$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/M7dleRtei3tp0vhdX3pJ1xahlQE.roa File: M7dleRtei3tp0vhdX3pJ1xahlQE.roa (raw, json) Hash identifier: llRHyUuN2Yf0BFIRKtbSzw5u0oXCUUkkc96WwvWQ4Nw= Subject key identifier: 33:B7:65:79:1B:5E:8B:7B:69:D2:F8:5D:5F:7A:49:D7:16:A1:95:01 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 194C Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/M7dleRtei3tp0vhdX3pJ1xahlQE.roa Signing time: Fri 22 Aug 2025 09:02:57 +0000 ROA not before: Fri 22 Aug 2025 09:02:57 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 142005 IP address blocks: 210.242.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 00:46:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6476 (0x194c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:02:57 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=33B765791B5E8B7B69D2F85D5F7A49D716A19501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:d1:d5:6a:b1:cc:a3:d8:27:d4:5b:9e:bb:b4: 67:e7:59:66:f7:ad:45:c3:22:e0:7a:79:4b:4a:d4: 14:8c:99:42:1a:2d:5c:c8:e1:1e:88:84:40:8a:04: 03:2d:7a:09:a2:8c:22:fb:f1:c8:c8:00:14:96:2f: 61:1c:21:62:4c:a9:99:86:12:87:11:8f:d0:5b:fe: 37:0f:d6:7f:82:61:dd:44:71:95:29:77:2b:dc:ed: 80:08:a8:59:93:db:00:06:3f:e9:38:49:bc:c3:56: 6f:b1:4c:09:b1:5c:2a:dd:3f:e7:ab:c9:6c:ff:cc: 2d:8f:f5:0c:67:5b:d9:3b:4a:c3:f3:39:89:15:c1: 2f:11:b7:2b:e9:39:78:d5:90:cf:73:de:00:1f:35: 5a:af:8e:e9:fd:14:93:a2:b1:50:1a:15:08:86:ce: ef:3c:cf:b4:d1:cf:98:28:de:5b:c8:6f:3d:76:b1: b5:86:c4:d4:ee:51:3a:f9:5d:ce:1e:d5:e9:11:c5: 41:32:0e:fa:5b:ab:6b:83:e7:36:11:c8:a8:6a:03: 4b:73:1d:9b:38:b5:10:bd:b2:ac:53:24:a9:e3:aa: f2:b6:fb:8b:32:8f:82:ee:c4:05:1e:9a:be:e5:0b: 86:1a:35:29:63:57:dd:a9:66:b3:b0:af:6a:f0:71: af:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:B7:65:79:1B:5E:8B:7B:69:D2:F8:5D:5F:7A:49:D7:16:A1:95:01 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/M7dleRtei3tp0vhdX3pJ1xahlQE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.242.118.0/24 Signature Algorithm: sha256WithRSAEncryption 54:ea:95:a9:97:9a:69:f9:0f:f6:a3:87:6a:e7:5b:c3:f6:fd: 99:fd:72:f0:1e:bb:d7:82:fd:c5:62:9b:f7:c6:a8:aa:13:d2: 82:5e:09:54:d4:e9:d1:24:89:5f:f9:65:67:f7:d0:49:e0:1c: f8:21:75:0c:90:76:67:0a:fe:2a:81:e1:de:08:f4:ad:0d:7c: 48:53:55:35:a0:7d:7a:ad:df:c0:e2:d8:30:71:29:de:3b:cd: ce:6b:e7:cc:4c:e5:2e:8f:99:66:c5:9c:ce:a4:bc:c9:39:59: 51:ce:d8:68:27:cf:6b:1e:f8:37:11:8c:ce:8d:d2:e5:71:14: 2e:02:61:59:77:43:f4:10:98:06:60:93:66:fd:9c:83:4d:82: 0b:dc:94:1f:de:20:dd:10:35:98:24:ac:29:b4:0c:5a:da:ae: 2e:47:67:54:3f:65:78:f6:69:f7:aa:05:ce:a6:ec:08:2f:6a: 2e:19:e4:0b:17:14:20:d9:c8:8b:32:2f:8f:7c:98:94:b4:9a: b2:cc:ca:57:d0:c3:4d:4f:79:9b:f8:89:b2:c0:6d:ed:93:1c: f2:01:39:9d:6a:07:42:e0:bc:0b:17:00:66:ce:b3:b4:aa:2e: 8e:95:f7:da:44:6f:be:7f:bc:ae:7b:ee:fe:86:9e:72:a5:04: 5a:45:28:a3 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICGUwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAyNTdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDMzQjc2NTc5MUI1RThC N0I2OUQyRjg1RDVGN0E0OUQ3MTZBMTk1MDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDt0dVqscyj2CfUW567tGfnWWb3rUXDIuB6eUtK1BSMmUIaLVzI 4R6IhECKBAMtegmijCL78cjIABSWL2EcIWJMqZmGEocRj9Bb/jcP1n+CYd1EcZUp dyvc7YAIqFmT2wAGP+k4SbzDVm+xTAmxXCrdP+eryWz/zC2P9QxnW9k7SsPzOYkV wS8RtyvpOXjVkM9z3gAfNVqvjun9FJOisVAaFQiGzu88z7TRz5go3lvIbz12sbWG xNTuUTr5Xc4e1ekRxUEyDvpbq2uD5zYRyKhqA0tzHZs4tRC9sqxTJKnjqvK2+4sy j4LuxAUemr7lC4YaNSljV92pZrOwr2rwca8bAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUM7dleRtei3tp0vhdX3pJ1xahlQEwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9NN2RsZVJ0ZWkzdHAwdmhkWDNw SjF4YWhsUUUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0vJ2 MA0GCSqGSIb3DQEBCwUAA4IBAQBU6pWpl5pp+Q/2o4dq51vD9v2Z/XLwHrvXgv3F Ypv3xqiqE9KCXglU1OnRJIlf+WVn99BJ4Bz4IXUMkHZnCv4qgeHeCPStDXxIU1U1 oH16rd/A4tgwcSneO83Oa+fMTOUuj5lmxZzOpLzJOVlRzthoJ89rHvg3EYzOjdLl cRQuAmFZd0P0EJgGYJNm/ZyDTYIL3JQf3iDdEDWYJKwptAxa2q4uR2dUP2V49mn3 qgXOpuwIL2ouGeQLFxQg2ciLMi+PfJiUtJqyzMpX0MNNT3mb+ImywG3tkxzyATmd agdC4LwLFwBmzrO0qi6OlffaRG++f7yue+7+hp5ypQRaRSij -----END CERTIFICATE-----Generated at Fri Sep 5 21:06:20 2025 by rpki-client