$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/K52Vac9ScKQ5xxDlg6pAG0Etd_M.roa File: K52Vac9ScKQ5xxDlg6pAG0Etd_M.roa (raw, json) Hash identifier: XGex+dpIh/4z+KEJiuPHhaZbfAKl6RsrwSyGoj8IpC0= Subject key identifier: 2B:9D:95:69:CF:52:70:A4:39:C7:10:E5:83:AA:40:1B:41:2D:77:F3 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 198F Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/K52Vac9ScKQ5xxDlg6pAG0Etd_M.roa Signing time: Fri 22 Aug 2025 08:53:07 +0000 ROA not before: Fri 22 Aug 2025 08:53:07 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 4780 IP address blocks: 123.205.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 14:46:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6543 (0x198f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 22 08:53:07 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=2B9D9569CF5270A439C710E583AA401B412D77F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:54:d6:80:14:b9:f4:6b:9a:a7:9a:bb:86:52: f0:83:03:60:38:6f:0f:3d:5d:db:bd:ea:56:f6:d0: ad:ce:be:3a:4c:e8:a0:5f:a4:30:e0:43:a4:de:3c: 8f:bf:6c:a9:89:18:c6:f9:97:0c:e0:59:7b:00:96: c8:79:66:29:ca:d0:a6:c2:db:42:6c:20:b3:e2:db: e6:16:23:4b:dd:38:db:bd:00:1e:50:3f:32:d1:94: 56:a3:0c:09:b8:24:04:a2:6e:9b:d3:44:8c:38:4e: 5a:9b:fc:5e:23:bb:6d:f4:de:26:59:81:0b:5f:a2: 6a:3f:d7:c0:7d:ea:d1:13:19:8a:3f:32:91:ba:36: 7c:d2:81:9a:94:a5:08:4f:52:5d:ab:67:c0:86:49: 94:e4:3e:57:85:49:f8:a0:e7:94:25:d7:7f:76:fd: 91:54:2d:a1:11:84:e8:b9:ce:96:fd:1b:25:1e:1c: 65:dc:e2:fc:c5:6f:b9:96:eb:32:ee:11:b8:b8:b2: af:7c:d3:3f:55:d9:d4:d7:f6:ba:7a:8f:cb:26:bd: d6:c0:8f:a6:45:e3:77:f8:de:ba:90:13:26:37:a2: cd:b8:04:da:09:77:63:55:b0:cd:64:12:eb:8b:dd: aa:59:26:ad:a6:bc:aa:95:21:ab:cc:20:06:ac:88: 80:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:9D:95:69:CF:52:70:A4:39:C7:10:E5:83:AA:40:1B:41:2D:77:F3 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/K52Vac9ScKQ5xxDlg6pAG0Etd_M.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.205.76.0/24 Signature Algorithm: sha256WithRSAEncryption 96:99:57:c0:f1:35:d6:ee:b5:83:0f:e3:6e:3d:80:a2:fe:b1: cc:16:e8:29:b0:ea:7f:f3:73:85:a0:2d:91:1e:fc:52:e0:f6: ef:2c:1a:4e:8e:72:ee:50:6f:72:85:85:72:0e:1d:cc:7a:1e: 0c:0a:8f:e6:2d:6c:af:72:dd:88:1e:0a:5c:9d:ab:bd:d3:85: 00:dd:e2:70:ce:20:4e:ab:ba:d4:d2:5c:95:2d:1e:6b:23:3f: 44:52:39:b2:21:f2:18:81:66:12:3e:e8:57:9a:47:45:02:af: 5b:03:44:e3:6a:4a:3c:b3:c9:ce:27:a8:f7:b0:d2:17:8c:1b: 5d:e0:66:0e:b6:6d:e3:a0:06:8a:a3:00:52:5c:4d:bc:03:a8: ed:81:9e:21:b3:87:9f:81:90:31:a4:ca:fe:da:04:79:40:a9: 45:82:8f:b7:8d:8c:48:d8:77:5d:ef:21:50:35:b4:38:2c:e2: 8e:bf:6e:79:19:02:ad:4e:e5:e4:6a:20:32:03:6f:43:9d:25: 91:54:4a:f7:cb:bf:62:9a:c4:1b:ef:c7:da:e9:a4:61:08:4e: 4b:fa:3a:1c:42:4c:80:26:66:e6:ba:f3:4a:e6:e1:5c:fb:b0: aa:b9:03:d5:fa:13:6c:32:79:84:5c:f3:a8:94:70:ec:7c:8a: 04:83:82:32 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICGY8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4MjIw ODUzMDdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDJCOUQ5NTY5Q0Y1Mjcw QTQzOUM3MTBFNTgzQUE0MDFCNDEyRDc3RjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCVNaAFLn0a5qnmruGUvCDA2A4bw89Xdu96lb20K3OvjpM6KBf pDDgQ6TePI+/bKmJGMb5lwzgWXsAlsh5ZinK0KbC20JsILPi2+YWI0vdONu9AB5Q PzLRlFajDAm4JASibpvTRIw4Tlqb/F4ju2303iZZgQtfomo/18B96tETGYo/MpG6 NnzSgZqUpQhPUl2rZ8CGSZTkPleFSfig55Ql1392/ZFULaERhOi5zpb9GyUeHGXc 4vzFb7mW6zLuEbi4sq980z9V2dTX9rp6j8smvdbAj6ZF43f43rqQEyY3os24BNoJ d2NVsM1kEuuL3apZJq2mvKqVIavMIAasiIBlAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUK52Vac9ScKQ5xxDlg6pAG0Etd/MwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvSzUyVmFjOVNjS1E1eHhEbGc2cEFH MEV0ZF9NLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHvNTDAN BgkqhkiG9w0BAQsFAAOCAQEAlplXwPE11u61gw/jbj2Aov6xzBboKbDqf/NzhaAt kR78UuD27ywaTo5y7lBvcoWFcg4dzHoeDAqP5i1sr3LdiB4KXJ2rvdOFAN3icM4g Tqu61NJclS0eayM/RFI5siHyGIFmEj7oV5pHRQKvWwNE42pKPLPJzieo97DSF4wb XeBmDrZt46AGiqMAUlxNvAOo7YGeIbOHn4GQMaTK/toEeUCpRYKPt42MSNh3Xe8h UDW0OCzijr9ueRkCrU7l5GogMgNvQ50lkVRK98u/YprEG+/H2umkYQhOS/o6HEJM gCZm5rrzSubhXPuwqrkD1foTbDJ5hFzzqJRw7HyKBIOCMg== -----END CERTIFICATE-----Generated at Sat Sep 6 12:07:46 2025 by rpki-client