$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/iNZXvzZRV9iFy3Gf13ZFBsmHqT0.roa File: iNZXvzZRV9iFy3Gf13ZFBsmHqT0.roa (raw, json) Hash identifier: GyATZ3fNoZXfVV6dNND30RS3G4+C1BtqkmNcoqf1E7s= Subject key identifier: 88:D6:57:BF:36:51:57:D8:85:CB:71:9F:D7:76:45:06:C9:87:A9:3D Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 18EE Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/iNZXvzZRV9iFy3Gf13ZFBsmHqT0.roa Signing time: Fri 22 Aug 2025 09:02:37 +0000 ROA not before: Fri 22 Aug 2025 09:02:37 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 20940 IP address blocks: 210.65.144.128/26 maxlen: 26 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 00:46:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6382 (0x18ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:02:37 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=88D657BF365157D885CB719FD7764506C987A93D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ac:af:a1:e3:55:cb:10:66:89:ab:23:4b:68: 52:a3:84:fc:05:de:2b:e2:71:91:6f:b7:db:dd:74: ac:d3:03:72:20:84:f2:f5:59:e4:a7:73:1e:6b:72: dd:64:e6:91:19:28:f9:63:25:2d:53:b5:3f:ad:dc: 60:41:f6:c2:36:88:3d:ae:e7:95:d7:d3:57:25:3b: bd:45:5a:06:c8:5d:76:93:80:f1:19:35:8a:f0:95: e8:66:fb:c9:8d:62:dc:b9:9a:5d:5a:da:65:90:1c: 6f:dc:87:ab:99:ab:8c:66:f9:8a:48:a7:cc:b4:df: 5f:88:4b:ea:1d:8e:f4:43:ac:11:08:d6:31:64:02: f4:f9:0c:b1:2f:62:00:a8:42:ec:f1:df:ca:d1:d4: a9:06:ee:bc:3c:41:b3:b5:ad:8a:df:52:cb:b4:54: 38:8a:cd:c1:d1:f6:9e:e8:64:1c:d0:32:a4:bb:6b: d0:44:fa:ed:ae:9a:ff:68:e6:c1:16:3a:f9:6a:69: 8f:75:d3:7a:99:1c:32:bc:3f:e4:d6:45:45:8c:cc: 1f:60:26:58:27:3c:9b:34:26:b5:ec:0b:a3:03:be: 22:9d:79:58:79:6b:c1:52:9c:ba:e8:01:27:24:63: fd:a7:2c:a7:7f:47:9e:80:57:29:f8:1b:01:83:8d: 9b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:D6:57:BF:36:51:57:D8:85:CB:71:9F:D7:76:45:06:C9:87:A9:3D X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/iNZXvzZRV9iFy3Gf13ZFBsmHqT0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.65.144.128/26 Signature Algorithm: sha256WithRSAEncryption 99:fd:e3:8e:69:1a:a1:5a:b4:a6:53:52:c4:b4:6e:be:e0:04: 69:fb:fa:d8:56:17:9a:38:9b:61:78:63:ae:6e:73:b6:92:ce: 47:a5:6d:a2:fd:40:6c:2c:c8:a7:f5:ad:df:84:35:bf:64:d2: ab:fa:d6:81:1e:69:9c:6c:bc:c9:4f:57:6e:e5:e8:be:96:fa: 09:a3:10:42:05:fd:1d:ee:b3:e8:09:31:dd:ed:b2:42:42:9e: f4:46:06:1e:cd:6c:53:37:29:cb:7c:8e:01:50:22:a4:80:16: 6b:68:f2:34:b2:a9:28:c3:b8:4a:0f:b3:7a:a1:ba:3d:03:c1: eb:42:e3:ee:19:0d:a4:b3:bd:16:a7:bd:cc:3e:a3:da:7d:ea: 83:db:32:37:34:bf:49:90:86:f5:88:0b:bd:71:80:14:4c:1f: 0e:33:7f:2d:92:70:2c:dd:2a:ed:31:1b:01:6c:d6:6f:56:fd: 86:08:18:05:59:57:a0:f5:3c:14:1d:60:21:3c:03:ae:bb:cd: de:e7:95:45:55:ba:f5:c3:c4:9a:44:55:75:e9:d5:9f:ec:fb: 66:5c:e0:97:53:2b:1e:57:98:49:92:d1:c7:90:b7:cc:06:9f: 25:0d:8a:f8:6e:dd:89:d6:de:d0:81:60:55:64:1e:16:96:02: 11:38:e7:85 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICGO4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAyMzdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDg4RDY1N0JGMzY1MTU3 RDg4NUNCNzE5RkQ3NzY0NTA2Qzk4N0E5M0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCXrK+h41XLEGaJqyNLaFKjhPwF3ivicZFvt9vddKzTA3IghPL1 WeSncx5rct1k5pEZKPljJS1TtT+t3GBB9sI2iD2u55XX01clO71FWgbIXXaTgPEZ NYrwlehm+8mNYty5ml1a2mWQHG/ch6uZq4xm+YpIp8y031+IS+odjvRDrBEI1jFk AvT5DLEvYgCoQuzx38rR1KkG7rw8QbO1rYrfUsu0VDiKzcHR9p7oZBzQMqS7a9BE +u2umv9o5sEWOvlqaY9103qZHDK8P+TWRUWMzB9gJlgnPJs0JrXsC6MDviKdeVh5 a8FSnLroASckY/2nLKd/R56AVyn4GwGDjZu9AgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUiNZXvzZRV9iFy3Gf13ZFBsmHqT0wHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9pTlpYdnpaUlY5aUZ5M0dmMTNa RkJzbUhxVDAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUG0kGQ gDANBgkqhkiG9w0BAQsFAAOCAQEAmf3jjmkaoVq0plNSxLRuvuAEafv62FYXmjib YXhjrm5ztpLOR6Vtov1AbCzIp/Wt34Q1v2TSq/rWgR5pnGy8yU9XbuXovpb6CaMQ QgX9He6z6Akx3e2yQkKe9EYGHs1sUzcpy3yOAVAipIAWa2jyNLKpKMO4Sg+zeqG6 PQPB60Lj7hkNpLO9Fqe9zD6j2n3qg9syNzS/SZCG9YgLvXGAFEwfDjN/LZJwLN0q 7TEbAWzWb1b9hggYBVlXoPU8FB1gITwDrrvN3ueVRVW69cPEmkRVdenVn+z7Zlzg l1MrHleYSZLRx5C3zAafJQ2K+G7didbe0IFgVWQeFpYCETjnhQ== -----END CERTIFICATE-----Generated at Fri Sep 5 21:10:21 2025 by rpki-client