$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/L8WFriwmsMipTBSRQyj5YTNZkFo.roa File: L8WFriwmsMipTBSRQyj5YTNZkFo.roa (raw, json) Hash identifier: WDLMWfLbqzTA4XDpPmyPTckaISgjPN/A0Scj1iyBQ6Q= Subject key identifier: 2F:C5:85:AE:2C:26:B0:C8:A9:4C:14:91:43:28:F9:61:33:59:90:5A Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1A0B Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/L8WFriwmsMipTBSRQyj5YTNZkFo.roa Signing time: Fri 22 Aug 2025 08:53:39 +0000 ROA not before: Fri 22 Aug 2025 08:53:39 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9919 IP address blocks: 106.106.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 03:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6667 (0x1a0b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 22 08:53:39 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=2FC585AE2C26B0C8A94C14914328F9613359905A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:19:dc:50:44:62:82:95:3b:c2:3d:ed:b9:36: bc:3d:55:25:9e:a9:6a:60:b1:dc:2f:ca:17:74:0a: cd:b9:b3:b1:e4:c0:75:26:ab:9e:67:53:74:c5:4b: 66:9c:08:6c:ac:c3:4c:71:8f:4d:e0:fc:1b:02:c0: 5d:b3:d0:e0:59:26:74:2c:c8:88:8c:29:34:c1:68: ec:ae:3d:24:54:16:dd:01:e0:aa:ba:95:8a:ca:61: 0f:11:c9:97:9a:a2:0d:dc:fa:6f:a3:ba:39:75:aa: 0a:d1:bb:42:ad:49:77:3a:0a:63:d1:09:29:c5:c2: 68:32:c4:fc:0f:47:e6:58:cf:7d:d0:c3:c5:dc:41: 7a:67:2e:2e:16:8d:c6:04:e1:a4:f1:29:ff:02:d6: fe:14:f7:c7:fe:a8:4a:68:58:6e:b2:f8:0d:c2:80: 36:13:2e:97:2b:94:a6:60:d8:70:31:10:c8:75:79: ae:90:92:43:c0:b0:04:ce:cb:9c:62:ff:ab:ea:c1: b8:05:d4:a2:45:40:b9:d7:a8:55:e4:ac:57:3e:9b: 93:cf:cb:ca:36:5b:af:8b:c1:65:d5:e2:25:b4:88: bd:7f:08:54:65:ab:62:5a:67:4c:50:cc:99:4d:a1: 56:cb:33:e8:d6:8d:c6:40:3b:24:e2:44:45:ec:ec: 4b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:C5:85:AE:2C:26:B0:C8:A9:4C:14:91:43:28:F9:61:33:59:90:5A X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/L8WFriwmsMipTBSRQyj5YTNZkFo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.106.220.0/22 Signature Algorithm: sha256WithRSAEncryption cb:fa:b7:89:50:6a:be:33:fa:85:1f:35:07:79:78:c3:07:07: 6b:06:e3:e7:fc:88:bf:83:d0:6b:f6:a0:02:51:d3:a3:98:2d: 3a:30:ca:3e:f7:5f:3f:12:ad:6d:65:54:6c:b3:e4:26:f9:b2: 8e:72:b4:64:df:da:39:56:91:22:14:a6:f2:cc:5a:06:7f:3a: 64:1e:6c:e8:70:08:97:35:3f:3b:f2:19:9e:63:b6:be:53:1c: 83:88:75:a0:1d:cb:e9:36:b9:c5:ee:1a:99:2a:0d:f1:95:06: f0:42:af:4e:c4:64:b4:36:e0:9b:a1:2c:65:13:81:73:1e:79: 7c:4d:8d:e2:10:b6:ee:52:9c:58:ac:5f:ed:3f:5e:ea:5d:be: 79:c7:16:d0:cd:0f:0c:ca:bc:2e:1b:ee:69:fc:91:4a:8b:22: 6b:67:19:64:ae:c3:ef:9f:8d:7a:10:59:79:f1:c8:d2:fb:95: 1e:39:fb:c7:6e:42:67:e9:dc:75:12:a2:04:b6:33:fe:13:20: 70:ee:52:ac:69:b5:7d:c8:31:78:52:28:64:90:86:aa:10:8b: 9b:85:57:83:8f:8a:2e:52:f7:0e:4a:be:26:56:2c:8e:0b:f0: 39:fc:64:9a:71:2f:77:09:3a:56:5a:b1:e6:ba:a6:0d:d4:f1: fd:46:7e:9b -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICGgswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4MjIw ODUzMzlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDJGQzU4NUFFMkMyNkIw QzhBOTRDMTQ5MTQzMjhGOTYxMzM1OTkwNUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDcGdxQRGKClTvCPe25Nrw9VSWeqWpgsdwvyhd0Cs25s7HkwHUm q55nU3TFS2acCGysw0xxj03g/BsCwF2z0OBZJnQsyIiMKTTBaOyuPSRUFt0B4Kq6 lYrKYQ8RyZeaog3c+m+jujl1qgrRu0KtSXc6CmPRCSnFwmgyxPwPR+ZYz33Qw8Xc QXpnLi4WjcYE4aTxKf8C1v4U98f+qEpoWG6y+A3CgDYTLpcrlKZg2HAxEMh1ea6Q kkPAsATOy5xi/6vqwbgF1KJFQLnXqFXkrFc+m5PPy8o2W6+LwWXV4iW0iL1/CFRl q2JaZ0xQzJlNoVbLM+jWjcZAOyTiREXs7EsdAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUL8WFriwmsMipTBSRQyj5YTNZkFowHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvTDhXRnJpd21zTWlwVEJTUlF5ajVZ VE5aa0ZvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmpq3DAN BgkqhkiG9w0BAQsFAAOCAQEAy/q3iVBqvjP6hR81B3l4wwcHawbj5/yIv4PQa/ag AlHTo5gtOjDKPvdfPxKtbWVUbLPkJvmyjnK0ZN/aOVaRIhSm8sxaBn86ZB5s6HAI lzU/O/IZnmO2vlMcg4h1oB3L6Ta5xe4amSoN8ZUG8EKvTsRktDbgm6EsZROBcx55 fE2N4hC27lKcWKxf7T9e6l2+eccW0M0PDMq8LhvuafyRSosia2cZZK7D75+NehBZ efHI0vuVHjn7x25CZ+ncdRKiBLYz/hMgcO5SrGm1fcgxeFIoZJCGqhCLm4VXg4+K LlL3Dkq+JlYsjgvwOfxkmnEvdwk6Vlqx5rqmDdTx/UZ+mw== -----END CERTIFICATE-----Generated at Sun Sep 7 23:34:17 2025 by rpki-client