$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Ul_kBM201qCyUS-WA2lWaGlldcI.roa File: Ul_kBM201qCyUS-WA2lWaGlldcI.roa (raw, json) Hash identifier: KGijQLQIfi8qQ89uD2YyDu0l1F0tb/7naX1bhR8X5Mc= Subject key identifier: 52:5F:E4:04:CD:B4:D6:A0:B2:51:2F:96:03:69:56:68:69:65:75:C2 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 19E1 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Ul_kBM201qCyUS-WA2lWaGlldcI.roa Signing time: Fri 22 Aug 2025 08:53:29 +0000 ROA not before: Fri 22 Aug 2025 08:53:29 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 4780 IP address blocks: 123.51.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 14:46:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6625 (0x19e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 22 08:53:29 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=525FE404CDB4D6A0B2512F9603695668696575C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f8:9d:18:18:e4:ec:67:01:c8:c5:e9:1a:4c: 96:3f:ed:51:85:1c:de:6c:10:c0:39:26:df:1d:05: 38:55:a7:e5:fc:4d:d5:e2:09:c3:ad:c0:cc:e1:4b: a9:29:68:49:b4:79:81:0d:25:a7:ae:70:1d:02:1f: d8:9c:b3:c7:76:00:66:06:49:84:50:24:6e:42:2a: b7:5a:13:f1:75:4c:bc:bb:4a:41:82:0d:14:ce:e7: 7f:64:10:95:26:c5:82:7e:cf:1b:fc:54:db:b0:cf: 7c:5c:08:e7:b6:9e:ed:3b:d9:9b:da:6c:f7:dd:73: e6:39:6a:57:15:4e:fc:2c:5e:39:75:14:87:10:e2: e0:a5:4c:3f:57:e4:79:66:93:4d:f4:56:0d:c3:2b: f6:50:c0:5f:22:f9:02:e4:82:3c:03:eb:94:54:02: 43:67:88:8a:44:39:49:18:7c:ec:48:96:39:27:eb: 01:10:f6:d0:19:bb:92:3d:0e:77:59:3c:ee:ab:ed: 28:97:e6:61:ad:da:36:7a:37:c1:36:b3:bd:ab:88: d1:ab:6d:4b:44:a5:a5:6e:22:e2:6d:7b:77:50:3c: 1d:2a:31:5d:45:12:56:95:11:6c:ea:93:ad:88:40: a5:f1:ae:c0:50:89:be:bd:db:94:0a:a7:14:aa:53: 35:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:5F:E4:04:CD:B4:D6:A0:B2:51:2F:96:03:69:56:68:69:65:75:C2 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Ul_kBM201qCyUS-WA2lWaGlldcI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.51.180.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:09:f2:49:e1:17:1c:d0:4d:d7:a3:37:f7:b1:11:8e:1c:30: d3:2d:b7:b6:91:48:00:31:fb:9d:92:06:66:43:21:7f:19:90: 1d:96:33:bb:be:06:f8:69:1d:5c:5b:a2:1a:6d:4a:dd:d3:ce: 63:15:fa:ec:5a:8a:8f:a1:44:26:8d:5f:a1:72:ba:1f:09:6e: 87:64:d5:84:49:f4:7e:82:cc:03:7d:f3:be:a0:45:c6:1c:3f: e2:e4:72:17:b0:d2:9b:4f:70:ba:6c:04:92:67:7e:69:fb:50: 03:21:98:22:84:f0:89:5c:4c:86:83:e7:98:e1:03:d0:c7:cb: e6:49:32:ab:c4:a1:99:cc:44:95:3f:62:3d:92:76:11:81:df: 19:e0:c7:20:89:2d:50:fa:84:29:1c:67:72:ab:9c:6e:c7:55: d7:60:0f:4c:9b:e5:f1:d3:71:0e:7b:6f:c4:cd:41:f2:75:e9: 1d:65:4d:20:4e:0a:12:fa:07:d1:0d:1a:be:fe:06:82:6f:39: ed:dd:0c:5a:ea:e4:1d:41:1f:da:0d:bd:30:86:91:c6:b6:00: 5f:42:9f:44:f7:05:c8:ff:9e:56:83:57:d4:c7:d1:a2:41:de: 9f:7f:2f:55:1d:fe:1a:bd:03:29:16:e5:79:5d:74:ea:a7:cc: 11:3c:ea:e2 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICGeEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4MjIw ODUzMjlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDUyNUZFNDA0Q0RCNEQ2 QTBCMjUxMkY5NjAzNjk1NjY4Njk2NTc1QzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDR+J0YGOTsZwHIxekaTJY/7VGFHN5sEMA5Jt8dBThVp+X8TdXi CcOtwMzhS6kpaEm0eYENJaeucB0CH9ics8d2AGYGSYRQJG5CKrdaE/F1TLy7SkGC DRTO539kEJUmxYJ+zxv8VNuwz3xcCOe2nu072ZvabPfdc+Y5alcVTvwsXjl1FIcQ 4uClTD9X5Hlmk030Vg3DK/ZQwF8i+QLkgjwD65RUAkNniIpEOUkYfOxIljkn6wEQ 9tAZu5I9DndZPO6r7SiX5mGt2jZ6N8E2s72riNGrbUtEpaVuIuJte3dQPB0qMV1F ElaVEWzqk62IQKXxrsBQib6925QKpxSqUzW3AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUUl/kBM201qCyUS+WA2lWaGlldcIwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvVWxfa0JNMjAxcUN5VVMtV0EybFdh R2xsZGNJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHsztDAN BgkqhkiG9w0BAQsFAAOCAQEAGgnySeEXHNBN16M397ERjhww0y23tpFIADH7nZIG ZkMhfxmQHZYzu74G+GkdXFuiGm1K3dPOYxX67FqKj6FEJo1foXK6Hwluh2TVhEn0 foLMA33zvqBFxhw/4uRyF7DSm09wumwEkmd+aftQAyGYIoTwiVxMhoPnmOED0MfL 5kkyq8ShmcxElT9iPZJ2EYHfGeDHIIktUPqEKRxncqucbsdV12APTJvl8dNxDntv xM1B8nXpHWVNIE4KEvoH0Q0avv4Ggm857d0MWurkHUEf2g29MIaRxrYAX0KfRPcF yP+eVoNX1MfRokHen38vVR3+Gr0DKRbleV106qfMETzq4g== -----END CERTIFICATE-----Generated at Sat Sep 6 12:07:51 2025 by rpki-client