$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/PiYdV40ZIJzy0Q_GrXWlS5b__D0.roa File: PiYdV40ZIJzy0Q_GrXWlS5b__D0.roa (raw, json) Hash identifier: HEcZKsGVHTOX/5m/HEZWEJ4gO6FWf7IjWbkgu6t3OFg= Subject key identifier: 3E:26:1D:57:8D:19:20:9C:F2:D1:0F:C6:AD:75:A5:4B:96:FF:FC:3D Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 19BE Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/PiYdV40ZIJzy0Q_GrXWlS5b__D0.roa Signing time: Fri 22 Aug 2025 08:53:20 +0000 ROA not before: Fri 22 Aug 2025 08:53:20 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 4780 IP address blocks: 210.68.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 14:46:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6590 (0x19be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 22 08:53:20 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=3E261D578D19209CF2D10FC6AD75A54B96FFFC3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:85:23:9e:38:92:2d:0e:54:7c:08:c5:1e:2d: 8c:fd:e9:78:f1:59:3e:68:d9:09:f6:bf:0f:22:21: 3f:29:96:26:b1:b4:11:11:03:62:e3:dc:6f:b1:e3: c5:4b:9e:53:8e:a0:17:89:6a:b8:dd:21:3e:21:8d: c1:dc:c2:79:58:60:4a:2f:67:28:88:ed:fc:cd:e7: 19:7c:81:81:0c:14:a1:9f:6f:65:1a:46:75:4c:50: 23:b5:37:b5:6c:79:4a:da:0c:49:b3:c6:25:31:a0: 07:4e:09:2e:cb:dc:a3:3c:3c:6e:4c:60:1b:d0:9a: c3:59:93:43:1e:5b:a8:fa:74:be:6c:9f:38:87:b6: 27:47:87:0c:e5:7f:4b:dd:89:22:1a:00:2c:38:6c: 77:81:6d:e7:f0:44:ca:29:ad:c2:a4:64:b4:e8:81: c7:36:01:82:2a:e7:90:de:35:08:b0:f3:d5:a3:1f: 98:a3:e7:f8:80:ba:9e:82:e6:bd:26:8f:c4:2b:f2: 1d:d0:65:10:a7:3b:ce:a0:f4:a5:b1:9b:e5:09:bd: dd:32:a8:e3:8e:5f:8a:e2:e2:77:5b:66:61:a5:3b: 67:c1:a2:dc:91:ef:32:12:b3:a2:9b:c6:f9:64:87: e2:b7:ed:a7:ff:1a:e6:e6:4c:3f:12:e3:31:1a:48: 68:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:26:1D:57:8D:19:20:9C:F2:D1:0F:C6:AD:75:A5:4B:96:FF:FC:3D X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/PiYdV40ZIJzy0Q_GrXWlS5b__D0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.68.0.0/16 Signature Algorithm: sha256WithRSAEncryption 2d:e0:f7:44:54:8e:45:bc:f4:55:a4:5f:18:83:dd:b4:0e:89: b4:41:91:32:2f:8a:af:67:a2:b7:f0:13:e8:7b:48:73:8a:4c: 17:35:f1:cf:ce:9f:c7:5a:b7:74:78:16:db:cb:85:5f:ae:0c: 50:92:8d:5a:72:15:85:87:50:56:8f:e7:58:ab:f7:91:33:7a: 2a:eb:8a:a7:5d:34:d7:da:f9:d1:58:73:19:81:a6:a5:3e:e9: 7e:99:f2:5e:2c:68:d8:66:8b:8d:92:a4:7b:21:4a:ed:af:b3: fe:8a:ea:a5:a2:14:6f:bf:e0:b0:4b:a8:f3:52:45:d6:10:16: 9c:95:f8:33:33:21:01:4d:05:ad:b3:de:61:3c:79:20:c6:f1: d7:55:ff:5a:ea:54:bb:c5:62:8d:de:03:d5:f4:78:b7:ba:e9: d2:23:b7:fb:a8:ce:b1:14:9c:d5:fb:2a:59:18:f7:5f:cd:2b: 5e:1d:29:79:ed:67:1f:d2:13:36:58:2b:f3:5f:e5:72:e1:7c: 90:de:f8:40:11:63:bc:83:6d:8e:05:37:9d:13:79:50:d2:42: a9:ac:4e:da:8b:3a:5b:4f:e7:1f:b2:e4:02:6c:2d:ec:fc:d0: 95:7f:5f:ad:42:0f:31:35:2c:e1:4f:3f:4d:58:4a:6d:e9:13: 80:ab:37:5e -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICGb4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4MjIw ODUzMjBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDNFMjYxRDU3OEQxOTIw OUNGMkQxMEZDNkFENzVBNTRCOTZGRkZDM0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDhSOeOJItDlR8CMUeLYz96XjxWT5o2Qn2vw8iIT8pliaxtBER A2Lj3G+x48VLnlOOoBeJarjdIT4hjcHcwnlYYEovZyiI7fzN5xl8gYEMFKGfb2Ua RnVMUCO1N7VseUraDEmzxiUxoAdOCS7L3KM8PG5MYBvQmsNZk0MeW6j6dL5snziH tidHhwzlf0vdiSIaACw4bHeBbefwRMoprcKkZLTogcc2AYIq55DeNQiw89WjH5ij 5/iAup6C5r0mj8Qr8h3QZRCnO86g9KWxm+UJvd0yqOOOX4ri4ndbZmGlO2fBotyR 7zISs6Kbxvlkh+K37af/GubmTD8S4zEaSGi1AgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQUPiYdV40ZIJzy0Q/GrXWlS5b//D0wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvUGlZZFY0MFpJSnp5MFFfR3JYV2xT NWJfX0QwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDANJEMA0G CSqGSIb3DQEBCwUAA4IBAQAt4PdEVI5FvPRVpF8Yg920Dom0QZEyL4qvZ6K38BPo e0hzikwXNfHPzp/HWrd0eBbby4VfrgxQko1achWFh1BWj+dYq/eRM3oq64qnXTTX 2vnRWHMZgaalPul+mfJeLGjYZouNkqR7IUrtr7P+iuqlohRvv+CwS6jzUkXWEBac lfgzMyEBTQWts95hPHkgxvHXVf9a6lS7xWKN3gPV9Hi3uunSI7f7qM6xFJzV+ypZ GPdfzSteHSl57Wcf0hM2WCvzX+Vy4XyQ3vhAEWO8g22OBTedE3lQ0kKprE7aizpb T+cfsuQCbC3s/NCVf1+tQg8xNSzhTz9NWEpt6ROAqzde -----END CERTIFICATE-----Generated at Sat Sep 6 14:16:52 2025 by rpki-client