$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/Kq5oBPzkbPhSIrh-EkbqlPYcAHo.roa File: Kq5oBPzkbPhSIrh-EkbqlPYcAHo.roa (raw, json) Hash identifier: qXKXKv76DfuEpz4F8bMqlFn2A6XkGmd3s8KW5M2OVjU= Subject key identifier: 2A:AE:68:04:FC:E4:6C:F8:52:22:B8:7E:12:46:EA:94:F6:1C:00:7A Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 1945 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Kq5oBPzkbPhSIrh-EkbqlPYcAHo.roa Signing time: Fri 22 Aug 2025 09:02:55 +0000 ROA not before: Fri 22 Aug 2025 09:02:55 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 142005 IP address blocks: 210.61.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 00:46:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6469 (0x1945) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:02:55 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=2AAE6804FCE46CF85222B87E1246EA94F61C007A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e4:ac:1e:25:f2:39:95:67:7e:5d:28:d6:13: c6:69:bb:65:fe:8f:d5:eb:9d:ba:9b:66:21:88:d1: 91:f5:d9:7a:90:36:c7:2a:2b:9b:7c:82:74:26:35: e7:4d:3e:7c:f2:0f:7e:b6:72:a7:13:c0:1b:d1:90: 4a:c9:3f:ee:e8:f7:fd:ef:a9:21:cd:e0:84:b3:0a: 76:cc:e7:56:28:c8:07:fb:d1:0e:a3:3b:da:c7:dd: 6a:25:b7:3c:85:31:98:72:f0:8c:0e:3f:3b:d4:02: a9:82:9d:08:e7:55:01:6b:9d:37:df:dc:a2:19:05: 08:d4:a7:17:3c:38:f2:7e:ea:56:1d:d2:83:d0:a0: 7f:7d:09:d6:34:ad:7e:11:3a:24:17:af:04:4e:6f: bc:e1:bb:91:f7:76:48:e6:68:71:67:a6:1e:68:13: 55:6b:31:42:d3:62:8a:34:ba:cc:df:32:7f:62:9e: 34:5d:2f:17:4b:81:cb:10:1e:ea:8f:52:f9:6a:01: 12:6e:4f:09:5b:06:7e:91:18:cb:39:82:90:d2:1b: c9:4f:29:71:8f:3a:26:e5:02:40:c3:49:ae:dc:0c: 14:d4:30:7f:9b:dd:af:21:30:65:7a:1b:d7:24:15: c5:d8:31:ef:08:ae:e7:a9:1c:06:b7:db:d8:13:c1: 74:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:AE:68:04:FC:E4:6C:F8:52:22:B8:7E:12:46:EA:94:F6:1C:00:7A X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Kq5oBPzkbPhSIrh-EkbqlPYcAHo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.61.107.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:01:6d:fc:4b:bb:4c:0e:16:99:fc:02:d5:a9:07:47:4c:b5: 50:2d:df:85:ce:b7:d4:b5:78:1d:48:8f:f8:3c:35:5f:f9:93: 86:57:e8:0c:bf:2d:04:2a:6a:26:74:17:0d:0f:cd:49:1e:d2: be:ed:e7:46:03:57:df:7f:c0:e2:b9:fa:17:4a:df:95:86:39: 90:6c:bb:f7:4f:f2:14:6f:0d:a5:fa:66:0f:f5:ed:df:46:78: e5:7e:3e:7a:f3:11:30:95:0d:33:34:88:35:1f:6b:0c:29:02: 2a:0c:6d:41:03:54:b1:ba:2e:37:dd:91:d1:05:fb:9e:52:fe: 32:04:c9:4e:a4:5a:17:a4:f1:6c:14:ae:67:29:48:e0:58:b1: 4f:10:97:a9:a7:cd:15:4a:23:ea:87:cb:90:e7:cd:55:cb:7d: a9:13:f9:3d:f9:9a:c5:fa:97:cb:44:bc:14:47:c2:72:91:46: 1b:a6:8b:75:8e:52:ea:8c:e5:04:ae:ee:e2:33:5e:05:b2:09: c2:a7:de:6e:6e:13:29:b5:04:ce:0d:fa:12:1c:7a:fd:03:a2: d9:22:ca:28:89:e5:23:14:b6:40:86:af:78:a0:c6:09:4e:93: 73:8a:f2:b2:82:cd:19:57:50:8a:bf:ae:25:01:b4:b5:ea:99: 75:7e:11:cd -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICGUUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAyNTVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDJBQUU2ODA0RkNFNDZD Rjg1MjIyQjg3RTEyNDZFQTk0RjYxQzAwN0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC75KweJfI5lWd+XSjWE8Zpu2X+j9XrnbqbZiGI0ZH12XqQNscq K5t8gnQmNedNPnzyD362cqcTwBvRkErJP+7o9/3vqSHN4ISzCnbM51YoyAf70Q6j O9rH3WoltzyFMZhy8IwOPzvUAqmCnQjnVQFrnTff3KIZBQjUpxc8OPJ+6lYd0oPQ oH99CdY0rX4ROiQXrwROb7zhu5H3dkjmaHFnph5oE1VrMULTYoo0uszfMn9injRd LxdLgcsQHuqPUvlqARJuTwlbBn6RGMs5gpDSG8lPKXGPOiblAkDDSa7cDBTUMH+b 3a8hMGV6G9ckFcXYMe8IruepHAa329gTwXRJAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUKq5oBPzkbPhSIrh+EkbqlPYcAHowHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9LcTVvQlB6a2JQaFNJcmgtRWti cWxQWWNBSG8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0j1r MA0GCSqGSIb3DQEBCwUAA4IBAQAbAW38S7tMDhaZ/ALVqQdHTLVQLd+FzrfUtXgd SI/4PDVf+ZOGV+gMvy0EKmomdBcND81JHtK+7edGA1fff8DiufoXSt+VhjmQbLv3 T/IUbw2l+mYP9e3fRnjlfj568xEwlQ0zNIg1H2sMKQIqDG1BA1Sxui433ZHRBfue Uv4yBMlOpFoXpPFsFK5nKUjgWLFPEJepp80VSiPqh8uQ581Vy32pE/k9+ZrF+pfL RLwUR8JykUYbpot1jlLqjOUEru7iM14FsgnCp95ubhMptQTODfoSHHr9A6LZIsoo ieUjFLZAhq94oMYJTpNzivKygs0ZV1CKv64lAbS16pl1fhHN -----END CERTIFICATE-----Generated at Fri Sep 5 21:10:58 2025 by rpki-client