$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/dwt5ZxA_NIKw8WIKXjYuxpcAUAY.roa File: dwt5ZxA_NIKw8WIKXjYuxpcAUAY.roa (raw, json) Hash identifier: b3L3+d1eMMIoLowYbkNQ0K7Cbz8z36tdB80/yoKavwc= Subject key identifier: 77:0B:79:67:10:3F:34:82:B0:F1:62:0A:5E:36:2E:C6:97:00:50:06 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 1932 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/dwt5ZxA_NIKw8WIKXjYuxpcAUAY.roa Signing time: Fri 22 Aug 2025 09:02:51 +0000 ROA not before: Fri 22 Aug 2025 09:02:51 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 3462 IP address blocks: 61.228.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 00:46:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6450 (0x1932) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:02:51 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=770B7967103F3482B0F1620A5E362EC697005006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8c:87:d5:8d:ed:44:9b:01:be:81:50:a7:1e: 4e:cb:e3:b3:53:75:40:a6:b8:50:76:b2:ef:3f:33: 68:8d:8a:5a:3d:9b:db:c4:e7:a3:bc:23:56:30:0e: ef:c1:dc:7e:12:1e:88:8b:56:33:46:ea:04:b4:55: 4e:a2:23:d6:e8:70:e1:3e:4c:2f:7b:23:ab:74:1f: 25:40:d2:f7:49:e1:5a:ab:20:24:56:5c:24:79:2c: 0f:80:b3:22:78:3e:49:f7:a1:88:88:e8:6b:49:36: 5a:4a:51:48:35:81:69:04:9a:9c:39:1e:f8:0d:b3: 15:bb:40:0a:37:0b:59:32:d8:91:79:f3:66:37:7b: f4:ed:ba:47:61:7e:b0:2b:d2:eb:70:62:27:3c:aa: ad:51:16:f6:68:67:10:de:e0:ba:42:26:c8:7e:f4: d5:f5:bb:d1:2e:dc:db:43:59:c8:c2:56:e0:be:21: 7a:6e:bb:fd:e2:0c:7d:9a:06:0e:52:b2:7f:02:bd: 96:94:8b:c6:f8:9d:6f:c4:56:d2:94:42:21:46:e0: 4a:ad:ba:31:d7:27:7f:e2:f2:65:b2:7a:6c:38:a2: 9a:48:fa:1f:66:b4:08:97:bd:01:5f:89:39:3d:96: b8:64:1e:21:f8:9d:19:b2:86:93:40:da:e7:2f:6f: 50:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:0B:79:67:10:3F:34:82:B0:F1:62:0A:5E:36:2E:C6:97:00:50:06 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/dwt5ZxA_NIKw8WIKXjYuxpcAUAY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.228.0.0/14 Signature Algorithm: sha256WithRSAEncryption 4f:1e:88:30:77:f0:30:f9:2d:c1:2d:64:78:1f:d1:f6:69:ef: 5c:4d:11:b1:aa:3e:ce:c1:b1:c2:7a:90:0f:5f:dc:fe:4c:54: 62:66:72:75:30:05:17:70:9f:97:be:0f:3c:39:84:84:5b:5e: 64:99:ff:32:40:7e:fb:3f:a5:8a:f7:a3:b3:9a:e2:a1:e6:ba: ae:9c:ed:2a:87:b9:b4:93:a0:f0:f9:57:de:03:ba:ec:76:b8: f0:b1:ae:96:60:6b:e3:09:a2:97:91:cb:ec:4d:33:94:83:d9: ee:cc:ef:74:48:a6:ec:26:c4:61:75:52:43:e7:50:fc:d7:43: 72:8a:30:5b:92:f3:1f:a1:02:dc:52:e3:61:89:09:52:ef:79: d9:2c:bc:af:dd:eb:28:81:c6:13:a8:88:2e:ec:b9:2f:1a:70: 74:c2:a2:02:23:37:56:0d:63:7c:7c:1b:8a:69:56:fd:0f:19: cb:00:91:0a:9a:e4:10:5d:6a:a3:d4:30:96:79:45:5a:47:17: ac:fe:46:35:97:4e:60:71:6e:27:0a:d3:a0:8e:8c:bb:6e:87: 3d:74:ea:35:44:80:7b:db:3b:44:d7:69:bd:15:dc:38:50:e4: db:dd:dc:06:a0:b9:9c:b5:17:88:3f:48:ae:ee:3c:b5:19:7e: 41:48:8d:70 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICGTIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAyNTFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDc3MEI3OTY3MTAzRjM0 ODJCMEYxNjIwQTVFMzYyRUM2OTcwMDUwMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLjIfVje1EmwG+gVCnHk7L47NTdUCmuFB2su8/M2iNilo9m9vE 56O8I1YwDu/B3H4SHoiLVjNG6gS0VU6iI9bocOE+TC97I6t0HyVA0vdJ4VqrICRW XCR5LA+AsyJ4Pkn3oYiI6GtJNlpKUUg1gWkEmpw5HvgNsxW7QAo3C1ky2JF582Y3 e/TtukdhfrAr0utwYic8qq1RFvZoZxDe4LpCJsh+9NX1u9Eu3NtDWcjCVuC+IXpu u/3iDH2aBg5Ssn8CvZaUi8b4nW/EVtKUQiFG4EqtujHXJ3/i8mWyemw4oppI+h9m tAiXvQFfiTk9lrhkHiH4nRmyhpNA2ucvb1DtAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUdwt5ZxA/NIKw8WIKXjYuxpcAUAYwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9kd3Q1WnhBX05JS3c4V0lLWGpZ dXhwY0FVQVkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCPeQw DQYJKoZIhvcNAQELBQADggEBAE8eiDB38DD5LcEtZHgf0fZp71xNEbGqPs7BscJ6 kA9f3P5MVGJmcnUwBRdwn5e+Dzw5hIRbXmSZ/zJAfvs/pYr3o7Oa4qHmuq6c7SqH ubSToPD5V94Duux2uPCxrpZga+MJopeRy+xNM5SD2e7M73RIpuwmxGF1UkPnUPzX Q3KKMFuS8x+hAtxS42GJCVLvedksvK/d6yiBxhOoiC7suS8acHTCogIjN1YNY3x8 G4ppVv0PGcsAkQqa5BBdaqPUMJZ5RVpHF6z+RjWXTmBxbicK06COjLtuhz106jVE gHvbO0TXab0V3DhQ5Nvd3AaguZy1F4g/SK7uPLUZfkFIjXA= -----END CERTIFICATE-----Generated at Fri Sep 5 21:10:57 2025 by rpki-client