$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/ymPcJ6yJgC7_vZ70f4P8WIZOiHM.roa File: ymPcJ6yJgC7_vZ70f4P8WIZOiHM.roa (raw, json) Hash identifier: 3+9oCRrkZ5BGRdTwVzklyBc/6a7StsZ0psgpEwrD8A4= Subject key identifier: CA:63:DC:27:AC:89:80:2E:FF:BD:9E:F4:7F:83:FC:58:86:4E:88:73 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 199F Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ymPcJ6yJgC7_vZ70f4P8WIZOiHM.roa Signing time: Fri 22 Aug 2025 08:53:12 +0000 ROA not before: Fri 22 Aug 2025 08:53:12 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9919 IP address blocks: 122.147.168.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 03:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6559 (0x199f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 22 08:53:12 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=CA63DC27AC89802EFFBD9EF47F83FC58864E8873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2d:10:73:37:5e:8b:ec:66:77:9e:f6:59:2b: de:6b:89:1c:10:3b:81:ac:b8:95:31:86:ae:c0:cf: ee:3e:75:fd:75:11:c2:d6:f4:54:f0:0d:3d:63:7e: 9c:d8:20:04:89:dd:90:7d:9e:43:fb:da:1f:f1:03: c7:ca:74:ab:8d:dc:1b:8e:11:2d:a6:db:a6:13:a9: 90:32:69:6d:86:b2:e4:26:b4:5d:05:1c:73:fa:11: d5:a7:bd:fe:bb:e1:64:9c:22:47:9e:4c:d5:83:01: 2d:a2:00:dc:96:77:8b:e0:55:98:14:1f:dc:da:68: f5:e6:0f:15:45:d2:d3:5c:44:e6:19:09:1b:59:01: 46:4c:76:44:5a:71:b5:7f:4c:3e:87:82:ab:3e:4e: 1b:08:d3:d5:57:99:b8:a2:fe:72:21:a0:20:0e:9d: 57:22:ae:c0:bf:5e:83:36:a2:94:c2:4a:8b:34:4b: 5c:68:4e:bc:b7:f6:76:ef:f5:6c:5b:c5:43:26:9b: 63:cb:f2:e2:bf:b3:fa:69:a8:9c:46:c2:ad:fa:d0: 74:05:6e:51:92:c1:0b:5f:c4:2c:c7:98:32:6a:be: 1c:2a:64:d4:cf:23:9b:c1:31:a9:91:e8:2d:d8:9c: 43:ed:6b:ab:76:3f:8a:d2:b3:50:29:ba:81:64:87: a0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:63:DC:27:AC:89:80:2E:FF:BD:9E:F4:7F:83:FC:58:86:4E:88:73 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ymPcJ6yJgC7_vZ70f4P8WIZOiHM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.147.168.0/21 Signature Algorithm: sha256WithRSAEncryption 1a:53:6a:b4:ba:ef:92:42:bb:54:ad:4f:3d:1f:4a:13:80:b2: cd:6f:2e:7e:1a:d8:79:69:3a:71:3c:cd:ee:21:38:3e:d0:b9: 42:7b:83:86:9b:8e:e6:c8:07:f6:47:42:c7:01:e3:3b:2b:5b: 7e:66:6e:f9:1c:49:5b:35:01:ad:bc:2d:a5:8a:53:05:57:bb: 73:a4:95:63:a2:c8:14:5d:c5:c5:f8:eb:74:06:4b:13:2a:50: 2f:e1:17:47:47:fa:fd:54:88:42:5e:37:12:8e:52:0c:3d:ed: d2:61:d2:d4:93:82:ea:57:5e:63:04:75:5b:96:d4:7c:9b:31: d6:1d:0c:56:fc:16:79:e6:ac:2c:bf:e7:72:e2:51:64:98:42: 57:52:05:5f:78:3f:4d:4b:7a:5d:ef:5a:91:b3:27:c5:34:70: b8:bd:d2:8b:d0:82:90:82:79:d2:ec:a2:d1:30:fd:70:1e:29: 56:c5:f3:b2:f1:a1:26:18:a0:91:ff:12:31:58:90:b6:12:31: f4:6b:9b:09:94:f4:e2:8c:47:19:54:30:06:dd:97:90:3b:7b: 52:55:85:ea:02:09:71:2e:03:ca:b7:af:a7:ec:41:e5:45:24: ff:6c:05:04:ce:c1:9f:0a:16:2c:0a:94:a1:de:2a:f4:e6:b0: a6:c2:58:41 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICGZ8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4MjIw ODUzMTJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKENBNjNEQzI3QUM4OTgw MkVGRkJEOUVGNDdGODNGQzU4ODY0RTg4NzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJLRBzN16L7GZ3nvZZK95riRwQO4GsuJUxhq7Az+4+df11EcLW 9FTwDT1jfpzYIASJ3ZB9nkP72h/xA8fKdKuN3BuOES2m26YTqZAyaW2GsuQmtF0F HHP6EdWnvf674WScIkeeTNWDAS2iANyWd4vgVZgUH9zaaPXmDxVF0tNcROYZCRtZ AUZMdkRacbV/TD6Hgqs+ThsI09VXmbii/nIhoCAOnVcirsC/XoM2opTCSos0S1xo Try39nbv9WxbxUMmm2PL8uK/s/ppqJxGwq360HQFblGSwQtfxCzHmDJqvhwqZNTP I5vBMamR6C3YnEPta6t2P4rSs1ApuoFkh6BxAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUymPcJ6yJgC7/vZ70f4P8WIZOiHMwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMveW1QY0o2eUpnQzdfdlo3MGY0UDhX SVpPaUhNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA3qTqDAN BgkqhkiG9w0BAQsFAAOCAQEAGlNqtLrvkkK7VK1PPR9KE4CyzW8ufhrYeWk6cTzN 7iE4PtC5QnuDhpuO5sgH9kdCxwHjOytbfmZu+RxJWzUBrbwtpYpTBVe7c6SVY6LI FF3FxfjrdAZLEypQL+EXR0f6/VSIQl43Eo5SDD3t0mHS1JOC6ldeYwR1W5bUfJsx 1h0MVvwWeeasLL/ncuJRZJhCV1IFX3g/TUt6Xe9akbMnxTRwuL3Si9CCkIJ50uyi 0TD9cB4pVsXzsvGhJhigkf8SMViQthIx9GubCZT04oxHGVQwBt2XkDt7UlWF6gIJ cS4Dyrevp+xB5UUk/2wFBM7BnwoWLAqUod4q9OawpsJYQQ== -----END CERTIFICATE-----Generated at Sun Sep 7 23:31:15 2025 by rpki-client