$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/aaWPkeBZIERamDKfJxm9KIPqrWQ.roa File: aaWPkeBZIERamDKfJxm9KIPqrWQ.roa (raw, json) Hash identifier: VvcEx0hGGPRhXxh1aqquxuh0ymSCkcPYxAT2ZA1oK+Y= Subject key identifier: 69:A5:8F:91:E0:59:20:44:5A:98:32:9F:27:19:BD:28:83:EA:AD:64 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 19D0 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/aaWPkeBZIERamDKfJxm9KIPqrWQ.roa Signing time: Fri 22 Aug 2025 08:53:24 +0000 ROA not before: Fri 22 Aug 2025 08:53:24 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 4780 IP address blocks: 220.229.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 14:46:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6608 (0x19d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 22 08:53:24 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=69A58F91E05920445A98329F2719BD2883EAAD64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:28:2f:17:cd:8f:62:1f:ec:14:78:e9:fb:ad: df:c5:d4:df:3d:47:5d:38:99:7d:f5:52:05:6d:e6: aa:ba:57:92:90:43:81:50:c0:8d:d4:f7:cd:ab:87: 64:f9:86:5c:1b:38:8a:fc:a0:90:cc:e7:8b:0e:8c: dc:ac:73:44:6d:e8:d4:ec:1e:11:3e:70:16:49:00: fa:f4:7e:a0:02:78:89:0f:79:c9:a2:83:f8:73:41: b0:75:7a:7d:5f:73:13:44:b5:07:d4:55:dd:e8:87: 17:6c:35:87:06:36:42:0e:c7:b6:d2:61:1a:93:4e: 8f:58:1e:53:3e:8f:7e:f2:a9:58:04:41:42:94:64: ae:7c:5b:2e:ea:13:73:bf:b7:9e:38:df:57:ba:f5: a2:45:53:91:28:89:55:aa:ce:7b:11:33:04:91:c7: 6e:7c:7d:a5:a4:4f:9b:48:8a:a2:af:d9:72:87:15: 36:80:97:5a:07:8a:c5:e3:e8:fd:d3:0e:21:40:eb: 70:17:85:79:87:b4:3a:3d:a8:c5:cd:be:cf:d0:1c: 51:fb:9b:dd:9b:fb:07:78:ed:0a:aa:91:6d:c9:06: 51:be:e2:05:5d:b6:c6:34:c0:9e:f3:d7:14:18:dc: e6:29:83:b3:db:81:4d:6c:8f:b7:b7:0e:f6:55:23: 02:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:A5:8F:91:E0:59:20:44:5A:98:32:9F:27:19:BD:28:83:EA:AD:64 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/aaWPkeBZIERamDKfJxm9KIPqrWQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 220.229.0.0/16 Signature Algorithm: sha256WithRSAEncryption 2a:2e:83:18:35:e1:2e:3f:c7:4b:2f:76:04:ca:18:fd:b3:99: 2f:3b:65:2a:0e:9a:c6:68:d6:69:fe:e3:57:89:95:46:cc:e3: e5:5f:c6:a4:c8:14:d9:9e:bb:5c:10:9c:d7:61:68:8d:41:b4: 37:ba:77:67:50:ec:9d:08:fd:2e:58:43:66:0a:f0:4c:39:57: 58:c9:3e:c8:b5:83:d3:91:b9:48:94:f4:43:04:27:89:70:18: 71:d1:2e:f2:1f:ba:37:04:e6:e8:d7:f9:e8:2a:96:ca:38:9e: bc:c6:e3:34:fb:af:52:7c:38:bd:31:c0:df:ac:c8:5e:64:37: 02:d1:43:c1:62:dc:c6:77:a3:62:bc:c1:b1:2a:32:6e:5a:d9: 93:5f:7a:60:27:e6:e9:4a:6c:09:c3:23:dd:7a:fc:32:b2:31: 42:bc:8d:d8:ad:e4:2d:14:98:31:b3:84:eb:2f:e5:98:af:24: 4f:0b:c9:8c:cd:f4:e2:57:6c:05:ba:4c:7e:9d:63:f3:80:6b: 6e:b6:0c:41:db:a4:f0:86:b1:de:79:1c:52:17:1e:73:44:a6: 70:b0:6c:19:aa:a0:e6:fc:5c:0f:47:9c:d4:60:ed:ba:89:09: 58:4a:c2:cf:ca:f4:bc:fa:fd:7c:8a:4e:a6:28:14:09:f0:ba: 74:89:40:45 -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICGdAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4MjIw ODUzMjRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDY5QTU4RjkxRTA1OTIw NDQ1QTk4MzI5RjI3MTlCRDI4ODNFQUFENjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQKC8XzY9iH+wUeOn7rd/F1N89R104mX31UgVt5qq6V5KQQ4FQ wI3U982rh2T5hlwbOIr8oJDM54sOjNysc0Rt6NTsHhE+cBZJAPr0fqACeIkPecmi g/hzQbB1en1fcxNEtQfUVd3ohxdsNYcGNkIOx7bSYRqTTo9YHlM+j37yqVgEQUKU ZK58Wy7qE3O/t54431e69aJFU5EoiVWqznsRMwSRx258faWkT5tIiqKv2XKHFTaA l1oHisXj6P3TDiFA63AXhXmHtDo9qMXNvs/QHFH7m92b+wd47QqqkW3JBlG+4gVd tsY0wJ7z1xQY3OYpg7PbgU1sj7e3DvZVIwLFAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQUaaWPkeBZIERamDKfJxm9KIPqrWQwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvYWFXUGtlQlpJRVJhbURLZkp4bTlL SVBxcldRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDANzlMA0G CSqGSIb3DQEBCwUAA4IBAQAqLoMYNeEuP8dLL3YEyhj9s5kvO2UqDprGaNZp/uNX iZVGzOPlX8akyBTZnrtcEJzXYWiNQbQ3undnUOydCP0uWENmCvBMOVdYyT7ItYPT kblIlPRDBCeJcBhx0S7yH7o3BObo1/noKpbKOJ68xuM0+69SfDi9McDfrMheZDcC 0UPBYtzGd6NivMGxKjJuWtmTX3pgJ+bpSmwJwyPdevwysjFCvI3YreQtFJgxs4Tr L+WYryRPC8mMzfTiV2wFukx+nWPzgGtutgxB26TwhrHeeRxSFx5zRKZwsGwZqqDm /FwPR5zUYO26iQlYSsLPyvS8+v18ik6mKBQJ8Lp0iUBF -----END CERTIFICATE-----Generated at Sat Sep 6 12:07:47 2025 by rpki-client