$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/Q_cSREyXx_w_h13K6X0kiqsyMJk.roa File: Q_cSREyXx_w_h13K6X0kiqsyMJk.roa (raw, json) Hash identifier: Bs2fkyA2ldN9fxaXaUzexw/W/5QhWOYHSDa9yJDv4YI= Subject key identifier: 43:F7:12:44:4C:97:C7:FC:3F:87:5D:CA:E9:7D:24:8A:AB:32:30:99 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 190B Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Q_cSREyXx_w_h13K6X0kiqsyMJk.roa Signing time: Fri 22 Aug 2025 09:02:42 +0000 ROA not before: Fri 22 Aug 2025 09:02:42 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 3462 IP address blocks: 220.128.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 00:46:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6411 (0x190b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:02:42 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=43F712444C97C7FC3F875DCAE97D248AAB323099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f2:51:d9:af:6d:76:17:ed:a9:5d:14:7a:24: 4b:34:29:66:1e:25:32:5e:ad:2d:77:e0:57:f9:f2: 70:86:d8:f7:85:85:a3:1e:56:d1:a8:3c:9a:b7:c2: c7:1e:7f:90:b0:ef:4e:4b:76:6a:c7:78:a9:1e:df: 66:bb:50:e9:6a:23:be:2b:50:20:39:5f:be:4f:fe: 52:1b:c1:28:70:82:d7:43:24:1a:46:db:34:bf:21: e0:be:ba:e6:aa:18:e2:57:a1:14:5a:a2:e8:10:f6: 88:37:c3:13:d8:fc:49:8d:96:4d:3e:3d:47:49:fe: 5a:c7:97:14:95:25:e3:18:d1:84:57:99:25:15:d4: 68:3c:91:0f:97:be:60:1b:1a:e5:14:fa:3d:b9:7a: 04:5f:4e:56:d1:f7:09:53:23:c2:8f:7f:85:8f:ee: 0c:97:b0:44:62:20:e7:e4:65:dc:27:7a:26:e6:46: 59:4e:13:30:ba:fa:45:f7:dd:93:6b:56:c2:1d:5a: 06:0d:5d:83:73:5d:68:27:24:d9:eb:35:9c:e2:b4: 80:82:38:50:99:ae:d8:5c:a1:55:46:be:e8:6c:17: e3:86:24:59:ce:e1:5f:97:10:20:9b:a8:b8:49:e7: b7:ac:aa:8f:f0:2c:d5:4a:72:ed:68:f7:c9:ad:c4: 63:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:F7:12:44:4C:97:C7:FC:3F:87:5D:CA:E9:7D:24:8A:AB:32:30:99 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Q_cSREyXx_w_h13K6X0kiqsyMJk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 220.128.64.0/18 Signature Algorithm: sha256WithRSAEncryption 09:79:69:cb:72:9c:33:ee:95:a1:8d:f4:c7:07:7b:92:3c:ea: db:bb:e8:ee:40:af:08:6b:4c:55:ae:bc:ef:12:e3:9b:5c:54: b3:79:d9:86:c0:3d:fe:30:14:b4:78:3b:e1:4f:cb:af:67:f4: 39:b0:c3:41:2e:06:3e:b3:2c:f1:cc:57:61:1d:cb:bc:a0:5d: 98:30:d0:01:9b:2e:41:ed:94:c1:33:b2:54:a0:14:7a:95:e6: 6d:68:18:9c:46:86:65:12:28:3b:0a:1d:90:25:22:27:22:6a: 24:41:11:a0:71:04:92:d9:a9:64:b9:99:e9:2b:b9:22:ff:a3: 9c:e0:c5:a7:46:38:7a:cb:cc:31:70:6a:9b:8d:0e:0e:2b:a4: 18:2d:76:39:1f:6a:97:2a:61:ba:c7:da:13:7c:e4:31:91:53: 3e:d2:10:e9:11:0e:7c:53:c2:67:35:e9:7f:6e:d7:29:7b:e9: 34:bc:63:f9:35:2d:e4:86:05:60:52:0c:e1:68:7a:c0:cc:37: 75:7e:c5:77:74:21:89:b3:90:7c:0f:65:87:99:fd:e2:32:0e: ec:c6:6a:39:ff:2a:1b:e3:10:64:a0:eb:4b:c5:e0:a8:10:38: 38:25:1c:c2:af:56:93:50:f3:12:bf:67:c4:4a:ae:5f:f3:2e: 3b:a4:d7:11 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICGQswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAyNDJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDQzRjcxMjQ0NEM5N0M3 RkMzRjg3NURDQUU5N0QyNDhBQUIzMjMwOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCx8lHZr212F+2pXRR6JEs0KWYeJTJerS134Ff58nCG2PeFhaMe VtGoPJq3wscef5Cw705LdmrHeKke32a7UOlqI74rUCA5X75P/lIbwShwgtdDJBpG 2zS/IeC+uuaqGOJXoRRaougQ9og3wxPY/EmNlk0+PUdJ/lrHlxSVJeMY0YRXmSUV 1Gg8kQ+XvmAbGuUU+j25egRfTlbR9wlTI8KPf4WP7gyXsERiIOfkZdwneibmRllO EzC6+kX33ZNrVsIdWgYNXYNzXWgnJNnrNZzitICCOFCZrthcoVVGvuhsF+OGJFnO 4V+XECCbqLhJ57esqo/wLNVKcu1o98mtxGMTAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUQ/cSREyXx/w/h13K6X0kiqsyMJkwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9RX2NTUkV5WHhfd19oMTNLNlgw a2lxc3lNSmsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG3IBA MA0GCSqGSIb3DQEBCwUAA4IBAQAJeWnLcpwz7pWhjfTHB3uSPOrbu+juQK8Ia0xV rrzvEuObXFSzedmGwD3+MBS0eDvhT8uvZ/Q5sMNBLgY+syzxzFdhHcu8oF2YMNAB my5B7ZTBM7JUoBR6leZtaBicRoZlEig7Ch2QJSInImokQRGgcQSS2alkuZnpK7ki /6Oc4MWnRjh6y8wxcGqbjQ4OK6QYLXY5H2qXKmG6x9oTfOQxkVM+0hDpEQ58U8Jn Nel/btcpe+k0vGP5NS3khgVgUgzhaHrAzDd1fsV3dCGJs5B8D2WHmf3iMg7sxmo5 /yob4xBkoOtLxeCoEDg4JRzCr1aTUPMSv2fESq5f8y47pNcR -----END CERTIFICATE-----Generated at Fri Sep 5 21:08:48 2025 by rpki-client