$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/qLZ_zz3y-kg3XWAyXscWi_mh1MI.roa File: qLZ_zz3y-kg3XWAyXscWi_mh1MI.roa (raw, json) Hash identifier: Vo4UjMyxslKInFUUcRz8RXRdytA1jNH1XNdgyTmRgyQ= Subject key identifier: A8:B6:7F:CF:3D:F2:FA:48:37:5D:60:32:5E:C7:16:8B:F9:A1:D4:C2 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 194F Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/qLZ_zz3y-kg3XWAyXscWi_mh1MI.roa Signing time: Fri 22 Aug 2025 09:02:58 +0000 ROA not before: Fri 22 Aug 2025 09:02:58 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 36040 IP address blocks: 202.39.67.128/27 maxlen: 27 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 00:46:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6479 (0x194f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:02:58 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=A8B67FCF3DF2FA48375D60325EC7168BF9A1D4C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a1:2a:44:9d:1d:6f:e4:6c:eb:4b:e2:4f:17: bf:97:d9:89:c0:05:14:ce:51:b1:ee:de:7d:11:79: 14:83:a5:56:ff:6d:92:b8:c7:0d:5c:e4:2c:fb:51: 01:8a:6f:15:3d:17:77:72:0e:81:8d:42:63:a1:19: 44:e2:71:19:f7:63:8e:a9:3b:bd:62:98:23:32:f7: da:7a:da:7f:5b:5d:2a:c0:68:8b:e4:b3:20:ae:30: 2f:d4:fe:bf:1d:c9:63:1a:4d:1a:f1:2a:ae:c0:79: 41:da:1b:5b:2b:8d:df:71:35:40:e8:12:ce:5e:3b: cf:cf:9d:4a:54:60:c5:c4:56:d5:ba:7a:f3:5b:f8: ae:96:e8:64:5a:9a:76:89:3e:ba:10:c9:8e:9a:7d: 32:84:3c:55:f2:99:29:65:c9:6c:6d:e9:a4:00:a9: e3:0b:a5:43:4c:7c:a7:bd:e9:20:c8:a6:2b:16:2a: d7:7e:ad:a1:c0:37:07:45:11:ee:1d:52:eb:e4:da: 2a:4e:cb:b7:87:20:d5:9f:c9:71:c6:d3:31:05:9e: c0:37:5e:1b:d0:64:c2:30:2b:ff:6f:5f:34:44:29: 54:71:b4:5d:55:73:35:d0:f8:0d:a7:4c:0e:4a:de: 9a:99:c7:78:5d:73:8d:d6:ac:8e:57:33:3e:ea:31: 20:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:B6:7F:CF:3D:F2:FA:48:37:5D:60:32:5E:C7:16:8B:F9:A1:D4:C2 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/qLZ_zz3y-kg3XWAyXscWi_mh1MI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.39.67.128/27 Signature Algorithm: sha256WithRSAEncryption 45:1b:d3:b2:e7:ba:58:db:52:65:ef:96:be:e2:d3:eb:b1:59: 81:c5:3d:b4:fa:da:03:49:72:9f:16:c2:8e:8e:6a:8f:ff:b4: f3:e0:da:ad:87:06:82:c7:fb:6d:9e:2f:42:fa:fe:c8:35:2c: f0:23:2b:64:c3:8c:92:a9:60:00:8b:1e:be:22:41:b7:cc:29: 63:ea:35:c2:59:3a:6b:dd:f1:30:d9:41:43:b1:02:0c:63:86: 36:10:54:e1:5b:87:e4:05:90:cc:d7:2d:4b:56:27:85:0f:16: ba:8b:57:d5:54:0a:1c:ae:ab:9c:68:ef:e4:ea:ef:64:30:f9: 45:dd:17:7c:ec:05:1f:f2:25:db:ed:2e:4b:f6:83:85:cc:56: f5:c5:d8:98:79:d0:d7:81:3e:27:39:21:d8:4e:98:da:a5:a1: 3e:bc:ef:92:aa:a5:4a:10:19:bb:e3:45:97:89:81:e4:c0:1f: 1d:84:e5:07:0f:8b:49:40:75:d4:5f:4b:dc:a5:9c:d7:68:ab: 8d:98:12:f2:8c:57:89:18:01:55:aa:b3:a9:b0:d5:c4:0d:65: 98:38:37:20:d8:55:77:69:d3:10:21:11:6e:9b:fd:55:46:b5: 97:ec:07:53:35:29:64:72:29:eb:6e:64:1c:9b:d0:f6:d5:32: a6:c7:09:56 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICGU8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAyNThaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEE4QjY3RkNGM0RGMkZB NDgzNzVENjAzMjVFQzcxNjhCRjlBMUQ0QzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLoSpEnR1v5GzrS+JPF7+X2YnABRTOUbHu3n0ReRSDpVb/bZK4 xw1c5Cz7UQGKbxU9F3dyDoGNQmOhGUTicRn3Y46pO71imCMy99p62n9bXSrAaIvk syCuMC/U/r8dyWMaTRrxKq7AeUHaG1srjd9xNUDoEs5eO8/PnUpUYMXEVtW6evNb +K6W6GRamnaJProQyY6afTKEPFXymSllyWxt6aQAqeMLpUNMfKe96SDIpisWKtd+ raHANwdFEe4dUuvk2ipOy7eHINWfyXHG0zEFnsA3XhvQZMIwK/9vXzREKVRxtF1V czXQ+A2nTA5K3pqZx3hdc43WrI5XMz7qMSCBAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUqLZ/zz3y+kg3XWAyXscWi/mh1MIwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9xTFpfenozeS1rZzNYV0F5WHNj V2lfbWgxTUkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUFyidD gDANBgkqhkiG9w0BAQsFAAOCAQEARRvTsue6WNtSZe+WvuLT67FZgcU9tPraA0ly nxbCjo5qj/+08+DarYcGgsf7bZ4vQvr+yDUs8CMrZMOMkqlgAIseviJBt8wpY+o1 wlk6a93xMNlBQ7ECDGOGNhBU4VuH5AWQzNctS1YnhQ8WuotX1VQKHK6rnGjv5Orv ZDD5Rd0XfOwFH/Il2+0uS/aDhcxW9cXYmHnQ14E+Jzkh2E6Y2qWhPrzvkqqlShAZ u+NFl4mB5MAfHYTlBw+LSUB11F9L3KWc12irjZgS8oxXiRgBVaqzqbDVxA1lmDg3 INhVd2nTECERbpv9VUa1l+wHUzUpZHIp625kHJvQ9tUypscJVg== -----END CERTIFICATE-----Generated at Fri Sep 5 21:16:40 2025 by rpki-client