$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/knezuUfe1ckZplB2tBnz4eIHW14.roa File: knezuUfe1ckZplB2tBnz4eIHW14.roa (raw, json) Hash identifier: +pWCil2Al/8hk7WyiBy+zJR9kDqSuqv7ByzNv5bnVIA= Subject key identifier: 92:77:B3:B9:47:DE:D5:C9:19:A6:50:76:B4:19:F3:E1:E2:07:5B:5E Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 1939 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/knezuUfe1ckZplB2tBnz4eIHW14.roa Signing time: Fri 22 Aug 2025 09:02:53 +0000 ROA not before: Fri 22 Aug 2025 09:02:53 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 3462 IP address blocks: 210.59.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 00:46:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6457 (0x1939) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:02:53 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=9277B3B947DED5C919A65076B419F3E1E2075B5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:61:68:df:01:62:69:f4:de:9c:5c:26:b4:5b: b3:09:02:9f:8f:09:0c:b9:9c:f4:b3:b0:19:23:d8: 60:47:72:5f:99:91:6f:54:6d:d1:6e:58:b1:b6:5d: 6d:b6:91:c0:d4:e2:40:3d:62:0a:08:df:a1:a9:b9: d0:e5:52:6e:16:88:8a:a8:d7:e6:6f:69:f6:a9:9f: 74:82:55:21:66:1f:88:23:f5:0d:e9:be:01:b3:7d: 09:1d:4a:1b:e8:5e:b1:df:68:cb:fa:aa:9a:a7:34: 69:28:1b:79:ba:5f:06:2a:60:10:ed:56:3a:4a:d1: a9:c1:54:b2:2d:eb:dc:82:d6:dd:56:14:29:92:20: 2f:2a:b5:59:60:e3:f0:b5:94:2f:d4:4b:0b:99:d4: d1:5f:91:0c:e0:e9:c6:46:0f:9a:87:50:2b:16:12: 81:91:26:a6:05:08:7a:45:16:d5:80:3c:dc:90:43: da:7c:ec:ef:a2:55:f6:80:92:15:10:a1:09:ef:05: 8a:e9:93:b7:2e:64:64:8a:b6:a7:75:e8:ab:16:6a: e8:3b:5e:e3:89:4d:a4:e5:32:6a:4e:02:f7:f6:51: a9:af:06:90:cb:19:3e:d9:b6:11:b5:e8:89:55:a3: 04:2e:7d:80:5b:9b:da:b2:6d:6d:40:9b:af:b5:b4: f5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:77:B3:B9:47:DE:D5:C9:19:A6:50:76:B4:19:F3:E1:E2:07:5B:5E X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/knezuUfe1ckZplB2tBnz4eIHW14.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.59.128.0/17 Signature Algorithm: sha256WithRSAEncryption 9b:b8:57:b8:67:08:87:d5:f0:a5:eb:ab:cb:90:0b:e8:8d:23: 0d:15:a4:17:bc:4c:99:14:51:85:64:a2:73:54:ab:f4:b4:d0: cd:2a:e1:60:b9:7c:51:92:ce:00:c1:60:ed:e0:02:6d:15:f2: b5:c0:c2:69:2b:8f:1e:a9:d6:5d:81:97:53:20:f0:a2:42:2f: 2e:7d:d8:81:dd:b8:b9:16:93:6d:eb:a5:e6:56:89:be:b6:f9: 9b:2d:2e:81:64:69:49:be:49:71:e1:dd:b5:48:47:4a:3d:cc: f7:d4:a7:8a:88:64:25:39:0c:6a:0e:0e:40:95:1b:fa:4a:13: a3:79:1c:41:85:71:66:ea:01:d5:9d:42:b8:f0:ae:81:8c:bd: 67:50:a1:3e:26:de:46:67:5b:8e:25:70:1e:f9:0e:c9:b2:99: 1c:8d:e8:ad:56:5e:7d:74:01:38:72:8d:c7:25:a5:1f:2c:1f: c4:52:68:12:0d:5e:53:a5:cc:9d:9b:19:68:72:70:16:b4:b8: 3c:77:05:76:1f:41:3e:60:21:a1:51:84:87:3c:f5:96:87:b5: 52:ac:09:2b:73:da:44:c2:96:02:74:49:07:88:33:7f:cb:5e: 73:31:bf:b7:1d:7b:f8:63:f7:88:4e:1d:33:fe:76:fe:91:4d: eb:49:32:cb -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICGTkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAyNTNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDkyNzdCM0I5NDdERUQ1 QzkxOUE2NTA3NkI0MTlGM0UxRTIwNzVCNUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOYWjfAWJp9N6cXCa0W7MJAp+PCQy5nPSzsBkj2GBHcl+ZkW9U bdFuWLG2XW22kcDU4kA9YgoI36GpudDlUm4WiIqo1+Zvafapn3SCVSFmH4gj9Q3p vgGzfQkdShvoXrHfaMv6qpqnNGkoG3m6XwYqYBDtVjpK0anBVLIt69yC1t1WFCmS IC8qtVlg4/C1lC/USwuZ1NFfkQzg6cZGD5qHUCsWEoGRJqYFCHpFFtWAPNyQQ9p8 7O+iVfaAkhUQoQnvBYrpk7cuZGSKtqd16KsWaug7XuOJTaTlMmpOAvf2UamvBpDL GT7ZthG16IlVowQufYBbm9qybW1Am6+1tPXPAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUknezuUfe1ckZplB2tBnz4eIHW14wHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9rbmV6dVVmZTFja1pwbEIydEJu ejRlSUhXMTQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH0juA MA0GCSqGSIb3DQEBCwUAA4IBAQCbuFe4ZwiH1fCl66vLkAvojSMNFaQXvEyZFFGF ZKJzVKv0tNDNKuFguXxRks4AwWDt4AJtFfK1wMJpK48eqdZdgZdTIPCiQi8ufdiB 3bi5FpNt66XmVom+tvmbLS6BZGlJvklx4d21SEdKPcz31KeKiGQlOQxqDg5AlRv6 ShOjeRxBhXFm6gHVnUK48K6BjL1nUKE+Jt5GZ1uOJXAe+Q7JspkcjeitVl59dAE4 co3HJaUfLB/EUmgSDV5TpcydmxlocnAWtLg8dwV2H0E+YCGhUYSHPPWWh7VSrAkr c9pEwpYCdEkHiDN/y15zMb+3HXv4Y/eITh0z/nb+kU3rSTLL -----END CERTIFICATE-----Generated at Fri Sep 5 21:13:24 2025 by rpki-client