$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/3m5TqEyBJonSdPkr0CgrW1oH0tk.roa File: 3m5TqEyBJonSdPkr0CgrW1oH0tk.roa (raw, json) Hash identifier: a8PGFcxPXv0NxZm9x74FnQ/WGZU5pNZoUmEWt88Yovs= Subject key identifier: DE:6E:53:A8:4C:81:26:89:D2:74:F9:2B:D0:28:2B:5B:5A:07:D2:D9 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 18CF Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/3m5TqEyBJonSdPkr0CgrW1oH0tk.roa Signing time: Fri 22 Aug 2025 09:02:28 +0000 ROA not before: Fri 22 Aug 2025 09:02:28 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 3462 IP address blocks: 218.166.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 00:46:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6351 (0x18cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:02:28 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=DE6E53A84C812689D274F92BD0282B5B5A07D2D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:78:34:b8:b3:31:24:9d:49:5e:ca:58:6a:97: e2:e2:77:d0:df:47:66:5a:61:74:b2:01:fc:08:04: 09:3b:47:df:c7:4f:97:b3:a5:76:ca:45:16:2f:99: 1a:6b:07:56:c3:2f:1d:6a:f2:c8:f2:5f:b2:a3:e9: a2:18:b7:a6:f4:e3:25:cd:d9:73:ea:59:76:00:1a: bd:e4:ff:cd:fd:aa:d2:ec:f8:9b:d5:dd:e8:56:af: 58:41:a0:8d:22:e8:a1:c3:38:a3:76:37:33:7c:89: 3d:0b:bb:7d:11:e0:2d:f3:41:38:ce:64:f6:5f:9e: 0a:b2:45:9c:56:68:11:18:20:13:0d:42:d3:e1:7c: d7:bb:c4:c2:53:42:d9:09:82:bb:af:ed:86:8d:3c: dc:28:9f:31:06:80:41:5e:98:28:84:0f:84:31:98: 8c:0a:a9:ec:9c:a8:0d:65:c2:b8:19:d4:f0:fe:86: fe:58:38:a6:4b:04:29:c4:64:38:4c:3f:5e:e0:e2: 68:cf:84:30:ed:7c:e1:37:f7:f5:38:ef:1e:ab:24: 01:38:3f:08:f7:6d:fc:93:50:b1:62:e1:b0:56:56: d7:5a:0c:16:2d:4e:fb:06:d5:bc:84:3a:15:ab:a7: f6:53:02:8d:b8:31:bb:8c:9f:8d:32:5a:0a:ff:f1: e3:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:6E:53:A8:4C:81:26:89:D2:74:F9:2B:D0:28:2B:5B:5A:07:D2:D9 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/3m5TqEyBJonSdPkr0CgrW1oH0tk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 218.166.0.0/15 Signature Algorithm: sha256WithRSAEncryption 7f:98:b8:f3:6a:46:8d:b7:2f:d1:ac:50:27:15:e2:3f:35:6f: f5:fa:5e:6a:1e:d7:ea:e0:a3:ea:ec:18:04:f9:16:ce:20:b0: db:9e:df:f0:d8:e3:80:84:e8:ba:10:af:2c:b7:65:4e:4b:10: f1:c3:df:16:27:35:3a:a8:4e:ba:6e:8b:71:9b:42:a9:37:51: 04:3b:b3:33:61:fb:fc:cf:7e:ce:3b:c1:18:e0:f4:4c:24:0e: b3:0b:28:b4:50:9f:c8:63:30:b5:45:51:e2:90:75:4c:2b:0f: 0f:2d:94:bd:91:c1:8f:b7:7f:7d:5a:cc:ed:39:e9:4a:bb:04: aa:1e:75:b7:0e:7b:e8:8e:a6:2e:c6:2b:8a:34:a8:c4:de:31: e0:f0:ba:1a:16:cd:19:54:6d:a8:27:8e:7b:1f:11:3e:67:14: c7:78:3e:e3:c0:f5:34:f1:d1:43:86:98:fe:84:c5:f6:51:be: 76:cf:a9:d6:8e:86:a1:00:0c:4e:8e:fc:7a:8e:f0:82:cb:a6: 40:ed:42:c7:71:37:10:19:5b:c9:ce:75:d4:ff:a4:fe:65:85: 93:f5:c8:55:57:5d:10:a0:d7:c5:fd:91:07:3b:cd:8b:b3:af: 9c:98:88:04:e4:10:67:5e:fb:61:a2:f9:26:b5:de:92:55:67: b2:06:49:5f -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICGM8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAyMjhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKERFNkU1M0E4NEM4MTI2 ODlEMjc0RjkyQkQwMjgyQjVCNUEwN0QyRDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDxeDS4szEknUleylhql+Lid9DfR2ZaYXSyAfwIBAk7R9/HT5ez pXbKRRYvmRprB1bDLx1q8sjyX7Kj6aIYt6b04yXN2XPqWXYAGr3k/839qtLs+JvV 3ehWr1hBoI0i6KHDOKN2NzN8iT0Lu30R4C3zQTjOZPZfngqyRZxWaBEYIBMNQtPh fNe7xMJTQtkJgruv7YaNPNwonzEGgEFemCiED4QxmIwKqeycqA1lwrgZ1PD+hv5Y OKZLBCnEZDhMP17g4mjPhDDtfOE39/U47x6rJAE4Pwj3bfyTULFi4bBWVtdaDBYt TvsG1byEOhWrp/ZTAo24MbuMn40yWgr/8eMXAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQU3m5TqEyBJonSdPkr0CgrW1oH0tkwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC8zbTVUcUV5QkpvblNkUGtyMENn clcxb0gwdGsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMB2qYw DQYJKoZIhvcNAQELBQADggEBAH+YuPNqRo23L9GsUCcV4j81b/X6Xmoe1+rgo+rs GAT5Fs4gsNue3/DY44CE6LoQryy3ZU5LEPHD3xYnNTqoTrpui3GbQqk3UQQ7szNh +/zPfs47wRjg9EwkDrMLKLRQn8hjMLVFUeKQdUwrDw8tlL2RwY+3f31azO056Uq7 BKoedbcOe+iOpi7GK4o0qMTeMeDwuhoWzRlUbagnjnsfET5nFMd4PuPA9TTx0UOG mP6ExfZRvnbPqdaOhqEADE6O/HqO8ILLpkDtQsdxNxAZW8nOddT/pP5lhZP1yFVX XRCg18X9kQc7zYuzr5yYiATkEGde+2Gi+Sa13pJVZ7IGSV8= -----END CERTIFICATE-----Generated at Fri Sep 5 21:10:21 2025 by rpki-client