$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/H2xhGpELBHMwcS_zsHzSl89gYAw.roa File: H2xhGpELBHMwcS_zsHzSl89gYAw.roa (raw, json) Hash identifier: WD//EfjDykziKGPVohpwtEr2PyY26oHpUUTfNjuOZOw= Subject key identifier: 1F:6C:61:1A:91:0B:04:73:30:71:2F:F3:B0:7C:D2:97:CF:60:60:0C Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 18F1 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/H2xhGpELBHMwcS_zsHzSl89gYAw.roa Signing time: Fri 22 Aug 2025 09:02:38 +0000 ROA not before: Fri 22 Aug 2025 09:02:38 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 3462 IP address blocks: 203.69.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 00:46:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6385 (0x18f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:02:38 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=1F6C611A910B047330712FF3B07CD297CF60600C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:14:3b:c3:ec:0a:c6:ff:55:10:18:b0:bb:a8: f0:38:33:45:15:43:83:77:cd:2d:1e:ce:40:47:1f: 8d:9b:b2:fe:d5:05:b0:f6:9b:99:b2:dd:2e:b4:26: 3f:b3:90:fa:cc:2b:02:5b:37:26:25:af:e6:dd:f5: ca:73:b5:0a:04:1c:18:c4:47:37:20:2c:2a:19:9f: 9d:32:eb:a6:59:ae:5d:d7:47:91:73:be:6c:92:f1: 78:95:f6:3f:d0:e5:d1:46:ae:d5:40:e4:ae:b0:9a: d4:05:fb:ea:fc:1d:5c:00:78:94:44:74:63:52:56: e2:5c:fe:ff:e7:b6:23:53:5b:90:0c:bd:6a:a0:5b: 42:53:ac:e5:f3:2a:d7:ed:e8:77:ab:10:b1:3f:4d: 90:3b:8c:81:f7:b9:bf:13:15:f1:0e:cd:e0:d2:38: 72:be:d4:7f:8c:e9:bb:3b:48:23:35:1e:39:3a:43: b6:40:ab:32:49:af:04:00:b6:76:0b:6f:90:d4:aa: b4:99:fb:d3:c1:63:5a:40:7d:bf:35:ac:d5:5d:fd: 18:fe:64:aa:36:95:62:5d:f3:e1:bf:dc:16:46:aa: 10:21:0f:2b:c8:75:76:9b:09:fb:f0:10:49:f0:2e: 34:67:df:40:83:5c:bf:ce:65:8e:56:36:a9:cb:b5: 5d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:6C:61:1A:91:0B:04:73:30:71:2F:F3:B0:7C:D2:97:CF:60:60:0C X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/H2xhGpELBHMwcS_zsHzSl89gYAw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.69.0.0/16 Signature Algorithm: sha256WithRSAEncryption 2c:2e:cc:a2:1c:b7:16:40:a2:a9:69:c9:95:79:39:11:aa:6d: 9f:e3:d7:1a:1c:1d:00:0b:3d:2d:51:68:52:47:0a:8f:64:fd: e7:e2:ca:8e:ac:8b:f9:dd:7e:64:54:ae:0f:89:4c:37:f9:cc: b8:21:fb:09:4f:58:88:de:41:5a:ab:20:81:db:4b:37:3e:8f: 44:c1:8d:b0:60:ff:fa:50:c8:17:c8:09:82:58:3c:83:95:ca: 1d:4c:ff:de:31:2b:0f:fe:e0:0e:65:d8:f9:27:5d:2a:ee:4f: 7b:6e:de:90:f3:e3:e3:58:68:99:5e:e7:e1:a0:e9:b8:c8:dc: 13:bb:dc:36:f0:41:f8:85:87:17:43:51:f7:7b:77:38:50:b6: 53:c5:0e:79:bf:a9:f1:ba:2e:cc:17:77:f6:fc:53:06:4d:7e: 82:4c:a0:49:12:e2:c5:c7:28:3a:59:54:e5:f3:6f:00:65:65: 1e:bb:53:80:9c:a6:c1:ad:6e:90:8e:cf:00:1e:f3:25:0d:9c: a8:90:c7:da:d5:55:9b:39:8f:56:fe:1f:4f:7a:65:fc:bf:a9: 12:b4:91:8f:dc:23:22:8f:79:67:71:f2:7c:ef:0d:d6:7f:75: c6:84:e0:ba:47:7c:cd:6b:fb:bf:3d:eb:e8:ba:d8:71:47:65: cd:b5:f2:0d -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICGPEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAyMzhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDFGNkM2MTFBOTEwQjA0 NzMzMDcxMkZGM0IwN0NEMjk3Q0Y2MDYwMEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTFDvD7ArG/1UQGLC7qPA4M0UVQ4N3zS0ezkBHH42bsv7VBbD2 m5my3S60Jj+zkPrMKwJbNyYlr+bd9cpztQoEHBjERzcgLCoZn50y66ZZrl3XR5Fz vmyS8XiV9j/Q5dFGrtVA5K6wmtQF++r8HVwAeJREdGNSVuJc/v/ntiNTW5AMvWqg W0JTrOXzKtft6HerELE/TZA7jIH3ub8TFfEOzeDSOHK+1H+M6bs7SCM1Hjk6Q7ZA qzJJrwQAtnYLb5DUqrSZ+9PBY1pAfb81rNVd/Rj+ZKo2lWJd8+G/3BZGqhAhDyvI dXabCfvwEEnwLjRn30CDXL/OZY5WNqnLtV3HAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUH2xhGpELBHMwcS/zsHzSl89gYAwwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9IMnhoR3BFTEJITXdjU196c0h6 U2w4OWdZQXcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAy0Uw DQYJKoZIhvcNAQELBQADggEBACwuzKIctxZAoqlpyZV5ORGqbZ/j1xocHQALPS1R aFJHCo9k/efiyo6si/ndfmRUrg+JTDf5zLgh+wlPWIjeQVqrIIHbSzc+j0TBjbBg //pQyBfICYJYPIOVyh1M/94xKw/+4A5l2PknXSruT3tu3pDz4+NYaJle5+Gg6bjI 3BO73DbwQfiFhxdDUfd7dzhQtlPFDnm/qfG6LswXd/b8UwZNfoJMoEkS4sXHKDpZ VOXzbwBlZR67U4CcpsGtbpCOzwAe8yUNnKiQx9rVVZs5j1b+H096Zfy/qRK0kY/c IyKPeWdx8nzvDdZ/dcaE4LpHfM1r+7896+i62HFHZc218g0= -----END CERTIFICATE-----Generated at Fri Sep 5 21:03:43 2025 by rpki-client