$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/BVOTWIDPIH-7CnKXTlfYQN0l2yY.roa File: BVOTWIDPIH-7CnKXTlfYQN0l2yY.roa (raw, json) Hash identifier: HTLhRQLRB9kIPvtkdJ8tHrG8DhffwLKkuclszlecFeU= Subject key identifier: 05:53:93:58:80:CF:20:7F:BB:0A:72:97:4E:57:D8:40:DD:25:DB:26 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 19E8 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/BVOTWIDPIH-7CnKXTlfYQN0l2yY.roa Signing time: Fri 22 Aug 2025 08:53:30 +0000 ROA not before: Fri 22 Aug 2025 08:53:30 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18419 IP address blocks: 210.244.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 14:46:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6632 (0x19e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 22 08:53:30 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=0553935880CF207FBB0A72974E57D840DD25DB26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b6:52:f3:42:a7:57:0c:45:1d:ed:f0:5d:52: 94:e2:1e:8c:22:5b:92:52:94:d0:f5:09:25:a3:17: c0:91:35:8b:5f:9c:69:62:08:38:ba:e7:45:ee:0b: b8:bf:65:f0:5e:c1:b2:5d:ca:40:6b:7c:d5:d7:af: a0:89:f3:f3:bd:45:07:e7:53:c0:f4:5f:4b:6f:e4: e1:0c:2c:51:4a:2f:8b:b1:de:e5:91:46:af:c7:68: e3:e9:ee:44:cb:d5:ff:62:ce:81:db:c4:27:83:38: a6:f5:13:2e:71:cf:7a:b3:f2:e5:cb:38:80:89:bd: 97:94:89:f1:8d:bb:25:43:30:5f:a7:80:52:7b:56: 09:1e:42:70:38:eb:9d:80:7e:48:c0:80:23:6c:c3: e4:45:53:bf:95:89:2d:03:82:33:67:0b:34:28:6b: 6b:77:7b:70:2e:83:f9:4a:4b:bb:41:88:31:af:25: 25:2b:c9:65:db:fc:0c:29:87:4b:a0:8a:5a:cb:1e: 6b:2d:fa:18:2f:75:39:62:41:d7:fc:49:8f:39:ff: a9:00:2d:ad:e7:d2:34:0e:be:55:40:e7:60:90:12: f3:ba:a3:97:45:28:54:38:d3:03:8b:75:17:3d:f4: f4:84:be:ae:30:d2:68:3f:ca:85:59:e5:1f:44:a9: 8d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:53:93:58:80:CF:20:7F:BB:0A:72:97:4E:57:D8:40:DD:25:DB:26 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/BVOTWIDPIH-7CnKXTlfYQN0l2yY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.244.84.0/22 Signature Algorithm: sha256WithRSAEncryption 89:20:02:db:ea:95:3b:f9:5e:8d:f3:ef:a9:7d:fb:74:c5:cb: 4e:b9:cc:3d:ac:82:87:8c:21:f5:70:46:ce:6f:c1:7e:b7:12: 97:66:9f:b5:a0:02:5a:0f:3f:4f:ef:3b:e5:69:22:e1:76:94: 14:6c:4e:a5:b3:06:77:ff:b1:00:4a:8f:33:bf:5a:b3:e5:85: c4:7a:5a:ff:5f:bc:3e:c1:e2:f4:02:8a:b9:b2:48:6a:6c:8b: 83:da:ca:78:74:63:f5:83:ed:21:f6:c9:32:60:01:06:79:08: 39:2b:11:5f:9a:ec:86:df:8a:89:2e:47:9b:e1:78:93:ce:18: 57:70:c4:72:19:a9:53:ed:cb:d1:47:aa:09:6a:6f:0a:1b:a6: ec:b2:eb:04:c0:d6:15:45:68:6d:9c:2e:87:2c:c9:14:1f:4f: 3f:d9:0c:d3:fe:9d:15:ed:5f:4b:32:f1:7b:73:b8:42:80:ce: e3:eb:da:be:73:52:ed:80:25:ae:75:22:95:14:13:28:06:32: ac:99:94:e7:a6:0e:b4:39:66:6a:5b:5e:63:c5:03:9e:5c:01: 6c:c9:72:00:aa:1e:ca:30:53:85:d6:2b:ac:65:c8:b7:bc:5c: 65:8a:5e:87:cc:3e:74:b3:67:16:4e:89:94:ca:f9:92:3e:e3: 00:a1:3c:7a -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICGegwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4MjIw ODUzMzBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDA1NTM5MzU4ODBDRjIw N0ZCQjBBNzI5NzRFNTdEODQwREQyNURCMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxtlLzQqdXDEUd7fBdUpTiHowiW5JSlND1CSWjF8CRNYtfnGli CDi650XuC7i/ZfBewbJdykBrfNXXr6CJ8/O9RQfnU8D0X0tv5OEMLFFKL4ux3uWR Rq/HaOPp7kTL1f9izoHbxCeDOKb1Ey5xz3qz8uXLOICJvZeUifGNuyVDMF+ngFJ7 VgkeQnA4652AfkjAgCNsw+RFU7+ViS0DgjNnCzQoa2t3e3Aug/lKS7tBiDGvJSUr yWXb/Awph0ugilrLHmst+hgvdTliQdf8SY85/6kALa3n0jQOvlVA52CQEvO6o5dF KFQ40wOLdRc99PSEvq4w0mg/yoVZ5R9EqY19AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUBVOTWIDPIH+7CnKXTlfYQN0l2yYwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvQlZPVFdJRFBJSC03Q25LWFRsZllR TjBsMnlZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAtL0VDAN BgkqhkiG9w0BAQsFAAOCAQEAiSAC2+qVO/lejfPvqX37dMXLTrnMPayCh4wh9XBG zm/BfrcSl2aftaACWg8/T+875Wki4XaUFGxOpbMGd/+xAEqPM79as+WFxHpa/1+8 PsHi9AKKubJIamyLg9rKeHRj9YPtIfbJMmABBnkIOSsRX5rsht+KiS5Hm+F4k84Y V3DEchmpU+3L0UeqCWpvChum7LLrBMDWFUVobZwuhyzJFB9PP9kM0/6dFe1fSzLx e3O4QoDO4+vavnNS7YAlrnUilRQTKAYyrJmU56YOtDlmalteY8UDnlwBbMlyAKoe yjBThdYrrGXIt7xcZYpeh8w+dLNnFk6JlMr5kj7jAKE8eg== -----END CERTIFICATE-----Generated at Sat Sep 6 14:17:03 2025 by rpki-client