$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/gpO6WpUkVZ8RXiALw54y75A64tA.roa File: gpO6WpUkVZ8RXiALw54y75A64tA.roa (raw, json) Hash identifier: QDghuMydIiHW59+lpMyWFM+ZDHCH9KItHM8McLq79UA= Subject key identifier: 82:93:BA:5A:95:24:55:9F:11:5E:20:0B:C3:9E:32:EF:90:3A:E2:D0 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 196B Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/gpO6WpUkVZ8RXiALw54y75A64tA.roa Signing time: Fri 22 Aug 2025 08:52:58 +0000 ROA not before: Fri 22 Aug 2025 08:52:58 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 4780 IP address blocks: 210.244.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 14:46:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6507 (0x196b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 22 08:52:58 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=8293BA5A9524559F115E200BC39E32EF903AE2D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d1:f7:71:cf:b6:bd:0b:72:1c:02:a1:a7:4c: 89:f9:ec:0f:f2:67:28:0f:67:e8:87:66:27:2c:c8: a6:4d:98:cf:82:54:2c:c5:3c:d6:0a:9e:a1:fc:b9: 35:1f:9a:e2:d5:21:4a:19:79:30:63:0f:df:45:fc: f8:b3:2b:45:72:43:92:3f:9c:b2:a5:f7:8d:90:88: be:b4:6c:d4:04:b4:e0:e2:5e:de:ef:9d:14:eb:43: 31:0c:b6:d4:90:f0:89:9d:a3:15:4e:e7:e9:76:ae: 5b:bc:62:e0:7c:ef:c4:a1:85:0a:b0:dd:cb:b0:42: 75:b3:fe:c5:dc:42:af:5e:5d:b9:21:4a:1f:8a:52: 77:61:97:71:39:c1:41:4a:91:e3:51:a8:21:c6:92: 2e:73:37:44:30:05:db:90:f8:8c:a7:c6:dc:0e:07: 43:33:46:c0:1a:d9:51:92:21:74:6e:73:8d:0e:37: 23:7e:04:9f:dd:f1:50:34:5b:ab:8e:c4:9f:19:6d: 5c:94:e0:26:b8:c1:7c:d1:5b:ce:ab:84:de:40:02: 33:d8:26:00:ab:f6:f3:ef:73:32:af:6b:04:63:af: 4e:cd:5b:04:f0:70:20:c4:c1:a3:50:48:5c:c4:c0: f3:0e:ff:19:d0:fe:82:ca:22:32:05:44:bb:28:ab: 78:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:93:BA:5A:95:24:55:9F:11:5E:20:0B:C3:9E:32:EF:90:3A:E2:D0 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/gpO6WpUkVZ8RXiALw54y75A64tA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.244.0.0/17 Signature Algorithm: sha256WithRSAEncryption 88:79:f3:a7:f3:f4:6a:57:c6:4c:f0:af:4b:bf:79:4d:17:df: 67:b0:99:9f:16:1d:9b:3f:d2:75:d1:2a:51:2a:1c:53:59:cb: 81:83:03:3c:0c:71:49:78:c0:66:a1:93:c3:60:b2:85:f2:0f: c0:22:d0:d5:76:2d:5f:e9:82:43:6a:98:ea:71:0b:2a:5c:44: ba:74:4c:8f:eb:a1:08:cc:49:71:c4:e4:62:7b:59:86:ec:e5: 2b:83:cd:16:0c:e8:7b:64:fd:60:89:3f:70:79:58:6a:2a:e5: a9:05:80:5a:e3:2b:a5:bb:d2:9b:2e:fc:20:44:ed:b5:60:d9: 28:97:61:80:93:49:ab:27:45:4e:3a:b4:43:1e:a0:3c:da:77: 42:88:14:e9:0f:ea:27:b6:fb:41:14:1e:91:48:14:55:da:96: de:e5:86:15:5a:1e:96:ae:b1:fe:bc:6a:65:22:66:10:28:04: 52:e3:7e:2a:87:2a:47:e5:a2:5d:ef:a9:4d:bf:39:f1:a5:d9: 98:25:cb:32:53:a9:6e:0a:df:84:ed:44:61:8b:66:1f:93:7b: 31:19:ca:db:3e:d9:46:77:02:9d:09:23:99:48:d1:06:31:fe: 1b:23:ff:d0:d9:d6:bc:e0:80:01:5e:b2:2a:15:97:c3:b3:de: a5:c5:d1:57 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICGWswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4MjIw ODUyNThaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDgyOTNCQTVBOTUyNDU1 OUYxMTVFMjAwQkMzOUUzMkVGOTAzQUUyRDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC60fdxz7a9C3IcAqGnTIn57A/yZygPZ+iHZicsyKZNmM+CVCzF PNYKnqH8uTUfmuLVIUoZeTBjD99F/PizK0VyQ5I/nLKl942QiL60bNQEtODiXt7v nRTrQzEMttSQ8ImdoxVO5+l2rlu8YuB878ShhQqw3cuwQnWz/sXcQq9eXbkhSh+K Undhl3E5wUFKkeNRqCHGki5zN0QwBduQ+IynxtwOB0MzRsAa2VGSIXRuc40ONyN+ BJ/d8VA0W6uOxJ8ZbVyU4Ca4wXzRW86rhN5AAjPYJgCr9vPvczKvawRjr07NWwTw cCDEwaNQSFzEwPMO/xnQ/oLKIjIFRLsoq3hPAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUgpO6WpUkVZ8RXiALw54y75A64tAwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvZ3BPNldwVWtWWjhSWGlBTHc1NHk3 NUE2NHRBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB9L0ADAN BgkqhkiG9w0BAQsFAAOCAQEAiHnzp/P0alfGTPCvS795TRffZ7CZnxYdmz/SddEq USocU1nLgYMDPAxxSXjAZqGTw2CyhfIPwCLQ1XYtX+mCQ2qY6nELKlxEunRMj+uh CMxJccTkYntZhuzlK4PNFgzoe2T9YIk/cHlYairlqQWAWuMrpbvSmy78IETttWDZ KJdhgJNJqydFTjq0Qx6gPNp3QogU6Q/qJ7b7QRQekUgUVdqW3uWGFVoelq6x/rxq ZSJmECgEUuN+KocqR+WiXe+pTb858aXZmCXLMlOpbgrfhO1EYYtmH5N7MRnK2z7Z RncCnQkjmUjRBjH+GyP/0NnWvOCAAV6yKhWXw7PepcXRVw== -----END CERTIFICATE-----Generated at Sat Sep 6 12:07:49 2025 by rpki-client