$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/BMuT4vPWRPP_VpjZ1hrJWYBp_rA.roa File: BMuT4vPWRPP_VpjZ1hrJWYBp_rA.roa (raw, json) Hash identifier: kVCLBpRCvJgFpTu1eRhnK2ezQE29V8fJDhBtmUQ6kYs= Subject key identifier: 04:CB:93:E2:F3:D6:44:F3:FF:56:98:D9:D6:1A:C9:59:80:69:FE:B0 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 1948 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/BMuT4vPWRPP_VpjZ1hrJWYBp_rA.roa Signing time: Fri 22 Aug 2025 09:02:56 +0000 ROA not before: Fri 22 Aug 2025 09:02:56 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 3462 IP address blocks: 220.128.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 00:46:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6472 (0x1948) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:02:56 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=04CB93E2F3D644F3FF5698D9D61AC9598069FEB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:cc:cd:34:df:61:a3:51:73:ec:b9:ad:2b:3a: 89:9d:58:02:e1:95:c1:75:fe:8e:0f:46:36:3f:b0: b0:d3:29:28:41:46:e7:ae:f8:07:0f:99:37:24:5a: 41:70:46:07:e6:a3:c6:02:92:b9:d6:92:66:91:ad: 00:0d:cf:4c:3d:a4:4b:fe:13:64:33:bd:cb:b6:13: d0:9b:7a:28:05:d8:d5:5a:75:1b:e5:cf:da:92:28: 8f:b8:da:d5:1e:41:6f:90:72:0b:e5:b7:30:a0:8e: 0a:4e:df:0f:06:aa:b2:3b:3b:f6:0d:1f:15:00:60: 82:3b:f7:39:9a:eb:f0:9c:5d:e1:58:bd:2a:80:70: 34:c2:06:a2:52:04:19:35:f3:30:a3:58:fe:dd:23: 0e:65:da:35:b1:d7:2f:9e:d9:fc:a7:5f:01:89:8e: 31:de:9d:ae:64:0c:f9:cb:b2:04:ea:05:1c:58:25: ee:16:13:c5:0f:6a:f6:29:a0:c1:fc:d4:36:54:fa: dd:83:c6:05:0f:0c:a2:6c:60:a9:45:6e:2b:67:c7: a0:e6:c1:af:a3:8c:8e:7e:a0:46:a2:3f:d9:13:b1: 9b:27:fa:0a:e6:3e:9e:9e:77:43:85:4e:e1:33:46: ed:60:10:e1:c9:3c:0c:56:0e:5c:4f:6c:f3:79:ab: 89:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:CB:93:E2:F3:D6:44:F3:FF:56:98:D9:D6:1A:C9:59:80:69:FE:B0 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/BMuT4vPWRPP_VpjZ1hrJWYBp_rA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 220.128.61.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:f1:d7:20:ab:b7:97:18:6e:54:81:a4:f5:84:a5:48:dc:91: db:18:7a:0f:c7:07:8a:7f:2c:5d:c3:bf:5e:06:be:12:ec:44: cd:b0:14:98:9a:1d:db:05:74:00:7c:9c:15:fe:bc:bb:1d:32: c7:61:71:54:33:d7:73:94:bf:55:8d:25:b1:34:cb:b0:57:ae: 68:6d:c6:f7:a6:fa:f9:c0:8e:9a:9d:97:73:28:a5:db:77:2a: f6:1a:b9:8f:b3:6e:5f:12:ba:4d:c0:15:2b:a5:b6:d9:9b:99: 53:a6:09:d7:08:cd:9d:91:9f:63:d1:1e:b9:b3:6e:83:01:2c: 1f:fe:26:86:c3:20:68:c1:e8:9a:d8:e5:84:5c:86:00:2e:55: 51:6a:c0:22:6a:aa:d6:45:0c:69:11:cd:02:cd:d0:10:fc:24: d2:26:24:e9:b2:2c:11:55:6d:0a:11:8f:c9:00:04:c8:57:96: 7b:79:0a:e6:73:97:e3:25:8e:5c:fb:e3:8f:f4:75:e3:d6:3e: 43:4d:9d:28:d9:ac:15:ab:a2:52:0b:a6:6c:03:ea:d8:db:3a: 81:73:9f:0a:de:59:61:94:5a:ae:1d:b9:70:d5:25:38:bd:99: 51:80:05:32:06:74:ed:a1:2c:93:28:df:cc:57:3a:27:7a:fa: 94:8d:49:d4 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICGUgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAyNTZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDA0Q0I5M0UyRjNENjQ0 RjNGRjU2OThEOUQ2MUFDOTU5ODA2OUZFQjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9zM0032GjUXPsua0rOomdWALhlcF1/o4PRjY/sLDTKShBRueu +AcPmTckWkFwRgfmo8YCkrnWkmaRrQANz0w9pEv+E2Qzvcu2E9CbeigF2NVadRvl z9qSKI+42tUeQW+QcgvltzCgjgpO3w8GqrI7O/YNHxUAYII79zma6/CcXeFYvSqA cDTCBqJSBBk18zCjWP7dIw5l2jWx1y+e2fynXwGJjjHena5kDPnLsgTqBRxYJe4W E8UPavYpoMH81DZU+t2DxgUPDKJsYKlFbitnx6Dmwa+jjI5+oEaiP9kTsZsn+grm Pp6ed0OFTuEzRu1gEOHJPAxWDlxPbPN5q4lhAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUBMuT4vPWRPP/VpjZ1hrJWYBp/rAwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9CTXVUNHZQV1JQUF9WcGpaMWhy SldZQnBfckEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA3IA9 MA0GCSqGSIb3DQEBCwUAA4IBAQA78dcgq7eXGG5UgaT1hKVI3JHbGHoPxweKfyxd w79eBr4S7ETNsBSYmh3bBXQAfJwV/ry7HTLHYXFUM9dzlL9VjSWxNMuwV65obcb3 pvr5wI6anZdzKKXbdyr2GrmPs25fErpNwBUrpbbZm5lTpgnXCM2dkZ9j0R65s26D ASwf/iaGwyBoweia2OWEXIYALlVRasAiaqrWRQxpEc0CzdAQ/CTSJiTpsiwRVW0K EY/JAATIV5Z7eQrmc5fjJY5c++OP9HXj1j5DTZ0o2awVq6JSC6ZsA+rY2zqBc58K 3llhlFquHblw1SU4vZlRgAUyBnTtoSyTKN/MVzonevqUjUnU -----END CERTIFICATE-----Generated at Fri Sep 5 21:16:43 2025 by rpki-client