$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/oL1u4RcaxZEekXKakbzMw2Aui7A.roa File: oL1u4RcaxZEekXKakbzMw2Aui7A.roa (raw, json) Hash identifier: wbZW8yi0l+mr5Ra4SEHR3QvhJv0em7Fv2P+Q5IAljPE= Subject key identifier: A0:BD:6E:E1:17:1A:C5:91:1E:91:72:9A:91:BC:CC:C3:60:2E:8B:B0 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 1925 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/oL1u4RcaxZEekXKakbzMw2Aui7A.roa Signing time: Fri 22 Aug 2025 09:02:48 +0000 ROA not before: Fri 22 Aug 2025 09:02:48 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131621 IP address blocks: 118.168.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 00:46:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6437 (0x1925) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:02:48 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=A0BD6EE1171AC5911E91729A91BCCCC3602E8BB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3b:a9:1d:53:60:e3:68:e1:3d:fd:ab:6f:99: 77:d9:30:c0:62:3d:6f:2c:ba:d9:49:a3:f3:46:76: f5:35:34:80:a3:39:b0:15:35:6a:0d:fc:0c:02:8d: a2:d2:c8:84:d0:cd:cc:6d:98:1f:cb:5f:8d:58:b5: 27:cd:57:1a:d7:3d:0b:97:92:70:db:51:d9:7b:b9: 21:5b:bf:64:1f:1f:7a:0c:29:6c:a2:b7:cd:ee:82: 5a:af:80:7f:aa:f9:98:0d:59:86:5d:b4:0c:35:c5: 2f:d3:77:6d:34:d6:2a:80:36:95:b0:b6:76:51:39: c6:02:91:ee:c3:49:ba:7c:a8:c7:c0:cf:aa:0f:d4: 53:78:dd:68:b7:85:c6:08:41:eb:f4:c6:58:ef:9f: 28:f5:6e:c2:c2:c4:de:b8:39:47:c6:dc:f6:7a:e6: fc:3b:ab:81:cb:3d:1d:2b:37:42:c9:ba:65:ff:4d: 30:ce:d3:d3:4e:cf:bf:e2:b5:ed:9b:00:44:ba:46: 6a:69:a9:0a:8d:9f:a6:4a:83:78:14:16:22:f8:12: d2:ec:55:2c:ce:e5:a2:5d:d1:4f:3e:e2:b7:8f:1f: 2c:91:84:9a:09:62:84:cd:79:14:c8:36:26:70:54: 71:ed:e0:aa:07:d4:3c:5c:43:c4:89:5b:89:97:fe: 1c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:BD:6E:E1:17:1A:C5:91:1E:91:72:9A:91:BC:CC:C3:60:2E:8B:B0 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/oL1u4RcaxZEekXKakbzMw2Aui7A.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.168.255.0/24 Signature Algorithm: sha256WithRSAEncryption cd:2c:7a:ed:72:d9:49:88:2f:e5:48:14:00:66:ec:44:32:5c: 6a:ac:ea:61:1d:81:47:56:2d:73:a3:c8:b3:b2:0d:66:c5:e0: cd:c7:83:95:8a:a5:83:74:c6:1c:38:64:7f:d9:32:d5:9f:d7: 3f:14:76:af:60:6c:f8:b4:e0:9b:e5:ca:1a:de:ba:cd:bd:93: 7c:61:b8:1a:fc:67:a7:ce:51:b6:47:af:91:ae:ad:fa:ac:d8: 05:14:b6:7f:42:12:92:17:e6:6b:ab:51:80:2a:25:97:8f:bd: 84:62:d1:4d:45:dd:97:fd:e6:1e:52:33:92:33:c4:23:0d:b1: 29:04:7c:31:b5:0d:1d:5a:e9:86:bf:a0:14:a6:e7:52:6c:db: ed:c2:fb:87:e6:ca:6b:ec:e5:08:8f:4e:e8:ea:0c:b5:85:aa: 6a:97:8a:70:ce:3a:e3:d5:57:3f:2e:f0:08:e6:dc:d6:31:bf: 4e:82:df:a5:e5:a3:d0:b9:f9:d1:03:d1:75:1d:ab:19:22:aa: e1:76:e8:10:85:ec:2c:1b:31:25:40:d4:63:0c:ec:59:85:6f: 17:2d:80:c5:d5:48:1d:e1:ef:4a:79:5b:f6:92:8d:98:75:58: 82:4f:90:27:86:42:0e:26:5e:ce:f7:16:63:dd:10:79:cb:ef: 59:d3:7f:6b -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICGSUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAyNDhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEEwQkQ2RUUxMTcxQUM1 OTExRTkxNzI5QTkxQkNDQ0MzNjAyRThCQjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDUO6kdU2DjaOE9/atvmXfZMMBiPW8sutlJo/NGdvU1NICjObAV NWoN/AwCjaLSyITQzcxtmB/LX41YtSfNVxrXPQuXknDbUdl7uSFbv2QfH3oMKWyi t83uglqvgH+q+ZgNWYZdtAw1xS/Td2001iqANpWwtnZROcYCke7DSbp8qMfAz6oP 1FN43Wi3hcYIQev0xljvnyj1bsLCxN64OUfG3PZ65vw7q4HLPR0rN0LJumX/TTDO 09NOz7/ite2bAES6RmppqQqNn6ZKg3gUFiL4EtLsVSzO5aJd0U8+4rePHyyRhJoJ YoTNeRTINiZwVHHt4KoH1DxcQ8SJW4mX/hyZAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUoL1u4RcaxZEekXKakbzMw2Aui7AwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9vTDF1NFJjYXhaRWVrWEtha2J6 TXcyQXVpN0Eucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAdqj/ MA0GCSqGSIb3DQEBCwUAA4IBAQDNLHrtctlJiC/lSBQAZuxEMlxqrOphHYFHVi1z o8izsg1mxeDNx4OViqWDdMYcOGR/2TLVn9c/FHavYGz4tOCb5coa3rrNvZN8Ybga /GenzlG2R6+Rrq36rNgFFLZ/QhKSF+Zrq1GAKiWXj72EYtFNRd2X/eYeUjOSM8Qj DbEpBHwxtQ0dWumGv6AUpudSbNvtwvuH5spr7OUIj07o6gy1hapql4pwzjrj1Vc/ LvAI5tzWMb9Ogt+l5aPQufnRA9F1HasZIqrhdugQhewsGzElQNRjDOxZhW8XLYDF 1Ugd4e9KeVv2ko2YdViCT5AnhkIOJl7O9xZj3RB5y+9Z039r -----END CERTIFICATE-----Generated at Fri Sep 5 21:06:21 2025 by rpki-client