$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/c31ShFaPVhdhfaElWAsY7mPG1uk.roa File: c31ShFaPVhdhfaElWAsY7mPG1uk.roa (raw, json) Hash identifier: AExU28OlPfYnrUcm3qdfX3DFtjiWgkl5TLdkRB//HoM= Subject key identifier: 73:7D:52:84:56:8F:56:17:61:7D:A1:25:58:0B:18:EE:63:C6:D6:E9 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 1914 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/c31ShFaPVhdhfaElWAsY7mPG1uk.roa Signing time: Fri 22 Aug 2025 09:02:44 +0000 ROA not before: Fri 22 Aug 2025 09:02:44 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 3462 IP address blocks: 220.128.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 00:46:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6420 (0x1914) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:02:44 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=737D5284568F5617617DA125580B18EE63C6D6E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:95:08:59:55:81:71:b3:1d:40:92:70:7c:b4: 11:9d:2a:4c:35:78:00:b8:a7:0c:73:30:3e:5f:3a: b2:8b:22:7b:5e:06:d3:18:3e:f3:68:26:1c:46:83: 27:87:b1:e2:1a:4a:25:ba:1a:7c:fe:c1:17:c9:b0: 16:14:7b:bd:14:32:50:03:47:3b:4b:02:64:21:5c: 91:e4:6e:a9:22:d2:26:8b:93:e8:08:8b:f0:ad:d0: ec:54:27:16:c6:1f:0e:8a:00:e9:c6:9f:9f:af:0e: dc:d2:0f:7d:d2:62:98:dc:4d:79:8a:d3:de:3a:40: e8:4d:e6:2d:60:34:0a:6e:86:e5:3d:d5:c3:00:12: 47:99:28:1e:b7:72:ea:24:67:88:b7:35:3f:b9:1b: 34:98:b3:5d:6e:bb:19:1e:6f:f2:4c:11:7b:97:e4: 97:61:45:81:a0:82:47:ef:3d:27:b4:11:b4:ac:b9: 22:78:39:cc:ea:e7:58:79:ca:27:10:9a:b2:f8:27: d2:2c:70:d3:b8:c8:9d:e5:7b:d1:c4:92:4d:4f:fb: a3:67:de:a2:93:f5:17:ea:bd:de:3e:9e:18:9c:36: a8:7c:1f:5e:d4:8d:0a:99:e7:6b:6b:2c:e2:e2:d6: ed:3f:f4:d7:8f:51:d9:2d:30:66:ce:54:9a:76:88: 6f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:7D:52:84:56:8F:56:17:61:7D:A1:25:58:0B:18:EE:63:C6:D6:E9 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/c31ShFaPVhdhfaElWAsY7mPG1uk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 220.128.79.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:a3:62:82:d3:ff:fd:07:ab:a7:b3:d8:f5:79:5a:d5:4f:b5: 35:a6:2c:83:91:9e:70:9c:fd:16:fd:94:3f:0b:f6:f5:f8:b5: d4:a1:58:87:3a:10:01:d2:ce:16:17:bd:6f:e1:9e:88:53:36: 78:93:d8:7f:a3:79:54:48:2f:21:7b:de:5c:96:e4:7a:68:fe: 1f:a4:92:7b:00:50:a7:64:0d:1f:6a:ce:e2:51:e1:b7:46:16: 5d:5f:eb:48:c0:3b:f3:f6:6e:2e:e4:09:c2:0a:10:06:6d:fc: 8b:58:a2:bf:68:35:5b:6d:74:a0:0f:b5:e7:fa:da:9c:b9:e2: 72:32:b7:1b:e5:c0:65:7c:fc:05:5b:0c:a6:b1:33:2c:db:c0: f4:19:2f:80:7a:b8:a5:c0:2e:6d:26:46:7a:33:4a:27:bf:70: c8:23:eb:5c:2d:8c:8a:8d:74:2b:43:ce:a4:f5:92:33:97:5a: 7f:fb:60:f2:a8:03:11:59:27:92:b8:21:4e:d9:e3:ef:64:b9: cf:ab:1c:22:10:95:7e:c0:09:66:07:fe:e6:c4:d6:3b:fc:58: df:b4:bf:70:c7:3f:8f:2f:eb:e7:30:da:30:29:ea:b9:3c:ed: 7c:0e:6d:6e:bb:10:ec:44:b2:40:db:57:c4:2d:48:1d:c2:46: 28:6c:e4:e0 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICGRQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAyNDRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDczN0Q1Mjg0NTY4RjU2 MTc2MTdEQTEyNTU4MEIxOEVFNjNDNkQ2RTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8lQhZVYFxsx1AknB8tBGdKkw1eAC4pwxzMD5fOrKLInteBtMY PvNoJhxGgyeHseIaSiW6Gnz+wRfJsBYUe70UMlADRztLAmQhXJHkbqki0iaLk+gI i/Ct0OxUJxbGHw6KAOnGn5+vDtzSD33SYpjcTXmK0946QOhN5i1gNApuhuU91cMA EkeZKB63cuokZ4i3NT+5GzSYs11uuxkeb/JMEXuX5JdhRYGggkfvPSe0EbSsuSJ4 Oczq51h5yicQmrL4J9IscNO4yJ3le9HEkk1P+6Nn3qKT9Rfqvd4+nhicNqh8H17U jQqZ52trLOLi1u0/9NePUdktMGbOVJp2iG+tAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUc31ShFaPVhdhfaElWAsY7mPG1ukwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9jMzFTaEZhUFZoZGhmYUVsV0Fz WTdtUEcxdWsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA3IBP MA0GCSqGSIb3DQEBCwUAA4IBAQBdo2KC0//9B6uns9j1eVrVT7U1piyDkZ5wnP0W /ZQ/C/b1+LXUoViHOhAB0s4WF71v4Z6IUzZ4k9h/o3lUSC8he95cluR6aP4fpJJ7 AFCnZA0fas7iUeG3RhZdX+tIwDvz9m4u5AnCChAGbfyLWKK/aDVbbXSgD7Xn+tqc ueJyMrcb5cBlfPwFWwymsTMs28D0GS+AerilwC5tJkZ6M0onv3DII+tcLYyKjXQr Q86k9ZIzl1p/+2DyqAMRWSeSuCFO2ePvZLnPqxwiEJV+wAlmB/7mxNY7/FjftL9w xz+PL+vnMNowKeq5PO18Dm1uuxDsRLJA21fELUgdwkYobOTg -----END CERTIFICATE-----Generated at Fri Sep 5 21:08:03 2025 by rpki-client