$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/efGfB8G4M6hFdRUuROV-uZj3Cf4.roa File: efGfB8G4M6hFdRUuROV-uZj3Cf4.roa (raw, json) Hash identifier: e8gpedsUkk8xZeoE+3ROA7ee/ytFAfLQ9qXNKbezeZ8= Subject key identifier: 79:F1:9F:07:C1:B8:33:A8:45:75:15:2E:44:E5:7E:B9:98:F7:09:FE Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1A03 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/efGfB8G4M6hFdRUuROV-uZj3Cf4.roa Signing time: Fri 22 Aug 2025 08:53:37 +0000 ROA not before: Fri 22 Aug 2025 08:53:37 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 4780 IP address blocks: 61.56.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 14:46:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6659 (0x1a03) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 22 08:53:37 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=79F19F07C1B833A84575152E44E57EB998F709FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:9b:1d:11:96:76:c9:10:af:12:fe:9e:60:61: 59:f8:7e:0e:1a:86:ed:14:21:30:be:42:ef:65:02: 3e:8e:d9:5d:22:87:ca:23:02:cf:b0:8c:c0:1a:5f: e7:7c:02:6d:e7:bc:6f:fd:f7:b3:ea:e7:8d:14:91: 0b:02:23:a9:df:a5:e7:dc:1c:08:c1:44:c3:b7:2a: fc:f8:77:a3:dc:6a:0c:df:f1:6d:38:82:c0:23:49: ed:1e:74:e7:3d:71:3a:5a:43:2f:f9:8c:e0:30:99: b4:e9:74:49:67:4b:f1:40:15:a5:b6:c2:44:a7:16: e7:d1:be:38:bc:87:db:c6:b3:c4:fa:29:c7:8b:17: ed:f8:95:df:fa:71:d8:f7:28:61:82:24:10:e0:12: af:7b:c5:a2:57:1f:aa:fc:5b:1f:3f:5b:01:ab:d8: 5c:bc:20:bd:6f:7a:6a:95:65:a5:ac:3e:25:95:e0: 71:6a:24:da:fe:d1:e8:48:32:53:d6:27:1c:b9:bb: 41:c8:eb:9e:be:a5:fb:9f:59:46:ee:cf:f5:e9:83: 25:eb:6d:3e:9a:2e:89:fd:9b:fb:9f:6b:91:f2:13: a3:1a:75:72:e1:98:31:63:ef:81:61:16:c7:48:e1: 92:b5:67:33:bc:ee:a9:28:ff:9a:35:55:9b:a3:e7: 44:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:F1:9F:07:C1:B8:33:A8:45:75:15:2E:44:E5:7E:B9:98:F7:09:FE X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/efGfB8G4M6hFdRUuROV-uZj3Cf4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.56.192.0/19 Signature Algorithm: sha256WithRSAEncryption 9c:52:0c:42:43:f6:cb:61:d3:0e:76:7d:23:04:8b:2b:d0:87: ce:d1:6f:1e:3e:a6:4f:02:42:a1:a4:2a:cb:fc:1a:fc:0d:c5: 0c:69:4c:62:67:f9:06:3f:59:c2:5d:d5:43:e3:0f:0e:32:a8: e0:be:e8:d3:5b:12:d6:ab:41:60:76:f4:28:75:ce:de:42:07: 00:1d:fe:62:3b:43:68:7e:f4:cd:8b:f4:81:87:4c:9d:1b:07: 38:e3:8c:c5:1d:63:2d:ae:6f:4b:38:f6:b8:e4:41:02:54:52: a3:49:89:2b:0f:96:08:37:0b:1f:23:5e:00:bd:0b:9c:93:51: 38:ca:e0:b6:2b:7d:f8:22:17:d0:fb:8c:cc:5e:02:6c:8c:f2: a7:ca:30:53:ae:cc:58:43:cd:a3:17:38:61:fe:2c:3f:9e:91: 26:73:98:55:bd:53:de:99:4c:95:97:5c:d2:fe:69:36:bf:89: cd:6c:d3:2f:8c:c3:09:90:3f:d7:3e:89:9d:c0:f1:07:b0:0e: 8e:bc:67:1b:6e:65:2b:90:1b:63:bc:1b:63:4e:0d:33:1a:44: 21:f8:e1:1e:9b:7f:b3:8c:b3:5e:61:70:2d:17:84:d3:b1:88: 5f:5c:22:6a:41:93:4a:f1:2f:df:78:ce:7e:1e:0f:38:42:fc: b4:d0:16:d2 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICGgMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4MjIw ODUzMzdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDc5RjE5RjA3QzFCODMz QTg0NTc1MTUyRTQ0RTU3RUI5OThGNzA5RkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCVmx0RlnbJEK8S/p5gYVn4fg4ahu0UITC+Qu9lAj6O2V0ih8oj As+wjMAaX+d8Am3nvG/997Pq540UkQsCI6nfpefcHAjBRMO3Kvz4d6Pcagzf8W04 gsAjSe0edOc9cTpaQy/5jOAwmbTpdElnS/FAFaW2wkSnFufRvji8h9vGs8T6KceL F+34ld/6cdj3KGGCJBDgEq97xaJXH6r8Wx8/WwGr2Fy8IL1vemqVZaWsPiWV4HFq JNr+0ehIMlPWJxy5u0HI656+pfufWUbuz/XpgyXrbT6aLon9m/ufa5HyE6MadXLh mDFj74FhFsdI4ZK1ZzO87qko/5o1VZuj50S5AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUefGfB8G4M6hFdRUuROV+uZj3Cf4wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvZWZHZkI4RzRNNmhGZFJVdVJPVi11 WmozQ2Y0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBT04wDAN BgkqhkiG9w0BAQsFAAOCAQEAnFIMQkP2y2HTDnZ9IwSLK9CHztFvHj6mTwJCoaQq y/wa/A3FDGlMYmf5Bj9Zwl3VQ+MPDjKo4L7o01sS1qtBYHb0KHXO3kIHAB3+YjtD aH70zYv0gYdMnRsHOOOMxR1jLa5vSzj2uORBAlRSo0mJKw+WCDcLHyNeAL0LnJNR OMrgtit9+CIX0PuMzF4CbIzyp8owU67MWEPNoxc4Yf4sP56RJnOYVb1T3plMlZdc 0v5pNr+JzWzTL4zDCZA/1z6JncDxB7AOjrxnG25lK5AbY7wbY04NMxpEIfjhHpt/ s4yzXmFwLReE07GIX1wiakGTSvEv33jOfh4POEL8tNAW0g== -----END CERTIFICATE-----Generated at Sat Sep 6 14:17:02 2025 by rpki-client