$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/uTVVB1IXd9OQaNv3mz9EV5hWF0Y.roa File: uTVVB1IXd9OQaNv3mz9EV5hWF0Y.roa (raw, json) Hash identifier: TAftUknEBvvj9Ht+8iq3zSW9UhB2JxtNwJTFaZVxyd0= Subject key identifier: B9:35:55:07:52:17:77:D3:90:68:DB:F7:9B:3F:44:57:98:56:17:46 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1991 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/uTVVB1IXd9OQaNv3mz9EV5hWF0Y.roa Signing time: Fri 22 Aug 2025 08:53:08 +0000 ROA not before: Fri 22 Aug 2025 08:53:08 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9919 IP address blocks: 122.147.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 03:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6545 (0x1991) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 22 08:53:08 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=B9355507521777D39068DBF79B3F445798561746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c3:b7:7f:8b:e5:ba:1a:81:53:c8:79:90:0a: 83:08:d1:3c:2d:8d:17:ed:8c:60:47:12:f9:94:8b: 46:f7:5f:9f:6c:17:5c:47:63:d2:5c:2b:7b:65:c5: 35:d8:88:84:a2:95:56:84:06:95:fe:36:92:66:b5: 24:53:9f:18:08:4e:e2:01:30:fb:57:07:44:3a:98: c1:46:14:6c:b0:85:22:1f:b1:c8:2e:ed:7f:5d:d3: fd:2c:19:fd:c0:b4:9a:b9:eb:78:0e:5b:1a:64:b2: 4e:47:57:20:11:d0:aa:36:a0:fd:a7:e1:97:1c:70: 46:23:9c:ea:3c:1c:47:4a:f5:64:be:b0:9b:d3:15: 1f:8e:d2:12:0e:cb:1c:2f:e3:d9:32:ac:a3:9a:0e: c7:dc:68:60:c0:e3:db:66:cb:e5:90:2e:f3:8f:4c: 4e:ac:e3:0a:45:9d:16:2f:b8:bf:7f:14:4e:b2:d7: 7e:0e:79:2c:f4:5b:2d:0a:cd:d0:d3:86:48:88:1a: 5b:74:8b:53:dc:30:af:39:54:54:97:42:a7:24:9b: 8a:91:97:13:4b:c5:dc:d6:41:0d:70:e2:18:4b:f5: 22:f9:f6:56:16:a1:8e:bc:29:93:6e:a9:90:91:0a: ce:59:28:a6:7b:db:95:f2:a6:5f:f5:2b:96:52:af: f8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:35:55:07:52:17:77:D3:90:68:DB:F7:9B:3F:44:57:98:56:17:46 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/uTVVB1IXd9OQaNv3mz9EV5hWF0Y.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.147.176.0/20 Signature Algorithm: sha256WithRSAEncryption 0b:a5:9a:be:7b:0f:e7:fe:88:4c:f7:ba:ac:8d:b6:72:19:6f: ee:5d:ec:d3:92:e4:d5:87:80:75:75:75:1b:7b:e1:96:9d:26: 79:a3:c2:25:d6:8c:59:67:c8:66:6c:3b:8a:17:b1:0f:62:9f: 2e:88:e0:20:34:88:e3:0b:37:d7:d0:7b:bf:5a:6b:6b:31:e3: 98:86:49:d2:bd:fe:85:69:cc:61:71:36:d3:ef:a7:07:3a:f1: 65:62:1d:d9:01:93:bf:ee:4f:6e:df:5c:17:42:50:ea:1f:d5: f6:b1:02:80:6d:35:cb:7f:29:39:21:85:ae:a4:f1:85:20:e1: ae:c0:6e:1b:ec:da:2b:0a:3f:8d:7a:a1:01:dd:74:ff:93:7b: 07:1e:d1:3b:0a:2e:0d:10:e4:23:a6:30:04:95:cf:cf:42:4a: 26:1f:2b:1f:6e:f0:61:53:f5:a7:81:20:c6:80:36:fa:b4:bb: 91:97:9e:84:5d:f1:37:3f:cc:38:ae:4c:60:7e:d3:12:b7:d6: 90:88:8a:d2:52:03:9b:35:4f:44:9d:dd:07:fc:f3:41:e5:02: 12:a5:20:0d:34:d4:3e:44:a8:01:48:14:24:5c:96:f9:02:31: 33:cc:c9:fa:a1:1a:1f:d5:8b:31:33:89:67:cb:12:92:2a:9d: d7:3d:92:3f -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICGZEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4MjIw ODUzMDhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEI5MzU1NTA3NTIxNzc3 RDM5MDY4REJGNzlCM0Y0NDU3OTg1NjE3NDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8w7d/i+W6GoFTyHmQCoMI0TwtjRftjGBHEvmUi0b3X59sF1xH Y9JcK3tlxTXYiISilVaEBpX+NpJmtSRTnxgITuIBMPtXB0Q6mMFGFGywhSIfscgu 7X9d0/0sGf3AtJq563gOWxpksk5HVyAR0Ko2oP2n4ZcccEYjnOo8HEdK9WS+sJvT FR+O0hIOyxwv49kyrKOaDsfcaGDA49tmy+WQLvOPTE6s4wpFnRYvuL9/FE6y134O eSz0Wy0KzdDThkiIGlt0i1PcMK85VFSXQqckm4qRlxNLxdzWQQ1w4hhL9SL59lYW oY68KZNuqZCRCs5ZKKZ725Xypl/1K5ZSr/jjAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUuTVVB1IXd9OQaNv3mz9EV5hWF0YwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvdVRWVkIxSVhkOU9RYU52M216OUVW NWhXRjBZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBHqTsDAN BgkqhkiG9w0BAQsFAAOCAQEAC6WavnsP5/6ITPe6rI22chlv7l3s05Lk1YeAdXV1 G3vhlp0meaPCJdaMWWfIZmw7ihexD2KfLojgIDSI4ws319B7v1prazHjmIZJ0r3+ hWnMYXE20++nBzrxZWId2QGTv+5Pbt9cF0JQ6h/V9rECgG01y38pOSGFrqTxhSDh rsBuG+zaKwo/jXqhAd10/5N7Bx7ROwouDRDkI6YwBJXPz0JKJh8rH27wYVP1p4Eg xoA2+rS7kZeehF3xNz/MOK5MYH7TErfWkIiK0lIDmzVPRJ3dB/zzQeUCEqUgDTTU PkSoAUgUJFyW+QIxM8zJ+qEaH9WLMTOJZ8sSkiqd1z2SPw== -----END CERTIFICATE-----Generated at Sun Sep 7 23:34:15 2025 by rpki-client