$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/kv1FUSdC7N--hu9HG0xLVn_31ZM.roa File: kv1FUSdC7N--hu9HG0xLVn_31ZM.roa (raw, json) Hash identifier: QpimIU2wmVkwpZdsUW8/kP2EnUANe0Ig9SHC8OBUCgI= Subject key identifier: 92:FD:45:51:27:42:EC:DF:BE:86:EF:47:1B:4C:4B:56:7F:F7:D5:93 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 198B Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/kv1FUSdC7N--hu9HG0xLVn_31ZM.roa Signing time: Fri 22 Aug 2025 08:53:06 +0000 ROA not before: Fri 22 Aug 2025 08:53:06 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 4780 IP address blocks: 113.196.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 14:46:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6539 (0x198b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 22 08:53:06 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=92FD45512742ECDFBE86EF471B4C4B567FF7D593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c6:b2:48:4b:6c:67:6f:f9:fd:4a:08:da:d7: aa:a0:dc:1c:16:ac:ca:bc:f8:21:41:6f:22:1e:35: ba:c9:54:7f:b8:37:62:2a:51:e8:cb:5a:aa:6b:62: d7:97:32:82:9d:5e:e7:6c:80:1f:fb:26:d3:b4:5d: 71:be:c5:04:e3:f8:37:a6:37:ab:3f:b0:52:4a:0d: 9b:c1:56:17:4f:ed:19:8b:62:7f:45:d9:20:64:3b: 03:e3:96:aa:de:b1:18:dc:0f:7c:da:d2:d1:88:8c: 87:c5:04:f7:a2:75:3e:21:08:04:0f:05:73:08:1b: 94:b1:4c:db:83:62:22:bd:eb:a9:23:9a:ab:a2:ba: 71:a1:b0:b2:65:82:04:b8:30:41:44:96:5e:7a:6c: f9:e1:46:32:1a:64:c6:17:5c:27:6d:4f:7b:fa:9b: 01:c2:42:14:b8:d8:a4:39:bf:79:83:8d:7a:c8:63: 6f:8b:6e:53:77:86:a1:c6:14:86:b5:3a:16:10:63: 7a:6c:3c:96:3f:28:a2:f3:bf:37:10:f3:7f:6d:42: 1e:f0:12:8e:6f:48:ce:f4:09:e8:c2:e8:d4:69:00: c1:f9:90:de:3b:c4:52:f5:cb:ff:24:4c:c5:4d:dc: 09:67:0c:17:61:4a:08:26:a8:e5:29:4d:9d:74:31: d5:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:FD:45:51:27:42:EC:DF:BE:86:EF:47:1B:4C:4B:56:7F:F7:D5:93 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/kv1FUSdC7N--hu9HG0xLVn_31ZM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.196.115.0/24 Signature Algorithm: sha256WithRSAEncryption 12:70:f8:9b:37:f8:e3:bf:08:56:52:13:62:43:3a:f5:aa:e2: 8a:b2:4d:d5:db:aa:87:af:80:95:e3:24:f7:5a:8c:f7:f4:69: a8:1a:a3:e3:e9:a2:30:bf:45:54:22:14:55:c7:54:54:14:e7: 3f:2c:ee:5d:ab:1c:9b:ea:bb:38:bb:82:7a:2a:eb:1d:c3:33: 64:4f:26:1a:18:8f:77:8b:c7:d0:fd:17:36:b7:63:bc:4c:4e: 84:29:de:87:17:de:ea:d6:53:97:1e:80:7f:0a:28:b5:a2:95: 41:ed:58:50:1b:32:12:d7:98:e2:b5:fd:f0:07:d0:4d:9d:b9: 09:4f:25:10:44:e1:04:9a:f1:3e:a9:81:00:0f:6a:fd:89:5b: fc:d3:b6:4f:cf:d7:3f:57:a6:0a:80:85:b0:a8:e4:23:8b:9f: bf:22:45:1a:19:d2:3f:15:a1:04:4c:24:db:c5:57:55:9c:d6: a4:36:89:09:c1:5b:d9:3f:ba:8a:b0:49:a0:d6:9d:17:17:93: 60:37:a8:a0:bb:a7:7f:f8:d9:da:7f:75:bc:1b:b1:4e:cc:8e: 64:7b:95:c7:e0:d4:c1:f6:33:03:c0:48:65:78:6b:5e:71:0c: 25:e2:ac:fe:84:ee:ea:8e:fa:dc:36:9c:d6:87:ea:f7:e3:26: 1f:32:94:88 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICGYswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4MjIw ODUzMDZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDkyRkQ0NTUxMjc0MkVD REZCRTg2RUY0NzFCNEM0QjU2N0ZGN0Q1OTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAxrJIS2xnb/n9Sgja16qg3BwWrMq8+CFBbyIeNbrJVH+4N2Iq UejLWqprYteXMoKdXudsgB/7JtO0XXG+xQTj+DemN6s/sFJKDZvBVhdP7RmLYn9F 2SBkOwPjlqresRjcD3za0tGIjIfFBPeidT4hCAQPBXMIG5SxTNuDYiK966kjmqui unGhsLJlggS4MEFEll56bPnhRjIaZMYXXCdtT3v6mwHCQhS42KQ5v3mDjXrIY2+L blN3hqHGFIa1OhYQY3psPJY/KKLzvzcQ839tQh7wEo5vSM70CejC6NRpAMH5kN47 xFL1y/8kTMVN3AlnDBdhSggmqOUpTZ10MdWLAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUkv1FUSdC7N++hu9HG0xLVn/31ZMwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMva3YxRlVTZEM3Ti0taHU5SEcweExW bl8zMVpNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHHEczAN BgkqhkiG9w0BAQsFAAOCAQEAEnD4mzf4478IVlITYkM69ariirJN1duqh6+AleMk 91qM9/RpqBqj4+miML9FVCIUVcdUVBTnPyzuXascm+q7OLuCeirrHcMzZE8mGhiP d4vH0P0XNrdjvExOhCnehxfe6tZTlx6AfwootaKVQe1YUBsyEteY4rX98AfQTZ25 CU8lEEThBJrxPqmBAA9q/Ylb/NO2T8/XP1emCoCFsKjkI4ufvyJFGhnSPxWhBEwk 28VXVZzWpDaJCcFb2T+6irBJoNadFxeTYDeooLunf/jZ2n91vBuxTsyOZHuVx+DU wfYzA8BIZXhrXnEMJeKs/oTu6o763Dac1ofq9+MmHzKUiA== -----END CERTIFICATE-----Generated at Sat Sep 6 12:08:06 2025 by rpki-client