$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/3tl-IGWnRglllbQymIVheY5k0XY.roa File: 3tl-IGWnRglllbQymIVheY5k0XY.roa (raw, json) Hash identifier: 7jvZQoMSfdperf/S8ARawORIhFxgZnNhOll0zbuSZnU= Subject key identifier: DE:D9:7E:20:65:A7:46:09:65:95:B4:32:98:85:61:79:8E:64:D1:76 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 19EB Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/3tl-IGWnRglllbQymIVheY5k0XY.roa Signing time: Fri 22 Aug 2025 08:53:31 +0000 ROA not before: Fri 22 Aug 2025 08:53:31 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 4780 IP address blocks: 175.180.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 14:46:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6635 (0x19eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 22 08:53:31 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=DED97E2065A746096595B432988561798E64D176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:87:89:f2:21:4a:9e:f8:d1:90:2d:ab:db:64: 05:23:d5:e7:0d:10:e7:48:2f:a9:0a:31:d6:dc:f8: fd:78:72:5c:c1:23:0f:a0:a5:0b:a4:fa:f4:f4:a8: df:04:19:4e:16:b9:b0:c8:84:2b:3f:3d:ee:01:70: d3:31:f0:59:59:6e:33:23:58:1d:22:3c:a1:e2:b7: 68:c5:22:56:2c:90:8a:cf:f9:2d:d2:14:10:8e:b9: 90:43:0d:74:26:f6:7b:88:15:b1:d2:e7:bf:a7:40: a4:73:d6:61:43:47:f8:55:56:32:3a:d6:5b:7d:85: 5a:c3:80:68:a0:4f:39:2e:10:eb:3a:4f:88:8d:29: 68:f8:33:cf:b3:a6:43:a7:d6:b7:cc:7d:ca:2a:9c: 17:90:65:fa:84:d2:d5:dd:2b:e0:60:4b:7a:db:05: 5b:60:a0:05:ea:ea:e3:ec:60:39:50:6b:6c:36:27: 51:54:2a:f8:e3:4e:3b:cb:e4:05:88:dc:6c:3f:d5: a5:57:40:61:1b:7a:af:ca:e8:3c:a7:83:d8:79:f3: 4b:ca:df:44:bb:90:d1:68:34:19:06:51:5d:9a:b2: 96:96:cc:af:24:e4:99:c9:57:c5:f7:a3:47:25:20: 7d:ec:2a:e7:81:c1:74:3c:d6:8b:4b:5e:ed:1a:bc: 6d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:D9:7E:20:65:A7:46:09:65:95:B4:32:98:85:61:79:8E:64:D1:76 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/3tl-IGWnRglllbQymIVheY5k0XY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 175.180.0.0/14 Signature Algorithm: sha256WithRSAEncryption 1b:0a:16:9a:03:c4:8c:12:71:ad:bc:e3:1b:3e:41:0b:08:cb: 59:5a:79:e9:83:3a:8a:a6:b1:3c:37:08:53:43:2b:7a:40:c6: 45:8b:7e:32:1e:a7:86:ab:f9:e0:a5:06:31:35:89:86:49:7f: 9d:4c:61:6b:59:e5:07:34:8a:0f:32:18:35:7f:ba:f9:5e:7f: 7a:37:9b:05:2c:68:76:32:b0:75:2f:01:92:d3:dd:b5:7c:8b: d2:4a:1e:7b:e5:01:fe:61:d3:d3:f3:70:07:d9:64:b5:c9:38: fc:d3:0d:bc:54:07:7c:eb:4d:30:05:a9:dd:1c:92:a0:fc:43: 45:57:33:cf:f8:07:21:5f:24:87:ed:b2:de:1a:bd:58:39:2e: dc:0d:4f:98:29:01:7c:30:c6:7d:34:3c:92:2a:e8:f1:01:ed: 4d:09:db:2c:c8:aa:5a:e7:7f:8c:76:10:19:07:32:c3:10:55: 5f:71:54:2f:2f:ca:f2:62:6b:af:da:fd:ad:41:6c:1e:13:1a: 16:65:dc:5e:63:4f:e1:e9:03:06:16:35:26:d3:4a:fa:91:32: 25:3c:43:af:64:e6:1e:90:ac:24:a4:e5:93:c8:07:c1:ce:bb: 42:d4:e0:9b:f3:85:55:50:29:b8:ec:9c:4f:1c:4c:8d:8f:3c: d0:64:e2:4a -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICGeswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4MjIw ODUzMzFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKERFRDk3RTIwNjVBNzQ2 MDk2NTk1QjQzMjk4ODU2MTc5OEU2NEQxNzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCdh4nyIUqe+NGQLavbZAUj1ecNEOdIL6kKMdbc+P14clzBIw+g pQuk+vT0qN8EGU4WubDIhCs/Pe4BcNMx8FlZbjMjWB0iPKHit2jFIlYskIrP+S3S FBCOuZBDDXQm9nuIFbHS57+nQKRz1mFDR/hVVjI61lt9hVrDgGigTzkuEOs6T4iN KWj4M8+zpkOn1rfMfcoqnBeQZfqE0tXdK+BgS3rbBVtgoAXq6uPsYDlQa2w2J1FU KvjjTjvL5AWI3Gw/1aVXQGEbeq/K6Dyng9h580vK30S7kNFoNBkGUV2aspaWzK8k 5JnJV8X3o0clIH3sKueBwXQ81otLXu0avG0vAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQU3tl+IGWnRglllbQymIVheY5k0XYwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvM3RsLUlHV25SZ2xsbGJReW1JVmhl WTVrMFhZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAq+0MA0G CSqGSIb3DQEBCwUAA4IBAQAbChaaA8SMEnGtvOMbPkELCMtZWnnpgzqKprE8NwhT Qyt6QMZFi34yHqeGq/ngpQYxNYmGSX+dTGFrWeUHNIoPMhg1f7r5Xn96N5sFLGh2 MrB1LwGS0921fIvSSh575QH+YdPT83AH2WS1yTj80w28VAd8600wBandHJKg/ENF VzPP+AchXySH7bLeGr1YOS7cDU+YKQF8MMZ9NDySKujxAe1NCdssyKpa53+MdhAZ BzLDEFVfcVQvL8ryYmuv2v2tQWweExoWZdxeY0/h6QMGFjUm00r6kTIlPEOvZOYe kKwkpOWTyAfBzrtC1OCb84VVUCm47JxPHEyNjzzQZOJK -----END CERTIFICATE-----Generated at Sat Sep 6 12:07:56 2025 by rpki-client