$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/ACk-SZFZJ7CgEQc9Ym00qecVmJk.roa File: ACk-SZFZJ7CgEQc9Ym00qecVmJk.roa (raw, json) Hash identifier: osjpWncYSciMP/wkimGLqEGoofMRoVu4TiYoW5Z0jOI= Subject key identifier: 00:29:3E:49:91:59:27:B0:A0:11:07:3D:62:6D:34:A9:E7:15:98:99 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 18D9 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ACk-SZFZJ7CgEQc9Ym00qecVmJk.roa Signing time: Fri 22 Aug 2025 09:02:31 +0000 ROA not before: Fri 22 Aug 2025 09:02:31 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 3462 IP address blocks: 221.120.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 00:46:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6361 (0x18d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:02:31 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=00293E49915927B0A011073D626D34A9E7159899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:96:8b:26:55:fb:0e:0e:ab:4c:03:bc:80:b7: 06:52:93:22:7c:58:1f:e3:55:0e:89:1a:31:46:25: 8e:f2:38:ef:e1:4f:85:90:2c:1a:70:eb:d9:e6:26: 30:41:e1:0c:cc:b5:0b:42:a7:99:8e:00:9c:76:4d: 11:5f:e5:81:d5:ea:90:6b:52:e3:33:92:7d:36:ce: 37:53:6f:b0:af:8c:0b:e2:bb:d1:31:83:6e:1a:6c: fb:9f:69:ba:58:0a:91:46:3f:95:c2:9d:d1:2f:8c: 2c:80:63:b4:0f:59:e6:a0:55:da:74:04:33:ef:16: fa:d5:2f:f5:a6:5c:ad:79:49:f5:23:17:00:ee:e8: 75:f6:7a:aa:09:63:6e:c4:63:4b:c8:8c:6b:4f:89: 20:16:3f:96:b8:b8:da:c7:0c:ad:ed:da:2e:9d:df: 5f:74:d8:aa:e3:93:a1:4f:06:19:c2:9a:2e:bf:64: 8b:65:5c:b0:0d:d1:e3:5d:c4:c7:19:24:51:3d:c8: 6a:16:3e:f3:41:d0:48:6b:2b:d7:b0:33:08:2b:ab: cb:45:a4:d4:9f:31:5b:4d:f5:b6:d2:d1:b4:5f:45: ff:5c:3a:cd:75:7e:bd:f2:dc:97:51:16:b4:b9:f2: 72:4e:ea:16:56:11:29:24:1d:2d:c5:ec:b8:c2:7e: 14:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:29:3E:49:91:59:27:B0:A0:11:07:3D:62:6D:34:A9:E7:15:98:99 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ACk-SZFZJ7CgEQc9Ym00qecVmJk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 221.120.25.0/24 Signature Algorithm: sha256WithRSAEncryption 23:59:03:72:0c:82:7d:97:a8:2d:a8:46:8d:c9:b9:40:5c:b3: 9e:be:2f:00:61:33:b5:19:50:d4:5e:df:46:9e:3b:81:7e:98: 01:e7:c4:3f:29:90:8f:eb:ba:15:77:21:16:43:28:0f:ac:f0: 34:ed:97:19:c2:11:b1:d9:6b:dd:80:04:84:d1:ed:40:94:53: 79:e2:0f:35:ef:f2:cb:75:b6:47:6a:90:92:66:d7:96:ee:b8: 59:40:41:76:9b:a0:e2:4c:2b:98:dc:d8:a1:26:61:8b:ba:20: 03:cd:cf:df:88:ac:11:2f:15:d4:df:d0:68:53:18:d1:a3:bc: 6f:a3:2a:db:5d:ae:a7:f3:56:be:03:d9:21:ba:6d:e8:8f:6e: 4b:6d:5b:46:df:b3:8b:ce:5e:53:9d:c0:b4:13:39:82:6c:77: 38:e4:d1:70:54:34:f9:73:d8:89:3b:66:5b:e7:17:18:b8:c6: dd:78:e6:36:5e:4e:09:c0:b9:f1:ad:0d:51:e5:10:45:e6:80: 0d:d4:b8:d1:0a:c6:a1:14:99:38:da:c9:2c:2e:fa:79:64:0e: f9:96:23:81:54:86:fb:90:63:78:80:96:f4:d9:7a:88:6f:14: d3:cd:07:aa:0a:ba:7b:3a:82:44:66:55:98:35:ef:5e:eb:99: f3:42:0e:c1 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICGNkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAyMzFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDAwMjkzRTQ5OTE1OTI3 QjBBMDExMDczRDYyNkQzNEE5RTcxNTk4OTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdlosmVfsODqtMA7yAtwZSkyJ8WB/jVQ6JGjFGJY7yOO/hT4WQ LBpw69nmJjBB4QzMtQtCp5mOAJx2TRFf5YHV6pBrUuMzkn02zjdTb7CvjAviu9Ex g24abPufabpYCpFGP5XCndEvjCyAY7QPWeagVdp0BDPvFvrVL/WmXK15SfUjFwDu 6HX2eqoJY27EY0vIjGtPiSAWP5a4uNrHDK3t2i6d31902Krjk6FPBhnCmi6/ZItl XLAN0eNdxMcZJFE9yGoWPvNB0EhrK9ewMwgrq8tFpNSfMVtN9bbS0bRfRf9cOs11 fr3y3JdRFrS58nJO6hZWESkkHS3F7LjCfhR5AgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUACk+SZFZJ7CgEQc9Ym00qecVmJkwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9BQ2stU1pGWko3Q2dFUWM5WW0w MHFlY1ZtSmsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA3XgZ MA0GCSqGSIb3DQEBCwUAA4IBAQAjWQNyDIJ9l6gtqEaNyblAXLOevi8AYTO1GVDU Xt9GnjuBfpgB58Q/KZCP67oVdyEWQygPrPA07ZcZwhGx2WvdgASE0e1AlFN54g81 7/LLdbZHapCSZteW7rhZQEF2m6DiTCuY3NihJmGLuiADzc/fiKwRLxXU39BoUxjR o7xvoyrbXa6n81a+A9khum3oj25LbVtG37OLzl5TncC0EzmCbHc45NFwVDT5c9iJ O2Zb5xcYuMbdeOY2Xk4JwLnxrQ1R5RBF5oAN1LjRCsahFJk42sksLvp5ZA75liOB VIb7kGN4gJb02XqIbxTTzQeqCrp7OoJEZlWYNe9e65nzQg7B -----END CERTIFICATE-----Generated at Fri Sep 5 21:13:24 2025 by rpki-client