$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/DuDN0vU_lHM0NzwpO6asWf-Sg_U.roa File: DuDN0vU_lHM0NzwpO6asWf-Sg_U.roa (raw, json) Hash identifier: M5cPIg6LvE4IDZ3aOp99szy7RytnFKhK94p43J3wBxc= Subject key identifier: 0E:E0:CD:D2:F5:3F:94:73:34:37:3C:29:3B:A6:AC:59:FF:92:83:F5 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 18EB Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/DuDN0vU_lHM0NzwpO6asWf-Sg_U.roa Signing time: Fri 22 Aug 2025 09:02:36 +0000 ROA not before: Fri 22 Aug 2025 09:02:36 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 3462 IP address blocks: 60.250.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 00:46:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6379 (0x18eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:02:36 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=0EE0CDD2F53F947334373C293BA6AC59FF9283F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d1:79:ac:a4:2f:78:b9:99:ab:54:20:e4:6c: f3:b8:53:07:2a:cd:ff:e5:63:87:ec:ac:ac:13:90: 59:75:a4:bd:f0:bb:68:78:9d:51:c5:2c:10:09:ee: 5b:ce:e9:ad:5d:ae:70:2e:02:ad:65:b0:c9:9d:32: 56:8d:2c:90:61:28:51:24:87:d2:a5:1a:13:5b:50: 44:9e:82:c2:ec:00:09:44:0b:96:6e:2c:18:8e:8e: 7c:ef:b1:ac:a9:8c:e7:88:2f:c0:18:40:e3:ab:f7: fc:91:de:60:16:f8:08:a4:43:f4:74:51:34:b3:a9: 56:af:b2:d2:6b:7f:68:c3:aa:d7:0a:d5:84:1b:db: 03:84:21:6c:45:3a:f1:84:91:91:3f:bc:d0:78:a3: 79:00:92:a3:20:4b:29:1e:29:9b:46:43:03:c6:ca: 9b:a8:60:c2:f8:fd:a0:6c:a6:b4:08:5a:5a:ab:39: 7d:0f:29:16:15:4f:93:be:c1:34:64:7c:06:da:3b: e2:a0:d0:35:ce:74:b2:11:62:41:50:84:59:2d:5e: aa:f6:b2:d3:c6:bc:ff:d7:eb:8c:06:96:44:2f:a5: 62:4c:54:85:33:59:7a:a8:55:18:e0:96:c0:17:98: 78:cb:d6:4b:5e:03:17:95:84:bd:a0:77:18:a5:2a: 5b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:E0:CD:D2:F5:3F:94:73:34:37:3C:29:3B:A6:AC:59:FF:92:83:F5 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/DuDN0vU_lHM0NzwpO6asWf-Sg_U.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 60.250.0.0/15 Signature Algorithm: sha256WithRSAEncryption 25:39:f0:c5:24:01:6c:37:81:eb:12:be:4a:15:f1:28:a5:47: 9c:e8:77:a4:91:fd:5d:4b:b4:d4:07:86:05:ef:49:fd:db:59: 34:01:f8:ec:cb:5f:3c:ad:b2:f3:c4:17:f5:bb:c4:a9:bd:2c: ae:5d:df:4d:9e:6b:f0:0e:fc:07:cf:b6:a6:11:06:d7:28:28: 43:a6:dd:79:9b:3e:05:f7:8c:e8:58:f0:2f:5c:53:8e:92:ff: aa:bc:0d:4f:ff:d8:74:e2:d4:cb:10:7e:7c:6c:32:74:c1:ab: 71:f7:13:01:11:d5:d3:56:e3:15:7b:3b:1e:75:94:f4:04:e7: 11:95:a9:1f:e4:fd:2c:da:f7:fb:73:c3:54:00:3a:db:33:f3: ff:f4:fa:ec:99:ca:fb:2f:43:b5:cd:bc:4d:1c:87:2c:d6:53: 9a:bf:4f:f6:e1:e9:7d:27:31:f9:cf:bc:73:9f:84:be:e5:f8: cb:d3:e4:02:30:bb:25:b9:31:a0:6f:c8:93:95:22:fa:29:47: cd:af:08:6e:30:70:ff:06:51:13:64:fe:f3:0e:fe:fe:d1:8e: 5e:02:86:11:ba:b4:49:d0:de:e8:57:6e:91:15:d8:26:02:2f: 15:8a:bf:74:d7:75:56:63:9b:17:00:53:02:ff:31:57:6f:3b: 7c:9b:a8:bd -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICGOswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAyMzZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDBFRTBDREQyRjUzRjk0 NzMzNDM3M0MyOTNCQTZBQzU5RkY5MjgzRjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDK0XmspC94uZmrVCDkbPO4Uwcqzf/lY4fsrKwTkFl1pL3wu2h4 nVHFLBAJ7lvO6a1drnAuAq1lsMmdMlaNLJBhKFEkh9KlGhNbUESegsLsAAlEC5Zu LBiOjnzvsaypjOeIL8AYQOOr9/yR3mAW+AikQ/R0UTSzqVavstJrf2jDqtcK1YQb 2wOEIWxFOvGEkZE/vNB4o3kAkqMgSykeKZtGQwPGypuoYML4/aBsprQIWlqrOX0P KRYVT5O+wTRkfAbaO+Kg0DXOdLIRYkFQhFktXqr2stPGvP/X64wGlkQvpWJMVIUz WXqoVRjglsAXmHjL1kteAxeVhL2gdxilKlsXAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUDuDN0vU/lHM0NzwpO6asWf+Sg/UwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9EdUROMHZVX2xITTBOendwTzZh c1dmLVNnX1Uucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBPPow DQYJKoZIhvcNAQELBQADggEBACU58MUkAWw3gesSvkoV8SilR5zod6SR/V1LtNQH hgXvSf3bWTQB+OzLXzytsvPEF/W7xKm9LK5d302ea/AO/AfPtqYRBtcoKEOm3Xmb PgX3jOhY8C9cU46S/6q8DU//2HTi1MsQfnxsMnTBq3H3EwER1dNW4xV7Ox51lPQE 5xGVqR/k/Sza9/tzw1QAOtsz8//0+uyZyvsvQ7XNvE0chyzWU5q/T/bh6X0nMfnP vHOfhL7l+MvT5AIwuyW5MaBvyJOVIvopR82vCG4wcP8GURNk/vMO/v7Rjl4ChhG6 tEnQ3uhXbpEV2CYCLxWKv3TXdVZjmxcAUwL/MVdvO3ybqL0= -----END CERTIFICATE-----Generated at Fri Sep 5 21:03:48 2025 by rpki-client