$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/a8yyxIBaJTfKFZJpkyvCneguoAU.roa File: a8yyxIBaJTfKFZJpkyvCneguoAU.roa (raw, json) Hash identifier: Bm3epSM3EVIO2sFHbtFtSc44wC1PCnyfOONU2FJX2Lo= Subject key identifier: 6B:CC:B2:C4:80:5A:25:37:CA:15:92:69:93:2B:C2:9D:E8:2E:A0:05 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1A26 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/a8yyxIBaJTfKFZJpkyvCneguoAU.roa Signing time: Fri 22 Aug 2025 08:53:47 +0000 ROA not before: Fri 22 Aug 2025 08:53:47 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 4780 IP address blocks: 221.169.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 19:16:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6694 (0x1a26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 22 08:53:47 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=6BCCB2C4805A2537CA159269932BC29DE82EA005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6d:d2:e5:78:b4:57:ee:a4:41:da:7a:32:51: 2e:4b:a9:d5:95:78:28:57:98:d4:b5:25:b0:11:2f: e5:31:1b:b7:1f:e0:73:af:22:50:d8:7d:cc:9a:76: 48:11:11:c8:4e:dc:25:35:db:64:03:cd:04:f0:aa: 92:6d:a9:cd:02:c6:bf:30:d2:4e:98:5c:87:28:a8: 0d:41:21:31:31:65:ac:9c:8f:2f:79:48:66:37:99: 1b:cf:02:d4:2a:91:a4:a6:37:46:97:e9:18:8d:ea: ff:b5:15:14:9a:9b:bf:84:9f:2b:bf:cc:cd:e0:18: 0a:8a:f7:5c:2b:2b:6a:6a:5e:96:ae:68:32:37:73: 3c:7e:a5:c1:23:09:95:98:8b:9d:46:dc:f0:19:2c: 85:0f:26:2e:e9:b5:2b:61:81:63:b8:42:3e:81:f2: 79:35:72:0c:a7:67:b6:fd:a2:39:ad:08:98:2e:b8: 1c:9c:bb:e9:5a:a0:0a:33:0c:92:7f:16:e9:89:d8: 70:fb:04:eb:0d:22:c0:54:aa:f1:38:ca:2f:27:6d: 72:27:cf:4e:ba:df:57:cb:46:ed:0a:fc:51:28:ad: c4:e9:6d:81:f6:98:0c:3c:0a:43:d2:c1:45:92:48: bf:c2:76:4f:cf:01:0a:a3:1d:b1:2e:da:0b:1f:b2: c4:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:CC:B2:C4:80:5A:25:37:CA:15:92:69:93:2B:C2:9D:E8:2E:A0:05 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/a8yyxIBaJTfKFZJpkyvCneguoAU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 221.169.0.0/16 Signature Algorithm: sha256WithRSAEncryption 8e:41:f9:02:9e:62:78:26:53:dd:15:32:56:8d:72:71:ec:6c: 86:2d:17:88:b0:a5:41:d4:78:b0:38:e8:79:88:e1:d3:0d:6c: 6f:58:24:49:06:07:22:37:a3:5d:2d:33:43:6c:75:60:05:b1: fa:95:66:a3:29:b5:7f:60:ac:34:66:6e:c3:af:83:6a:e3:3b: fb:e3:2d:02:2c:d6:71:a8:e1:36:4d:0d:84:73:61:37:5d:de: 94:3b:ae:5a:64:3c:2b:da:e4:ad:2d:56:15:8b:a0:70:ba:7d: 6f:cf:ab:27:d6:58:8e:36:a0:a0:d3:8e:57:1f:a4:33:bb:42: 52:fb:61:ff:f6:9e:0e:a8:30:73:ea:67:cb:88:78:40:81:bb: ec:94:b9:b1:5a:61:e0:72:31:d1:cb:b4:07:f2:d5:67:a3:13: 7f:56:02:ff:dc:f0:76:e4:ef:57:f7:08:61:f1:be:b2:e7:44: 5c:21:ae:26:e2:c4:44:10:17:ab:f5:14:26:fb:40:6e:82:cb: 42:e7:71:ad:0a:78:e0:be:2a:91:f0:f6:59:d6:ac:23:7f:c8: 5b:78:fc:d0:45:62:4e:9c:43:4a:9e:80:25:ff:0b:aa:82:48: d3:31:df:d6:9e:7b:2a:86:63:7c:dc:26:b6:bd:99:fc:06:d3: 8e:f5:af:75 -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICGiYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4MjIw ODUzNDdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDZCQ0NCMkM0ODA1QTI1 MzdDQTE1OTI2OTkzMkJDMjlERTgyRUEwMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzbdLleLRX7qRB2noyUS5LqdWVeChXmNS1JbARL+UxG7cf4HOv IlDYfcyadkgREchO3CU122QDzQTwqpJtqc0Cxr8w0k6YXIcoqA1BITExZaycjy95 SGY3mRvPAtQqkaSmN0aX6RiN6v+1FRSam7+Enyu/zM3gGAqK91wrK2pqXpauaDI3 czx+pcEjCZWYi51G3PAZLIUPJi7ptSthgWO4Qj6B8nk1cgynZ7b9ojmtCJguuByc u+laoAozDJJ/FumJ2HD7BOsNIsBUqvE4yi8nbXInz06631fLRu0K/FEorcTpbYH2 mAw8CkPSwUWSSL/Cdk/PAQqjHbEu2gsfssTzAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQUa8yyxIBaJTfKFZJpkyvCneguoAUwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvYTh5eXhJQmFKVGZLRlpKcGt5dkNu ZWd1b0FVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAN2pMA0G CSqGSIb3DQEBCwUAA4IBAQCOQfkCnmJ4JlPdFTJWjXJx7GyGLReIsKVB1HiwOOh5 iOHTDWxvWCRJBgciN6NdLTNDbHVgBbH6lWajKbV/YKw0Zm7Dr4Nq4zv74y0CLNZx qOE2TQ2Ec2E3Xd6UO65aZDwr2uStLVYVi6Bwun1vz6sn1liONqCg045XH6Qzu0JS +2H/9p4OqDBz6mfLiHhAgbvslLmxWmHgcjHRy7QH8tVnoxN/VgL/3PB25O9X9whh 8b6y50RcIa4m4sREEBer9RQm+0BugstC53GtCnjgviqR8PZZ1qwjf8hbePzQRWJO nENKnoAl/wuqgkjTMd/WnnsqhmN83Ca2vZn8BtOO9a91 -----END CERTIFICATE-----Generated at Sat Sep 6 14:28:32 2025 by rpki-client