$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/dQlMvP76VNRE43aLHgp2MXjYIIk.roa File: dQlMvP76VNRE43aLHgp2MXjYIIk.roa (raw, json) Hash identifier: 7ZoCXeX7L+A0j4tWARk9U0w7gdfb9ivMAoRK9Zl+9Uc= Subject key identifier: 75:09:4C:BC:FE:FA:54:D4:44:E3:76:8B:1E:0A:76:31:78:D8:20:89 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 19F8 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/dQlMvP76VNRE43aLHgp2MXjYIIk.roa Signing time: Fri 22 Aug 2025 08:53:34 +0000 ROA not before: Fri 22 Aug 2025 08:53:34 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 4780 IP address blocks: 123.204.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 14:46:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6648 (0x19f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 22 08:53:34 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=75094CBCFEFA54D444E3768B1E0A763178D82089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e9:c0:13:e6:8b:87:27:62:32:a0:ef:1c:96: 68:e1:c0:ee:ad:09:13:16:2d:bb:51:e8:f4:3c:b6: 4f:29:4d:12:6b:a8:f7:05:40:0b:1c:33:2b:17:93: 4e:b7:68:66:9c:53:0a:ae:92:3c:66:02:96:60:e8: f6:c1:72:a2:f8:57:13:2b:d4:1c:8e:d4:8c:f4:92: 60:45:03:1c:12:55:dc:dc:0a:a8:1d:24:e7:93:4f: cd:b5:5f:23:13:c7:b8:7a:09:6a:6c:a4:d5:4c:a7: 18:7e:76:5a:92:e8:7b:6c:23:3f:fa:10:11:9a:70: b2:6b:8f:01:f9:9d:68:ea:0a:be:73:f6:7c:90:89: 0e:d0:9f:c9:20:3f:5b:4f:7c:10:bb:53:f8:a6:93: 30:69:f8:74:ad:d5:98:40:a7:6b:cb:8b:28:6a:5e: c7:11:3d:21:28:d5:df:9e:1c:05:f0:76:65:b3:f0: a1:46:da:07:01:94:da:4e:db:c8:68:de:ee:b1:52: a4:f0:a5:13:c3:54:61:fc:75:3f:0a:9d:00:19:c5: fe:c0:0a:94:37:09:f5:1d:8d:42:76:ed:ce:7c:65: 42:0f:c7:0f:f2:8a:a3:56:a4:e4:88:c5:f5:1f:a5: dd:a2:8b:cb:b4:38:25:f7:f4:8a:97:2d:1b:35:e7: 02:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:09:4C:BC:FE:FA:54:D4:44:E3:76:8B:1E:0A:76:31:78:D8:20:89 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/dQlMvP76VNRE43aLHgp2MXjYIIk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.204.0.0/16 Signature Algorithm: sha256WithRSAEncryption b4:e2:55:7b:c0:ec:5a:78:06:7e:c1:5d:ca:40:eb:b3:2a:d2: a7:87:81:53:c2:2b:01:fc:27:db:af:2b:f3:fc:76:9d:66:83: be:64:e8:40:fe:33:b2:df:00:42:f9:40:89:1a:db:7d:b6:97: 40:d9:a4:48:81:af:cd:4f:3b:29:1c:cc:70:5a:a3:f3:f4:c4: a8:64:27:da:1f:4b:c6:ce:a3:fc:1e:5c:0d:09:06:ff:1d:65: 33:ef:bd:4c:eb:1f:fa:da:34:8a:07:f8:83:12:99:ae:4a:9d: 2a:bb:c1:da:5d:de:86:19:b6:4d:d1:d0:ca:1e:2f:0a:b3:d7: 57:bd:dd:93:89:f0:dc:03:82:ae:7c:d0:0b:43:46:56:19:cd: 76:b7:32:2b:77:cf:07:87:01:da:06:d1:31:d6:67:ad:c6:7a: 70:3f:77:ac:09:8d:75:0d:52:25:47:59:9e:53:fc:4c:2c:e2: 89:83:3a:63:77:d9:38:78:83:33:74:08:3d:25:a6:36:98:0b: f4:72:12:6a:00:27:08:b1:6f:29:cb:d4:5c:3e:b3:98:87:25: 87:32:ba:7a:ad:87:9f:c1:e3:f6:54:75:20:43:0d:9e:9e:61: a3:14:eb:8b:72:4e:7c:1a:43:7b:b8:17:09:54:8c:5f:71:f7: e7:c4:c4:55 -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICGfgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4MjIw ODUzMzRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDc1MDk0Q0JDRkVGQTU0 RDQ0NEUzNzY4QjFFMEE3NjMxNzhEODIwODkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDL6cAT5ouHJ2IyoO8clmjhwO6tCRMWLbtR6PQ8tk8pTRJrqPcF QAscMysXk063aGacUwqukjxmApZg6PbBcqL4VxMr1ByO1Iz0kmBFAxwSVdzcCqgd JOeTT821XyMTx7h6CWpspNVMpxh+dlqS6HtsIz/6EBGacLJrjwH5nWjqCr5z9nyQ iQ7Qn8kgP1tPfBC7U/imkzBp+HSt1ZhAp2vLiyhqXscRPSEo1d+eHAXwdmWz8KFG 2gcBlNpO28ho3u6xUqTwpRPDVGH8dT8KnQAZxf7ACpQ3CfUdjUJ27c58ZUIPxw/y iqNWpOSIxfUfpd2ii8u0OCX39IqXLRs15wLXAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQUdQlMvP76VNRE43aLHgp2MXjYIIkwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvZFFsTXZQNzZWTlJFNDNhTEhncDJN WGpZSUlrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAHvMMA0G CSqGSIb3DQEBCwUAA4IBAQC04lV7wOxaeAZ+wV3KQOuzKtKnh4FTwisB/Cfbryvz /HadZoO+ZOhA/jOy3wBC+UCJGtt9tpdA2aRIga/NTzspHMxwWqPz9MSoZCfaH0vG zqP8HlwNCQb/HWUz771M6x/62jSKB/iDEpmuSp0qu8HaXd6GGbZN0dDKHi8Ks9dX vd2TifDcA4KufNALQ0ZWGc12tzIrd88HhwHaBtEx1metxnpwP3esCY11DVIlR1me U/xMLOKJgzpjd9k4eIMzdAg9JaY2mAv0chJqACcIsW8py9RcPrOYhyWHMrp6rYef weP2VHUgQw2enmGjFOuLck58GkN7uBcJVIxfcffnxMRV -----END CERTIFICATE-----Generated at Sat Sep 6 14:16:58 2025 by rpki-client