$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/0FQEfS84Pj83jXImEi7kbEoToNc.roa File: 0FQEfS84Pj83jXImEi7kbEoToNc.roa (raw, json) Hash identifier: yVrTLJNoNVJLnWIfRjlP3m2W0g9oI+BmHsBaBKVX08U= Subject key identifier: D0:54:04:7D:2F:38:3E:3F:37:8D:72:26:12:2E:E4:6C:4A:13:A0:D7 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 18CB Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/0FQEfS84Pj83jXImEi7kbEoToNc.roa Signing time: Fri 22 Aug 2025 09:02:27 +0000 ROA not before: Fri 22 Aug 2025 09:02:27 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 198949 IP address blocks: 203.74.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 00:46:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6347 (0x18cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:02:27 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=D054047D2F383E3F378D7226122EE46C4A13A0D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5f:87:2f:6b:f4:48:9b:b8:0f:f7:7c:54:01: 9a:02:7d:24:a0:71:75:88:9b:39:08:ec:da:16:52: 02:46:c2:eb:b7:41:11:37:ba:72:1a:cd:fe:52:58: 6e:fe:60:13:58:70:75:2d:7d:ee:94:79:51:f3:e3: 85:0e:ef:89:03:26:e8:e6:d8:0d:90:5c:22:3c:c9: b5:2b:5b:9d:e5:9d:a3:d8:30:9b:9c:34:47:6b:51: 38:f2:22:6c:7c:7d:fc:7a:4c:8c:c2:24:2f:a0:a5: d5:07:b6:1f:64:1e:c7:74:09:9b:78:9a:fa:aa:5c: 6e:db:cf:4e:90:1f:62:d7:0e:6a:4b:83:ed:82:a9: b0:83:98:f3:84:02:87:83:32:9c:2c:cf:3b:ad:b0: 2b:1b:54:41:84:9a:a0:8b:ab:76:1b:1a:85:84:b0: f4:69:32:42:c1:57:96:2d:16:9a:d9:24:0c:db:f9: 9f:3c:57:9f:94:df:63:c5:75:31:34:21:d3:4b:e1: 2a:d2:88:72:0c:4e:92:70:19:3b:3d:4d:16:2f:18: b5:d1:7b:e2:7a:97:df:8f:bc:ba:da:30:12:9b:3b: a1:33:19:f3:30:22:72:fb:a6:5a:e9:69:45:72:b5: 79:4c:b1:29:7e:f6:a7:13:41:0a:7e:8c:3f:46:49: d1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:54:04:7D:2F:38:3E:3F:37:8D:72:26:12:2E:E4:6C:4A:13:A0:D7 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/0FQEfS84Pj83jXImEi7kbEoToNc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.74.177.0/24 Signature Algorithm: sha256WithRSAEncryption cc:0e:6f:27:d6:eb:0f:76:17:54:27:cb:f7:e2:66:b7:41:5c: 68:28:56:09:2f:a9:1d:43:74:61:00:3b:71:8e:0d:a1:c0:90: 54:b2:37:97:74:9f:27:1a:bc:3a:6a:26:97:e3:a0:23:01:70: 95:90:47:3c:f0:15:78:b3:57:bd:4e:8e:69:64:5a:cc:fc:27: 09:30:ad:e8:58:dd:7c:8a:d3:a2:e4:83:4c:d3:5d:94:96:38: 83:ff:43:1a:0e:7c:7a:5a:38:1f:45:fd:ba:8d:2b:47:03:41: 36:11:f0:4b:94:01:db:35:08:65:54:77:50:85:f1:96:5f:44: 32:19:4b:29:91:bd:27:70:f0:1c:d7:da:63:3d:d2:2f:4f:fa: 2c:aa:c9:a9:71:f9:c8:0f:20:30:f3:5d:37:66:cd:be:22:78: 6f:95:5f:91:e2:ff:c9:a3:48:ad:00:f7:7a:b7:ba:25:0d:60: 68:3f:4e:3c:26:cb:01:28:8b:fa:53:ca:79:ce:64:1e:7d:a9: 99:4b:1e:30:64:f7:b0:15:3d:8b:61:32:8d:1f:49:c3:3d:06: aa:4c:d7:5a:dd:9f:a5:6d:56:4e:ed:f2:48:0a:b7:cb:88:73: 26:5a:0b:39:e4:94:86:98:b6:33:ff:fa:ea:50:80:b4:2e:7a: 2a:f0:35:f2 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICGMswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAyMjdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEQwNTQwNDdEMkYzODNF M0YzNzhENzIyNjEyMkVFNDZDNEExM0EwRDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuX4cva/RIm7gP93xUAZoCfSSgcXWImzkI7NoWUgJGwuu3QRE3 unIazf5SWG7+YBNYcHUtfe6UeVHz44UO74kDJujm2A2QXCI8ybUrW53lnaPYMJuc NEdrUTjyImx8ffx6TIzCJC+gpdUHth9kHsd0CZt4mvqqXG7bz06QH2LXDmpLg+2C qbCDmPOEAoeDMpwszzutsCsbVEGEmqCLq3YbGoWEsPRpMkLBV5YtFprZJAzb+Z88 V5+U32PFdTE0IdNL4SrSiHIMTpJwGTs9TRYvGLXRe+J6l9+PvLraMBKbO6EzGfMw InL7plrpaUVytXlMsSl+9qcTQQp+jD9GSdHRAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU0FQEfS84Pj83jXImEi7kbEoToNcwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC8wRlFFZlM4NFBqODNqWEltRWk3 a2JFb1RvTmMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy0qx MA0GCSqGSIb3DQEBCwUAA4IBAQDMDm8n1usPdhdUJ8v34ma3QVxoKFYJL6kdQ3Rh ADtxjg2hwJBUsjeXdJ8nGrw6aiaX46AjAXCVkEc88BV4s1e9To5pZFrM/CcJMK3o WN18itOi5INM012UljiD/0MaDnx6WjgfRf26jStHA0E2EfBLlAHbNQhlVHdQhfGW X0QyGUspkb0ncPAc19pjPdIvT/osqsmpcfnIDyAw8103Zs2+InhvlV+R4v/Jo0it APd6t7olDWBoP048JssBKIv6U8p5zmQefamZSx4wZPewFT2LYTKNH0nDPQaqTNda 3Z+lbVZO7fJICrfLiHMmWgs55JSGmLYz//rqUIC0Lnoq8DXy -----END CERTIFICATE-----Generated at Fri Sep 5 21:16:42 2025 by rpki-client