$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/_MV0X3mvJguHkm7VBlsK3E2sHxQ.roa File: _MV0X3mvJguHkm7VBlsK3E2sHxQ.roa (raw, json) Hash identifier: cyVtDKwmB4vwtm0JyYRxf/WTZNBMMvUd2nm7GCa7leU= Subject key identifier: FC:C5:74:5F:79:AF:26:0B:87:92:6E:D5:06:5B:0A:DC:4D:AC:1F:14 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 18ED Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/_MV0X3mvJguHkm7VBlsK3E2sHxQ.roa Signing time: Fri 22 Aug 2025 09:02:37 +0000 ROA not before: Fri 22 Aug 2025 09:02:37 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 800 IP address blocks: 175.111.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 00:46:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6381 (0x18ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:02:37 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=FCC5745F79AF260B87926ED5065B0ADC4DAC1F14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:40:9a:63:74:6d:2f:f8:b4:7a:05:dd:b0:18: 4d:80:c4:b3:28:e1:1c:9d:2d:2b:ba:f5:d3:18:98: a8:51:19:6f:5b:66:74:5b:1c:6a:4d:c3:40:3d:60: 28:d9:f4:5c:fa:12:af:43:01:cd:25:75:05:33:da: 38:40:0b:97:9f:67:cc:1a:ef:d5:2a:dc:22:78:31: 49:27:de:d7:ad:a2:4a:8b:f9:02:ab:3e:0f:16:20: 54:29:3b:68:5c:7a:d0:8c:bf:18:9d:72:22:c1:6f: c3:42:c4:08:44:11:22:40:8e:fe:f4:45:29:d8:d4: 91:ec:15:81:43:6d:94:6d:1f:5c:5c:0b:e9:7a:d3: 5e:1e:3f:ff:70:3a:bc:07:97:32:50:25:25:b4:39: 29:03:d3:2c:cf:ac:b4:71:9d:b5:63:a9:b0:43:39: ad:60:11:0a:01:91:39:e1:5b:f3:6b:ec:2c:e6:3f: b2:e0:62:15:7c:9e:3d:ae:a0:94:fc:2f:74:86:aa: 64:06:b6:5c:2b:04:b5:94:5d:02:68:e9:f7:82:9a: 81:14:c1:97:30:09:82:62:e2:8a:09:11:77:d4:fd: 79:21:1d:d0:29:53:29:ab:17:d4:e3:ec:52:2b:03: 06:bb:70:00:63:99:42:ab:76:1c:09:37:8b:b2:3c: 27:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:C5:74:5F:79:AF:26:0B:87:92:6E:D5:06:5B:0A:DC:4D:AC:1F:14 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/_MV0X3mvJguHkm7VBlsK3E2sHxQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 175.111.237.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:d2:77:6a:21:aa:ac:4c:cb:c4:0e:33:c1:e4:a4:94:f8:b4: 98:3a:f3:95:68:2e:0d:91:29:4b:1a:8b:45:3d:94:39:ae:6e: 92:33:16:d5:71:f6:81:bf:a0:13:0f:75:fe:a4:df:58:c7:ee: 7b:35:43:26:de:a3:a1:de:77:9c:43:a8:99:0d:1d:78:08:3f: 53:f2:04:2e:1a:6c:3a:e9:5b:0c:5e:5c:73:91:23:b4:5a:0f: 02:2b:aa:30:f7:6d:aa:ba:20:69:3a:b8:59:4e:13:49:cf:ab: 53:9e:bd:90:43:8f:77:c8:1a:f5:b6:48:09:3d:4d:53:c4:f6: bb:5e:ef:8b:b7:f7:b7:b1:30:ae:eb:20:74:14:3f:f9:78:73: cb:d4:59:60:7c:eb:4a:5a:b9:40:12:ec:34:46:18:a6:24:89: d7:69:4a:c6:c2:63:aa:e8:36:64:70:40:1c:f8:e7:54:9a:60: 5a:9f:b5:df:4c:69:b8:bd:13:c8:63:fa:56:d3:76:e0:fc:04: e3:05:af:96:d4:06:d3:8c:ff:9f:69:9f:d3:3f:92:f1:b2:32: fb:d1:d1:15:08:dd:6b:ba:32:20:ac:43:8e:c3:56:5d:78:87: ae:46:cc:c5:98:a5:16:e5:4f:5a:3f:5a:41:41:c7:9a:d5:62: ed:5f:0c:d9 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICGO0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAyMzdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEZDQzU3NDVGNzlBRjI2 MEI4NzkyNkVENTA2NUIwQURDNERBQzFGMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCQJpjdG0v+LR6Bd2wGE2AxLMo4RydLSu69dMYmKhRGW9bZnRb HGpNw0A9YCjZ9Fz6Eq9DAc0ldQUz2jhAC5efZ8wa79Uq3CJ4MUkn3tetokqL+QKr Pg8WIFQpO2hcetCMvxidciLBb8NCxAhEESJAjv70RSnY1JHsFYFDbZRtH1xcC+l6 014eP/9wOrwHlzJQJSW0OSkD0yzPrLRxnbVjqbBDOa1gEQoBkTnhW/Nr7CzmP7Lg YhV8nj2uoJT8L3SGqmQGtlwrBLWUXQJo6feCmoEUwZcwCYJi4ooJEXfU/XkhHdAp UymrF9Tj7FIrAwa7cABjmUKrdhwJN4uyPCdxAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU/MV0X3mvJguHkm7VBlsK3E2sHxQwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9fTVYwWDNtdkpndUhrbTdWQmxz SzNFMnNIeFEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAr2/t MA0GCSqGSIb3DQEBCwUAA4IBAQCd0ndqIaqsTMvEDjPB5KSU+LSYOvOVaC4NkSlL GotFPZQ5rm6SMxbVcfaBv6ATD3X+pN9Yx+57NUMm3qOh3necQ6iZDR14CD9T8gQu Gmw66VsMXlxzkSO0Wg8CK6ow922quiBpOrhZThNJz6tTnr2QQ493yBr1tkgJPU1T xPa7Xu+Lt/e3sTCu6yB0FD/5eHPL1FlgfOtKWrlAEuw0RhimJInXaUrGwmOq6DZk cEAc+OdUmmBan7XfTGm4vRPIY/pW03bg/ATjBa+W1AbTjP+faZ/TP5LxsjL70dEV CN1rujIgrEOOw1ZdeIeuRszFmKUW5U9aP1pBQcea1WLtXwzZ -----END CERTIFICATE-----Generated at Fri Sep 5 21:06:21 2025 by rpki-client