$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/dXJu_M_azeWlK82-xhXPRR97Q-M.roa File: dXJu_M_azeWlK82-xhXPRR97Q-M.roa (raw, json) Hash identifier: a7QL2elCZPh71XsAet95dCF9Rxea6wfkxzOFe593lxY= Subject key identifier: 75:72:6E:FC:CF:DA:CD:E5:A5:2B:CD:BE:C6:15:CF:45:1F:7B:43:E3 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1A56 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/dXJu_M_azeWlK82-xhXPRR97Q-M.roa Signing time: Fri 22 Aug 2025 08:53:58 +0000 ROA not before: Fri 22 Aug 2025 08:53:58 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9919 IP address blocks: 210.68.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 03:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6742 (0x1a56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 22 08:53:58 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=75726EFCCFDACDE5A52BCDBEC615CF451F7B43E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:58:33:12:94:ee:bf:67:e4:b4:45:c7:8e:71: 96:9d:37:d4:0b:f9:3e:3a:27:7c:b6:d5:ef:a4:5d: 0c:15:2f:76:77:cd:2f:33:23:02:72:a4:23:15:66: 17:29:51:9b:1e:0e:6d:fd:ee:17:f0:74:a8:98:94: 26:3a:a7:c5:3a:e4:83:cd:ee:3f:78:72:0c:c1:99: 60:d9:cc:c5:d1:cc:98:85:eb:16:0d:94:6b:c3:f8: 50:ea:00:c7:c5:8e:14:9e:46:c6:3a:30:65:65:ca: e2:5c:d2:98:18:d5:71:78:42:36:28:5c:fd:ce:7e: 44:aa:2f:b6:ce:ff:f8:f4:63:6a:17:fc:35:c6:91: f1:19:ce:87:9f:10:2d:9a:84:e7:6e:fa:8f:27:03: ff:7e:fe:91:c4:40:ec:cf:33:14:6b:98:16:88:66: 81:2e:e1:2f:3a:4b:8c:4b:fc:fb:e4:74:dc:8c:2e: e8:e0:b3:54:67:1c:6b:5d:93:77:50:2d:34:02:86: 82:22:87:67:05:f2:78:3d:cc:c4:24:ef:69:da:73: e7:22:f4:bb:c9:49:e1:c9:4f:2f:7f:fd:96:21:f2: 06:91:c4:a2:37:34:f4:9e:a7:28:59:8c:10:7b:c3: 6d:d9:da:4b:e0:f8:19:c2:f6:fc:ff:17:9c:bf:fa: 69:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:72:6E:FC:CF:DA:CD:E5:A5:2B:CD:BE:C6:15:CF:45:1F:7B:43:E3 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/dXJu_M_azeWlK82-xhXPRR97Q-M.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.68.0.0/16 Signature Algorithm: sha256WithRSAEncryption 63:db:b0:94:4e:3c:b2:57:20:d3:04:c0:2b:1d:6b:bc:d6:ac: 2a:6c:6f:1f:50:e4:d9:d9:e6:77:a6:b7:d6:b9:18:6f:a6:dd: 00:4c:72:f7:6e:b4:59:ed:2c:15:2e:6d:82:3e:d5:b1:a7:1f: 82:45:50:11:78:89:61:33:9b:32:e5:d7:47:af:dd:05:ff:03: 6a:d7:1f:85:7c:94:66:a7:66:35:23:eb:c7:65:5e:e2:39:51: e3:aa:1a:73:2b:3d:d0:50:8e:b8:1a:b5:cb:78:bb:a6:80:45: 0d:0f:2e:b7:94:71:a7:b3:7d:f9:49:eb:1f:cb:0c:f7:6e:87: d8:c8:08:88:a5:25:43:37:af:e3:ba:c6:58:d4:54:06:a0:3d: 78:05:6a:55:41:63:fe:35:33:c7:b7:fb:d2:57:c0:b5:1f:c8: 26:94:22:6e:03:72:a6:cc:0b:8d:13:0c:13:71:d2:96:da:20: 8e:4d:e5:92:24:c1:b4:ed:58:b0:d5:6e:84:df:ce:ee:95:70: f5:f8:9f:29:04:48:ce:63:1c:f7:e7:96:b6:5f:dc:37:0c:50: b3:82:f6:d3:40:3e:6b:0e:bb:81:13:e3:93:84:db:61:49:55: fb:73:fa:ce:44:14:5c:fa:f9:e7:7c:2c:0d:88:42:89:f8:22: fd:c6:00:d2 -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICGlYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4MjIw ODUzNThaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDc1NzI2RUZDQ0ZEQUNE RTVBNTJCQ0RCRUM2MTVDRjQ1MUY3QjQzRTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPWDMSlO6/Z+S0RceOcZadN9QL+T46J3y21e+kXQwVL3Z3zS8z IwJypCMVZhcpUZseDm397hfwdKiYlCY6p8U65IPN7j94cgzBmWDZzMXRzJiF6xYN lGvD+FDqAMfFjhSeRsY6MGVlyuJc0pgY1XF4QjYoXP3OfkSqL7bO//j0Y2oX/DXG kfEZzoefEC2ahOdu+o8nA/9+/pHEQOzPMxRrmBaIZoEu4S86S4xL/PvkdNyMLujg s1RnHGtdk3dQLTQChoIih2cF8ng9zMQk72nac+ci9LvJSeHJTy9//ZYh8gaRxKI3 NPSepyhZjBB7w23Z2kvg+BnC9vz/F5y/+mmFAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQUdXJu/M/azeWlK82+xhXPRR97Q+MwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvZFhKdV9NX2F6ZVdsSzgyLXhoWFBS Ujk3US1NLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDANJEMA0G CSqGSIb3DQEBCwUAA4IBAQBj27CUTjyyVyDTBMArHWu81qwqbG8fUOTZ2eZ3prfW uRhvpt0ATHL3brRZ7SwVLm2CPtWxpx+CRVAReIlhM5sy5ddHr90F/wNq1x+FfJRm p2Y1I+vHZV7iOVHjqhpzKz3QUI64GrXLeLumgEUNDy63lHGns335Sesfywz3bofY yAiIpSVDN6/jusZY1FQGoD14BWpVQWP+NTPHt/vSV8C1H8gmlCJuA3KmzAuNEwwT cdKW2iCOTeWSJMG07Viw1W6E387ulXD1+J8pBEjOYxz355a2X9w3DFCzgvbTQD5r DruBE+OThNthSVX7c/rORBRc+vnnfCwNiEKJ+CL9xgDS -----END CERTIFICATE-----Generated at Sun Sep 7 23:36:14 2025 by rpki-client