$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/DpBU_2dfOsSHdcK7dCihTizIALU.roa File: DpBU_2dfOsSHdcK7dCihTizIALU.roa (raw, json) Hash identifier: FTTg8ryEJ7vFgQrs7/fb55ExDL3g1pV5QsP6hWoHxBY= Subject key identifier: 0E:90:54:FF:67:5F:3A:C4:87:75:C2:BB:74:28:A1:4E:2C:C8:00:B5 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 195C Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/DpBU_2dfOsSHdcK7dCihTizIALU.roa Signing time: Fri 22 Aug 2025 09:03:02 +0000 ROA not before: Fri 22 Aug 2025 09:03:02 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 137280 IP address blocks: 203.69.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 00:46:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6492 (0x195c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:03:02 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=0E9054FF675F3AC48775C2BB7428A14E2CC800B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0a:f7:69:94:20:27:ac:57:0b:30:bc:71:39: 21:e5:38:07:0c:58:10:33:e2:1c:d2:e6:bf:11:c5: b8:79:b3:13:e4:b0:05:78:5d:7c:cb:40:04:4d:fd: 47:e1:56:6a:ac:30:c5:2a:39:53:db:0f:02:66:52: 1f:f8:64:58:56:9e:87:14:2b:85:a7:75:ef:49:d4: 1e:3c:d8:81:66:6e:6d:a0:01:d4:61:54:b4:43:8d: de:36:b1:b9:70:cd:e9:9b:83:26:9f:47:17:de:dd: 55:bd:1e:f7:cc:97:32:62:95:a4:0f:c7:ff:10:ea: 49:54:1e:af:e6:a5:73:fe:ce:d3:45:c3:aa:49:b0: 62:e7:87:44:8f:78:91:da:d7:70:33:80:18:49:43: aa:0f:7a:ce:04:af:79:4f:a1:e2:18:ca:4f:87:b8: 5f:b8:9a:9a:ed:b3:9d:71:41:d4:b8:c2:f6:7e:cb: 04:8a:4a:b7:b1:8a:c6:dc:e5:6a:77:e1:73:55:cc: 4e:f5:32:6b:43:84:00:9a:e8:ee:42:d7:d9:92:7d: 7a:1c:a4:28:51:14:3d:37:d0:fb:fe:1e:35:8e:3e: a2:df:18:25:c6:67:e2:82:48:b3:97:f0:b6:23:87: 5f:cc:48:a6:79:b0:f9:a1:9d:f3:ef:dd:75:ca:05: 9e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:90:54:FF:67:5F:3A:C4:87:75:C2:BB:74:28:A1:4E:2C:C8:00:B5 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/DpBU_2dfOsSHdcK7dCihTizIALU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.69.19.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:5d:5f:d0:62:30:75:9e:4c:03:75:74:03:3e:31:1b:b6:4a: 8a:c9:c1:d6:9b:50:a7:6e:f2:7c:05:da:5e:fb:4f:9d:d2:34: 8b:b9:dd:6c:99:9a:13:4c:ec:c9:f4:76:32:4d:41:ec:91:8a: 45:64:df:2f:b9:6c:d3:1a:1a:eb:b2:2d:8a:d0:8a:16:21:b7: 67:42:5a:55:de:e8:c1:00:4b:46:37:df:24:f8:43:be:84:47: d2:39:8d:65:74:10:26:c8:36:d1:bf:00:23:7e:05:0c:22:10: 4d:48:31:b9:7f:26:af:30:9e:8e:a2:36:24:96:22:ab:79:50: a9:d1:70:77:c9:1e:6f:61:86:6c:3e:b9:e5:17:00:13:c0:16: 44:5c:cb:4c:b2:42:f4:bc:e1:1d:16:d4:d1:b1:3a:d1:af:f8: ae:fc:b9:37:34:21:91:04:25:ed:c2:7c:82:21:fb:50:7d:7f: a4:20:c3:6a:e4:34:ab:11:b8:52:26:b5:a6:be:19:a2:d7:e7: e0:44:48:fd:3f:a0:f4:d4:32:07:1e:1f:92:b3:d1:58:21:02: 28:bf:96:15:5e:b4:63:b9:9e:6f:b8:49:ab:c0:ae:44:a0:9e: 6f:f9:3e:9b:29:fc:88:07:de:87:3e:d5:e0:b2:d1:69:43:fd: d2:a9:34:cf -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICGVwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAzMDJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDBFOTA1NEZGNjc1RjNB QzQ4Nzc1QzJCQjc0MjhBMTRFMkNDODAwQjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwCvdplCAnrFcLMLxxOSHlOAcMWBAz4hzS5r8Rxbh5sxPksAV4 XXzLQARN/UfhVmqsMMUqOVPbDwJmUh/4ZFhWnocUK4Wnde9J1B482IFmbm2gAdRh VLRDjd42sblwzembgyafRxfe3VW9HvfMlzJilaQPx/8Q6klUHq/mpXP+ztNFw6pJ sGLnh0SPeJHa13AzgBhJQ6oPes4Er3lPoeIYyk+HuF+4mprts51xQdS4wvZ+ywSK Srexisbc5Wp34XNVzE71MmtDhACa6O5C19mSfXocpChRFD030Pv+HjWOPqLfGCXG Z+KCSLOX8LYjh1/MSKZ5sPmhnfPv3XXKBZ7RAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUDpBU/2dfOsSHdcK7dCihTizIALUwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9EcEJVXzJkZk9zU0hkY0s3ZENp aFRpeklBTFUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy0UT MA0GCSqGSIb3DQEBCwUAA4IBAQCNXV/QYjB1nkwDdXQDPjEbtkqKycHWm1CnbvJ8 Bdpe+0+d0jSLud1smZoTTOzJ9HYyTUHskYpFZN8vuWzTGhrrsi2K0IoWIbdnQlpV 3ujBAEtGN98k+EO+hEfSOY1ldBAmyDbRvwAjfgUMIhBNSDG5fyavMJ6OojYkliKr eVCp0XB3yR5vYYZsPrnlFwATwBZEXMtMskL0vOEdFtTRsTrRr/iu/Lk3NCGRBCXt wnyCIftQfX+kIMNq5DSrEbhSJrWmvhmi1+fgREj9P6D01DIHHh+Ss9FYIQIov5YV XrRjuZ5vuEmrwK5EoJ5v+T6bKfyIB96HPtXgstFpQ/3SqTTP -----END CERTIFICATE-----Generated at Fri Sep 5 21:08:04 2025 by rpki-client