$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/narZFMJRbj3y4X5Yh_wt-PWFvTg.roa File: narZFMJRbj3y4X5Yh_wt-PWFvTg.roa (raw, json) Hash identifier: nXU8g8JJQwX+94mzN+3gE46BLCVBz9j6Q7HzuuEwh+c= Subject key identifier: 9D:AA:D9:14:C2:51:6E:3D:F2:E1:7E:58:87:FC:2D:F8:F5:85:BD:38 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1A9B Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/narZFMJRbj3y4X5Yh_wt-PWFvTg.roa Signing time: Wed 27 Aug 2025 09:13:19 +0000 ROA not before: Wed 27 Aug 2025 09:13:19 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9919 IP address blocks: 211.78.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 03:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6811 (0x1a9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 27 09:13:19 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=9DAAD914C2516E3DF2E17E5887FC2DF8F585BD38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d0:83:89:e6:18:ae:43:b1:e5:ba:c0:09:8b: 26:2c:1a:aa:73:5e:e1:8a:13:bd:04:1a:61:22:77: 39:f3:6e:3d:d6:8e:7b:1a:48:6e:dd:1b:b9:8c:cd: 59:2e:ab:fc:ee:0e:59:1f:9a:45:11:8f:46:a0:0a: 3a:6a:66:f7:b9:43:00:72:c6:43:b0:f8:e2:c2:b1: d8:13:86:f1:20:b0:d5:41:7c:bb:77:85:cc:af:6c: b3:f8:12:04:7e:8b:f1:f0:14:65:7a:0f:93:a2:78: ef:bd:46:af:73:e8:dc:b0:fc:03:e6:5e:c7:db:db: 5a:9b:52:40:f7:7d:a5:95:cf:d1:55:c4:f9:90:37: c7:99:26:aa:d9:29:a6:b5:82:e5:92:b9:75:a0:d9: e4:da:85:83:3f:11:c6:1d:f7:c4:f3:e3:bb:60:cb: 9d:bb:0b:0a:44:88:48:17:60:a0:ea:31:b3:98:85: ee:2b:97:87:43:0a:01:e9:6f:fe:c7:88:9f:4a:92: ae:e7:64:b9:cb:80:c1:af:a5:15:ac:a7:20:1d:be: 4a:ec:1d:6e:a8:f5:9e:58:5a:b3:ee:d2:44:e1:c0: 60:86:8e:54:e0:28:9b:c2:de:cc:d9:f1:1a:fb:ed: 8e:d3:5d:73:94:92:7f:51:83:dc:e9:05:90:9b:8e: 86:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:AA:D9:14:C2:51:6E:3D:F2:E1:7E:58:87:FC:2D:F8:F5:85:BD:38 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/narZFMJRbj3y4X5Yh_wt-PWFvTg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.78.0.0/18 Signature Algorithm: sha256WithRSAEncryption 35:8e:61:76:a4:eb:75:7c:46:fb:e8:42:38:35:c2:16:72:68: f0:bb:68:e4:03:bb:b4:33:30:bc:57:09:e3:18:9c:e4:fb:fb: 28:ea:15:6c:21:66:dc:5c:3a:6b:a9:73:e7:f8:14:17:87:18: d4:26:42:77:f9:12:23:bf:1a:10:0d:56:b7:81:ad:48:ec:0a: f2:86:76:96:93:7e:f8:b2:93:cd:d2:8b:16:8a:a3:a3:dc:75: d5:d4:87:3e:f3:21:78:ab:8e:cb:93:85:97:63:56:41:6b:cc: fe:80:1c:85:59:6c:00:c0:1b:7f:72:64:06:1d:87:8f:ac:50: 5e:3c:1b:53:34:00:fe:6a:65:02:4d:13:7b:3a:36:d5:40:c2: f1:e3:5f:d7:96:b8:b3:0a:e9:c9:94:d5:67:0e:7e:c5:f0:df: d3:19:49:5e:62:60:d3:c0:64:7b:91:6f:c1:3f:07:d7:45:7a: 83:8b:ef:af:06:bc:b2:65:fb:04:20:b7:d4:62:3a:3d:15:9e: df:39:ff:99:81:75:e0:f7:82:eb:a5:78:43:ee:3b:2d:65:7f: 4f:61:78:13:72:85:01:8f:3a:0f:51:79:9d:1e:2e:67:d0:b4: b0:cd:23:9d:e4:6e:e4:6f:91:df:18:2f:7a:66:17:0a:95:98: 90:2a:88:84 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICGpswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4Mjcw OTEzMTlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDlEQUFEOTE0QzI1MTZF M0RGMkUxN0U1ODg3RkMyREY4RjU4NUJEMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC50IOJ5hiuQ7HlusAJiyYsGqpzXuGKE70EGmEidznzbj3Wjnsa SG7dG7mMzVkuq/zuDlkfmkURj0agCjpqZve5QwByxkOw+OLCsdgThvEgsNVBfLt3 hcyvbLP4EgR+i/HwFGV6D5OieO+9Rq9z6Nyw/APmXsfb21qbUkD3faWVz9FVxPmQ N8eZJqrZKaa1guWSuXWg2eTahYM/EcYd98Tz47tgy527CwpEiEgXYKDqMbOYhe4r l4dDCgHpb/7HiJ9Kkq7nZLnLgMGvpRWspyAdvkrsHW6o9Z5YWrPu0kThwGCGjlTg KJvC3szZ8Rr77Y7TXXOUkn9Rg9zpBZCbjoZ/AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUnarZFMJRbj3y4X5Yh/wt+PWFvTgwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvbmFyWkZNSlJiajN5NFg1WWhfd3Qt UFdGdlRnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBtNOADAN BgkqhkiG9w0BAQsFAAOCAQEANY5hdqTrdXxG++hCODXCFnJo8Lto5AO7tDMwvFcJ 4xic5Pv7KOoVbCFm3Fw6a6lz5/gUF4cY1CZCd/kSI78aEA1Wt4GtSOwK8oZ2lpN+ +LKTzdKLFoqjo9x11dSHPvMheKuOy5OFl2NWQWvM/oAchVlsAMAbf3JkBh2Hj6xQ XjwbUzQA/mplAk0Tezo21UDC8eNf15a4swrpyZTVZw5+xfDf0xlJXmJg08Bke5Fv wT8H10V6g4vvrwa8smX7BCC31GI6PRWe3zn/mYF14PeC66V4Q+47LWV/T2F4E3KF AY86D1F5nR4uZ9C0sM0jneRu5G+R3xgvemYXCpWYkCqIhA== -----END CERTIFICATE-----Generated at Sun Sep 7 23:34:16 2025 by rpki-client