$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/3NbZQwxyWiYkxQ7NXQmGaFbOzG8.roa File: 3NbZQwxyWiYkxQ7NXQmGaFbOzG8.roa (raw, json) Hash identifier: eYDrN7Mk5nAhng7Y8WLgC66t2H+kjr48ZcbzlQbSHWY= Subject key identifier: DC:D6:D9:43:0C:72:5A:26:24:C5:0E:CD:5D:09:86:68:56:CE:CC:6F Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1980 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/3NbZQwxyWiYkxQ7NXQmGaFbOzG8.roa Signing time: Fri 22 Aug 2025 08:53:03 +0000 ROA not before: Fri 22 Aug 2025 08:53:03 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9919 IP address blocks: 122.146.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 03:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6528 (0x1980) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 22 08:53:03 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=DCD6D9430C725A2624C50ECD5D09866856CECC6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:eb:3a:4b:3c:7b:dc:60:c9:d7:68:a8:86:0b: 8d:ed:8b:d6:63:57:9a:e2:59:6d:43:99:2e:30:4d: 63:eb:39:3d:76:15:41:0c:76:34:b8:06:56:27:f8: aa:13:0e:0b:57:85:c9:f0:99:a4:84:4c:78:c9:a6: 0f:9d:9e:62:ad:43:d6:20:59:31:52:e3:7c:0d:80: 0e:f6:d1:04:1f:08:f7:6b:d0:de:53:e4:aa:d5:df: 66:02:c9:de:c5:43:d5:86:23:7b:81:4d:69:6a:43: c8:49:f4:67:48:61:cf:49:05:74:c1:3e:e1:a6:ce: c6:ad:8d:09:68:ea:1c:e4:ac:8a:7f:fc:76:0e:6f: f3:62:26:69:2b:d9:2b:9e:4b:6c:33:98:3b:14:86: d3:eb:37:f7:0b:5d:43:d4:93:9e:23:85:be:5c:89: 9a:e5:74:63:b6:0f:4a:7b:47:b9:63:1b:3b:11:12: 7d:e9:85:c3:80:f2:92:d8:d4:25:2d:45:40:69:51: 7b:74:36:7c:6f:0e:70:da:83:da:e8:f9:fe:8b:d6: aa:53:6d:36:7b:a4:27:99:c6:68:4a:a7:fe:c8:d4: c0:60:76:ab:28:b5:42:7d:93:7f:49:5e:f4:22:c2: e2:00:b1:57:48:b1:ee:40:5e:3c:02:bc:7c:d6:54: 25:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:D6:D9:43:0C:72:5A:26:24:C5:0E:CD:5D:09:86:68:56:CE:CC:6F X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/3NbZQwxyWiYkxQ7NXQmGaFbOzG8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.146.64.0/18 Signature Algorithm: sha256WithRSAEncryption 53:e7:93:11:59:60:1b:2b:01:7e:80:96:52:20:24:60:28:ae: ff:6e:62:4f:2b:33:e4:fc:b2:71:ae:0e:01:2e:3e:6c:f8:da: 5d:97:db:e2:cd:cf:a4:b4:82:cd:53:fa:08:7c:c4:ad:31:a2: 81:98:f2:37:2c:15:30:1e:43:46:9e:ba:01:06:0f:02:71:48: 65:31:54:01:69:ac:fd:8b:16:38:5f:cf:01:83:9d:ba:5f:27: 74:5f:f3:d7:d3:83:0d:48:53:38:34:5b:07:53:92:35:4b:3e: b3:fd:3a:ad:ff:0e:f4:a7:32:09:82:60:27:ea:5a:f9:7a:29: 02:39:b3:3d:ab:9c:97:d3:2c:59:75:15:28:df:33:7e:0c:62: 27:43:01:32:2c:ab:b8:9e:33:b4:68:68:4f:c2:98:08:6e:af: 32:e4:37:74:39:b9:44:1c:36:86:83:89:0e:50:d5:60:c3:96: 2d:a9:2b:96:37:a1:71:00:bd:65:7a:69:bb:bd:34:9c:c6:55: 84:b9:14:3b:a8:32:bf:67:d6:b2:c7:cf:0c:31:fc:58:af:46: b4:70:3b:59:2e:db:75:eb:91:4d:9e:27:c1:8a:61:0f:64:08: b1:16:5c:e9:56:95:cd:93:47:53:37:a0:ed:34:f1:30:13:f4: 27:8e:22:e2 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICGYAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4MjIw ODUzMDNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKERDRDZEOTQzMEM3MjVB MjYyNEM1MEVDRDVEMDk4NjY4NTZDRUNDNkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDR6zpLPHvcYMnXaKiGC43ti9ZjV5riWW1DmS4wTWPrOT12FUEM djS4BlYn+KoTDgtXhcnwmaSETHjJpg+dnmKtQ9YgWTFS43wNgA720QQfCPdr0N5T 5KrV32YCyd7FQ9WGI3uBTWlqQ8hJ9GdIYc9JBXTBPuGmzsatjQlo6hzkrIp//HYO b/NiJmkr2SueS2wzmDsUhtPrN/cLXUPUk54jhb5ciZrldGO2D0p7R7ljGzsREn3p hcOA8pLY1CUtRUBpUXt0NnxvDnDag9ro+f6L1qpTbTZ7pCeZxmhKp/7I1MBgdqso tUJ9k39JXvQiwuIAsVdIse5AXjwCvHzWVCVVAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU3NbZQwxyWiYkxQ7NXQmGaFbOzG8wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvM05iWlF3eHlXaVlreFE3TlhRbUdh RmJPekc4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBnqSQDAN BgkqhkiG9w0BAQsFAAOCAQEAU+eTEVlgGysBfoCWUiAkYCiu/25iTysz5Pyyca4O AS4+bPjaXZfb4s3PpLSCzVP6CHzErTGigZjyNywVMB5DRp66AQYPAnFIZTFUAWms /YsWOF/PAYOdul8ndF/z19ODDUhTODRbB1OSNUs+s/06rf8O9KcyCYJgJ+pa+Xop AjmzPaucl9MsWXUVKN8zfgxiJ0MBMiyruJ4ztGhoT8KYCG6vMuQ3dDm5RBw2hoOJ DlDVYMOWLakrljehcQC9ZXppu700nMZVhLkUO6gyv2fWssfPDDH8WK9GtHA7WS7b deuRTZ4nwYphD2QIsRZc6VaVzZNHUzeg7TTxMBP0J44i4g== -----END CERTIFICATE-----Generated at Sun Sep 7 23:34:15 2025 by rpki-client