$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/35gQyjBCElTInjLTYT8_8locqgM.roa File: 35gQyjBCElTInjLTYT8_8locqgM.roa (raw, json) Hash identifier: G8Aa/zjTi/uVz0fP3exyZQ+giQ/zvTQJvgrbw/vbsaI= Subject key identifier: DF:98:10:CA:30:42:12:54:C8:9E:32:D3:61:3F:3F:F2:5A:1C:AA:03 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1AB3 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/35gQyjBCElTInjLTYT8_8locqgM.roa Signing time: Wed 27 Aug 2025 09:18:12 +0000 ROA not before: Wed 27 Aug 2025 09:18:12 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 4780 IP address blocks: 211.78.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 14:46:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6835 (0x1ab3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 27 09:18:12 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=DF9810CA30421254C89E32D3613F3FF25A1CAA03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:36:87:74:9a:1a:18:65:ca:75:7d:c4:12:0a: bf:d9:b8:01:50:11:30:cf:4a:19:99:5e:69:b7:61: 8b:d5:d0:1a:4a:a0:6a:92:ea:88:ea:5a:3b:89:a9: 8d:30:5a:1a:9c:42:51:fe:f6:2e:df:88:6a:73:e8: 4d:44:5c:43:d6:c7:ca:6b:36:df:da:14:1e:d5:e8: bb:b3:eb:8c:48:40:73:cb:c3:5e:0f:ba:c3:99:52: 37:63:28:fe:99:31:8e:7c:ad:f1:31:0c:3a:2f:0b: 0c:b8:9e:45:49:6b:37:3a:ca:cf:90:02:b8:5c:70: ca:63:81:cc:a3:ed:da:0e:30:c4:33:d9:29:d6:34: 7e:bb:37:fa:c2:2b:67:82:b3:94:81:0f:77:a3:87: 4b:7b:77:39:05:e5:36:79:55:e2:03:5d:42:e8:12: 36:6e:5e:11:f1:8d:1c:19:79:3b:fe:24:44:28:39: 98:2e:af:a6:a6:c8:30:f3:df:53:88:28:1a:53:2b: 2a:e5:0a:6d:cd:ca:ab:9c:55:f1:dd:7a:b4:87:0b: c5:f9:f1:9d:04:05:1f:cd:53:55:96:91:cc:65:09: 76:94:d6:c7:c5:3d:96:23:b8:fa:d8:94:cf:0f:5a: 26:6e:d3:76:df:3f:54:83:d0:6c:19:44:86:da:00: e2:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:98:10:CA:30:42:12:54:C8:9E:32:D3:61:3F:3F:F2:5A:1C:AA:03 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/35gQyjBCElTInjLTYT8_8locqgM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.78.24.0/21 Signature Algorithm: sha256WithRSAEncryption 3e:79:a8:c3:b3:dd:03:73:22:b7:a9:15:9d:e0:2c:1c:92:b5: 79:b5:cf:46:79:3a:ed:ac:e3:e0:5e:74:ef:99:ca:ed:7e:ce: 55:90:e1:64:6a:f4:b9:52:32:23:b1:d6:35:59:fe:6c:44:90: 91:7b:fc:23:54:31:5e:28:d4:59:a7:c8:b6:c5:ae:c1:71:a2: 09:3f:cf:9f:73:bd:54:66:12:c4:c0:6c:f7:5a:69:f1:09:27: 45:2b:af:5a:68:a9:e3:4b:fd:e7:8e:33:5e:38:b6:9e:6f:e0: 68:db:3e:4c:01:90:39:a3:03:22:39:4c:18:bd:cc:d4:c2:f8: 0b:2b:dc:bc:b9:3e:f0:da:28:d6:1c:aa:22:b5:40:42:5f:25: b1:b3:50:cc:cb:61:c1:a5:11:19:43:ee:57:5e:69:bc:f7:fc: d6:9d:01:f7:ee:91:d2:4e:d3:1b:66:a5:a1:08:f1:cf:60:d3: 11:06:0b:3e:18:ce:d9:47:08:6d:96:a3:58:45:62:7c:9b:7c: f7:ca:4a:bb:03:03:00:77:d9:1c:fd:d3:7d:e9:47:5c:d2:c2: ff:76:1a:db:b1:a2:d3:04:8f:f4:c4:55:d9:f7:0c:18:3e:19: 9c:58:6b:7e:df:61:02:12:76:a1:69:a2:b9:f5:c5:8e:28:18: 01:e5:5b:8e -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICGrMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4Mjcw OTE4MTJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKERGOTgxMENBMzA0MjEy NTRDODlFMzJEMzYxM0YzRkYyNUExQ0FBMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8Nod0mhoYZcp1fcQSCr/ZuAFQETDPShmZXmm3YYvV0BpKoGqS 6ojqWjuJqY0wWhqcQlH+9i7fiGpz6E1EXEPWx8prNt/aFB7V6Luz64xIQHPLw14P usOZUjdjKP6ZMY58rfExDDovCwy4nkVJazc6ys+QArhccMpjgcyj7doOMMQz2SnW NH67N/rCK2eCs5SBD3ejh0t7dzkF5TZ5VeIDXULoEjZuXhHxjRwZeTv+JEQoOZgu r6amyDDz31OIKBpTKyrlCm3NyqucVfHderSHC8X58Z0EBR/NU1WWkcxlCXaU1sfF PZYjuPrYlM8PWiZu03bfP1SD0GwZRIbaAOI1AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU35gQyjBCElTInjLTYT8/8locqgMwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvMzVnUXlqQkNFbFRJbmpMVFlUOF84 bG9jcWdNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA9NOGDAN BgkqhkiG9w0BAQsFAAOCAQEAPnmow7PdA3Mit6kVneAsHJK1ebXPRnk67azj4F50 75nK7X7OVZDhZGr0uVIyI7HWNVn+bESQkXv8I1QxXijUWafItsWuwXGiCT/Pn3O9 VGYSxMBs91pp8QknRSuvWmip40v9544zXji2nm/gaNs+TAGQOaMDIjlMGL3M1ML4 CyvcvLk+8Noo1hyqIrVAQl8lsbNQzMthwaURGUPuV15pvPf81p0B9+6R0k7TG2al oQjxz2DTEQYLPhjO2UcIbZajWEVifJt898pKuwMDAHfZHP3TfelHXNLC/3Ya27Gi 0wSP9MRV2fcMGD4ZnFhrft9hAhJ2oWmiufXFjigYAeVbjg== -----END CERTIFICATE-----Generated at Sat Sep 6 12:08:03 2025 by rpki-client