$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/PzAAHXDiELj2vY1uM_7cFTVjaNA.roa File: PzAAHXDiELj2vY1uM_7cFTVjaNA.roa (raw, json) Hash identifier: ToyzIp62s3BWdG32aHFTcxLTYKtNBaqUZ1r1aQupohc= Subject key identifier: 3F:30:00:1D:70:E2:10:B8:F6:BD:8D:6E:33:FE:DC:15:35:63:68:D0 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 1926 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/PzAAHXDiELj2vY1uM_7cFTVjaNA.roa Signing time: Fri 22 Aug 2025 09:02:49 +0000 ROA not before: Fri 22 Aug 2025 09:02:49 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 3462 IP address blocks: 218.164.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 00:46:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6438 (0x1926) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:02:49 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=3F30001D70E210B8F6BD8D6E33FEDC15356368D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7c:6f:fa:9c:e2:74:7f:a4:85:0f:d7:ec:d2: c1:9b:a6:5a:8b:6f:17:8e:e5:de:52:b2:4c:4c:24: d5:7a:9e:30:28:33:90:70:03:38:56:7d:70:50:fa: 26:14:66:5b:7a:29:0f:fa:0c:ac:3e:c1:be:f3:dd: 00:84:26:06:37:d8:55:29:4d:ae:2a:0c:96:60:b7: 77:62:eb:95:ef:ba:86:21:3f:6f:44:f2:be:8d:bc: 27:62:10:ff:26:88:b8:7a:6d:bf:60:c4:b5:e9:1d: e8:7a:fa:27:94:a5:85:21:33:87:e9:c4:0c:89:a9: 63:46:59:3f:13:b1:e4:14:1b:01:74:ec:cc:a0:08: 8d:d4:c0:6b:60:4f:3b:d6:84:ba:74:03:84:14:5b: f0:b9:db:28:80:e1:ee:64:ef:d9:61:2c:30:70:70: a3:e7:f4:6f:75:1d:ac:87:e5:b8:49:e9:40:23:ab: e3:e3:24:1e:05:8a:f3:30:48:23:43:4b:2d:21:d6: ad:7e:55:e2:1e:12:88:8d:54:f5:64:b9:d1:3d:13: 33:7f:20:3c:50:ac:07:8a:79:39:ce:50:ad:68:24: f2:f0:92:ed:1b:7e:13:c9:a6:a4:3c:91:85:9b:be: 4c:79:0c:90:e2:ac:20:ae:d8:c6:84:8d:b1:83:06: ee:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:30:00:1D:70:E2:10:B8:F6:BD:8D:6E:33:FE:DC:15:35:63:68:D0 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/PzAAHXDiELj2vY1uM_7cFTVjaNA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 218.164.0.0/15 Signature Algorithm: sha256WithRSAEncryption bd:be:f4:cc:9f:24:18:67:99:c8:0a:13:67:01:be:ef:e3:24: 1b:06:68:90:27:f4:6e:5d:96:c5:96:f2:b1:c4:22:5f:86:04: 0d:70:61:02:47:61:01:55:34:e4:e6:9e:9c:9c:e8:e0:7a:cc: 64:ed:ad:e3:95:eb:28:7e:af:ad:d3:7e:cc:37:44:43:6a:df: b1:ff:5e:53:d6:7c:7e:c1:ec:5b:a6:60:d2:cf:1c:07:c7:b0: 5c:83:4b:e6:15:e3:7d:06:90:c0:cf:78:f4:58:81:47:36:86: 3e:5d:ff:89:40:29:eb:77:82:30:2c:55:a9:4c:91:95:a4:1f: 32:db:90:f8:bb:e6:18:64:73:ea:18:04:9b:17:70:38:a0:07: 61:22:4b:33:77:74:65:6d:b5:1b:eb:d8:bc:75:49:28:7e:c8: 66:dd:c0:53:40:de:75:9c:92:48:7a:c9:42:5c:af:44:dc:38: e6:5b:5c:cb:fd:3c:e8:f6:a5:db:8f:23:ca:47:15:b4:c8:05: 87:d0:b2:70:4f:b2:39:3b:ef:66:ae:6d:57:c6:0d:04:b1:03: 65:e0:16:47:f6:09:1d:1c:11:2d:76:8b:ed:33:38:77:33:f1: e7:3b:15:98:dd:20:ea:d7:f4:1f:ff:d8:bb:a2:3d:90:7e:74: 39:3c:5b:d5 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICGSYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAyNDlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDNGMzAwMDFENzBFMjEw QjhGNkJEOEQ2RTMzRkVEQzE1MzU2MzY4RDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrfG/6nOJ0f6SFD9fs0sGbplqLbxeO5d5SskxMJNV6njAoM5Bw AzhWfXBQ+iYUZlt6KQ/6DKw+wb7z3QCEJgY32FUpTa4qDJZgt3di65XvuoYhP29E 8r6NvCdiEP8miLh6bb9gxLXpHeh6+ieUpYUhM4fpxAyJqWNGWT8TseQUGwF07Myg CI3UwGtgTzvWhLp0A4QUW/C52yiA4e5k79lhLDBwcKPn9G91HayH5bhJ6UAjq+Pj JB4FivMwSCNDSy0h1q1+VeIeEoiNVPVkudE9EzN/IDxQrAeKeTnOUK1oJPLwku0b fhPJpqQ8kYWbvkx5DJDirCCu2MaEjbGDBu6TAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUPzAAHXDiELj2vY1uM/7cFTVjaNAwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9QekFBSFhEaUVMajJ2WTF1TV83 Y0ZUVmphTkEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMB2qQw DQYJKoZIhvcNAQELBQADggEBAL2+9MyfJBhnmcgKE2cBvu/jJBsGaJAn9G5dlsWW 8rHEIl+GBA1wYQJHYQFVNOTmnpyc6OB6zGTtreOV6yh+r63Tfsw3RENq37H/XlPW fH7B7FumYNLPHAfHsFyDS+YV430GkMDPePRYgUc2hj5d/4lAKet3gjAsValMkZWk HzLbkPi75hhkc+oYBJsXcDigB2EiSzN3dGVttRvr2Lx1SSh+yGbdwFNA3nWckkh6 yUJcr0TcOOZbXMv9POj2pduPI8pHFbTIBYfQsnBPsjk772aubVfGDQSxA2XgFkf2 CR0cES12i+0zOHcz8ec7FZjdIOrX9B//2LuiPZB+dDk8W9U= -----END CERTIFICATE-----Generated at Fri Sep 5 21:08:47 2025 by rpki-client