$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/CrLla8E4J-TEnZTOrZYvO8gY-aM.roa File: CrLla8E4J-TEnZTOrZYvO8gY-aM.roa (raw, json) Hash identifier: ZWTrU1X4Q+3A8eimV8xwHCZxoMGGMydd3uyBiGf56Pg= Subject key identifier: 0A:B2:E5:6B:C1:38:27:E4:C4:9D:94:CE:AD:96:2F:3B:C8:18:F9:A3 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1981 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/CrLla8E4J-TEnZTOrZYvO8gY-aM.roa Signing time: Fri 22 Aug 2025 08:53:03 +0000 ROA not before: Fri 22 Aug 2025 08:53:03 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9919 IP address blocks: 220.228.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 03:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6529 (0x1981) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 22 08:53:03 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=0AB2E56BC13827E4C49D94CEAD962F3BC818F9A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ba:ee:5f:0a:c9:98:46:27:8f:d0:d1:4a:76: ac:11:95:12:06:b5:d9:9f:70:b8:95:03:f4:c5:2d: ca:fc:91:98:62:7a:be:45:bc:81:11:95:6d:50:cd: 9f:76:4a:4f:8b:cc:38:36:87:59:27:7e:9d:00:33: c1:f0:c0:4b:5e:a2:10:17:c4:56:76:73:4e:0c:b1: cc:78:3e:ff:a8:56:5c:95:ef:ea:e5:84:f6:b6:26: bb:1b:d5:8b:89:dd:11:da:91:8d:02:b8:f7:ad:37: 5e:00:29:ff:a6:74:7b:7c:64:2f:84:1c:c4:42:41: 56:e3:16:24:0c:10:5b:b7:66:b6:58:f4:47:cd:40: fc:84:06:43:0b:5c:40:58:ac:65:cc:90:97:e8:4c: 12:6b:28:69:d0:02:e9:fa:4b:06:47:4e:63:72:a7: 18:ad:d3:a9:07:8a:07:59:67:8e:15:62:57:a4:c3: e4:2c:9b:d4:49:e3:d8:2e:06:47:f6:54:a2:1b:d8: c6:ce:d2:6b:a6:c3:f1:9c:e4:71:ad:b9:fd:79:2c: d3:fd:9f:d1:6a:83:5e:03:86:fd:08:26:f8:23:f2: e5:74:76:5f:ab:3e:66:6c:7e:98:db:06:80:0a:8d: 05:4d:7e:61:7b:48:49:f2:26:e7:c9:e3:fe:51:58: 73:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:B2:E5:6B:C1:38:27:E4:C4:9D:94:CE:AD:96:2F:3B:C8:18:F9:A3 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/CrLla8E4J-TEnZTOrZYvO8gY-aM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 220.228.0.0/15 Signature Algorithm: sha256WithRSAEncryption 94:bb:38:2d:57:34:71:7e:5f:a6:ad:79:ef:27:80:36:5c:10: c7:9b:1b:3a:bc:3c:d9:e1:98:d6:81:06:15:1a:7f:92:0c:47: e9:42:b1:dd:d6:11:a7:24:86:59:e1:ea:dd:c5:a9:68:08:bf: 8c:a1:c7:e2:7c:ca:7d:f6:57:b2:6f:42:67:8c:24:51:17:f8: 49:bd:c6:f7:07:16:76:77:32:6c:a5:08:d6:cc:6b:ac:63:b4: c0:63:8c:3d:83:e4:81:c5:96:14:36:43:76:b0:04:c4:ef:7e: 0f:d3:46:a2:c9:c2:55:bd:f0:17:5a:a2:95:56:86:ff:cb:46: c7:cd:25:10:64:6a:23:0f:57:c8:26:22:9b:7b:50:88:08:ba: d8:71:ff:c2:32:ff:7a:ca:2a:b4:4d:c8:b5:a9:bb:fe:db:18: 6e:71:e9:32:1d:5d:ad:a2:13:3b:01:d5:da:5e:70:81:7c:90: 14:3b:e3:81:65:25:17:1c:47:5a:80:a4:2f:6d:7d:61:3e:6d: 03:0c:a4:ad:4b:9f:4c:d5:c4:03:c1:53:bb:1c:16:2f:f7:96: 2d:98:8a:7d:e3:54:07:50:60:5a:2a:35:c7:34:a2:31:d7:96: ba:33:f8:79:1b:6c:28:f5:c3:88:51:53:62:03:6a:f7:7c:4f: 68:6a:2b:c6 -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICGYEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4MjIw ODUzMDNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDBBQjJFNTZCQzEzODI3 RTRDNDlEOTRDRUFEOTYyRjNCQzgxOEY5QTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAuu5fCsmYRieP0NFKdqwRlRIGtdmfcLiVA/TFLcr8kZhier5F vIERlW1QzZ92Sk+LzDg2h1knfp0AM8HwwEteohAXxFZ2c04Mscx4Pv+oVlyV7+rl hPa2Jrsb1YuJ3RHakY0CuPetN14AKf+mdHt8ZC+EHMRCQVbjFiQMEFu3ZrZY9EfN QPyEBkMLXEBYrGXMkJfoTBJrKGnQAun6SwZHTmNypxit06kHigdZZ44VYlekw+Qs m9RJ49guBkf2VKIb2MbO0mumw/Gc5HGtuf15LNP9n9Fqg14Dhv0IJvgj8uV0dl+r PmZsfpjbBoAKjQVNfmF7SEnyJufJ4/5RWHO/AgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQUCrLla8E4J+TEnZTOrZYvO8gY+aMwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvQ3JMbGE4RTRKLVRFblpUT3JaWXZP OGdZLWFNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAdzkMA0G CSqGSIb3DQEBCwUAA4IBAQCUuzgtVzRxfl+mrXnvJ4A2XBDHmxs6vDzZ4ZjWgQYV Gn+SDEfpQrHd1hGnJIZZ4erdxaloCL+MocfifMp99leyb0JnjCRRF/hJvcb3BxZ2 dzJspQjWzGusY7TAY4w9g+SBxZYUNkN2sATE734P00aiycJVvfAXWqKVVob/y0bH zSUQZGojD1fIJiKbe1CICLrYcf/CMv96yiq0Tci1qbv+2xhucekyHV2tohM7AdXa XnCBfJAUO+OBZSUXHEdagKQvbX1hPm0DDKStS59M1cQDwVO7HBYv95YtmIp941QH UGBaKjXHNKIx15a6M/h5G2wo9cOIUVNiA2r3fE9oaivG -----END CERTIFICATE-----Generated at Sun Sep 7 23:36:13 2025 by rpki-client