$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Psi47_gBGxayLsBXy29ay7Prdlk.roa File: Psi47_gBGxayLsBXy29ay7Prdlk.roa (raw, json) Hash identifier: dQmxHIaWGj5MBmTkdt/VuiebZGBzlkODgCvXLIEr8pY= Subject key identifier: 3E:C8:B8:EF:F8:01:1B:16:B2:2E:C0:57:CB:6F:5A:CB:B3:EB:76:59 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1A3E Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Psi47_gBGxayLsBXy29ay7Prdlk.roa Signing time: Fri 22 Aug 2025 08:53:51 +0000 ROA not before: Fri 22 Aug 2025 08:53:51 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9919 IP address blocks: 60.245.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 03:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6718 (0x1a3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 22 08:53:51 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=3EC8B8EFF8011B16B22EC057CB6F5ACBB3EB7659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:94:ba:4d:53:e3:d8:fb:71:66:05:51:7a:78: be:b8:d0:ae:83:a4:6e:3b:8e:7b:81:00:ab:4d:59: 31:91:61:4c:bf:41:51:9d:96:6b:83:0e:fb:f5:e0: 3a:4d:b1:10:6a:5a:9c:35:27:e4:61:87:79:6a:a2: bb:81:51:57:0f:c6:67:55:50:b3:a2:ab:e5:b0:d6: bb:eb:fe:b7:5e:4e:a4:b4:0d:6a:d3:bd:b2:97:55: de:12:d6:15:7e:75:66:e9:d2:ec:42:9d:32:39:6f: ed:aa:4b:db:70:11:16:d8:b3:76:b5:a9:cb:0b:c6: ac:75:e4:60:c7:4e:91:f7:4d:6d:96:de:75:66:09: ca:06:de:6c:7b:64:87:a5:ba:34:6e:ff:b0:f6:bb: d5:9e:50:20:d8:61:e2:03:d0:9b:f0:66:91:fd:17: 88:58:c7:16:45:80:76:bf:17:97:9a:d3:0d:dd:22: d8:2d:e0:f4:df:ce:20:e9:69:2e:b8:1c:76:dc:e8: 85:45:21:29:63:c6:37:31:d3:c6:e2:ce:fd:60:42: 5b:89:4e:3e:08:b8:af:97:f7:02:fa:c4:de:bb:49: bf:3d:b0:80:df:92:40:2e:1a:07:69:98:a7:d6:fb: 67:44:f5:af:34:5c:ac:56:67:37:44:c4:c1:a9:85: 8d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:C8:B8:EF:F8:01:1B:16:B2:2E:C0:57:CB:6F:5A:CB:B3:EB:76:59 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Psi47_gBGxayLsBXy29ay7Prdlk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 60.245.96.0/19 Signature Algorithm: sha256WithRSAEncryption 91:f2:30:65:7c:d1:e5:22:d3:fe:39:cb:da:c2:29:b9:44:ac: fe:8d:7f:dd:16:20:2f:26:cd:ca:a0:02:2d:05:52:90:b4:79: 3e:78:ac:4c:9e:6f:47:d7:75:56:56:44:02:be:76:e7:40:53: a9:9d:ff:e6:00:63:32:ec:89:74:1a:5a:26:ea:59:7a:7a:1e: f9:74:64:be:c8:90:3d:48:c3:2d:ed:3f:2d:1a:f4:a5:02:ea: 0a:3c:cf:22:d9:d5:2f:a2:52:a6:0e:0c:67:b8:18:bb:6e:8f: 79:03:78:7e:32:e7:e2:1a:b7:2a:39:a0:43:ae:4f:5f:c3:7e: 85:7a:9c:80:d3:9e:3d:00:3d:e4:2b:3f:4d:37:02:13:25:62: 05:c8:a1:87:e8:d0:1d:4a:59:a8:8a:30:a3:f9:68:37:e7:60: f5:74:f4:2b:c7:b0:7a:09:82:96:19:09:3b:9f:b3:15:0a:75: cd:70:e7:b2:92:67:b4:99:55:ee:78:ac:52:58:ac:6b:cd:97: d8:d1:51:6a:bb:e2:17:fa:b1:e9:d7:31:f7:11:e9:b2:5c:2d: bc:ba:8c:6e:de:72:41:be:da:a2:a0:6e:df:71:c3:d0:ea:41: c5:47:75:70:61:39:ab:4e:1e:67:f7:40:bc:09:94:5b:02:84: 18:0e:4d:a5 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICGj4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4MjIw ODUzNTFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDNFQzhCOEVGRjgwMTFC MTZCMjJFQzA1N0NCNkY1QUNCQjNFQjc2NTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAlLpNU+PY+3FmBVF6eL640K6DpG47jnuBAKtNWTGRYUy/QVGd lmuDDvv14DpNsRBqWpw1J+Rhh3lqoruBUVcPxmdVULOiq+Ww1rvr/rdeTqS0DWrT vbKXVd4S1hV+dWbp0uxCnTI5b+2qS9twERbYs3a1qcsLxqx15GDHTpH3TW2W3nVm CcoG3mx7ZIelujRu/7D2u9WeUCDYYeID0JvwZpH9F4hYxxZFgHa/F5ea0w3dItgt 4PTfziDpaS64HHbc6IVFISljxjcx08bizv1gQluJTj4IuK+X9wL6xN67Sb89sIDf kkAuGgdpmKfW+2dE9a80XKxWZzdExMGphY3jAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUPsi47/gBGxayLsBXy29ay7PrdlkwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvUHNpNDdfZ0JHeGF5THNCWHkyOWF5 N1ByZGxrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBTz1YDAN BgkqhkiG9w0BAQsFAAOCAQEAkfIwZXzR5SLT/jnL2sIpuUSs/o1/3RYgLybNyqAC LQVSkLR5PnisTJ5vR9d1VlZEAr5250BTqZ3/5gBjMuyJdBpaJupZenoe+XRkvsiQ PUjDLe0/LRr0pQLqCjzPItnVL6JSpg4MZ7gYu26PeQN4fjLn4hq3KjmgQ65PX8N+ hXqcgNOePQA95Cs/TTcCEyViBcihh+jQHUpZqIowo/loN+dg9XT0K8ewegmClhkJ O5+zFQp1zXDnspJntJlV7nisUlisa82X2NFRarviF/qx6dcx9xHpslwtvLqMbt5y Qb7aoqBu33HD0OpBxUd1cGE5q04eZ/dAvAmUWwKEGA5NpQ== -----END CERTIFICATE-----Generated at Sun Sep 7 23:36:13 2025 by rpki-client