$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/u-glGgrWDmJaj2lt0oLD9uJl6Po.roa File: u-glGgrWDmJaj2lt0oLD9uJl6Po.roa (raw, json) Hash identifier: 39qUkMWkEdWBofdVLa5V0mt6fMnijSMrETUvo18UPl4= Subject key identifier: BB:E8:25:1A:0A:D6:0E:62:5A:8F:69:6D:D2:82:C3:F6:E2:65:E8:FA Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1A18 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/u-glGgrWDmJaj2lt0oLD9uJl6Po.roa Signing time: Fri 22 Aug 2025 08:53:43 +0000 ROA not before: Fri 22 Aug 2025 08:53:43 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9919 IP address blocks: 122.146.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 03:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6680 (0x1a18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 22 08:53:43 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=BBE8251A0AD60E625A8F696DD282C3F6E265E8FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5e:cf:fa:68:18:3c:59:70:94:ad:f9:81:82: 68:e8:ea:00:e7:e1:26:aa:e3:8d:de:4f:59:5f:e0: 13:31:09:06:9f:65:1c:0b:b9:97:d6:f2:59:45:7d: 24:fe:39:29:cf:e3:27:78:aa:6e:5b:04:e1:ff:41: f0:d2:ab:6b:f6:2c:7e:90:ab:a0:1e:1c:ba:d3:85: cf:9a:26:fa:64:30:17:ce:db:e6:fb:dc:bf:da:66: a0:b5:4b:ce:96:b5:2a:cf:6a:aa:fc:6a:62:cf:72: 3b:6a:4c:4d:33:1c:1a:a4:9b:2e:0f:b3:10:22:97: b9:a8:9c:82:d2:3c:1a:74:39:3d:e4:87:41:8d:b0: ed:6f:2e:c0:2a:fc:ff:2c:e0:4d:f5:06:44:0c:81: fa:9f:fe:a9:8b:3c:00:e4:a1:f8:3e:ff:87:bb:81: 28:ff:93:5d:ff:58:e6:c7:6c:cd:2e:d5:e5:35:94: ca:d4:8c:66:c1:a7:96:67:b0:de:88:2e:1c:d8:89: 5b:0d:d3:e4:e4:04:5b:34:de:3b:ec:b1:92:90:ff: 90:71:4b:8f:5a:7a:3b:19:2d:b1:86:77:93:79:8a: 04:5d:2d:c3:30:c6:01:dd:41:70:4f:74:7e:54:47: 31:25:b0:3f:bf:ed:3f:20:2b:fb:3c:9f:37:10:9b: 11:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:E8:25:1A:0A:D6:0E:62:5A:8F:69:6D:D2:82:C3:F6:E2:65:E8:FA X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/u-glGgrWDmJaj2lt0oLD9uJl6Po.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.146.0.0/18 Signature Algorithm: sha256WithRSAEncryption 70:fb:0a:1b:30:1b:c4:90:ff:13:db:dd:7a:be:0b:57:51:d3: 13:58:4f:bd:9d:dd:4b:d7:9c:f0:f6:ed:c3:32:47:7d:cb:45: 3d:e6:1a:18:48:27:3d:91:99:83:8c:a4:0a:13:ae:05:09:19: c1:c0:8d:f2:43:b4:f4:0e:e2:a5:20:20:db:f3:a9:c3:10:3f: c7:72:b3:65:08:a3:0b:3d:43:12:7a:3d:85:cb:58:bc:6f:6b: 5a:a8:c5:f5:5b:1e:a8:cc:b4:9c:6e:82:a6:95:5f:a5:5d:01: ba:37:ae:de:ec:a1:f6:b2:c8:49:d9:09:36:a2:72:6a:59:88: 78:76:04:4f:02:75:cb:09:db:9d:98:27:79:eb:59:ea:d7:51: 5b:f9:71:09:ec:c8:58:d6:39:f3:8e:6f:c8:d9:47:5d:ed:ec: 8d:15:d8:0a:a8:16:98:8b:7d:51:3f:6d:b7:35:fa:91:cc:b5: 78:fe:9b:99:39:ee:8f:fa:da:39:c6:b1:7a:75:89:57:fe:28: 4a:42:f2:40:4d:eb:89:66:d9:21:a5:a5:e8:f5:6b:37:b1:ef: 09:22:cd:cf:b6:db:36:9f:36:fe:7a:8e:02:dd:36:67:39:db: 16:08:e8:e0:d0:e5:7c:8d:67:64:79:de:5e:fc:e9:dd:3c:b6: 3a:53:bf:e9 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICGhgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4MjIw ODUzNDNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEJCRTgyNTFBMEFENjBF NjI1QThGNjk2REQyODJDM0Y2RTI2NUU4RkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCnXs/6aBg8WXCUrfmBgmjo6gDn4Saq443eT1lf4BMxCQafZRwL uZfW8llFfST+OSnP4yd4qm5bBOH/QfDSq2v2LH6Qq6AeHLrThc+aJvpkMBfO2+b7 3L/aZqC1S86WtSrPaqr8amLPcjtqTE0zHBqkmy4PsxAil7monILSPBp0OT3kh0GN sO1vLsAq/P8s4E31BkQMgfqf/qmLPADkofg+/4e7gSj/k13/WObHbM0u1eU1lMrU jGbBp5ZnsN6ILhzYiVsN0+TkBFs03jvssZKQ/5BxS49aejsZLbGGd5N5igRdLcMw xgHdQXBPdH5URzElsD+/7T8gK/s8nzcQmxG/AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUu+glGgrWDmJaj2lt0oLD9uJl6PowHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvdS1nbEdncldEbUphajJsdDBvTEQ5 dUpsNlBvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBnqSADAN BgkqhkiG9w0BAQsFAAOCAQEAcPsKGzAbxJD/E9vder4LV1HTE1hPvZ3dS9ec8Pbt wzJHfctFPeYaGEgnPZGZg4ykChOuBQkZwcCN8kO09A7ipSAg2/OpwxA/x3KzZQij Cz1DEno9hctYvG9rWqjF9VseqMy0nG6CppVfpV0Bujeu3uyh9rLISdkJNqJyalmI eHYETwJ1ywnbnZgneetZ6tdRW/lxCezIWNY5845vyNlHXe3sjRXYCqgWmIt9UT9t tzX6kcy1eP6bmTnuj/raOcaxenWJV/4oSkLyQE3riWbZIaWl6PVrN7HvCSLNz7bb Np82/nqOAt02ZznbFgjo4NDlfI1nZHneXvzp3Ty2OlO/6Q== -----END CERTIFICATE-----Generated at Sun Sep 7 23:34:16 2025 by rpki-client