$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/Qk6eeOiukj7LKYWmjKbeJ0ni0R4.roa File: Qk6eeOiukj7LKYWmjKbeJ0ni0R4.roa (raw, json) Hash identifier: OG1Tpup9F52J+EC58YzwKXTL4teBJZeayhnjcDFYsv4= Subject key identifier: 42:4E:9E:78:E8:AE:92:3E:CB:29:85:A6:8C:A6:DE:27:49:E2:D1:1E Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 18BD Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Qk6eeOiukj7LKYWmjKbeJ0ni0R4.roa Signing time: Fri 22 Aug 2025 09:02:24 +0000 ROA not before: Fri 22 Aug 2025 09:02:24 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 3462 IP address blocks: 202.39.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 00:46:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6333 (0x18bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:02:24 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=424E9E78E8AE923ECB2985A68CA6DE2749E2D11E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ce:df:cf:e6:ce:da:3b:9e:89:54:17:bd:93: 8f:8f:e1:c0:a4:f8:e8:bc:34:96:50:06:17:f4:8e: 56:ca:95:62:44:62:04:43:b8:1a:96:1d:15:b4:f2: 28:ba:5a:78:0b:3f:14:3b:5f:c8:27:15:10:c9:e8: 98:8c:71:ac:d7:13:f4:8d:7d:b7:2b:86:96:3c:b4: 0e:ed:22:55:cc:07:de:c4:fd:93:92:d6:0a:f5:30: 4b:f5:c3:09:f6:45:53:11:00:a3:82:32:9d:d3:d1: 9e:f2:46:88:41:42:b6:ee:43:ff:d1:3c:05:9d:a6: 85:f2:e3:68:5f:ee:e7:d8:65:3b:1c:00:f6:64:d7: 45:4b:4b:9c:0b:e9:0a:0e:74:c0:f5:3a:16:d5:bd: a9:04:71:41:b5:17:04:39:1e:a7:25:a4:69:cf:00: 1c:18:78:79:47:4d:7a:3f:68:3a:36:60:e4:f9:11: 4f:64:9b:72:51:15:a1:21:99:82:80:2d:48:db:ff: 9f:75:6e:97:de:77:ed:e2:ab:f7:34:4c:65:c6:e2: bf:6a:ff:18:bd:c2:c2:29:fd:67:69:e9:a1:d3:59: 59:2b:4a:2f:dc:d2:98:0d:91:6e:7b:f6:95:8d:7c: 9c:7a:44:da:66:5c:50:72:29:a8:5f:12:78:42:c7: 0f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:4E:9E:78:E8:AE:92:3E:CB:29:85:A6:8C:A6:DE:27:49:E2:D1:1E X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Qk6eeOiukj7LKYWmjKbeJ0ni0R4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.39.64.0/19 Signature Algorithm: sha256WithRSAEncryption 5a:1c:43:f8:4e:b5:89:dd:f2:3e:ab:40:4d:0c:96:3f:47:51: e5:45:22:59:a2:b3:56:78:02:5c:ac:95:72:98:5c:90:53:70: 04:c6:62:24:19:1a:33:90:ab:b7:91:46:4d:40:4d:18:0c:bc: 98:f9:35:e8:d1:a1:f3:96:22:7f:cb:ad:1b:b6:c4:3f:63:b2: 25:25:c1:11:7a:59:51:5a:82:52:cf:25:a3:3d:e9:63:81:cc: 4b:52:42:e0:eb:89:7a:08:a7:e7:d2:03:71:62:dd:13:d8:07: 49:81:c6:bb:d5:bf:e6:af:92:08:72:c3:df:e9:d3:cb:16:bd: 12:87:ce:da:ea:d6:11:f0:dd:52:f3:7b:89:cd:f8:54:f8:a2: a1:80:d5:87:8c:f9:8a:76:80:c5:70:4f:1b:e8:46:43:38:82: b8:c6:47:d8:cc:0f:e3:bd:b2:53:79:8a:5b:21:97:d0:29:2a: 62:a8:62:25:f1:27:d9:b6:d4:c5:69:65:4e:75:b9:bf:b5:2b: 65:53:e4:b1:c3:09:93:bf:92:90:18:7d:e7:92:7a:88:62:d0: eb:a7:84:00:e6:80:1d:f5:62:d0:f0:81:06:20:d9:42:3f:e9: c3:5e:c9:ea:8b:f8:f1:0b:bc:31:cd:22:55:bb:4f:dc:27:eb: e9:2c:04:75 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICGL0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAyMjRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDQyNEU5RTc4RThBRTky M0VDQjI5ODVBNjhDQTZERTI3NDlFMkQxMUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTzt/P5s7aO56JVBe9k4+P4cCk+Oi8NJZQBhf0jlbKlWJEYgRD uBqWHRW08ii6WngLPxQ7X8gnFRDJ6JiMcazXE/SNfbcrhpY8tA7tIlXMB97E/ZOS 1gr1MEv1wwn2RVMRAKOCMp3T0Z7yRohBQrbuQ//RPAWdpoXy42hf7ufYZTscAPZk 10VLS5wL6QoOdMD1OhbVvakEcUG1FwQ5HqclpGnPABwYeHlHTXo/aDo2YOT5EU9k m3JRFaEhmYKALUjb/591bpfed+3iq/c0TGXG4r9q/xi9wsIp/Wdp6aHTWVkrSi/c 0pgNkW579pWNfJx6RNpmXFByKahfEnhCxw+DAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUQk6eeOiukj7LKYWmjKbeJ0ni0R4wHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9RazZlZU9pdWtqN0xLWVdtakti ZUowbmkwUjQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFyidA MA0GCSqGSIb3DQEBCwUAA4IBAQBaHEP4TrWJ3fI+q0BNDJY/R1HlRSJZorNWeAJc rJVymFyQU3AExmIkGRozkKu3kUZNQE0YDLyY+TXo0aHzliJ/y60btsQ/Y7IlJcER ellRWoJSzyWjPeljgcxLUkLg64l6CKfn0gNxYt0T2AdJgca71b/mr5IIcsPf6dPL Fr0Sh87a6tYR8N1S83uJzfhU+KKhgNWHjPmKdoDFcE8b6EZDOIK4xkfYzA/jvbJT eYpbIZfQKSpiqGIl8SfZttTFaWVOdbm/tStlU+SxwwmTv5KQGH3nknqIYtDrp4QA 5oAd9WLQ8IEGINlCP+nDXsnqi/jxC7wxzSJVu0/cJ+vpLAR1 -----END CERTIFICATE-----Generated at Fri Sep 5 21:16:36 2025 by rpki-client