$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/SrK-fTTETOWkDomUtLvuadPl2do.roa File: SrK-fTTETOWkDomUtLvuadPl2do.roa (raw, json) Hash identifier: le9PiZwtSW+tKwFqsgldYOfjcvokYUDrgi+Kb/FZ0fE= Subject key identifier: 4A:B2:BE:7D:34:C4:4C:E5:A4:0E:89:94:B4:BB:EE:69:D3:E5:D9:DA Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 19AC Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/SrK-fTTETOWkDomUtLvuadPl2do.roa Signing time: Fri 22 Aug 2025 08:53:15 +0000 ROA not before: Fri 22 Aug 2025 08:53:15 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131627 IP address blocks: 106.105.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 14:46:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6572 (0x19ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 22 08:53:15 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=4AB2BE7D34C44CE5A40E8994B4BBEE69D3E5D9DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:51:54:3e:e0:63:81:f2:b2:82:0a:71:3d:41: 53:4f:1e:8a:dc:79:47:de:12:33:02:13:b5:08:1c: 85:9b:33:98:26:2d:8a:24:dd:0f:8f:4d:d4:4e:86: ea:6b:6f:51:1e:3e:cc:b5:fc:33:b6:55:e5:1b:e0: a2:14:0f:1b:af:b5:a5:58:cf:ba:d4:85:55:59:86: 3d:fa:53:14:92:57:9a:6f:05:b1:f3:73:51:24:80: 65:31:58:53:ab:e6:ea:d2:52:40:7d:54:d8:71:3e: ce:11:7c:4f:7c:75:49:7f:56:e7:33:2f:f2:42:3d: 08:db:fa:91:cf:57:2f:03:dc:96:2c:00:01:26:63: 6e:44:a0:9a:36:ba:ac:05:b9:5a:24:49:e9:5d:0a: 82:f1:2c:63:d7:f5:6a:8a:85:c7:97:e1:c4:76:8e: 7c:48:c2:e3:10:52:08:e9:54:0a:dc:fd:55:09:20: fc:95:69:ad:26:27:20:6d:61:5f:9a:00:f8:fa:6a: c5:c4:d1:64:c4:7d:58:92:77:f0:84:08:c1:87:d0: f5:1d:cc:9f:26:df:09:fa:b5:04:b8:9b:21:6c:30: 9c:d5:64:84:4d:37:cf:b1:1f:c6:1b:22:cd:ce:2e: 36:c0:74:71:be:50:8e:f5:0d:ec:d0:5f:5d:32:e8: b4:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:B2:BE:7D:34:C4:4C:E5:A4:0E:89:94:B4:BB:EE:69:D3:E5:D9:DA X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/SrK-fTTETOWkDomUtLvuadPl2do.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.105.104.0/22 Signature Algorithm: sha256WithRSAEncryption 52:e4:79:fc:78:3e:84:04:28:71:3e:b2:58:87:25:a6:d5:2b: 4c:e3:27:ff:19:8d:71:0a:16:49:1e:83:4a:dd:27:f2:8f:3d: 49:8c:09:73:a5:78:02:6b:25:ee:8d:0e:fa:ae:69:83:4f:6f: 7b:f7:31:0a:d8:5d:fd:16:ee:8b:73:e9:42:0f:23:f4:b1:7f: 3e:9f:6b:f1:68:6b:ae:75:fb:39:bf:a1:db:27:39:9b:c6:e8: dc:58:37:2e:99:7c:c5:e5:96:ff:87:84:5b:27:47:9c:e9:e0: 27:57:ff:d5:1a:97:c4:1c:bb:c9:bb:62:d4:e8:20:d3:0f:5a: a1:58:50:1c:42:30:23:16:59:6e:48:dc:02:8d:df:4b:38:a7: f7:d1:70:3f:63:27:9d:64:5b:47:df:9f:6a:12:d1:7d:22:b8: cd:59:a8:bd:ae:2b:d0:c5:45:1e:d5:0a:ac:19:25:ef:e0:0b: 02:da:8d:53:cf:d0:43:75:d6:3b:23:55:ee:d0:db:e7:c2:1f: af:5c:12:92:41:dc:9e:71:b8:24:ec:6e:74:57:68:75:27:1e: 09:1a:65:02:4e:e9:83:da:7c:8b:a4:c6:b8:b6:10:dc:5c:4f: ab:c5:d3:34:1c:6c:43:d8:3e:38:dd:ab:6a:07:3d:e1:61:df: ec:c8:7e:3b -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICGawwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4MjIw ODUzMTVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDRBQjJCRTdEMzRDNDRD RTVBNDBFODk5NEI0QkJFRTY5RDNFNUQ5REEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCbUVQ+4GOB8rKCCnE9QVNPHorceUfeEjMCE7UIHIWbM5gmLYok 3Q+PTdROhuprb1EePsy1/DO2VeUb4KIUDxuvtaVYz7rUhVVZhj36UxSSV5pvBbHz c1EkgGUxWFOr5urSUkB9VNhxPs4RfE98dUl/VuczL/JCPQjb+pHPVy8D3JYsAAEm Y25EoJo2uqwFuVokSeldCoLxLGPX9WqKhceX4cR2jnxIwuMQUgjpVArc/VUJIPyV aa0mJyBtYV+aAPj6asXE0WTEfViSd/CECMGH0PUdzJ8m3wn6tQS4myFsMJzVZIRN N8+xH8YbIs3OLjbAdHG+UI71DezQX10y6LS3AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUSrK+fTTETOWkDomUtLvuadPl2dowHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvU3JLLWZUVEVUT1drRG9tVXRMdnVh ZFBsMmRvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmppaDAN BgkqhkiG9w0BAQsFAAOCAQEAUuR5/Hg+hAQocT6yWIclptUrTOMn/xmNcQoWSR6D St0n8o89SYwJc6V4Amsl7o0O+q5pg09ve/cxCthd/Rbui3PpQg8j9LF/Pp9r8Whr rnX7Ob+h2yc5m8bo3Fg3Lpl8xeWW/4eEWydHnOngJ1f/1RqXxBy7ybti1Ogg0w9a oVhQHEIwIxZZbkjcAo3fSzin99FwP2MnnWRbR9+fahLRfSK4zVmova4r0MVFHtUK rBkl7+ALAtqNU8/QQ3XWOyNV7tDb58Ifr1wSkkHcnnG4JOxudFdodSceCRplAk7p g9p8i6TGuLYQ3FxPq8XTNBxsQ9g+ON2ragc94WHf7Mh+Ow== -----END CERTIFICATE-----Generated at Sat Sep 6 13:50:21 2025 by rpki-client