$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/sdGAL683tlXRimiFxswaFwD0Nws.roa File: sdGAL683tlXRimiFxswaFwD0Nws.roa (raw, json) Hash identifier: iUIJcCFWVBb2OVqVveeT3RpTKZdBY10drmGF//CDDT0= Subject key identifier: B1:D1:80:2F:AF:37:B6:55:D1:8A:68:85:C6:CC:1A:17:00:F4:37:0B Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1A83 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/sdGAL683tlXRimiFxswaFwD0Nws.roa Signing time: Wed 27 Aug 2025 09:09:31 +0000 ROA not before: Wed 27 Aug 2025 09:09:31 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18049 IP address blocks: 61.61.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 04:16:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6787 (0x1a83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 27 09:09:31 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=B1D1802FAF37B655D18A6885C6CC1A1700F4370B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:26:af:9c:9f:12:26:8b:a2:e4:20:a7:1a:3d: 66:58:ee:68:35:54:b2:49:68:68:c0:f4:ff:ac:ae: 01:66:41:d0:74:44:64:e0:8c:c3:d1:eb:2d:ad:d4: 4f:ca:85:84:bc:9b:3e:63:1a:00:eb:66:f9:d5:7a: 33:13:e0:91:2c:31:42:6f:a5:3e:25:25:93:9b:e8: e5:62:e8:b1:c1:ac:85:20:dc:f3:f2:61:14:d2:58: 8a:53:4f:c9:c8:b3:61:f3:6d:81:42:d7:fd:c1:8a: ee:53:0d:10:ea:ef:c9:56:ee:07:0f:43:f3:0d:fd: f8:5e:2f:b3:fa:d4:c5:15:70:34:2f:50:cb:fd:b2: 76:2e:fe:c5:10:78:a0:54:ce:65:1f:5e:cd:7b:45: 87:d7:6c:ce:c1:f1:52:29:fd:41:d9:4a:76:78:e0: 6e:9f:ad:5d:81:ae:fd:8d:01:73:3b:bd:fe:94:e1: cf:c3:f8:69:ff:f7:ef:4a:5d:88:7d:7a:c8:3a:1a: c1:80:8d:3c:f5:5a:18:7e:08:f5:7b:d2:8d:0a:72: 77:fd:cc:85:16:96:d8:3b:ac:6d:9b:e1:61:01:b4: 42:bc:a3:4b:27:14:65:b8:ee:f7:98:4b:be:d3:23: 14:b6:e0:47:88:8c:00:a4:65:2c:24:f2:df:96:0a: 1c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:D1:80:2F:AF:37:B6:55:D1:8A:68:85:C6:CC:1A:17:00:F4:37:0B X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/sdGAL683tlXRimiFxswaFwD0Nws.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.61.8.0/21 Signature Algorithm: sha256WithRSAEncryption 1c:91:66:ba:8d:7b:95:75:04:fb:f8:43:d2:55:79:b7:f2:93: ea:cb:9c:4b:d9:64:53:7c:12:d1:06:fd:16:2e:24:f1:27:95: be:71:a1:0f:3d:bc:f9:3a:fe:d3:1c:0d:fe:87:85:e8:cc:b5: ba:83:d7:9b:58:4e:ad:17:6e:d3:e3:de:b2:dd:6a:f7:ee:06: 89:45:5c:55:19:5f:5d:74:ed:70:22:67:0a:75:f6:07:21:b8: 0e:fc:e1:05:d3:ad:4c:bb:f4:53:df:8c:99:d6:de:e6:de:90: 99:51:ac:04:99:c7:bf:81:d0:bd:2d:b8:04:d8:4f:97:c7:b7: 05:da:f2:0f:23:da:d9:a0:d2:c4:ff:d2:ab:ac:9a:6f:f4:42: ae:2e:23:8f:7b:a8:d5:e1:98:3c:6c:98:88:fe:68:02:d3:a9: 72:04:86:aa:71:00:b2:87:d2:ad:a5:9f:98:cc:16:40:e4:9a: 77:f5:dd:43:a2:79:27:8f:7b:d7:f0:75:c1:fb:99:d9:3d:f0: 28:b9:6d:9f:aa:2d:e1:c2:0f:b8:a8:0f:ca:bb:b6:4e:8f:bd: a8:02:ed:c7:0e:2b:9e:91:04:0f:b8:c9:e7:39:e2:05:1b:37: 4b:e8:6e:0e:86:5d:c1:f4:71:87:3e:b9:79:91:1e:02:52:a2: 31:c5:dc:d8 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICGoMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4Mjcw OTA5MzFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEIxRDE4MDJGQUYzN0I2 NTVEMThBNjg4NUM2Q0MxQTE3MDBGNDM3MEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDiJq+cnxImi6LkIKcaPWZY7mg1VLJJaGjA9P+srgFmQdB0RGTg jMPR6y2t1E/KhYS8mz5jGgDrZvnVejMT4JEsMUJvpT4lJZOb6OVi6LHBrIUg3PPy YRTSWIpTT8nIs2HzbYFC1/3Biu5TDRDq78lW7gcPQ/MN/fheL7P61MUVcDQvUMv9 snYu/sUQeKBUzmUfXs17RYfXbM7B8VIp/UHZSnZ44G6frV2Brv2NAXM7vf6U4c/D +Gn/9+9KXYh9esg6GsGAjTz1Whh+CPV70o0Kcnf9zIUWltg7rG2b4WEBtEK8o0sn FGW47veYS77TIxS24EeIjACkZSwk8t+WChwHAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUsdGAL683tlXRimiFxswaFwD0NwswHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvc2RHQUw2ODN0bFhSaW1pRnhzd2FG d0QwTndzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAz09CDAN BgkqhkiG9w0BAQsFAAOCAQEAHJFmuo17lXUE+/hD0lV5t/KT6sucS9lkU3wS0Qb9 Fi4k8SeVvnGhDz28+Tr+0xwN/oeF6My1uoPXm1hOrRdu0+Pest1q9+4GiUVcVRlf XXTtcCJnCnX2ByG4DvzhBdOtTLv0U9+Mmdbe5t6QmVGsBJnHv4HQvS24BNhPl8e3 BdryDyPa2aDSxP/Sq6yab/RCri4jj3uo1eGYPGyYiP5oAtOpcgSGqnEAsofSraWf mMwWQOSad/XdQ6J5J4971/B1wfuZ2T3wKLltn6ot4cIPuKgPyru2To+9qALtxw4r npEED7jJ5zniBRs3S+huDoZdwfRxhz65eZEeAlKiMcXc2A== -----END CERTIFICATE-----Generated at Sun Sep 7 03:59:41 2025 by rpki-client