$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCCC/l1pu3hTkFCmjbo5gb8W6XOmoK8E.roa File: l1pu3hTkFCmjbo5gb8W6XOmoK8E.roa (raw, json) Hash identifier: e4eV2Nb889fQiL/g4tIEGDjW5VHD6NglheDZ9QFyKJU= Subject key identifier: 97:5A:6E:DE:14:E4:14:29:A3:6E:8E:60:6F:C5:BA:5C:E9:A8:2B:C1 Certificate issuer: /CN=07E36A3D219A8AFC84F88B30553E638CE6C2CECE Certificate serial: 01F0 Authority key identifier: 07:E3:6A:3D:21:9A:8A:FC:84:F8:8B:30:55:3E:63:8C:E6:C2:CE:CE Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/B-NqPSGaivyE-IswVT5jjObCzs4.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCCC/l1pu3hTkFCmjbo5gb8W6XOmoK8E.roa Signing time: Fri 22 Aug 2025 09:01:27 +0000 ROA not before: Fri 22 Aug 2025 09:01:27 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 150772 IP address blocks: 157.20.106.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCCC/B-NqPSGaivyE-IswVT5jjObCzs4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCCC/B-NqPSGaivyE-IswVT5jjObCzs4.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/B-NqPSGaivyE-IswVT5jjObCzs4.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 09:56:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 496 (0x1f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07E36A3D219A8AFC84F88B30553E638CE6C2CECE Validity Not Before: Aug 22 09:01:27 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=975A6EDE14E41429A36E8E606FC5BA5CE9A82BC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:52:fb:06:7f:55:d0:0e:25:a0:04:7b:da:29: 4e:df:38:b3:24:73:5d:bb:7b:9d:9c:f0:bf:c9:d9: 35:48:ce:3d:ed:ff:04:18:01:ab:72:17:08:6e:79: 62:36:f3:4a:dd:e4:9a:86:94:40:42:4f:18:86:c0: 0c:88:ef:31:ba:b6:25:c7:f7:34:42:1b:16:31:c7: bd:66:0c:9a:bf:2d:75:3f:eb:4c:4a:e8:c2:50:2b: 39:d9:62:b1:e7:c6:32:08:db:59:ae:10:78:a1:67: c6:a7:bb:88:c5:30:21:29:53:9a:eb:80:6c:72:3c: 50:57:5c:66:50:49:94:37:f8:2a:b3:48:0e:a9:2b: c4:bb:e9:97:66:e9:b9:63:f0:fb:32:d2:84:44:37: 93:d7:da:c0:f7:f5:99:b7:30:a7:b6:df:c4:ea:01: 07:31:d6:43:54:4d:82:59:59:f0:ee:e8:d4:af:e7: 86:40:34:06:ce:3f:55:92:a8:a4:fd:a0:fa:8e:d5: f0:cf:6a:43:18:52:52:a3:20:fd:d3:55:28:0d:ff: 31:8c:b9:03:b4:77:fc:95:17:e9:c6:65:23:3a:3e: 82:6d:51:7f:96:4a:33:55:c7:83:a4:4d:ad:2b:2d: 80:7c:99:ef:40:d1:f7:a1:25:ae:87:d2:a5:5c:c3: e4:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:5A:6E:DE:14:E4:14:29:A3:6E:8E:60:6F:C5:BA:5C:E9:A8:2B:C1 X509v3 Authority Key Identifier: keyid:07:E3:6A:3D:21:9A:8A:FC:84:F8:8B:30:55:3E:63:8C:E6:C2:CE:CE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCCC/B-NqPSGaivyE-IswVT5jjObCzs4.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/B-NqPSGaivyE-IswVT5jjObCzs4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCCC/l1pu3hTkFCmjbo5gb8W6XOmoK8E.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.20.106.0/23 Signature Algorithm: sha256WithRSAEncryption 23:ef:cf:9f:4a:96:03:53:f5:45:77:62:18:18:bd:02:1f:f4: 8e:d8:5e:3f:bd:39:0b:84:a3:7a:6f:dc:f1:9e:d8:57:6a:83: 68:e3:4d:cc:d1:4d:13:3c:ae:cd:db:33:da:24:df:be:34:a4: 70:ee:7e:4e:3b:9a:d0:91:7c:0c:e9:30:c0:46:e2:2c:eb:5d: 38:a7:21:0b:60:e1:27:d6:44:7c:d4:3c:28:6f:1e:da:f6:e6: a8:28:ef:04:bb:7e:06:d8:ef:f3:b4:e7:6d:86:06:2e:b6:bb: d8:46:b2:bc:23:8d:8e:a3:bd:c7:91:5a:c3:f6:3e:c1:c0:cd: 87:65:7a:02:11:42:dd:87:b7:55:54:c3:d2:ee:72:b4:cb:43: 7c:9a:f5:be:d1:8e:e9:e1:71:be:7d:37:d1:92:25:31:1c:7e: d1:42:29:e1:7f:92:b1:bd:c3:6c:77:39:92:e7:36:c8:20:fa: 98:cf:a5:9c:49:46:dd:51:6e:e0:12:74:d7:45:cd:71:9e:5e: 18:fd:42:47:37:17:a1:69:4a:5b:b1:e8:4b:34:52:a6:62:75: 75:28:74:2f:09:1b:e2:3b:39:83:6a:c1:0a:13:df:3a:e3:bd: 94:5c:3e:2e:2f:cf:d3:ac:83:42:d3:83:93:6c:94:f8:50:98: 4e:58:59:47 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICAfAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDdF MzZBM0QyMTlBOEFGQzg0Rjg4QjMwNTUzRTYzOENFNkMyQ0VDRTAeFw0yNTA4MjIw OTAxMjdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDk3NUE2RURFMTRFNDE0 MjlBMzZFOEU2MDZGQzVCQTVDRTlBODJCQzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQChUvsGf1XQDiWgBHvaKU7fOLMkc127e52c8L/J2TVIzj3t/wQY AatyFwhueWI280rd5JqGlEBCTxiGwAyI7zG6tiXH9zRCGxYxx71mDJq/LXU/60xK 6MJQKznZYrHnxjII21muEHihZ8anu4jFMCEpU5rrgGxyPFBXXGZQSZQ3+CqzSA6p K8S76Zdm6blj8Psy0oREN5PX2sD39Zm3MKe238TqAQcx1kNUTYJZWfDu6NSv54ZA NAbOP1WSqKT9oPqO1fDPakMYUlKjIP3TVSgN/zGMuQO0d/yVF+nGZSM6PoJtUX+W SjNVx4OkTa0rLYB8me9A0fehJa6H0qVcw+RPAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUl1pu3hTkFCmjbo5gb8W6XOmoK8EwHwYDVR0jBBgwFoAUB+NqPSGaivyE+Isw VT5jjObCzs4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNDQy9C LU5xUFNHYWl2eUUtSXN3VlQ1ampPYkN6czQuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0ItTnFQU0dhaXZ5RS1Jc3dWVDVqak9iQ3pzNC5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DQ0MvbDFwdTNoVGtGQ21qYm81Z2I4VzZY T21vSzhFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAZ0UajAN BgkqhkiG9w0BAQsFAAOCAQEAI+/Pn0qWA1P1RXdiGBi9Ah/0jtheP705C4Sjem/c 8Z7YV2qDaONNzNFNEzyuzdsz2iTfvjSkcO5+Tjua0JF8DOkwwEbiLOtdOKchC2Dh J9ZEfNQ8KG8e2vbmqCjvBLt+Btjv87TnbYYGLra72EayvCONjqO9x5Faw/Y+wcDN h2V6AhFC3Ye3VVTD0u5ytMtDfJr1vtGO6eFxvn030ZIlMRx+0UIp4X+Ssb3DbHc5 kuc2yCD6mM+lnElG3VFu4BJ010XNcZ5eGP1CRzcXoWlKW7HoSzRSpmJ1dSh0Lwkb 4js5g2rBChPfOuO9lFw+Li/P06yDQtODk2yU+FCYTlhZRw== -----END CERTIFICATE-----Generated at Fri Oct 24 06:45:44 2025 by rpki-client