$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCCC/My0zXIieF3D9j9mVxKoDdL6cvfU.roa File: My0zXIieF3D9j9mVxKoDdL6cvfU.roa (raw, json) Hash identifier: VrUsKrdLk/giR9/uJD99OO+b1k+N2HEE+D5BISdRXkA= Subject key identifier: 33:2D:33:5C:88:9E:17:70:FD:8F:D9:95:C4:AA:03:74:BE:9C:BD:F5 Certificate issuer: /CN=07E36A3D219A8AFC84F88B30553E638CE6C2CECE Certificate serial: 01EC Authority key identifier: 07:E3:6A:3D:21:9A:8A:FC:84:F8:8B:30:55:3E:63:8C:E6:C2:CE:CE Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/B-NqPSGaivyE-IswVT5jjObCzs4.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCCC/My0zXIieF3D9j9mVxKoDdL6cvfU.roa Signing time: Fri 22 Aug 2025 09:01:27 +0000 ROA not before: Fri 22 Aug 2025 09:01:27 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 19551 IP address blocks: 157.20.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCCC/B-NqPSGaivyE-IswVT5jjObCzs4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCCC/B-NqPSGaivyE-IswVT5jjObCzs4.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/B-NqPSGaivyE-IswVT5jjObCzs4.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 10:46:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 492 (0x1ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07E36A3D219A8AFC84F88B30553E638CE6C2CECE Validity Not Before: Aug 22 09:01:27 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=332D335C889E1770FD8FD995C4AA0374BE9CBDF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d0:2c:ad:ca:ec:d9:8d:ac:34:49:7a:ac:66: 0f:2c:cd:3d:9c:34:0a:64:04:af:42:72:9f:a4:ff: 8e:59:65:73:f5:3a:52:1e:73:6a:c1:f8:5b:f3:d4: 89:f7:7c:cc:35:b4:32:36:fa:f6:8f:23:7b:b3:f8: 47:db:cc:37:99:5f:5e:a4:fa:bd:ab:84:c0:56:38: 01:70:3b:24:05:07:16:b8:5d:36:39:72:e6:be:16: eb:bf:76:63:e0:72:a7:70:2e:38:37:62:aa:c0:f9: 19:e2:03:ac:d4:53:68:59:86:8a:fb:e8:30:18:a7: 99:75:63:92:2e:36:25:8f:68:39:b4:8a:6e:e6:f9: 27:60:20:4b:28:f1:52:a1:97:ca:00:8d:58:82:c3: c0:b4:d3:90:ad:9e:07:30:14:c3:5f:f1:15:2d:ef: 96:16:ab:2e:82:db:d0:b7:23:f4:a8:2a:66:c5:2a: d4:d4:52:05:37:a5:bf:24:d1:26:73:8f:7c:07:a3: 41:74:ce:71:88:6e:12:a1:0b:37:e6:0a:59:88:37: 36:9b:85:05:3d:76:9e:12:1a:56:67:0d:2d:40:52: d1:78:01:4d:c6:02:c3:83:3c:ce:f8:01:99:1e:9d: 6d:9a:4b:ab:cc:54:ab:cb:2f:79:93:f5:db:e9:eb: 9e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:2D:33:5C:88:9E:17:70:FD:8F:D9:95:C4:AA:03:74:BE:9C:BD:F5 X509v3 Authority Key Identifier: keyid:07:E3:6A:3D:21:9A:8A:FC:84:F8:8B:30:55:3E:63:8C:E6:C2:CE:CE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCCC/B-NqPSGaivyE-IswVT5jjObCzs4.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/B-NqPSGaivyE-IswVT5jjObCzs4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCCC/My0zXIieF3D9j9mVxKoDdL6cvfU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.20.107.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:f9:67:f2:93:ee:8c:de:ce:72:06:9c:26:4d:44:58:73:9e: 04:f4:55:80:ec:0a:25:9e:83:08:83:2f:89:58:6e:9e:c3:0f: ae:e5:83:c7:de:f0:65:f6:b6:9f:12:ea:98:e7:c0:36:4f:17: 57:2b:92:19:b3:24:1b:a4:a0:16:79:72:41:7d:81:64:65:cb: a5:12:fa:a4:41:02:70:9d:4e:6f:67:eb:51:00:2a:31:4e:21: 11:6e:43:78:36:1f:1a:a4:c3:3b:d5:b4:5c:25:07:57:5f:09: af:c1:c0:88:9f:1e:81:3a:4a:fc:71:4f:2e:5c:5f:78:8d:99: eb:17:a2:4f:9c:9d:16:5e:11:6c:b0:1d:87:1b:8f:d7:80:6f: bb:c5:c4:1d:7a:6d:4a:2b:c2:56:6c:6d:10:76:e4:7c:c5:3a: 0f:4f:44:31:e8:49:e6:b2:86:ee:de:07:03:3c:b3:5f:3d:92: 8d:3e:4f:de:ae:2c:b2:71:01:ba:53:86:7f:01:e5:dc:d4:c4: 81:3b:88:ef:47:1f:46:3d:50:c9:70:81:a4:d5:36:ae:79:2f: 11:a6:f9:ab:40:4c:25:0e:d0:d4:27:b4:4a:2c:71:94:f3:88: a7:8d:44:63:9a:45:8f:ae:b2:85:b8:0b:4b:52:f3:7b:a4:2c: ab:4e:c0:b7 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICAewwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDdF MzZBM0QyMTlBOEFGQzg0Rjg4QjMwNTUzRTYzOENFNkMyQ0VDRTAeFw0yNTA4MjIw OTAxMjdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDMzMkQzMzVDODg5RTE3 NzBGRDhGRDk5NUM0QUEwMzc0QkU5Q0JERjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCw0CytyuzZjaw0SXqsZg8szT2cNApkBK9Ccp+k/45ZZXP1OlIe c2rB+Fvz1In3fMw1tDI2+vaPI3uz+EfbzDeZX16k+r2rhMBWOAFwOyQFBxa4XTY5 cua+Fuu/dmPgcqdwLjg3YqrA+RniA6zUU2hZhor76DAYp5l1Y5IuNiWPaDm0im7m +SdgIEso8VKhl8oAjViCw8C005CtngcwFMNf8RUt75YWqy6C29C3I/SoKmbFKtTU UgU3pb8k0SZzj3wHo0F0znGIbhKhCzfmClmINzabhQU9dp4SGlZnDS1AUtF4AU3G AsODPM74AZkenW2aS6vMVKvLL3mT9dvp656dAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUMy0zXIieF3D9j9mVxKoDdL6cvfUwHwYDVR0jBBgwFoAUB+NqPSGaivyE+Isw VT5jjObCzs4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNDQy9C LU5xUFNHYWl2eUUtSXN3VlQ1ampPYkN6czQuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0ItTnFQU0dhaXZ5RS1Jc3dWVDVqak9iQ3pzNC5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DQ0MvTXkwelhJaWVGM0Q5ajltVnhLb0Rk TDZjdmZVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ0UazAN BgkqhkiG9w0BAQsFAAOCAQEAHvln8pPujN7OcgacJk1EWHOeBPRVgOwKJZ6DCIMv iVhunsMPruWDx97wZfa2nxLqmOfANk8XVyuSGbMkG6SgFnlyQX2BZGXLpRL6pEEC cJ1Ob2frUQAqMU4hEW5DeDYfGqTDO9W0XCUHV18Jr8HAiJ8egTpK/HFPLlxfeI2Z 6xeiT5ydFl4RbLAdhxuP14Bvu8XEHXptSivCVmxtEHbkfMU6D09EMehJ5rKG7t4H AzyzXz2SjT5P3q4ssnEBulOGfwHl3NTEgTuI70cfRj1QyXCBpNU2rnkvEab5q0BM JQ7Q1Ce0SixxlPOIp41EY5pFj66yhbgLS1Lze6Qsq07Atw== -----END CERTIFICATE-----Generated at Sat Sep 6 09:00:46 2025 by rpki-client