$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/M7a6nEk1GI4dcdLyOllVfkSzwLQ.roa File: M7a6nEk1GI4dcdLyOllVfkSzwLQ.roa (raw, json) Hash identifier: LbaVx2ns7XbOJeXcvtLm5vq4ctlotDtNQuEq53N+pWE= Subject key identifier: 33:B6:BA:9C:49:35:18:8E:1D:71:D2:F2:3A:59:55:7E:44:B3:C0:B4 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1ABB Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/M7a6nEk1GI4dcdLyOllVfkSzwLQ.roa Signing time: Wed 27 Aug 2025 09:19:06 +0000 ROA not before: Wed 27 Aug 2025 09:19:06 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18049 IP address blocks: 61.61.56.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 04:16:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6843 (0x1abb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 27 09:19:06 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=33B6BA9C4935188E1D71D2F23A59557E44B3C0B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:bf:91:98:56:89:53:61:29:c4:42:6a:7b:5b: fd:f5:bf:59:26:b2:fe:a8:cd:f0:fe:92:18:dc:66: 2d:7c:8b:a1:7e:6e:a3:b1:dc:d6:91:24:74:a3:16: d7:0f:af:9e:ff:41:96:15:0f:94:f0:d8:5b:9c:da: 84:32:46:50:44:8b:21:54:fb:8c:03:2f:3e:a2:47: 45:ea:58:9a:bf:5c:96:2a:88:8a:2d:38:ea:59:40: 95:3f:10:6a:a9:7b:ca:fd:f3:0b:36:ad:ae:b2:ab: bd:5f:09:d9:eb:76:21:f5:36:bf:d4:78:6b:b5:4b: 69:37:f1:bc:88:e5:de:0c:34:6a:12:6c:f3:f0:24: 2c:79:0e:fa:ee:71:5d:65:99:e1:f6:8a:4d:4f:4d: df:d3:b9:a5:6e:1e:dc:72:d2:89:17:7c:89:5f:bd: 59:cf:f9:a5:98:43:a5:c3:26:46:2a:05:89:fe:fd: 99:1c:f1:1f:4e:2d:96:dd:50:12:f4:ee:7a:3e:d3: 3f:8d:3c:4d:49:4a:c9:a3:72:7e:49:fa:d5:5b:5e: 60:7c:87:69:69:9a:1e:62:4f:dc:0b:f9:aa:16:49: 89:24:b8:80:0a:17:95:b1:3c:c3:bf:69:74:7e:25: ac:d3:62:d9:d4:01:ed:5c:d0:90:d4:cf:5b:57:e8: 92:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:B6:BA:9C:49:35:18:8E:1D:71:D2:F2:3A:59:55:7E:44:B3:C0:B4 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/M7a6nEk1GI4dcdLyOllVfkSzwLQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.61.56.0/22 Signature Algorithm: sha256WithRSAEncryption 4f:c8:21:f4:46:6a:36:27:d6:8a:12:2f:34:b1:2f:e3:50:f4: 08:d8:0d:33:22:4b:bc:d9:28:29:65:1d:f3:de:40:8c:57:aa: f3:99:a1:03:7a:33:7a:5f:e5:ad:1b:73:99:47:3c:f8:2d:07: ef:f7:77:ec:20:26:71:cc:e4:99:db:00:26:7b:37:c2:c8:b9: 43:13:21:d1:c9:cf:c3:ff:90:ba:1a:12:01:e1:fd:7e:1d:31: 82:a6:6b:12:80:3c:c3:10:f8:d2:7e:1b:2b:9d:9a:1c:14:8f: f3:e2:fa:df:b5:2b:af:87:46:f3:0d:0a:24:d1:f3:ac:10:74: b9:00:f7:e4:cb:3e:e1:43:b9:96:d7:cd:c6:5e:8e:63:99:c8: a3:17:e3:6e:8b:0b:4e:00:7b:01:d6:6b:84:8b:4f:13:3a:0b: cf:37:aa:4f:09:82:79:48:e4:a7:78:36:af:f5:09:23:12:11: 00:81:b8:8d:b3:38:af:2f:97:bc:c3:50:4f:0b:66:ec:e2:6d: c2:4f:56:13:de:c6:99:ca:94:79:b6:2a:2e:77:1e:3b:c4:7a: 1d:a1:85:f5:90:f1:b2:ec:0f:85:f8:88:5f:c4:80:68:94:ef: f3:38:e6:0b:fb:8e:7b:96:b2:21:4b:2d:e2:88:62:91:f4:ef: 53:56:9a:e7 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICGrswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4Mjcw OTE5MDZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDMzQjZCQTlDNDkzNTE4 OEUxRDcxRDJGMjNBNTk1NTdFNDRCM0MwQjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLv5GYVolTYSnEQmp7W/31v1kmsv6ozfD+khjcZi18i6F+bqOx 3NaRJHSjFtcPr57/QZYVD5Tw2Fuc2oQyRlBEiyFU+4wDLz6iR0XqWJq/XJYqiIot OOpZQJU/EGqpe8r98ws2ra6yq71fCdnrdiH1Nr/UeGu1S2k38byI5d4MNGoSbPPw JCx5DvrucV1lmeH2ik1PTd/TuaVuHtxy0okXfIlfvVnP+aWYQ6XDJkYqBYn+/Zkc 8R9OLZbdUBL07no+0z+NPE1JSsmjcn5J+tVbXmB8h2lpmh5iT9wL+aoWSYkkuIAK F5WxPMO/aXR+JazTYtnUAe1c0JDUz1tX6JIbAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUM7a6nEk1GI4dcdLyOllVfkSzwLQwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvTTdhNm5FazFHSTRkY2RMeU9sbFZm a1N6d0xRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAj09ODAN BgkqhkiG9w0BAQsFAAOCAQEAT8gh9EZqNifWihIvNLEv41D0CNgNMyJLvNkoKWUd 895AjFeq85mhA3ozel/lrRtzmUc8+C0H7/d37CAmcczkmdsAJns3wsi5QxMh0cnP w/+QuhoSAeH9fh0xgqZrEoA8wxD40n4bK52aHBSP8+L637Urr4dG8w0KJNHzrBB0 uQD35Ms+4UO5ltfNxl6OY5nIoxfjbosLTgB7AdZrhItPEzoLzzeqTwmCeUjkp3g2 r/UJIxIRAIG4jbM4ry+XvMNQTwtm7OJtwk9WE97GmcqUebYqLnceO8R6HaGF9ZDx suwPhfiIX8SAaJTv8zjmC/uOe5ayIUst4ohikfTvU1aa5w== -----END CERTIFICATE-----Generated at Sun Sep 7 03:59:43 2025 by rpki-client