$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/TdylF0xxk5IwXpEfPRtlyrNzMo8.roa File: TdylF0xxk5IwXpEfPRtlyrNzMo8.roa (raw, json) Hash identifier: dlKj8LWHwjOOJkZW9rF0Yavwy4zRm3Hp9g2NIx1CX4I= Subject key identifier: 4D:DC:A5:17:4C:71:93:92:30:5E:91:1F:3D:1B:65:CA:B3:73:32:8F Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 18D1 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/TdylF0xxk5IwXpEfPRtlyrNzMo8.roa Signing time: Fri 22 Aug 2025 09:02:29 +0000 ROA not before: Fri 22 Aug 2025 09:02:29 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 198949 IP address blocks: 203.74.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 00:46:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6353 (0x18d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:02:29 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=4DDCA5174C719392305E911F3D1B65CAB373328F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8d:be:33:3c:ed:75:d6:71:13:54:70:51:aa: f7:76:06:bb:bd:70:a9:94:d8:35:25:01:5c:8e:ad: 43:6d:b1:56:fc:a2:df:09:77:07:23:e0:cb:1d:d1: 7f:04:95:62:b8:3f:2d:5f:77:b1:46:09:81:e7:fb: 2a:7a:62:2c:05:f1:2c:aa:ac:82:a4:e8:96:cb:3b: 95:de:00:51:b1:b8:93:a3:e5:7b:55:5d:53:7f:8c: 20:83:38:6c:e4:85:e5:66:45:7a:0b:13:64:fd:4e: d7:05:16:8a:06:ab:af:48:c7:5c:c5:d0:f4:06:b9: e2:f5:8b:76:eb:02:b3:59:00:e8:1e:29:7b:f6:b5: 6b:f4:48:af:5c:19:30:da:45:78:ea:3d:43:37:93: 00:9c:02:b4:6c:97:35:ea:1b:92:26:0b:a1:16:b5: 53:28:78:2d:6b:13:e7:9d:43:9c:1f:55:df:78:99: 45:c3:16:82:3f:ea:e7:d2:60:09:5f:2c:ce:8d:e6: fc:19:b8:79:c8:f6:7b:9d:be:0d:aa:07:18:a6:4a: 88:4c:88:74:71:3a:1a:6f:49:53:c2:01:7b:d0:5a: d5:f8:5f:32:3b:cd:b8:41:6f:17:03:93:db:2e:fd: 1f:49:23:47:20:ce:32:32:fc:59:7e:cc:e6:d5:9d: 32:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:DC:A5:17:4C:71:93:92:30:5E:91:1F:3D:1B:65:CA:B3:73:32:8F X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/TdylF0xxk5IwXpEfPRtlyrNzMo8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.74.176.0/24 Signature Algorithm: sha256WithRSAEncryption 50:a1:1c:d5:24:a2:ef:11:9f:26:26:08:47:9d:0a:20:d3:83: e9:60:08:22:5c:c0:93:08:c2:ee:0d:c5:f8:b3:e6:53:4f:b7: 1a:62:f7:01:7b:54:15:b0:12:0c:26:c6:86:04:fb:28:81:d4: 44:98:a7:ab:3a:46:ae:ce:36:67:d8:87:80:90:0b:c0:b6:d1: 01:08:f2:77:b4:b0:38:0a:56:cd:05:2b:e5:76:12:9d:9c:06: cd:18:25:1c:f5:dd:66:ef:44:dd:2d:11:df:f4:00:db:47:eb: 06:ff:8c:c8:44:35:0d:aa:3e:ae:d5:c5:93:db:fa:57:6d:1a: fe:45:08:bc:16:aa:81:df:1e:9c:9e:ca:15:ec:c5:76:97:74: 2b:4a:df:b3:14:59:81:44:71:62:e8:e2:6b:c3:5d:9e:81:a6: 77:80:6e:74:97:13:5f:98:71:19:b2:0e:b4:70:81:d3:51:05: b4:b5:e0:aa:48:2a:cb:0a:81:b0:46:2f:77:81:e9:1e:bc:67: e4:3a:8c:a9:89:9a:c5:19:a5:6c:11:df:03:43:de:9e:cf:a2: 37:ab:94:24:32:62:9e:a5:3c:0b:98:d1:f7:82:82:77:5f:f9: 5c:22:94:1a:94:dd:b4:15:54:e6:1c:ec:da:45:47:4d:dc:45: 8a:3b:17:13 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICGNEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAyMjlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDRERENBNTE3NEM3MTkz OTIzMDVFOTExRjNEMUI2NUNBQjM3MzMyOEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtjb4zPO111nETVHBRqvd2Bru9cKmU2DUlAVyOrUNtsVb8ot8J dwcj4Msd0X8ElWK4Py1fd7FGCYHn+yp6YiwF8SyqrIKk6JbLO5XeAFGxuJOj5XtV XVN/jCCDOGzkheVmRXoLE2T9TtcFFooGq69Ix1zF0PQGueL1i3brArNZAOgeKXv2 tWv0SK9cGTDaRXjqPUM3kwCcArRslzXqG5ImC6EWtVMoeC1rE+edQ5wfVd94mUXD FoI/6ufSYAlfLM6N5vwZuHnI9nudvg2qBximSohMiHRxOhpvSVPCAXvQWtX4XzI7 zbhBbxcDk9su/R9JI0cgzjIy/Fl+zObVnTJVAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUTdylF0xxk5IwXpEfPRtlyrNzMo8wHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9UZHlsRjB4eGs1SXdYcEVmUFJ0 bHlyTnpNbzgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy0qw MA0GCSqGSIb3DQEBCwUAA4IBAQBQoRzVJKLvEZ8mJghHnQog04PpYAgiXMCTCMLu DcX4s+ZTT7caYvcBe1QVsBIMJsaGBPsogdREmKerOkauzjZn2IeAkAvAttEBCPJ3 tLA4ClbNBSvldhKdnAbNGCUc9d1m70TdLRHf9ADbR+sG/4zIRDUNqj6u1cWT2/pX bRr+RQi8FqqB3x6cnsoV7MV2l3QrSt+zFFmBRHFi6OJrw12egaZ3gG50lxNfmHEZ sg60cIHTUQW0teCqSCrLCoGwRi93gekevGfkOoypiZrFGaVsEd8DQ96ez6I3q5Qk MmKepTwLmNH3goJ3X/lcIpQalN20FVTmHOzaRUdN3EWKOxcT -----END CERTIFICATE-----Generated at Fri Sep 5 21:05:28 2025 by rpki-client