$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/CIILRM12IDUWeZ1WeuPEuyBE_Ts.roa File: CIILRM12IDUWeZ1WeuPEuyBE_Ts.roa (raw, json) Hash identifier: ACkmdGuO8OmiPHa/K/U2ufpdZd+gKy7S1vKmRQQsqh4= Subject key identifier: 08:82:0B:44:CD:76:20:35:16:79:9D:56:7A:E3:C4:BB:20:44:FD:3B Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 19BD Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/CIILRM12IDUWeZ1WeuPEuyBE_Ts.roa Signing time: Fri 22 Aug 2025 08:53:19 +0000 ROA not before: Fri 22 Aug 2025 08:53:19 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9919 IP address blocks: 60.245.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 03:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6589 (0x19bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 22 08:53:19 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=08820B44CD76203516799D567AE3C4BB2044FD3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e7:07:b9:31:5f:09:55:8a:c8:98:c1:8b:2c: a1:2d:f1:20:e9:7a:a2:eb:ce:e2:10:89:f0:e4:03: 71:d7:41:16:33:bf:02:72:04:e1:49:ac:c4:a7:97: a6:7f:4a:fb:a8:bc:59:9a:7c:09:ae:d3:d1:c0:b1: 26:80:6e:a3:d6:9d:de:75:d6:a2:8c:fa:ad:35:52: 9b:a8:67:59:8c:9f:1d:b1:5e:fe:71:8f:41:e0:44: c8:fc:44:a1:9b:f1:87:b1:2d:d5:05:f5:4a:da:34: d7:fc:59:dc:0b:2a:e2:2f:fa:79:ee:3d:f5:1a:a7: 2f:5f:2c:49:cd:a3:73:df:84:32:10:82:f5:7b:d8: 28:27:cf:90:c6:09:6f:c4:e4:50:15:bd:38:68:4b: d2:ff:ef:56:b2:29:11:55:bb:da:26:fe:00:03:ac: f8:cc:cc:47:70:ee:36:a7:c5:08:2a:87:63:cb:c0: 3c:c7:9f:89:67:1d:ee:02:42:3d:5e:38:3d:72:67: 68:25:4f:1b:34:dc:47:0c:bc:34:5d:5b:ee:1b:a7: 86:6a:b6:06:12:67:a6:cc:57:5d:bc:b0:1e:ca:95: b4:ed:fc:56:22:a3:9b:7c:46:3e:e4:26:08:ec:1a: dc:42:65:16:9e:2d:a0:fa:6b:8c:de:f9:23:6f:a4: fc:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:82:0B:44:CD:76:20:35:16:79:9D:56:7A:E3:C4:BB:20:44:FD:3B X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/CIILRM12IDUWeZ1WeuPEuyBE_Ts.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 60.245.64.0/19 Signature Algorithm: sha256WithRSAEncryption 62:54:c1:ad:f3:4d:c6:ca:1d:54:99:c2:3f:8e:e3:fb:65:4f: 7b:f4:24:82:b4:8b:17:2a:27:fe:2c:f9:ad:98:18:f5:77:53: 22:ef:db:bf:f6:ff:ae:c1:39:0f:f8:d9:42:2b:67:b7:36:20: 4b:b5:35:2a:33:2d:f9:cf:cb:df:da:e5:c5:a9:40:f6:cb:74: eb:6e:1f:47:0c:bc:2c:cd:96:26:16:20:f2:ba:ba:6b:b3:b0: 89:55:e0:b9:d6:76:de:fc:75:3a:5f:51:31:3b:ae:b3:55:c9: 38:cb:c4:39:0e:2a:23:3d:30:fd:1d:f3:2b:14:a4:2a:9c:11: c2:06:9d:a7:54:ed:f7:61:ee:d1:cc:a1:bc:4c:66:9c:ee:ca: 6a:d0:8d:1b:0e:d6:a6:d0:a9:8f:7b:9c:75:10:a9:19:a8:f1: 66:7f:c8:93:5f:0b:38:68:94:12:d1:97:8e:ab:ae:59:94:20: b4:e6:a4:31:76:57:aa:ca:25:1b:cf:af:16:21:4e:c7:13:96: 24:1c:db:c1:8c:d1:99:3f:bb:43:ff:94:8b:ac:f6:38:a4:72: 93:c2:fc:a9:f7:fe:8b:a8:10:0d:01:d9:43:90:d0:25:fd:f0: 87:71:0f:47:40:7b:33:a6:88:85:bc:c3:3c:93:02:4d:ef:cb: 6b:b9:3e:07 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICGb0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4MjIw ODUzMTlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDA4ODIwQjQ0Q0Q3NjIw MzUxNjc5OUQ1NjdBRTNDNEJCMjA0NEZEM0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC65we5MV8JVYrImMGLLKEt8SDpeqLrzuIQifDkA3HXQRYzvwJy BOFJrMSnl6Z/SvuovFmafAmu09HAsSaAbqPWnd511qKM+q01UpuoZ1mMnx2xXv5x j0HgRMj8RKGb8YexLdUF9UraNNf8WdwLKuIv+nnuPfUapy9fLEnNo3PfhDIQgvV7 2Cgnz5DGCW/E5FAVvThoS9L/71ayKRFVu9om/gADrPjMzEdw7janxQgqh2PLwDzH n4lnHe4CQj1eOD1yZ2glTxs03EcMvDRdW+4bp4ZqtgYSZ6bMV128sB7KlbTt/FYi o5t8Rj7kJgjsGtxCZRaeLaD6a4ze+SNvpPx7AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUCIILRM12IDUWeZ1WeuPEuyBE/TswHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvQ0lJTFJNMTJJRFVXZVoxV2V1UEV1 eUJFX1RzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBTz1QDAN BgkqhkiG9w0BAQsFAAOCAQEAYlTBrfNNxsodVJnCP47j+2VPe/QkgrSLFyon/iz5 rZgY9XdTIu/bv/b/rsE5D/jZQitntzYgS7U1KjMt+c/L39rlxalA9st0624fRwy8 LM2WJhYg8rq6a7OwiVXgudZ23vx1Ol9RMTuus1XJOMvEOQ4qIz0w/R3zKxSkKpwR wgadp1Tt92Hu0cyhvExmnO7KatCNGw7WptCpj3ucdRCpGajxZn/Ik18LOGiUEtGX jquuWZQgtOakMXZXqsolG8+vFiFOxxOWJBzbwYzRmT+7Q/+Ui6z2OKRyk8L8qff+ i6gQDQHZQ5DQJf3wh3EPR0B7M6aIhbzDPJMCTe/La7k+Bw== -----END CERTIFICATE-----Generated at Sun Sep 7 23:34:15 2025 by rpki-client