$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Ouv6zhBdBtaTI77Km6RhlFxT8v0.roa File: Ouv6zhBdBtaTI77Km6RhlFxT8v0.roa (raw, json) Hash identifier: 4tPA4CWTw4hDlWdvhrL2udMvtDDIE5NDCmcgaKctr4Y= Subject key identifier: 3A:EB:FA:CE:10:5D:06:D6:93:23:BE:CA:9B:A4:61:94:5C:53:F2:FD Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1A14 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Ouv6zhBdBtaTI77Km6RhlFxT8v0.roa Signing time: Fri 22 Aug 2025 08:53:42 +0000 ROA not before: Fri 22 Aug 2025 08:53:42 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131627 IP address blocks: 220.229.66.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 14:46:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6676 (0x1a14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 22 08:53:42 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=3AEBFACE105D06D69323BECA9BA461945C53F2FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:fc:b7:67:03:85:e8:30:a7:6e:fe:bb:ff:92: e0:c4:78:be:b0:bf:ab:ed:e4:2a:eb:77:cf:6c:37: 88:78:a4:67:30:57:a7:10:03:86:b9:1f:b9:ff:14: 01:08:e9:37:8f:56:f9:52:b1:3b:e9:96:5a:8b:aa: f0:2e:5e:9d:65:eb:3a:28:18:8b:8a:2d:f0:4b:8e: 2a:38:be:88:65:a6:f6:2f:9b:7f:99:5a:c4:42:c4: 74:95:f7:86:7f:b0:78:36:f7:0b:3f:3c:2c:b4:df: 3d:4c:f0:b1:6b:5d:a8:7c:a2:1f:f9:c3:79:85:68: bd:bd:4d:08:ba:1e:a3:64:a0:6f:df:a4:ae:46:90: e3:60:54:8b:5b:e1:b6:b0:cb:ec:1e:39:4c:0f:bd: 9b:d6:4e:86:4b:8d:c1:b1:63:f0:66:0c:38:9c:d0: fc:6e:df:c7:1a:2d:95:b5:f7:bb:80:9d:ec:42:9a: ff:2c:a9:63:68:75:96:e8:4d:62:f0:33:57:9c:25: a4:22:bb:e1:ed:06:b7:fb:4a:f1:7d:47:77:03:85: a4:08:86:26:80:45:64:2f:2f:d4:7c:5b:27:6c:87: f0:03:e0:d9:73:ac:c5:bc:0b:11:e1:6a:e3:53:58: f9:79:9e:93:78:08:39:29:4a:7a:b0:86:b3:89:1c: fc:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:EB:FA:CE:10:5D:06:D6:93:23:BE:CA:9B:A4:61:94:5C:53:F2:FD X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Ouv6zhBdBtaTI77Km6RhlFxT8v0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 220.229.66.0/23 Signature Algorithm: sha256WithRSAEncryption 8b:64:84:e1:66:ac:13:b0:8a:7e:c5:e3:03:ab:72:81:05:cc: 9c:2d:a3:3f:22:21:db:d5:b8:77:46:50:34:3b:29:fc:30:11: d4:d4:d4:63:8d:bc:3e:c5:01:53:fd:62:c4:ad:b8:a6:8b:30: 63:03:47:fb:7b:97:2a:1e:58:c6:43:1d:55:de:d0:80:d7:62: a2:f7:87:98:9a:61:ef:26:3a:8d:96:e9:78:24:ad:4b:c5:d7: f0:af:a1:4f:aa:50:f3:cb:27:be:85:b9:30:3c:7e:cd:e1:70: b0:bf:ce:4a:32:6e:2e:9a:aa:cf:67:cb:d1:01:10:cc:ea:31: c7:fd:19:71:4c:8a:fd:1f:f1:a1:e0:e6:39:01:2e:d5:f7:e4: 2b:58:d8:d0:0a:cd:05:5f:8f:dd:a6:49:39:46:04:f7:fc:21: 4c:1c:d3:74:a9:35:1c:d1:6a:69:78:72:dd:89:31:b4:32:26: 00:43:92:60:00:e2:27:b9:5a:14:0e:01:1d:32:0b:f4:94:db: a3:a2:76:9b:d0:6e:64:7e:34:6b:37:87:32:9f:b7:a8:7c:e8: 35:11:fa:12:7a:6b:d3:9f:be:22:94:ee:10:1c:4a:6d:69:ef: a2:d5:c9:1d:d5:d9:75:d0:6a:13:5a:00:d6:05:97:36:b8:ac: 84:0a:cb:3d -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICGhQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4MjIw ODUzNDJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDNBRUJGQUNFMTA1RDA2 RDY5MzIzQkVDQTlCQTQ2MTk0NUM1M0YyRkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDP/LdnA4XoMKdu/rv/kuDEeL6wv6vt5Crrd89sN4h4pGcwV6cQ A4a5H7n/FAEI6TePVvlSsTvpllqLqvAuXp1l6zooGIuKLfBLjio4vohlpvYvm3+Z WsRCxHSV94Z/sHg29ws/PCy03z1M8LFrXah8oh/5w3mFaL29TQi6HqNkoG/fpK5G kONgVItb4bawy+weOUwPvZvWToZLjcGxY/BmDDic0Pxu38caLZW197uAnexCmv8s qWNodZboTWLwM1ecJaQiu+HtBrf7SvF9R3cDhaQIhiaARWQvL9R8Wydsh/AD4Nlz rMW8CxHhauNTWPl5npN4CDkpSnqwhrOJHPwHAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUOuv6zhBdBtaTI77Km6RhlFxT8v0wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvT3V2NnpoQmRCdGFUSTc3S202Umhs RnhUOHYwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAdzlQjAN BgkqhkiG9w0BAQsFAAOCAQEAi2SE4WasE7CKfsXjA6tygQXMnC2jPyIh29W4d0ZQ NDsp/DAR1NTUY428PsUBU/1ixK24poswYwNH+3uXKh5YxkMdVd7QgNdioveHmJph 7yY6jZbpeCStS8XX8K+hT6pQ88snvoW5MDx+zeFwsL/OSjJuLpqqz2fL0QEQzOox x/0ZcUyK/R/xoeDmOQEu1ffkK1jY0ArNBV+P3aZJOUYE9/whTBzTdKk1HNFqaXhy 3YkxtDImAEOSYADiJ7laFA4BHTIL9JTbo6J2m9BuZH40azeHMp+3qHzoNRH6Enpr 05++IpTuEBxKbWnvotXJHdXZddBqE1oA1gWXNrishArLPQ== -----END CERTIFICATE-----Generated at Sat Sep 6 13:55:13 2025 by rpki-client