$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/eF084ODi6d5UaVu_0NKLZVFHJoQ.roa File: eF084ODi6d5UaVu_0NKLZVFHJoQ.roa (raw, json) Hash identifier: aYgJ4Li5v1TjQcpbh0HXcWUur638ygaqD+H2OjkOL1U= Subject key identifier: 78:5D:3C:E0:E0:E2:E9:DE:54:69:5B:BF:D0:D2:8B:65:51:47:26:84 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1A74 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/eF084ODi6d5UaVu_0NKLZVFHJoQ.roa Signing time: Fri 22 Aug 2025 08:54:06 +0000 ROA not before: Fri 22 Aug 2025 08:54:06 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9919 IP address blocks: 175.183.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 03:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6772 (0x1a74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 22 08:54:06 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=785D3CE0E0E2E9DE54695BBFD0D28B6551472684 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a1:b2:9d:8f:9c:1c:1c:9c:dc:8a:12:b2:82: da:05:fc:b0:f7:40:7f:13:71:fc:30:b1:a9:31:94: 1c:7e:39:ad:eb:e0:8b:4c:57:51:82:21:95:af:e0: 38:b9:f1:ff:1b:79:54:12:9c:c1:cd:8e:1c:50:f6: 38:dd:4b:34:a3:0c:73:b8:6f:a4:0c:2e:29:6a:2d: 1b:9c:96:99:c0:31:df:e5:7a:d9:cd:59:00:bb:4e: 15:7e:a3:a0:22:53:94:01:c4:31:ed:87:9a:d8:19: f0:89:a5:7c:d8:cf:ed:71:6a:5a:b0:08:f3:8d:f4: a6:21:14:ec:bd:f9:69:4e:4e:a1:dd:5e:1f:1f:2d: 9e:e5:4a:35:a7:a7:d9:f0:86:1a:5d:0b:b3:7a:8c: 16:3c:60:c5:78:68:33:5f:c6:f9:6d:79:ee:8c:cf: c2:f0:d3:7b:f5:52:4e:22:eb:a4:40:68:0c:d3:a6: 86:ba:e9:19:6f:fe:79:6f:a9:3c:71:2d:99:cf:03: 7f:d2:4a:8d:11:dd:de:b3:60:93:32:7a:d9:ea:81: 3b:6c:a6:8f:21:67:cb:90:06:9a:b4:6e:3b:e6:dc: ed:b2:68:4f:cb:87:98:61:07:27:3d:20:2b:6b:3e: c3:1e:59:32:9b:18:be:a2:a8:fb:af:df:eb:2a:2e: 07:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:5D:3C:E0:E0:E2:E9:DE:54:69:5B:BF:D0:D2:8B:65:51:47:26:84 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/eF084ODi6d5UaVu_0NKLZVFHJoQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 175.183.137.0/24 Signature Algorithm: sha256WithRSAEncryption a0:89:ff:8e:71:26:64:ab:a5:e8:17:7e:7c:c1:23:e8:75:f3: 02:78:2b:0c:48:5b:1d:de:9f:6b:ad:dc:a0:f0:f6:ef:31:87: 51:a3:08:0e:d1:e3:5c:a6:e3:c2:d4:32:8e:ce:58:0d:0d:63: 05:cb:b6:0f:1a:01:23:f8:73:fb:78:da:b0:e0:80:a5:06:be: a4:c6:89:58:96:3a:04:78:ac:5a:be:91:e8:04:00:2e:00:03: 84:f4:fb:00:72:0f:db:c3:0b:79:ce:51:5e:6a:92:8b:46:95: 6a:93:97:a2:0e:79:7a:c2:19:70:36:f8:3d:ca:52:3b:c3:a4: 59:93:27:82:f7:e5:bc:c5:49:36:11:37:41:1e:3c:44:da:63: 15:f9:df:a9:ee:e6:65:01:fe:00:99:83:e0:18:40:56:30:ed: 92:85:e8:0f:70:6c:ef:d3:69:2b:26:93:8b:76:ea:ab:e2:cc: 01:c7:69:26:cb:f6:bb:e1:18:70:64:03:6f:88:df:d5:3c:0f: 73:41:49:0c:e9:59:b0:40:9b:24:f6:89:46:c7:29:3c:dc:7d: ff:28:ae:2a:01:c5:c5:86:58:21:a2:dd:81:bc:c9:ae:56:1b: 3b:78:81:22:7f:92:cf:5d:03:b8:70:88:40:e8:98:53:53:68: a2:25:7d:08 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICGnQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4MjIw ODU0MDZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDc4NUQzQ0UwRTBFMkU5 REU1NDY5NUJCRkQwRDI4QjY1NTE0NzI2ODQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDeobKdj5wcHJzcihKygtoF/LD3QH8TcfwwsakxlBx+Oa3r4ItM V1GCIZWv4Di58f8beVQSnMHNjhxQ9jjdSzSjDHO4b6QMLilqLRuclpnAMd/letnN WQC7ThV+o6AiU5QBxDHth5rYGfCJpXzYz+1xalqwCPON9KYhFOy9+WlOTqHdXh8f LZ7lSjWnp9nwhhpdC7N6jBY8YMV4aDNfxvltee6Mz8Lw03v1Uk4i66RAaAzTpoa6 6Rlv/nlvqTxxLZnPA3/SSo0R3d6zYJMyetnqgTtspo8hZ8uQBpq0bjvm3O2yaE/L h5hhByc9ICtrPsMeWTKbGL6iqPuv3+sqLgc9AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUeF084ODi6d5UaVu/0NKLZVFHJoQwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvZUYwODRPRGk2ZDVVYVZ1XzBOS0xa VkZISm9RLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAK+3iTAN BgkqhkiG9w0BAQsFAAOCAQEAoIn/jnEmZKul6Bd+fMEj6HXzAngrDEhbHd6fa63c oPD27zGHUaMIDtHjXKbjwtQyjs5YDQ1jBcu2DxoBI/hz+3jasOCApQa+pMaJWJY6 BHisWr6R6AQALgADhPT7AHIP28MLec5RXmqSi0aVapOXog55esIZcDb4PcpSO8Ok WZMngvflvMVJNhE3QR48RNpjFfnfqe7mZQH+AJmD4BhAVjDtkoXoD3Bs79NpKyaT i3bqq+LMAcdpJsv2u+EYcGQDb4jf1TwPc0FJDOlZsECbJPaJRscpPNx9/yiuKgHF xYZYIaLdgbzJrlYbO3iBIn+Sz10DuHCIQOiYU1NooiV9CA== -----END CERTIFICATE-----Generated at Sun Sep 7 23:33:26 2025 by rpki-client