$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/HtgP-h2e5Bes2aGwPx-YOv3E7Lg.roa File: HtgP-h2e5Bes2aGwPx-YOv3E7Lg.roa (raw, json) Hash identifier: 55eI491KstA0mYWMdtpGrHyQTFMS7kAbpN1B4XhVMa0= Subject key identifier: 1E:D8:0F:FA:1D:9E:E4:17:AC:D9:A1:B0:3F:1F:98:3A:FD:C4:EC:B8 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 18B5 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/HtgP-h2e5Bes2aGwPx-YOv3E7Lg.roa Signing time: Fri 22 Aug 2025 09:02:22 +0000 ROA not before: Fri 22 Aug 2025 09:02:22 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 3462 IP address blocks: 203.160.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 00:46:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6325 (0x18b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:02:22 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=1ED80FFA1D9EE417ACD9A1B03F1F983AFDC4ECB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c7:8b:6e:f9:2b:32:0d:e1:5f:eb:e9:e5:88: aa:9b:8a:22:80:8b:33:6e:1e:60:55:b5:af:73:f5: b3:b8:b4:ea:e4:ef:b8:5a:0e:53:ea:82:72:ab:38: dc:43:49:da:62:0a:a9:eb:d7:79:90:9b:73:ed:25: 73:c0:9d:f3:62:67:51:94:3d:34:c1:e1:4f:22:bc: 8f:c9:ee:cd:4d:dc:8e:ce:03:42:a4:77:bc:54:04: b1:13:b0:82:49:dd:eb:63:9b:19:4f:d8:b0:5f:ca: 83:4e:23:d3:d4:52:ea:ad:9b:f2:14:02:0e:ee:4c: 7d:d5:98:63:e0:ff:9a:09:ab:ec:ee:8e:5d:25:74: c9:27:39:68:9b:c8:71:09:3d:16:60:0e:3a:95:50: 49:76:9c:9f:3b:4b:1e:67:bd:05:91:f2:69:2e:3a: 80:2c:7a:46:8c:a8:98:d7:08:0a:fb:67:97:32:83: bb:f4:85:8d:7e:ea:5a:42:b2:93:da:d1:0f:3a:1e: 95:bb:44:ba:5d:5a:45:45:fc:93:f7:31:c8:76:38: 1c:99:85:dc:6d:50:3c:2f:37:be:82:73:68:6c:8f: 66:5b:02:89:8b:a2:c5:ae:3b:d6:78:6a:9f:96:ef: bf:f8:b2:0c:75:6b:b2:a8:25:8e:f6:f3:85:c6:10: 60:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:D8:0F:FA:1D:9E:E4:17:AC:D9:A1:B0:3F:1F:98:3A:FD:C4:EC:B8 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/HtgP-h2e5Bes2aGwPx-YOv3E7Lg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.160.242.0/24 Signature Algorithm: sha256WithRSAEncryption 23:ab:aa:41:ec:b8:d7:c0:5f:bc:99:b9:db:fb:c3:55:d0:82: d6:27:5b:6e:8c:8a:43:12:ed:6f:76:3a:cf:13:11:a1:f3:13: ec:45:9a:e5:72:67:c2:24:3e:2f:da:03:31:5d:a7:2d:6d:73: 7e:78:fe:4b:fd:43:d4:3e:8e:25:56:9b:3e:6b:59:3f:72:92: 5d:1f:66:60:78:52:63:cb:57:a3:d0:88:ab:2a:65:36:cb:11: bb:15:17:3d:95:4e:9c:c1:ad:8f:80:75:61:57:6b:0d:97:9c: bb:c4:7a:3f:fb:2b:ee:08:7f:3b:5f:40:c9:e4:cd:7c:71:3a: 39:c9:f0:c9:ef:c2:a1:f4:ac:03:a3:45:0c:d0:71:9a:3a:dd: 2c:d6:e5:ba:da:22:70:80:d5:e9:0e:6f:f1:be:e1:ea:9e:4c: eb:83:26:24:71:99:8e:a9:d0:93:c3:d5:81:bc:03:b9:67:9d: d3:0b:07:52:f8:50:3b:47:f2:e5:f9:e8:66:5b:a8:c7:7b:34: fb:6e:d5:98:fb:44:7d:83:74:83:a4:6b:dd:a7:49:72:a7:d1: a9:26:13:87:9f:0c:50:78:f1:fa:fc:60:02:b2:89:68:b3:44: 03:1b:64:39:93:76:79:f4:c0:18:d3:c4:4b:1f:a6:dd:d8:ea: 78:ca:04:12 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICGLUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAyMjJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDFFRDgwRkZBMUQ5RUU0 MTdBQ0Q5QTFCMDNGMUY5ODNBRkRDNEVDQjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+x4tu+SsyDeFf6+nliKqbiiKAizNuHmBVta9z9bO4tOrk77ha DlPqgnKrONxDSdpiCqnr13mQm3PtJXPAnfNiZ1GUPTTB4U8ivI/J7s1N3I7OA0Kk d7xUBLETsIJJ3etjmxlP2LBfyoNOI9PUUuqtm/IUAg7uTH3VmGPg/5oJq+zujl0l dMknOWibyHEJPRZgDjqVUEl2nJ87Sx5nvQWR8mkuOoAsekaMqJjXCAr7Z5cyg7v0 hY1+6lpCspPa0Q86HpW7RLpdWkVF/JP3Mch2OByZhdxtUDwvN76Cc2hsj2ZbAomL osWuO9Z4ap+W77/4sgx1a7KoJY7284XGEGCRAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUHtgP+h2e5Bes2aGwPx+YOv3E7LgwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9IdGdQLWgyZTVCZXMyYUd3UHgt WU92M0U3TGcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy6Dy MA0GCSqGSIb3DQEBCwUAA4IBAQAjq6pB7LjXwF+8mbnb+8NV0ILWJ1tujIpDEu1v djrPExGh8xPsRZrlcmfCJD4v2gMxXactbXN+eP5L/UPUPo4lVps+a1k/cpJdH2Zg eFJjy1ej0IirKmU2yxG7FRc9lU6cwa2PgHVhV2sNl5y7xHo/+yvuCH87X0DJ5M18 cTo5yfDJ78Kh9KwDo0UM0HGaOt0s1uW62iJwgNXpDm/xvuHqnkzrgyYkcZmOqdCT w9WBvAO5Z53TCwdS+FA7R/Ll+ehmW6jHezT7btWY+0R9g3SDpGvdp0lyp9GpJhOH nwxQePH6/GACsolos0QDG2Q5k3Z59MAY08RLH6bd2Op4ygQS -----END CERTIFICATE-----Generated at Fri Sep 5 21:03:42 2025 by rpki-client