$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/VIPGByCIKHuLBKzbsiOOhv1hPFQ.roa File: VIPGByCIKHuLBKzbsiOOhv1hPFQ.roa (raw, json) Hash identifier: 1vf5nTykQW2llgSkO33DLQ/O3oxJbLn8hu/aA67Sxzo= Subject key identifier: 54:83:C6:07:20:88:28:7B:8B:04:AC:DB:B2:23:8E:86:FD:61:3C:54 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1A39 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/VIPGByCIKHuLBKzbsiOOhv1hPFQ.roa Signing time: Fri 22 Aug 2025 08:53:50 +0000 ROA not before: Fri 22 Aug 2025 08:53:50 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 4780 IP address blocks: 211.78.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 14:46:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6713 (0x1a39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 22 08:53:50 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=5483C6072088287B8B04ACDBB2238E86FD613C54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:40:9d:0e:f4:30:ae:4f:31:a1:6a:54:fb:f5: 7a:87:8f:15:73:18:7f:2b:0b:4c:4c:5b:dc:8c:f7: 28:47:df:7a:56:d3:56:53:dc:4d:21:ad:4b:92:ee: f2:e3:c8:87:a0:12:17:ff:af:86:ad:4a:28:95:eb: ab:c1:ed:a7:43:45:d7:60:ce:22:28:ee:bd:7a:37: de:49:c7:c2:0e:54:80:9d:ff:a9:a4:50:3e:e9:4c: 89:9a:30:b7:5a:eb:67:b9:88:6d:a2:42:54:e5:45: 70:d9:76:9d:8a:28:51:9b:48:a8:fb:51:45:a6:8d: 96:13:d8:b6:a4:37:77:a5:d1:95:ed:7a:67:92:cd: 64:c3:0e:8a:12:76:5b:af:e9:21:c5:46:7c:78:f4: e2:4b:a7:ae:58:1c:61:75:ea:52:0a:f2:9b:91:98: 3d:f3:f0:71:6f:8d:bb:7a:a8:4d:40:52:a9:b0:dc: e1:00:d0:f0:f4:38:2c:c0:38:f8:50:fa:fd:81:a8: c0:21:26:a2:53:21:f1:bd:74:6f:ee:64:80:0c:11: 6e:10:1a:59:f8:d1:a4:e0:da:5a:93:f2:15:8e:fb: e9:70:2a:3b:ae:d5:a9:34:bd:70:2b:75:89:ae:c6: a3:fa:41:94:7c:f3:a2:86:ca:a9:6c:64:ff:bc:bb: b6:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:83:C6:07:20:88:28:7B:8B:04:AC:DB:B2:23:8E:86:FD:61:3C:54 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/VIPGByCIKHuLBKzbsiOOhv1hPFQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.78.160.0/19 Signature Algorithm: sha256WithRSAEncryption 98:f0:45:cd:d8:86:71:76:8c:01:fe:b6:c9:2d:96:69:0b:33: ea:b3:37:ca:0c:ca:99:9d:e1:9b:53:5a:5b:a4:44:f8:e0:38: 22:c0:df:a0:5b:f7:08:98:f4:c2:d4:68:a9:57:0f:ce:14:78: d0:3a:f6:2c:a8:7d:f7:28:75:ac:ab:eb:6f:d3:ee:8c:58:47: cd:b4:b7:f6:47:06:31:ab:8f:05:c9:fa:69:0e:71:a8:d3:26: 3a:82:90:a0:22:3f:de:b3:29:71:14:f8:94:cf:47:dd:5f:92: 88:c0:c5:2b:8e:42:7a:57:2e:80:6b:c7:24:f5:54:10:77:90: 77:71:5a:fd:cf:32:82:59:b6:58:22:19:88:17:95:60:28:60: cc:e6:de:5c:33:01:65:21:4c:2b:8b:36:9e:2b:ab:0d:11:66: 13:2c:96:1f:94:91:9b:54:b8:99:da:18:f0:86:ad:f8:c1:d3: cb:14:13:7c:9b:ba:01:05:ad:85:75:34:1c:f3:94:95:e1:55: b0:d4:59:40:5f:eb:e0:68:b6:45:b6:48:65:79:72:a8:ee:a2: 8a:df:58:00:40:07:a7:4b:6c:11:3c:64:4f:5b:96:f3:0f:a2: 4f:07:c1:25:27:b9:5d:98:f2:96:08:f5:f0:e9:a3:30:f0:68: 5b:de:6d:51 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICGjkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4MjIw ODUzNTBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDU0ODNDNjA3MjA4ODI4 N0I4QjA0QUNEQkIyMjM4RTg2RkQ2MTNDNTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSQJ0O9DCuTzGhalT79XqHjxVzGH8rC0xMW9yM9yhH33pW01ZT 3E0hrUuS7vLjyIegEhf/r4atSiiV66vB7adDRddgziIo7r16N95Jx8IOVICd/6mk UD7pTImaMLda62e5iG2iQlTlRXDZdp2KKFGbSKj7UUWmjZYT2LakN3el0ZXtemeS zWTDDooSdluv6SHFRnx49OJLp65YHGF16lIK8puRmD3z8HFvjbt6qE1AUqmw3OEA 0PD0OCzAOPhQ+v2BqMAhJqJTIfG9dG/uZIAMEW4QGln40aTg2lqT8hWO++lwKjuu 1ak0vXArdYmuxqP6QZR886KGyqlsZP+8u7ZrAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUVIPGByCIKHuLBKzbsiOOhv1hPFQwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvVklQR0J5Q0lLSHVMQkt6YnNpT09o djFoUEZRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBdNOoDAN BgkqhkiG9w0BAQsFAAOCAQEAmPBFzdiGcXaMAf62yS2WaQsz6rM3ygzKmZ3hm1Na W6RE+OA4IsDfoFv3CJj0wtRoqVcPzhR40Dr2LKh99yh1rKvrb9PujFhHzbS39kcG MauPBcn6aQ5xqNMmOoKQoCI/3rMpcRT4lM9H3V+SiMDFK45CelcugGvHJPVUEHeQ d3Fa/c8yglm2WCIZiBeVYChgzObeXDMBZSFMK4s2niurDRFmEyyWH5SRm1S4mdoY 8Iat+MHTyxQTfJu6AQWthXU0HPOUleFVsNRZQF/r4Gi2RbZIZXlyqO6iit9YAEAH p0tsETxkT1uW8w+iTwfBJSe5XZjylgj18OmjMPBoW95tUQ== -----END CERTIFICATE-----Generated at Sat Sep 6 12:07:52 2025 by rpki-client