$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/IDjbFe--0WzcaYxxVBoYdO70T2E.roa File: IDjbFe--0WzcaYxxVBoYdO70T2E.roa (raw, json) Hash identifier: 7srPui9ewjatFAIya5+5F3lp/4KN4oTyx34zTCZ9GWI= Subject key identifier: 20:38:DB:15:EF:BE:D1:6C:DC:69:8C:71:54:1A:18:74:EE:F4:4F:61 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 195F Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/IDjbFe--0WzcaYxxVBoYdO70T2E.roa Signing time: Fri 22 Aug 2025 09:03:02 +0000 ROA not before: Fri 22 Aug 2025 09:03:02 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 7500 IP address blocks: 202.39.32.0/28 maxlen: 28 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 00:46:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6495 (0x195f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:03:02 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=2038DB15EFBED16CDC698C71541A1874EEF44F61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:42:98:27:c2:01:9c:29:2e:eb:f8:9b:44:cc: 47:c1:8e:46:28:01:b7:b7:5e:2c:e7:74:ec:4f:c2: ad:16:a3:2c:b0:e2:27:95:dd:ae:38:2a:40:7d:29: 2f:c2:e6:ab:be:e6:3d:e7:6b:66:d6:3c:6d:d7:c2: ac:16:9e:67:ac:85:b7:fd:e0:dc:ac:71:40:30:b7: 3a:3e:b3:f6:a7:05:73:c0:e0:cd:95:5e:26:81:b2: 56:21:24:d4:4b:11:2e:f2:35:35:7f:5f:35:d8:7c: 1b:28:c0:8a:be:53:03:24:c1:5d:f3:8b:77:a7:6a: a7:b9:1e:88:23:31:74:e3:b7:39:d0:53:b5:2d:27: ee:b8:21:43:67:00:99:a4:46:57:f2:3c:15:fd:73: 3e:eb:35:a8:9f:df:f5:81:6f:45:99:9f:63:0f:82: 96:f6:64:84:8a:39:a6:4a:d1:62:2a:d7:ef:90:45: 51:c8:ca:f8:87:f5:61:9d:2b:7d:a6:26:ab:59:26: bb:5f:43:0a:68:6b:d8:04:0c:94:5e:c1:24:79:c2: 4a:c8:a6:e3:4f:73:2f:3e:7a:c4:e8:95:c0:08:cf: b7:ec:76:c4:92:5c:76:88:88:d7:1c:b7:3c:0f:95: ce:69:5f:0e:5c:b8:dc:5f:ac:03:a0:6d:2d:14:29: e2:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:38:DB:15:EF:BE:D1:6C:DC:69:8C:71:54:1A:18:74:EE:F4:4F:61 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/IDjbFe--0WzcaYxxVBoYdO70T2E.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.39.32.0/28 Signature Algorithm: sha256WithRSAEncryption a3:f5:d6:14:e4:88:74:74:40:12:1b:87:8b:02:b4:b5:41:64: 9a:37:18:f5:26:82:37:21:ae:fb:e9:4f:df:59:e9:89:ac:87: f3:67:92:1a:f8:a1:59:b0:e4:1b:f0:3e:da:bd:37:4c:c0:6d: bf:cb:ab:d1:e5:2a:50:a6:fb:0c:14:88:15:9c:0c:65:fb:83: ee:7e:e8:f2:95:ae:a2:74:d8:02:26:74:cc:22:e2:d2:e8:bb: b9:94:de:fb:fd:35:8b:08:de:12:3c:29:ae:a8:5f:b6:55:9d: 99:8a:29:8f:c4:72:97:17:49:e8:9d:18:85:35:bd:7e:98:0b: 4f:6b:ab:0b:06:d2:ad:21:3e:75:2a:56:4f:c0:d9:3a:e7:0d: 70:ef:f6:af:d4:6b:f5:22:7b:89:9a:dc:1f:2a:58:a9:05:04: 5a:af:9f:f7:79:01:9a:3c:1e:4a:57:70:95:de:bd:8a:1f:64: 08:92:b3:76:3c:3c:67:e3:5a:86:4d:b4:60:11:4c:9b:a9:ae: 9c:d8:69:12:c5:8e:60:2e:f3:16:24:8e:f4:44:1b:f9:0c:80: e5:7e:20:57:81:17:a2:2a:56:1f:4d:d4:f6:11:78:0a:e5:3e: 6b:b7:e3:cb:42:3e:e3:99:cc:03:46:ce:df:25:67:b0:03:d6: 93:23:f8:0e -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICGV8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAzMDJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDIwMzhEQjE1RUZCRUQx NkNEQzY5OEM3MTU0MUExODc0RUVGNDRGNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDcQpgnwgGcKS7r+JtEzEfBjkYoAbe3XizndOxPwq0Woyyw4ieV 3a44KkB9KS/C5qu+5j3na2bWPG3XwqwWnmeshbf94NyscUAwtzo+s/anBXPA4M2V XiaBslYhJNRLES7yNTV/XzXYfBsowIq+UwMkwV3zi3enaqe5HogjMXTjtznQU7Ut J+64IUNnAJmkRlfyPBX9cz7rNaif3/WBb0WZn2MPgpb2ZISKOaZK0WIq1++QRVHI yviH9WGdK32mJqtZJrtfQwpoa9gEDJRewSR5wkrIpuNPcy8+esTolcAIz7fsdsSS XHaIiNcctzwPlc5pXw5cuNxfrAOgbS0UKeIdAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUIDjbFe++0WzcaYxxVBoYdO70T2EwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9JRGpiRmUtLTBXemNhWXh4VkJv WWRPNzBUMkUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEyicg ADANBgkqhkiG9w0BAQsFAAOCAQEAo/XWFOSIdHRAEhuHiwK0tUFkmjcY9SaCNyGu ++lP31npiayH82eSGvihWbDkG/A+2r03TMBtv8ur0eUqUKb7DBSIFZwMZfuD7n7o 8pWuonTYAiZ0zCLi0ui7uZTe+/01iwjeEjwprqhftlWdmYopj8RylxdJ6J0YhTW9 fpgLT2urCwbSrSE+dSpWT8DZOucNcO/2r9Rr9SJ7iZrcHypYqQUEWq+f93kBmjwe Sldwld69ih9kCJKzdjw8Z+Nahk20YBFMm6munNhpEsWOYC7zFiSO9EQb+QyA5X4g V4EXoipWH03U9hF4CuU+a7fjy0I+45nMA0bO3yVnsAPWkyP4Dg== -----END CERTIFICATE-----Generated at Fri Sep 5 21:15:35 2025 by rpki-client