe:33:f7:16:b2:40:9a:8e:88: 8c:22:06:92:2e:90:e3:82:1a:7c:4d:13:5a:e6:db: cb:23:ab:f1:4e:81:51:29:7f:c4:85:a7:66:ed:12: 32:57:7e:f5:e6:a9:71:a4:14:33:b1:16:90:64:da: 5a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:16:60:6E:97:4A:AA:79:22:32:B1:BA:97:15:8E:05:40:40:DD:06 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/xxZgbpdKqnkiMrG6lxWOBUBA3QY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 218.32.0.0/16 Signature Algorithm: sha256WithRSAEncryption 8c:de:08:93:8a:ee:b5:69:f7:90:fb:ac:8d:26:eb:09:67:b8: 16:fd:9c:b0:4f:ff:5a:62:65:b5:7e:4f:05:ff:e6:c5:a9:4d: 23:64:88:b7:f5:71:d4:23:0b:19:8a:90:99:df:ef:cb:3e:ba: 0c:b6:5c:59:35:fe:18:ba:c9:a0:f4:2d:7d:39:77:2e:5b:d6: 41:7a:b8:42:4d:c1:1f:6b:3b:3e:77:49:01:4e:8e:d4:44:6f: 51:65:3c:ae:95:a3:95:3a:2e:26:c6:8b:8c:f0:a8:5f:c7:bc: 80:8f:b2:c5:53:d0:1b:47:35:b3:f1:0e:8a:a1:9f:a3:c3:71: a4:ca:6a:bf:7c:69:19:1a:19:c9:d0:94:f8:3d:70:50:4b:3a: b7:0d:c2:1b:09:22:64:0f:86:f2:c1:71:bd:52:d3:cc:5c:e0: 04:a9:83:73:74:70:86:fc:06:db:46:5f:c0:0c:6c:1a:36:c5: ef:f8:0d:64:6c:e0:49:9a:27:dd:9b:55:0b:01:91:f6:2e:6c: f0:90:5b:28:cd:75:16:c5:e1:e7:1e:3b:25:ca:bb:45:92:82: db:86:34:fb:03:3b:cb:f4:b0:85:cc:e7:46:a1:17:c5:c4:63: 6a:12:f7:14:a5:02:5a:5d:3c:be:12:75:ab:82:5e:4a:96:2f: 64:72:1f:2f -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICGhswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4MjIw ODUzNDRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEM3MTY2MDZFOTc0QUFB NzkyMjMyQjFCQTk3MTU4RTA1NDA0MEREMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRBPebFh16Fz48qMEzjiReeRUNZuorh1Xba+SOBkF/tL3rutjB qbpN/sfaXy/D3XxjwUqC2/ZTqn87l776HEweh/1fGn2nej7eE/aq6C1rVRLfKm3t prNHd3Oj6SwViUJITC6J+1csX3eoqb0bL1HbV5Y0qzrg+3vycUpMy7OvRLmQohg7 b2NiWszym0tDUXKBKRXEzHRqtZxBwqc12AZFKrlSjHWrKvnTQuMzcuaDwHy11VvT hhA3JyI0Q2/UM4uN1vIRXlYnUP4z9xayQJqOiIwiBpIukOOCGnxNE1rm28sjq/FO gVEpf8SFp2btEjJXfvXmqXGkFDOxFpBk2loDAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQUxxZgbpdKqnkiMrG6lxWOBUBA3QYwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMveHhaZ2JwZEtxbmtpTXJHNmx4V09C VUJBM1FZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDANogMA0G CSqGSIb3DQEBCwUAA4IBAQCM3giTiu61afeQ+6yNJusJZ7gW/ZywT/9aYmW1fk8F /+bFqU0jZIi39XHUIwsZipCZ3+/LProMtlxZNf4Yusmg9C19OXcuW9ZBerhCTcEf azs+d0kBTo7URG9RZTyulaOVOi4mxouM8Khfx7yAj7LFU9AbRzWz8Q6KoZ+jw3Gk ymq/fGkZGhnJ0JT4PXBQSzq3DcIbCSJkD4bywXG9UtPMXOAEqYNzdHCG/AbbRl/A DGwaNsXv+A1kbOBJmifdm1ULAZH2LmzwkFsozXUWxeHnHjslyrtFkoLbhjT7AzvL 9LCFzOdGoRfFxGNqEvcUpQJaXTy+EnWrgl5Kli9kch8v -----END CERTIFICATE-----Generated at Wed Nov 5 06:21:01 2025 by rpki-client