$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/nYHrsKXhrz8CeWm32mPhvfux5kA.roa File: nYHrsKXhrz8CeWm32mPhvfux5kA.roa (raw, json) Hash identifier: S0jyIPFolryYnVNB/5BIExV+0x1KxwTNxLhQL8RVISY= Subject key identifier: 9D:81:EB:B0:A5:E1:AF:3F:02:79:69:B7:DA:63:E1:BD:FB:B1:E6:40 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 18FB Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/nYHrsKXhrz8CeWm32mPhvfux5kA.roa Signing time: Fri 22 Aug 2025 09:02:40 +0000 ROA not before: Fri 22 Aug 2025 09:02:40 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 3462 IP address blocks: 60.249.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 00:46:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6395 (0x18fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:02:40 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=9D81EBB0A5E1AF3F027969B7DA63E1BDFBB1E640 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:b5:9a:42:6b:7c:8e:9c:7a:b7:1e:88:2b:85: ab:42:b2:c4:ab:9d:64:3c:16:d6:99:63:2c:d6:20: 5f:e5:a4:b8:a6:91:00:53:e8:62:28:5e:fa:c6:6a: 21:ba:b1:76:75:98:c5:20:b9:3b:2f:f5:3f:6f:03: ac:f0:ee:57:40:71:7d:e7:a2:84:d9:4d:d4:d4:7f: a7:7f:53:bd:de:d8:94:18:31:eb:eb:8c:22:7c:b7: a6:e3:38:40:62:78:0c:4a:9b:0c:84:a4:bc:03:51: 2d:93:7c:a2:fc:cf:60:d0:24:c2:42:6e:b0:ec:cc: b4:e4:d2:cd:68:50:e9:0f:68:70:f3:5c:5a:d4:23: 7b:be:9d:fd:6e:6f:57:33:67:a5:1c:12:df:db:12: f6:3a:5e:09:54:99:43:13:de:5a:a4:ad:a5:e7:b9: 5b:0a:0c:07:0f:d6:c7:11:3f:26:7e:a6:3c:6b:2e: 64:9b:26:ce:d0:bc:d6:c4:15:4a:5e:b1:1b:a1:b6: 40:62:45:6d:62:5d:28:f7:4b:b5:17:da:fe:c2:5a: 29:59:f2:00:f8:9a:f8:28:19:c2:f7:85:20:29:ab: 18:af:84:22:c9:74:c1:ce:55:2b:8a:05:a8:47:b4: 2d:64:06:2d:a3:7a:21:ee:8e:2c:34:97:a6:eb:f0: 2b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:81:EB:B0:A5:E1:AF:3F:02:79:69:B7:DA:63:E1:BD:FB:B1:E6:40 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/nYHrsKXhrz8CeWm32mPhvfux5kA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 60.249.0.0/16 Signature Algorithm: sha256WithRSAEncryption 18:c6:2f:b5:4d:02:7a:05:35:e8:12:8e:0c:01:4d:73:e5:d2: 7c:6b:4e:b6:00:f2:c1:e2:b6:5b:68:96:4b:d8:d4:f5:2c:e7: 38:35:7a:42:3f:0b:ad:f0:fe:bd:96:76:58:69:51:e8:62:33: 3a:82:ae:3e:b0:d5:ce:98:cd:47:dd:ad:fa:58:8c:73:2b:90: d4:e3:6c:c9:34:bf:c2:11:48:1d:02:d2:25:4b:4c:35:45:bb: 80:e7:63:cc:9a:a2:23:df:b6:3a:6b:09:e0:be:09:0e:a9:71: 70:33:3e:dd:a3:e7:c9:bd:a5:21:1a:d5:88:1d:78:be:71:43: f8:71:40:9d:19:2e:55:47:9d:00:dd:43:e9:64:df:85:32:d5: c5:78:f0:94:cb:35:8e:24:b8:f9:91:48:20:9c:fb:68:f4:dc: f4:80:d7:79:e9:0d:a3:30:5a:66:1a:ef:90:ff:92:89:5b:8d: 67:2b:4b:bf:ad:80:6a:2b:ef:1a:11:61:2f:7c:d9:b6:fa:95: d0:c1:5f:dc:f2:64:fb:ea:5a:8e:af:b0:f4:43:7e:f2:ed:8b: ff:38:51:07:35:20:5d:2f:fc:00:77:64:5f:7e:4a:ed:dc:ca: b6:34:de:85:54:bd:fc:0e:a1:04:0b:cc:f7:a7:60:95:ea:4b: 8a:cb:01:ed -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICGPswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAyNDBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDlEODFFQkIwQTVFMUFG M0YwMjc5NjlCN0RBNjNFMUJERkJCMUU2NDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD0tZpCa3yOnHq3HogrhatCssSrnWQ8FtaZYyzWIF/lpLimkQBT 6GIoXvrGaiG6sXZ1mMUguTsv9T9vA6zw7ldAcX3nooTZTdTUf6d/U73e2JQYMevr jCJ8t6bjOEBieAxKmwyEpLwDUS2TfKL8z2DQJMJCbrDszLTk0s1oUOkPaHDzXFrU I3u+nf1ub1czZ6UcEt/bEvY6XglUmUMT3lqkraXnuVsKDAcP1scRPyZ+pjxrLmSb Js7QvNbEFUpesRuhtkBiRW1iXSj3S7UX2v7CWilZ8gD4mvgoGcL3hSApqxivhCLJ dMHOVSuKBahHtC1kBi2jeiHujiw0l6br8CuzAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUnYHrsKXhrz8CeWm32mPhvfux5kAwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9uWUhyc0tYaHJ6OENlV20zMm1Q aHZmdXg1a0Eucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAPPkw DQYJKoZIhvcNAQELBQADggEBABjGL7VNAnoFNegSjgwBTXPl0nxrTrYA8sHitlto lkvY1PUs5zg1ekI/C63w/r2WdlhpUehiMzqCrj6w1c6YzUfdrfpYjHMrkNTjbMk0 v8IRSB0C0iVLTDVFu4DnY8yaoiPftjprCeC+CQ6pcXAzPt2j58m9pSEa1YgdeL5x Q/hxQJ0ZLlVHnQDdQ+lk34Uy1cV48JTLNY4kuPmRSCCc+2j03PSA13npDaMwWmYa 75D/kolbjWcrS7+tgGor7xoRYS982bb6ldDBX9zyZPvqWo6vsPRDfvLti/84UQc1 IF0v/AB3ZF9+Su3cyrY03oVUvfwOoQQLzPenYJXqS4rLAe0= -----END CERTIFICATE-----Generated at Fri Sep 5 21:12:31 2025 by rpki-client