$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/ofnB0uLgsGKSKJ0v355vs0Z30KE.roa File: ofnB0uLgsGKSKJ0v355vs0Z30KE.roa (raw, json) Hash identifier: zkDN0+x3ROP3KcAvR7gwCWAG9TfNgAsn1E0DLBJt00c= Subject key identifier: A1:F9:C1:D2:E2:E0:B0:62:92:28:9D:2F:DF:9E:6F:B3:46:77:D0:A1 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1998 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ofnB0uLgsGKSKJ0v355vs0Z30KE.roa Signing time: Fri 22 Aug 2025 08:53:10 +0000 ROA not before: Fri 22 Aug 2025 08:53:10 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 4780 IP address blocks: 123.205.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 14:46:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6552 (0x1998) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 22 08:53:10 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=A1F9C1D2E2E0B06292289D2FDF9E6FB34677D0A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c0:67:7b:36:6f:8f:ce:50:eb:9e:e0:7f:8b: 26:92:92:86:eb:5e:08:74:3e:e1:ed:ad:ec:b9:0e: 34:2e:69:80:d5:55:c3:b7:db:a4:bf:76:14:5e:37: 2f:90:c1:a0:ea:87:c2:5c:4b:6f:b0:31:6f:da:ce: 92:7f:fe:dd:6d:b2:9f:66:c1:51:e1:cd:78:a6:27: 17:ac:1f:48:01:08:e5:07:b9:3c:11:00:62:b0:6b: 46:6c:2b:5d:79:ec:fe:d1:23:d0:9a:8e:1a:68:57: 02:30:61:cb:2b:fe:fd:6d:f2:33:fd:9c:6d:34:ae: b1:76:7b:76:e5:db:7c:9d:59:39:7b:3f:3e:9c:18: 17:89:df:5b:a6:95:9d:0b:14:fe:6e:ae:6b:e0:81: f5:f9:7b:db:65:e6:55:37:75:cb:3d:57:ed:2b:d0: ab:ac:54:84:0c:3a:22:35:ce:f2:e1:8a:9c:72:a7: c6:b3:bb:9c:48:6d:87:99:b7:f2:d5:4a:71:1c:ff: 3a:5a:94:57:06:6d:13:71:a7:6d:f1:b4:36:6a:2c: a5:22:c1:dd:73:39:21:84:af:4f:7f:52:bd:3c:b7: 7c:37:b7:12:a8:26:43:8b:79:b6:c2:97:eb:12:c6: dd:42:41:0f:18:ad:61:9c:6b:e8:a4:01:55:7d:8f: d7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:F9:C1:D2:E2:E0:B0:62:92:28:9D:2F:DF:9E:6F:B3:46:77:D0:A1 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ofnB0uLgsGKSKJ0v355vs0Z30KE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.205.56.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:36:56:54:71:6a:ac:61:71:d1:73:b4:52:e7:07:63:ac:1a: 5a:c7:72:d2:f5:f3:71:03:a7:9d:28:42:20:6c:34:58:99:db: 87:54:2b:4b:a7:f8:38:11:d2:60:e3:f4:4c:ec:3b:c1:4d:e1: 80:81:c9:10:e8:0e:6d:3a:30:75:db:17:cb:fd:cc:9f:ed:e5: 1b:0d:0e:dd:0a:8e:f4:a4:a5:96:ac:98:d9:d1:3c:17:d1:7a: 9d:cf:dd:23:1b:92:5e:a0:55:87:75:ef:06:9d:4c:8b:55:9b: 3f:d5:58:12:52:af:70:9a:40:e6:fa:dd:e2:86:88:5c:d5:89: cd:c5:e1:54:71:6d:3b:f8:94:b1:f8:09:94:63:70:a1:1c:f5: f4:b4:b9:41:c4:e1:98:96:91:25:c6:84:eb:79:2e:8f:2d:a1: 78:c2:fc:4f:60:40:70:f5:1d:1e:21:c0:82:b8:59:65:63:a0: 6b:63:99:90:06:07:c5:7f:ca:a0:fe:53:75:cc:77:0e:67:0f: 86:9d:f1:35:91:1a:1c:ea:10:86:bc:da:db:90:99:db:05:62: c6:cb:89:41:61:ec:aa:ef:7b:d4:6a:7f:16:ee:8d:29:1c:c3: fa:69:7e:4c:76:4f:f0:ca:d3:86:ac:53:b0:9e:6b:0c:8e:55: 76:71:50:24 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICGZgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4MjIw ODUzMTBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEExRjlDMUQyRTJFMEIw NjI5MjI4OUQyRkRGOUU2RkIzNDY3N0QwQTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrwGd7Nm+PzlDrnuB/iyaSkobrXgh0PuHtrey5DjQuaYDVVcO3 26S/dhReNy+QwaDqh8JcS2+wMW/azpJ//t1tsp9mwVHhzXimJxesH0gBCOUHuTwR AGKwa0ZsK1157P7RI9CajhpoVwIwYcsr/v1t8jP9nG00rrF2e3bl23ydWTl7Pz6c GBeJ31umlZ0LFP5urmvggfX5e9tl5lU3dcs9V+0r0KusVIQMOiI1zvLhipxyp8az u5xIbYeZt/LVSnEc/zpalFcGbRNxp23xtDZqLKUiwd1zOSGEr09/Ur08t3w3txKo JkOLebbCl+sSxt1CQQ8YrWGca+ikAVV9j9dJAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUofnB0uLgsGKSKJ0v355vs0Z30KEwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvb2ZuQjB1TGdzR0tTS0owdjM1NXZz MFozMEtFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHvNODAN BgkqhkiG9w0BAQsFAAOCAQEAHTZWVHFqrGFx0XO0UucHY6waWsdy0vXzcQOnnShC IGw0WJnbh1QrS6f4OBHSYOP0TOw7wU3hgIHJEOgObTowddsXy/3Mn+3lGw0O3QqO 9KSllqyY2dE8F9F6nc/dIxuSXqBVh3XvBp1Mi1WbP9VYElKvcJpA5vrd4oaIXNWJ zcXhVHFtO/iUsfgJlGNwoRz19LS5QcThmJaRJcaE63kujy2heML8T2BAcPUdHiHA grhZZWOga2OZkAYHxX/KoP5Tdcx3DmcPhp3xNZEaHOoQhrza25CZ2wVixsuJQWHs qu971Gp/Fu6NKRzD+ml+THZP8MrThqxTsJ5rDI5VdnFQJA== -----END CERTIFICATE-----Generated at Sat Sep 6 14:16:57 2025 by rpki-client