$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/BBfUhwtpJw4PyL2d6KnRO9Fw5kU.roa File: BBfUhwtpJw4PyL2d6KnRO9Fw5kU.roa (raw, json) Hash identifier: 6856N8rwHPZefyg+ZeG3kxRmdsUF1nvPpT2XlH6lCtE= Subject key identifier: 04:17:D4:87:0B:69:27:0E:0F:C8:BD:9D:E8:A9:D1:3B:D1:70:E6:45 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1A24 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/BBfUhwtpJw4PyL2d6KnRO9Fw5kU.roa Signing time: Fri 22 Aug 2025 08:53:46 +0000 ROA not before: Fri 22 Aug 2025 08:53:46 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9919 IP address blocks: 203.190.16.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 03:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6692 (0x1a24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 22 08:53:46 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=0417D4870B69270E0FC8BD9DE8A9D13BD170E645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fc:3f:90:e3:7f:2e:4a:93:fc:33:50:ca:3e: f0:f4:33:52:24:af:85:53:4f:84:18:f6:fc:81:56: 26:4f:a4:0d:5d:06:29:83:3d:c9:ca:35:b3:06:7d: da:59:0d:52:aa:5e:6b:9f:31:bb:af:f0:ec:4d:f1: d6:45:b0:cf:fa:48:2e:74:ca:6b:24:13:fd:5b:b0: 97:02:44:d8:cc:37:b9:32:44:63:f6:6b:cd:5c:6a: 42:71:e6:8f:13:4e:f6:1d:44:d7:df:8f:03:9f:dc: 43:08:95:39:17:27:af:08:71:80:29:64:7b:ba:6a: 70:6a:6e:ee:58:2b:09:36:45:1c:12:cf:09:35:a9: ad:2a:df:5a:41:ab:4e:3e:55:7f:56:1a:a7:e5:77: 4d:67:6d:09:72:f7:e5:f6:f0:7b:d6:b8:ed:a4:7e: 1d:30:c8:23:f1:7a:d9:61:0f:4d:f8:0d:23:2a:d0: 62:77:ce:25:93:b8:da:e0:6c:bd:61:4d:f2:d7:38: 82:18:aa:9c:9a:f9:83:6a:5d:8e:a8:9d:07:58:45: 57:d5:ff:5f:46:06:b3:30:15:06:36:c4:20:89:a7: 35:95:8d:84:32:c2:49:a5:77:e2:94:6d:51:85:91: 3a:8a:7b:92:08:90:3e:af:98:53:8e:f1:f7:c3:4e: 25:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:17:D4:87:0B:69:27:0E:0F:C8:BD:9D:E8:A9:D1:3B:D1:70:E6:45 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/BBfUhwtpJw4PyL2d6KnRO9Fw5kU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.190.16.0/21 Signature Algorithm: sha256WithRSAEncryption 1b:47:b0:e7:b5:1f:87:3b:b9:44:b6:d6:03:be:2b:16:a7:f0: c4:a3:35:42:39:f7:f8:2e:08:ed:74:c0:2f:0c:d0:50:01:7d: 71:d2:0e:ac:6b:f1:df:33:5f:7b:32:f7:ee:ae:41:11:ca:04: 90:53:fc:9d:d3:e1:30:2c:37:4a:51:34:3e:f3:2d:67:79:d8: e9:d0:6d:ce:fe:5d:b1:d7:80:82:39:a5:10:20:9f:40:a8:6b: 35:14:aa:04:cc:10:e2:9c:40:d8:04:4a:c7:76:6c:9c:6b:a6: 4f:8e:fd:31:61:0c:83:e7:04:86:44:81:44:0f:eb:ee:e2:fc: 0e:8e:82:da:a1:24:df:8b:71:b0:44:d0:fb:58:12:ee:a8:ae: 5e:96:79:3d:71:2d:66:d2:7b:e0:8c:50:41:99:99:14:74:66: 3a:e3:fe:04:e9:f7:88:19:c1:f7:93:98:12:3e:ee:2e:5f:2c: 66:dd:32:95:36:11:0c:86:60:2c:e7:d8:9f:5e:5e:ce:34:6a: 1e:8f:c8:58:da:92:d2:cd:b2:fb:3f:3f:3b:2e:53:44:15:b5: 3b:99:d1:ff:07:25:91:cd:1b:d1:1e:84:7e:b7:c0:8f:61:b7: 31:6e:36:31:04:b5:98:93:07:2a:84:df:40:4b:47:90:e8:f6: c3:84:f3:26 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICGiQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4MjIw ODUzNDZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDA0MTdENDg3MEI2OTI3 MEUwRkM4QkQ5REU4QTlEMTNCRDE3MEU2NDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDK/D+Q438uSpP8M1DKPvD0M1Ikr4VTT4QY9vyBViZPpA1dBimD PcnKNbMGfdpZDVKqXmufMbuv8OxN8dZFsM/6SC50ymskE/1bsJcCRNjMN7kyRGP2 a81cakJx5o8TTvYdRNffjwOf3EMIlTkXJ68IcYApZHu6anBqbu5YKwk2RRwSzwk1 qa0q31pBq04+VX9WGqfld01nbQly9+X28HvWuO2kfh0wyCPxetlhD034DSMq0GJ3 ziWTuNrgbL1hTfLXOIIYqpya+YNqXY6onQdYRVfV/19GBrMwFQY2xCCJpzWVjYQy wkmld+KUbVGFkTqKe5IIkD6vmFOO8ffDTiWDAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUBBfUhwtpJw4PyL2d6KnRO9Fw5kUwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvQkJmVWh3dHBKdzRQeUwyZDZLblJP OUZ3NWtVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8u+EDAN BgkqhkiG9w0BAQsFAAOCAQEAG0ew57Ufhzu5RLbWA74rFqfwxKM1Qjn3+C4I7XTA LwzQUAF9cdIOrGvx3zNfezL37q5BEcoEkFP8ndPhMCw3SlE0PvMtZ3nY6dBtzv5d sdeAgjmlECCfQKhrNRSqBMwQ4pxA2ARKx3ZsnGumT479MWEMg+cEhkSBRA/r7uL8 Do6C2qEk34txsETQ+1gS7qiuXpZ5PXEtZtJ74IxQQZmZFHRmOuP+BOn3iBnB95OY Ej7uLl8sZt0ylTYRDIZgLOfYn15ezjRqHo/IWNqS0s2y+z8/Oy5TRBW1O5nR/wcl kc0b0R6EfrfAj2G3MW42MQS1mJMHKoTfQEtHkOj2w4TzJg== -----END CERTIFICATE-----Generated at Sun Sep 7 23:29:24 2025 by rpki-client