$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/y2r2CypMLIdDc31fa0Lv8sh4KOc.roa File: y2r2CypMLIdDc31fa0Lv8sh4KOc.roa (raw, json) Hash identifier: PQjp4IgBh6AZ70rI3ilHNIQ6dBJsvnNWpbhUZUbsVpM= Subject key identifier: CB:6A:F6:0B:2A:4C:2C:87:43:73:7D:5F:6B:42:EF:F2:C8:78:28:E7 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1ABD Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/y2r2CypMLIdDc31fa0Lv8sh4KOc.roa Signing time: Wed 27 Aug 2025 09:19:18 +0000 ROA not before: Wed 27 Aug 2025 09:19:18 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18049 IP address blocks: 61.61.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 04:16:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6845 (0x1abd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 27 09:19:18 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=CB6AF60B2A4C2C8743737D5F6B42EFF2C87828E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:8d:a4:73:34:15:1b:d3:2e:47:a8:ce:c0:47: be:38:b6:c0:df:19:90:78:bc:ab:c4:e4:3d:4f:4c: a2:95:b8:e5:d2:cd:ff:d1:89:b2:ca:a7:52:c5:b3: aa:1a:f1:d7:08:bb:d5:1d:23:44:69:83:a4:4a:0a: fe:89:5a:d5:1f:0f:2d:3d:6e:94:42:03:5d:27:22: ce:4c:4f:9b:8d:d0:bf:ab:9c:00:ca:6e:43:f6:e3: e5:3c:a2:d9:ca:18:af:92:74:61:73:7d:e0:91:ef: 0a:c9:2f:bf:f8:8a:91:83:1d:c2:c6:56:6a:4c:0a: 2d:b9:c2:72:08:29:89:7c:09:7b:28:24:5f:44:94: 56:8a:c6:b1:b1:ad:51:8a:40:8d:2e:82:2d:85:56: ba:9f:b5:fe:4f:7e:0c:d9:e4:f6:9b:8b:ae:b4:a1: 59:b7:bf:65:61:da:d9:7c:75:24:50:ab:5d:f5:c8: 79:20:30:0f:8a:6f:41:d0:6e:75:f0:8e:96:9d:fa: 45:8e:53:34:a8:77:19:34:af:99:f7:22:87:45:b3: 21:84:61:a2:ef:c7:4f:a7:ad:b5:2a:4b:30:6f:2a: ef:a8:c9:da:28:25:98:d3:46:40:00:f7:72:1c:b1: af:2a:02:12:a4:c1:23:b5:67:99:57:bb:94:ee:b4: 65:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:6A:F6:0B:2A:4C:2C:87:43:73:7D:5F:6B:42:EF:F2:C8:78:28:E7 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/y2r2CypMLIdDc31fa0Lv8sh4KOc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.61.36.0/22 Signature Algorithm: sha256WithRSAEncryption 81:bf:77:2a:e5:d4:b8:33:d3:01:4d:b6:58:45:08:9d:57:9e: 37:83:52:eb:9f:2c:4f:dd:5b:9e:39:20:1b:5d:a4:5b:29:ad: 4d:b5:76:61:8d:31:c5:da:cd:00:5f:e8:00:92:b5:9e:34:a0: 88:a7:9d:4d:af:54:08:04:10:3b:11:44:ef:15:53:12:20:0c: bc:bd:d5:87:82:fc:13:76:e7:8c:03:b4:29:e9:b7:2f:3e:9a: 70:3f:b2:35:d1:3c:3f:5c:bd:4f:3e:59:cd:cc:e6:96:bd:71: 22:89:fe:0f:96:3d:b3:e3:e6:cb:8e:74:da:07:c2:66:cc:69: e6:1a:4f:19:d7:3d:27:12:1c:ed:08:16:a5:3b:15:e1:e0:2e: 2d:14:67:7e:c7:76:e8:df:01:83:3e:3f:b3:81:8e:7c:e6:98: a3:45:02:9a:c4:59:c5:8d:2f:ce:07:b1:3d:40:25:a0:db:02: 90:56:87:7a:30:da:87:99:ba:c9:d2:9f:41:a1:c9:40:90:0e: e6:17:42:c2:98:60:67:1a:e0:32:fd:a7:40:04:27:d7:58:e5: c8:c5:b4:a8:cf:ee:b4:b3:cd:c7:a8:d4:0e:9e:4a:8a:fe:cb: 9c:94:b1:36:11:ac:13:2f:9c:65:63:0d:3c:38:b5:87:93:5e: 82:a9:33:fd -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICGr0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4Mjcw OTE5MThaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKENCNkFGNjBCMkE0QzJD ODc0MzczN0Q1RjZCNDJFRkYyQzg3ODI4RTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVjaRzNBUb0y5HqM7AR744tsDfGZB4vKvE5D1PTKKVuOXSzf/R ibLKp1LFs6oa8dcIu9UdI0Rpg6RKCv6JWtUfDy09bpRCA10nIs5MT5uN0L+rnADK bkP24+U8otnKGK+SdGFzfeCR7wrJL7/4ipGDHcLGVmpMCi25wnIIKYl8CXsoJF9E lFaKxrGxrVGKQI0ugi2FVrqftf5PfgzZ5Pabi660oVm3v2Vh2tl8dSRQq131yHkg MA+Kb0HQbnXwjpad+kWOUzSodxk0r5n3IodFsyGEYaLvx0+nrbUqSzBvKu+oydoo JZjTRkAA93Icsa8qAhKkwSO1Z5lXu5TutGXTAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUy2r2CypMLIdDc31fa0Lv8sh4KOcwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMveTJyMkN5cE1MSWREYzMxZmEwTHY4 c2g0S09jLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAj09JDAN BgkqhkiG9w0BAQsFAAOCAQEAgb93KuXUuDPTAU22WEUInVeeN4NS658sT91bnjkg G12kWymtTbV2YY0xxdrNAF/oAJK1njSgiKedTa9UCAQQOxFE7xVTEiAMvL3Vh4L8 E3bnjAO0Kem3Lz6acD+yNdE8P1y9Tz5Zzczmlr1xIon+D5Y9s+Pmy4502gfCZsxp 5hpPGdc9JxIc7QgWpTsV4eAuLRRnfsd26N8Bgz4/s4GOfOaYo0UCmsRZxY0vzgex PUAloNsCkFaHejDah5m6ydKfQaHJQJAO5hdCwphgZxrgMv2nQAQn11jlyMW0qM/u tLPNx6jUDp5Kiv7LnJSxNhGsEy+cZWMNPDi1h5Negqkz/Q== -----END CERTIFICATE-----Generated at Sun Sep 7 03:59:42 2025 by rpki-client