$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/2fjaiQ_7UlKXzThMw6x_kPpwoyo.roa File: 2fjaiQ_7UlKXzThMw6x_kPpwoyo.roa (raw, json) Hash identifier: 94g+VVUodHaqauOEmjWSS33F/RJExqWzCcxa0Y5fVho= Subject key identifier: D9:F8:DA:89:0F:FB:52:52:97:CD:38:4C:C3:AC:7F:90:FA:70:A3:2A Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 193F Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/2fjaiQ_7UlKXzThMw6x_kPpwoyo.roa Signing time: Fri 22 Aug 2025 09:02:54 +0000 ROA not before: Fri 22 Aug 2025 09:02:54 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 198949 IP address blocks: 210.242.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 00:46:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6463 (0x193f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:02:54 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=D9F8DA890FFB525297CD384CC3AC7F90FA70A32A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c6:3f:62:74:9b:0f:b8:fb:59:e3:81:f0:b5: c3:cc:a0:b0:ca:f6:d7:f2:12:f1:55:a4:ae:4b:af: 56:77:4d:f1:0a:70:9a:66:dd:16:c0:9c:4f:f9:57: 64:87:b6:5c:3d:60:99:70:72:cd:fd:f5:71:46:d9: 7d:79:a2:ac:2c:b1:ab:89:ea:9a:af:64:a2:35:3d: 04:b0:18:c7:d3:2c:62:4a:b4:f2:93:ad:07:7e:94: 96:76:9f:15:05:fc:1b:bc:f8:02:19:33:07:9c:e0: 74:a6:b9:06:e5:97:f5:54:29:3d:8a:98:a1:9d:ab: 9e:ec:13:22:4c:ca:a8:b2:cf:0e:9e:6f:07:bb:ca: e8:62:95:0b:c4:6a:ee:f0:a6:51:02:29:a7:f5:4a: ee:60:26:66:22:a9:5b:88:74:90:de:b8:72:6b:16: 23:7b:6a:5e:66:ad:c0:83:61:d0:9a:f6:38:cb:0e: 97:e8:26:b2:c6:ea:65:77:b6:fe:4a:ef:e3:fd:ad: 01:2c:b7:3a:af:ab:f5:c2:50:06:13:25:b9:0c:33: 36:36:73:04:3d:15:e5:d9:2e:c0:b9:09:ef:28:39: a7:dc:1d:e9:04:63:d7:91:bc:8b:61:70:e6:ae:7a: 3d:52:16:31:d5:16:57:42:18:47:cb:aa:e4:53:94: 42:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:F8:DA:89:0F:FB:52:52:97:CD:38:4C:C3:AC:7F:90:FA:70:A3:2A X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/2fjaiQ_7UlKXzThMw6x_kPpwoyo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.242.83.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:1d:b5:e0:f7:77:f4:58:48:17:c2:a1:6e:96:da:ec:70:8c: fa:9a:fe:cd:c3:ab:5e:3c:77:7e:f8:c4:54:15:a9:d5:56:79: 3b:41:83:92:04:d9:99:14:e1:f1:b1:43:49:28:cb:68:24:81: 23:f2:03:42:f0:e4:8b:52:cd:51:23:ee:53:9a:45:ce:c9:57: 05:ce:50:cd:6f:9f:bc:24:99:07:de:6a:97:e4:21:ad:04:1e: 2d:0c:29:73:60:a9:58:fd:26:11:bb:4a:a5:b2:50:ac:2d:81: b9:4b:99:4a:53:75:c2:c6:f8:11:fe:68:26:a9:61:4a:cb:bf: 5a:90:df:23:d4:ec:65:0c:de:9b:4e:43:af:1f:ed:15:80:ad: 26:38:a9:43:10:b0:93:68:99:03:49:76:fa:21:5b:77:b8:61: e5:67:fc:7e:3b:6b:2f:e0:a6:22:0c:e1:99:0f:ba:ca:95:83: 59:f8:35:93:f0:70:b5:0c:1b:fe:a7:5c:74:5d:57:2e:7d:c5: 10:7f:69:06:35:c3:91:5c:df:dd:9e:42:37:ac:fd:44:6b:13: da:ec:c7:e6:69:b3:65:f4:77:66:58:71:07:16:d5:6a:52:5e: 4e:f9:32:b8:a7:58:a0:ec:b4:af:cb:a8:eb:4c:69:42:aa:19: 78:1c:49:35 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICGT8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAyNTRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEQ5RjhEQTg5MEZGQjUy NTI5N0NEMzg0Q0MzQUM3RjkwRkE3MEEzMkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBxj9idJsPuPtZ44HwtcPMoLDK9tfyEvFVpK5Lr1Z3TfEKcJpm 3RbAnE/5V2SHtlw9YJlwcs399XFG2X15oqwssauJ6pqvZKI1PQSwGMfTLGJKtPKT rQd+lJZ2nxUF/Bu8+AIZMwec4HSmuQbll/VUKT2KmKGdq57sEyJMyqiyzw6ebwe7 yuhilQvEau7wplECKaf1Su5gJmYiqVuIdJDeuHJrFiN7al5mrcCDYdCa9jjLDpfo JrLG6mV3tv5K7+P9rQEstzqvq/XCUAYTJbkMMzY2cwQ9FeXZLsC5Ce8oOafcHekE Y9eRvIthcOauej1SFjHVFldCGEfLquRTlEIHAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU2fjaiQ/7UlKXzThMw6x/kPpwoyowHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC8yZmphaVFfN1VsS1h6VGhNdzZ4 X2tQcHdveW8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0vJT MA0GCSqGSIb3DQEBCwUAA4IBAQA/HbXg93f0WEgXwqFultrscIz6mv7Nw6tePHd+ +MRUFanVVnk7QYOSBNmZFOHxsUNJKMtoJIEj8gNC8OSLUs1RI+5TmkXOyVcFzlDN b5+8JJkH3mqX5CGtBB4tDClzYKlY/SYRu0qlslCsLYG5S5lKU3XCxvgR/mgmqWFK y79akN8j1OxlDN6bTkOvH+0VgK0mOKlDELCTaJkDSXb6IVt3uGHlZ/x+O2sv4KYi DOGZD7rKlYNZ+DWT8HC1DBv+p1x0XVcufcUQf2kGNcORXN/dnkI3rP1EaxPa7Mfm abNl9HdmWHEHFtVqUl5O+TK4p1ig7LSvy6jrTGlCqhl4HEk1 -----END CERTIFICATE-----Generated at Fri Sep 5 21:10:21 2025 by rpki-client