$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/XUMxB_pfVg4--lvg9Nzst8EpqO4.roa File: XUMxB_pfVg4--lvg9Nzst8EpqO4.roa (raw, json) Hash identifier: kU8Cdr+jMmGXpwCBKb/fIO5W5Mj4GvcEUKTyX/jbhh0= Subject key identifier: 5D:43:31:07:FA:5F:56:0E:3E:FA:5B:E0:F4:DC:EC:B7:C1:29:A8:EE Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 193E Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/XUMxB_pfVg4--lvg9Nzst8EpqO4.roa Signing time: Fri 22 Aug 2025 09:02:54 +0000 ROA not before: Fri 22 Aug 2025 09:02:54 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 3462 IP address blocks: 220.128.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 00:46:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6462 (0x193e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:02:54 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=5D433107FA5F560E3EFA5BE0F4DCECB7C129A8EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b0:9d:c9:29:a4:14:29:79:9f:b5:85:d6:3f: 73:a0:92:c1:e7:3c:b3:b7:8a:95:95:1c:b6:55:87: fb:ae:b7:11:24:bc:a1:a9:1c:97:e8:4a:95:af:73: 3a:5b:88:c0:27:b6:3b:4d:17:af:a6:4d:e7:ff:aa: f3:bd:f7:0c:ab:29:d4:8f:7d:17:f8:7e:f3:a3:96: e0:c9:a8:97:1f:4a:15:4a:2f:4d:2e:12:a6:77:22: cd:94:a1:57:97:0d:d4:70:df:08:26:0d:21:1c:82: 5d:37:3c:da:0b:35:44:5a:ab:e4:c3:35:e2:ee:ee: b5:4f:06:91:82:00:00:54:fb:99:f8:c1:d1:cd:89: 5d:ac:48:fd:e3:fc:b0:30:aa:d8:bc:3c:c6:7a:6f: ca:b8:d3:57:bc:9e:b1:8a:ed:c7:20:03:22:92:c2: df:89:34:22:27:53:5a:d4:03:13:3d:ba:0f:85:e5: 0c:12:ea:e6:74:da:32:07:ef:7a:d1:06:d4:38:51: 2b:04:f7:a7:52:cf:aa:f5:b8:a8:90:43:76:15:e8: 86:52:be:35:2f:d0:2e:90:af:cb:11:79:25:27:e1: 25:ce:92:ae:1b:1f:90:75:82:86:26:03:fe:0b:40: 35:68:be:c2:d9:c0:9b:40:5d:b4:61:55:c9:cd:c2: b9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:43:31:07:FA:5F:56:0E:3E:FA:5B:E0:F4:DC:EC:B7:C1:29:A8:EE X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/XUMxB_pfVg4--lvg9Nzst8EpqO4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 220.128.72.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:10:67:4c:7b:e1:f6:9b:42:06:cf:f3:13:5c:4d:9c:52:2b: a6:68:0d:bf:b0:18:57:da:16:d8:cf:c0:d3:44:6d:bd:1b:c9: fd:20:ea:8c:e1:9d:82:e8:12:bf:45:0e:09:88:89:39:fc:08: 16:d7:b2:29:c8:3a:77:05:9a:5f:ec:36:05:d8:df:9a:91:b8: f3:d3:69:ae:46:9b:26:6d:4d:26:7a:4e:9e:1b:f9:6e:a0:a4: 94:cb:8b:5f:01:10:37:58:f4:fd:f9:0a:df:e9:e9:d3:a8:bc: 67:61:c9:6e:36:61:c3:40:2f:d2:ed:e5:53:18:11:1f:9a:d2: 70:a1:20:f8:16:7d:00:45:2c:94:63:ca:42:3c:3b:4a:1a:25: b1:bb:e0:2f:34:5e:9a:78:cf:6f:f7:49:2e:22:bc:5d:57:1f: cd:2a:a0:c4:5d:17:bb:41:89:5a:79:f0:e0:29:0a:c8:fd:4b: 84:79:db:c9:c5:ea:2b:48:3c:79:b9:27:00:f8:d7:05:7a:ed: ef:be:45:2e:84:c2:82:11:be:45:94:18:58:20:53:ac:15:ce: 67:0a:cf:90:ed:68:db:3f:68:64:62:e3:ce:16:b2:78:d6:16: 7d:03:45:c5:11:f6:42:d3:b2:40:b6:db:5a:ab:9e:02:77:8e: ef:bf:68:02 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICGT4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAyNTRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDVENDMzMTA3RkE1RjU2 MEUzRUZBNUJFMEY0RENFQ0I3QzEyOUE4RUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBsJ3JKaQUKXmftYXWP3OgksHnPLO3ipWVHLZVh/uutxEkvKGp HJfoSpWvczpbiMAntjtNF6+mTef/qvO99wyrKdSPfRf4fvOjluDJqJcfShVKL00u EqZ3Is2UoVeXDdRw3wgmDSEcgl03PNoLNURaq+TDNeLu7rVPBpGCAABU+5n4wdHN iV2sSP3j/LAwqti8PMZ6b8q401e8nrGK7ccgAyKSwt+JNCInU1rUAxM9ug+F5QwS 6uZ02jIH73rRBtQ4USsE96dSz6r1uKiQQ3YV6IZSvjUv0C6Qr8sReSUn4SXOkq4b H5B1goYmA/4LQDVovsLZwJtAXbRhVcnNwrlfAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUXUMxB/pfVg4++lvg9Nzst8EpqO4wHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9YVU14Ql9wZlZnNC0tbHZnOU56 c3Q4RXBxTzQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA3IBI MA0GCSqGSIb3DQEBCwUAA4IBAQAqEGdMe+H2m0IGz/MTXE2cUiumaA2/sBhX2hbY z8DTRG29G8n9IOqM4Z2C6BK/RQ4JiIk5/AgW17IpyDp3BZpf7DYF2N+akbjz02mu RpsmbU0mek6eG/luoKSUy4tfARA3WPT9+Qrf6enTqLxnYcluNmHDQC/S7eVTGBEf mtJwoSD4Fn0ARSyUY8pCPDtKGiWxu+AvNF6aeM9v90kuIrxdVx/NKqDEXRe7QYla efDgKQrI/UuEedvJxeorSDx5uScA+NcFeu3vvkUuhMKCEb5FlBhYIFOsFc5nCs+Q 7WjbP2hkYuPOFrJ41hZ9A0XFEfZC07JAtttaq54Cd47vv2gC -----END CERTIFICATE-----Generated at Fri Sep 5 21:08:49 2025 by rpki-client