$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/A5zs4t1QG-0HfDjWKyaRc3uN3Hs.roa File: A5zs4t1QG-0HfDjWKyaRc3uN3Hs.roa (raw, json) Hash identifier: UDSjuWgFl9mFFTcwJi71fyyq05+ozmf6UuuWRri54vo= Subject key identifier: 03:9C:EC:E2:DD:50:1B:ED:07:7C:38:D6:2B:26:91:73:7B:8D:DC:7B Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 18DB Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/A5zs4t1QG-0HfDjWKyaRc3uN3Hs.roa Signing time: Fri 22 Aug 2025 09:02:32 +0000 ROA not before: Fri 22 Aug 2025 09:02:32 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 3462 IP address blocks: 210.62.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 00:46:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6363 (0x18db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:02:32 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=039CECE2DD501BED077C38D62B2691737B8DDC7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0e:da:d6:da:75:7b:1f:4a:cd:86:51:16:7f: 51:bb:25:68:ad:d0:e7:87:2a:bd:c0:5f:61:e7:d9: 3e:22:8c:28:b4:49:87:d5:c9:3a:85:a6:4a:37:ac: 4c:95:9b:e1:fc:0e:a4:40:c6:6b:f0:51:36:1c:54: 6f:8b:6c:94:79:72:2d:34:69:0a:33:b8:1f:ef:42: af:4c:39:f3:aa:aa:b0:fe:d2:45:84:53:c4:43:79: b2:fa:f9:c5:69:b5:92:d8:29:c4:b1:a0:93:ad:86: 21:cd:f4:5c:2e:c7:ad:3f:a5:fe:ae:ba:5d:00:d8: da:7c:70:9c:21:e0:ae:fc:f8:1f:26:c7:90:7b:df: ab:9f:97:80:3f:ec:60:65:b1:94:27:d2:16:3d:7c: fe:13:19:26:87:e8:4e:a6:d2:a6:ca:7c:b6:06:d8: ab:d5:09:d1:7a:3f:cc:db:4d:df:0f:b5:b9:6f:05: a4:c8:58:e3:91:7d:85:fd:c9:59:99:b9:c4:04:3d: 05:cf:8e:af:3b:f5:13:c5:ee:ee:3c:b0:d4:dc:73: de:ff:76:75:05:c6:d5:2b:34:22:81:e9:94:33:cf: c3:37:72:ba:63:4a:54:a1:d1:6d:79:10:bc:e9:8c: 40:ae:50:2a:b1:69:c8:e3:f2:ab:93:26:4c:c2:5b: a4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:9C:EC:E2:DD:50:1B:ED:07:7C:38:D6:2B:26:91:73:7B:8D:DC:7B X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/A5zs4t1QG-0HfDjWKyaRc3uN3Hs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.62.248.0/21 Signature Algorithm: sha256WithRSAEncryption 1a:2e:7c:a9:df:2d:b9:91:91:d1:42:47:0d:de:46:6b:4a:ac: 98:8f:c7:e4:48:1d:00:bc:e3:1c:1f:59:a8:a8:07:2a:8d:c2: 95:41:09:6f:2d:5e:83:83:9a:2f:f7:cf:a8:a7:ad:78:42:54: 0f:73:f2:7e:ac:df:ad:a2:15:7d:16:30:d1:1f:78:8f:87:ec: 19:5c:29:48:88:36:9f:a1:a4:ad:d3:17:eb:c6:ea:04:6c:64: e1:ba:2d:36:47:26:1b:1c:b2:33:d3:a2:57:70:d3:f6:89:8d: a9:3e:cd:b8:9b:78:f1:36:55:4d:85:28:42:e0:5b:fc:cf:72: f2:f6:59:17:b1:a4:9e:f1:ef:35:18:1a:e9:89:98:87:c7:c0: 62:6b:fb:2c:43:14:91:09:90:51:7f:13:ff:df:e4:65:a2:27: f0:92:02:07:cc:48:4e:f2:b7:d8:11:33:a0:4b:88:68:9c:63: 91:a4:bc:04:f3:66:ef:c4:07:33:50:b1:b4:4a:e4:93:8a:85: 01:57:ed:78:5f:e1:f3:9d:2c:17:31:25:74:16:79:27:d9:c0: d5:19:d1:82:e1:1b:20:7c:37:d8:20:a7:5f:e3:1d:af:78:40: 58:e6:41:6a:44:8f:b4:72:12:e1:6d:10:b4:b3:17:00:62:cb: 1a:fb:bd:a0 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICGNswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAyMzJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDAzOUNFQ0UyREQ1MDFC RUQwNzdDMzhENjJCMjY5MTczN0I4RERDN0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTDtrW2nV7H0rNhlEWf1G7JWit0OeHKr3AX2Hn2T4ijCi0SYfV yTqFpko3rEyVm+H8DqRAxmvwUTYcVG+LbJR5ci00aQozuB/vQq9MOfOqqrD+0kWE U8RDebL6+cVptZLYKcSxoJOthiHN9Fwux60/pf6uul0A2Np8cJwh4K78+B8mx5B7 36ufl4A/7GBlsZQn0hY9fP4TGSaH6E6m0qbKfLYG2KvVCdF6P8zbTd8PtblvBaTI WOORfYX9yVmZucQEPQXPjq879RPF7u48sNTcc97/dnUFxtUrNCKB6ZQzz8M3crpj SlSh0W15ELzpjECuUCqxacjj8quTJkzCW6Q/AgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUA5zs4t1QG+0HfDjWKyaRc3uN3HswHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9BNXpzNHQxUUctMEhmRGpXS3lh UmMzdU4zSHMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0j74 MA0GCSqGSIb3DQEBCwUAA4IBAQAaLnyp3y25kZHRQkcN3kZrSqyYj8fkSB0AvOMc H1moqAcqjcKVQQlvLV6Dg5ov98+op614QlQPc/J+rN+tohV9FjDRH3iPh+wZXClI iDafoaSt0xfrxuoEbGThui02RyYbHLIz06JXcNP2iY2pPs24m3jxNlVNhShC4Fv8 z3Ly9lkXsaSe8e81GBrpiZiHx8Bia/ssQxSRCZBRfxP/3+RloifwkgIHzEhO8rfY ETOgS4honGORpLwE82bvxAczULG0SuSTioUBV+14X+HznSwXMSV0Fnkn2cDVGdGC 4RsgfDfYIKdf4x2veEBY5kFqRI+0chLhbRC0sxcAYssa+72g -----END CERTIFICATE-----Generated at Fri Sep 5 21:10:20 2025 by rpki-client