$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/q6Gt9FTCdmZ3pr8DqJxwAgQdKEI.roa File: q6Gt9FTCdmZ3pr8DqJxwAgQdKEI.roa (raw, json) Hash identifier: QwrnGQhW7yKultOH0+xjpr8QVNi/uYw8LaPM2MDv5/U= Subject key identifier: AB:A1:AD:F4:54:C2:76:66:77:A6:BF:03:A8:9C:70:02:04:1D:28:42 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 1949 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/q6Gt9FTCdmZ3pr8DqJxwAgQdKEI.roa Signing time: Fri 22 Aug 2025 09:02:56 +0000 ROA not before: Fri 22 Aug 2025 09:02:56 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9680 IP address blocks: 202.39.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 00:46:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6473 (0x1949) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:02:56 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=ABA1ADF454C2766677A6BF03A89C7002041D2842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:87:2f:2b:b0:8c:16:ef:2f:15:ba:ef:19:ac: 26:1f:28:92:d8:eb:66:71:cd:39:85:fe:03:4f:8c: 2c:90:ad:dc:f3:10:8a:4d:cd:6b:52:58:57:fa:8f: cb:fb:4b:ea:45:6b:00:31:5e:c8:b3:69:1e:74:9a: a8:d0:39:c6:65:8d:44:f1:7f:39:a6:d7:7f:00:fc: 37:fe:a9:d5:93:96:a9:1e:f8:5b:f7:fd:7e:de:bb: f7:9c:87:f6:59:3d:28:31:9f:0b:8e:cb:5d:1a:e6: 72:fd:e8:b9:9c:22:16:32:06:00:a7:20:46:01:bf: ff:97:58:95:1d:0e:9c:bc:ba:eb:24:e9:4a:f6:43: 85:12:50:02:9f:98:d2:7e:9b:9d:46:3d:b8:7b:4d: c1:de:f8:74:07:24:e3:01:78:87:ef:0c:2c:97:a2: 5b:12:64:47:71:8d:d9:1f:3d:5e:89:c7:a4:68:83: bd:6b:95:ab:f1:17:db:21:7e:a7:e8:48:5f:d0:8a: 6b:d8:17:f7:3c:a5:17:1b:ba:fa:25:fb:23:4a:c7: 56:fd:f3:cc:10:20:e6:53:2d:14:79:5c:f8:88:b4: 29:46:28:6c:6e:30:07:93:6b:ef:e3:c8:6e:e6:83: 2d:47:6d:39:73:33:9e:45:e9:11:11:96:f6:bb:98: f2:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:A1:AD:F4:54:C2:76:66:77:A6:BF:03:A8:9C:70:02:04:1D:28:42 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/q6Gt9FTCdmZ3pr8DqJxwAgQdKEI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.39.80.0/20 Signature Algorithm: sha256WithRSAEncryption 58:47:4c:fd:cf:8d:2e:81:62:23:50:fd:9e:1f:74:33:1a:8b: 9b:13:5e:d2:6b:f7:8f:2c:76:b3:7e:f6:19:20:07:17:bf:2f: c9:c5:e9:3a:fe:14:9f:2f:bd:77:7e:50:e1:f4:d4:d4:e7:25: 14:68:f1:42:91:8f:30:88:48:0b:1f:30:37:8d:a5:4a:75:06: 6d:95:a3:31:cf:cb:98:dc:82:37:21:f6:b0:f1:ec:89:b2:33: 9c:d1:0b:b0:0f:28:60:0c:ca:87:19:83:73:41:f9:1e:af:2e: a3:92:64:f8:b1:3f:4f:be:58:2d:fc:03:dd:0f:00:c5:19:14: e7:2a:06:5c:a9:0c:38:68:dc:94:52:4c:f8:98:5c:43:06:b1: 15:11:b3:67:57:f3:6a:91:65:f0:51:2c:f2:79:7e:01:6f:b7: 0c:50:65:30:db:08:eb:9e:69:da:40:13:52:45:38:30:08:57: fe:64:3e:07:9c:55:09:4a:7b:c3:f0:32:a5:44:6b:3f:6a:52: 42:fa:57:2d:4e:86:48:5b:a1:30:14:79:6e:63:e2:6d:41:f0: 5f:3e:dc:6b:19:c4:90:a5:5b:66:13:d1:d6:7a:16:50:88:97: 5d:c2:7d:4f:c0:bf:dd:ce:a9:c6:ee:02:9b:ad:5a:02:cc:88: 65:6e:ff:14 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICGUkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAyNTZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEFCQTFBREY0NTRDMjc2 NjY3N0E2QkYwM0E4OUM3MDAyMDQxRDI4NDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDghy8rsIwW7y8Vuu8ZrCYfKJLY62ZxzTmF/gNPjCyQrdzzEIpN zWtSWFf6j8v7S+pFawAxXsizaR50mqjQOcZljUTxfzmm138A/Df+qdWTlqke+Fv3 /X7eu/ech/ZZPSgxnwuOy10a5nL96LmcIhYyBgCnIEYBv/+XWJUdDpy8uusk6Ur2 Q4USUAKfmNJ+m51GPbh7TcHe+HQHJOMBeIfvDCyXolsSZEdxjdkfPV6Jx6Rog71r lavxF9shfqfoSF/QimvYF/c8pRcbuvol+yNKx1b988wQIOZTLRR5XPiItClGKGxu MAeTa+/jyG7mgy1HbTlzM55F6RERlva7mPIHAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUq6Gt9FTCdmZ3pr8DqJxwAgQdKEIwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9xNkd0OUZUQ2RtWjNwcjhEcUp4 d0FnUWRLRUkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEyidQ MA0GCSqGSIb3DQEBCwUAA4IBAQBYR0z9z40ugWIjUP2eH3QzGoubE17Sa/ePLHaz fvYZIAcXvy/Jxek6/hSfL713flDh9NTU5yUUaPFCkY8wiEgLHzA3jaVKdQZtlaMx z8uY3II3Ifaw8eyJsjOc0QuwDyhgDMqHGYNzQfkery6jkmT4sT9Pvlgt/APdDwDF GRTnKgZcqQw4aNyUUkz4mFxDBrEVEbNnV/NqkWXwUSzyeX4Bb7cMUGUw2wjrnmna QBNSRTgwCFf+ZD4HnFUJSnvD8DKlRGs/alJC+lctToZIW6EwFHluY+JtQfBfPtxr GcSQpVtmE9HWehZQiJddwn1PwL/dzqnG7gKbrVoCzIhlbv8U -----END CERTIFICATE-----Generated at Fri Sep 5 21:08:04 2025 by rpki-client