$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/a_zSJ4yvkwIJooROza7udcR7_mY.roa File: a_zSJ4yvkwIJooROza7udcR7_mY.roa (raw, json) Hash identifier: TirJHYJ9spgTQxbgHLejTNoq/ch530QUgONvdItc0go= Subject key identifier: 6B:FC:D2:27:8C:AF:93:02:09:A2:84:4E:CD:AE:EE:75:C4:7B:FE:66 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1A65 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/a_zSJ4yvkwIJooROza7udcR7_mY.roa Signing time: Fri 22 Aug 2025 08:54:02 +0000 ROA not before: Fri 22 Aug 2025 08:54:02 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 4780 IP address blocks: 218.210.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 14:46:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6757 (0x1a65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 22 08:54:02 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=6BFCD2278CAF930209A2844ECDAEEE75C47BFE66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a2:d9:8e:80:34:54:28:d9:a6:43:e9:bf:8f: 12:6b:72:51:ec:1d:b6:bf:1c:4e:0b:04:a5:5e:b0: b8:c9:25:14:ec:4f:e1:fe:d2:57:5d:4d:67:7b:bd: f2:36:5f:96:9d:2e:1e:35:0e:b1:8c:8f:65:72:17: 16:0d:6a:02:b5:6d:54:7b:6b:67:fb:50:a4:29:61: 1c:bc:85:88:06:c4:11:59:e1:52:d3:49:1b:96:12: 3f:2b:24:c0:40:1d:c6:61:ca:08:dc:40:3c:29:01: 4b:d7:35:a1:57:c1:93:3c:28:66:86:11:f8:4c:67: 5b:7f:9f:a6:f2:ab:26:c8:d5:b6:f0:bb:8f:6b:68: fa:a2:04:b9:dc:49:d6:ae:02:cf:ca:09:39:44:a5: bd:0a:7c:1d:94:0f:78:9b:4b:45:58:a3:ed:93:a8: 51:69:a3:a9:9c:30:1c:76:4b:81:64:89:51:44:1e: d7:ff:01:12:81:35:18:1f:c3:f3:1c:71:53:ac:cd: ba:df:d6:4d:e9:ed:12:f0:4d:45:b1:94:51:c1:f2: 1d:5d:5b:2c:2d:11:bc:9f:23:ab:70:e3:f9:a1:24: a2:73:30:73:b6:02:c8:9e:67:ef:fb:b6:cf:b5:1a: 71:38:d2:63:1e:df:2d:a0:be:63:71:e1:07:85:15: ef:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:FC:D2:27:8C:AF:93:02:09:A2:84:4E:CD:AE:EE:75:C4:7B:FE:66 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/a_zSJ4yvkwIJooROza7udcR7_mY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 218.210.0.0/15 Signature Algorithm: sha256WithRSAEncryption 14:b4:6d:2d:c3:cd:ac:e8:78:02:2a:f9:46:c2:6a:fe:54:cb: 88:68:e5:11:65:ba:41:e8:d5:14:78:27:5f:3c:7d:a1:1f:b8: ae:30:df:5c:56:6b:57:79:7a:94:09:37:f4:3b:15:60:c3:03: 86:59:b0:30:e2:04:e6:3d:a2:5e:f5:66:d1:d2:23:ab:e1:51: 8f:ba:bb:a7:80:3b:2f:a3:50:3b:27:d0:63:ac:a1:17:2c:76: 81:a6:e5:d4:d5:f8:70:79:14:4c:af:0d:78:74:c4:95:18:b3: 23:95:06:56:4a:c6:1c:e9:df:70:2c:6b:af:06:d3:94:f7:d5: 57:b9:5f:cb:34:8f:22:6b:54:ee:de:93:69:37:a6:b4:f7:a0: 31:3f:ab:05:42:aa:05:fc:67:e6:74:dd:dc:82:d1:66:fc:cb: 2a:74:7c:40:84:11:61:bf:e3:09:ea:3e:fd:21:c6:68:8f:5b: b1:a1:82:df:ce:02:2c:2b:0c:d8:d6:5a:98:94:6f:44:fc:3c: ef:60:66:3e:ee:72:54:c0:d5:83:8c:ea:15:8b:e1:28:2a:87: 72:47:65:4c:eb:3d:af:32:96:ed:e7:76:a5:6b:2e:73:a6:15: e2:11:49:56:5e:a3:99:c3:5a:da:8f:32:af:2d:38:91:06:55: f3:31:27:3a -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICGmUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4MjIw ODU0MDJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDZCRkNEMjI3OENBRjkz MDIwOUEyODQ0RUNEQUVFRTc1QzQ3QkZFNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDaotmOgDRUKNmmQ+m/jxJrclHsHba/HE4LBKVesLjJJRTsT+H+ 0lddTWd7vfI2X5adLh41DrGMj2VyFxYNagK1bVR7a2f7UKQpYRy8hYgGxBFZ4VLT SRuWEj8rJMBAHcZhygjcQDwpAUvXNaFXwZM8KGaGEfhMZ1t/n6byqybI1bbwu49r aPqiBLncSdauAs/KCTlEpb0KfB2UD3ibS0VYo+2TqFFpo6mcMBx2S4FkiVFEHtf/ ARKBNRgfw/MccVOszbrf1k3p7RLwTUWxlFHB8h1dWywtEbyfI6tw4/mhJKJzMHO2 AsieZ+/7ts+1GnE40mMe3y2gvmNx4QeFFe/PAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQUa/zSJ4yvkwIJooROza7udcR7/mYwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvYV96U0o0eXZrd0lKb29ST3phN3Vk Y1I3X21ZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAdrSMA0G CSqGSIb3DQEBCwUAA4IBAQAUtG0tw82s6HgCKvlGwmr+VMuIaOURZbpB6NUUeCdf PH2hH7iuMN9cVmtXeXqUCTf0OxVgwwOGWbAw4gTmPaJe9WbR0iOr4VGPurungDsv o1A7J9BjrKEXLHaBpuXU1fhweRRMrw14dMSVGLMjlQZWSsYc6d9wLGuvBtOU99VX uV/LNI8ia1Tu3pNpN6a096AxP6sFQqoF/GfmdN3cgtFm/MsqdHxAhBFhv+MJ6j79 IcZoj1uxoYLfzgIsKwzY1lqYlG9E/DzvYGY+7nJUwNWDjOoVi+EoKodyR2VM6z2v Mpbt53alay5zphXiEUlWXqOZw1rajzKvLTiRBlXzMSc6 -----END CERTIFICATE-----Generated at Sat Sep 6 12:07:51 2025 by rpki-client