$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/sB-2aGe8h60CUO6oA0robrri8lU.roa File: sB-2aGe8h60CUO6oA0robrri8lU.roa (raw, json) Hash identifier: cPl6GRxcBhRDB0oDp+Y8UUlLgdljfx7R1MthJnKZ+UE= Subject key identifier: B0:1F:B6:68:67:BC:87:AD:02:50:EE:A8:03:4A:E8:6E:BA:E2:F2:55 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 1967 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/sB-2aGe8h60CUO6oA0robrri8lU.roa Signing time: Fri 22 Aug 2025 09:03:05 +0000 ROA not before: Fri 22 Aug 2025 09:03:05 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 3462 IP address blocks: 203.75.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 00:46:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6503 (0x1967) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:03:05 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=B01FB66867BC87AD0250EEA8034AE86EBAE2F255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:29:20:83:15:05:50:82:95:5b:ce:c5:2a:93: c5:e2:c6:cb:62:5d:2d:02:28:c0:8d:bc:6c:6a:22: c8:4c:1b:ca:7a:78:d8:94:52:25:14:c6:e4:23:85: 97:a3:97:4b:11:97:68:f7:e2:03:d7:78:6e:ed:61: e1:f7:18:8c:04:0a:8e:33:1b:a9:37:14:31:6e:ed: c2:05:27:6a:0d:f4:37:08:ae:56:49:c2:d7:42:1f: 91:4e:de:77:5a:8d:cc:f8:3b:22:f2:d9:c3:1f:6f: c2:9f:9e:a9:2d:4f:b9:86:70:9f:23:9a:e2:a3:0a: f4:52:38:18:6f:a8:17:d2:f6:ca:6f:da:1a:a9:47: 29:17:53:65:a4:cd:ae:e6:0f:0c:2a:f5:d3:d2:fa: 0e:05:56:4f:05:d6:a0:0c:3c:12:67:45:0f:3c:5c: 74:06:f8:70:71:1d:ca:22:fd:91:8f:4c:81:64:6a: bb:7a:25:cf:66:52:76:17:c6:1d:fd:40:db:99:59: 1e:9f:7a:5a:e5:17:eb:4d:1e:92:ed:ff:6e:d0:fa: 3d:86:40:7f:25:7d:35:db:a4:86:7f:99:83:69:7f: 49:dd:77:a3:d8:df:f9:5e:a0:c9:20:4e:a4:0d:ad: 07:4e:fb:67:59:5b:7b:aa:fc:5f:f4:65:a7:e2:98: e8:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:1F:B6:68:67:BC:87:AD:02:50:EE:A8:03:4A:E8:6E:BA:E2:F2:55 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/sB-2aGe8h60CUO6oA0robrri8lU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.75.0.0/16 Signature Algorithm: sha256WithRSAEncryption 74:28:53:15:b0:e7:1c:ee:ae:2f:6e:15:4a:fa:42:f7:ca:51: 6d:89:ea:e0:27:7d:85:eb:3e:f9:0e:a4:10:6b:11:57:30:6d: 5f:bf:48:fd:3b:97:06:d3:93:4f:71:7a:60:59:1c:2b:ba:94: 00:81:d1:44:71:f2:60:16:39:fc:7e:8e:15:e2:45:72:55:b8: 23:63:4d:95:5c:6c:7b:80:40:1f:d9:bd:0b:7d:d1:16:fa:3d: 9f:33:0b:a9:37:41:2b:4b:5d:9a:2b:d5:77:a3:2c:7c:85:a5: 1c:09:4c:cc:cb:30:65:89:a8:e2:3f:58:ba:7f:3b:72:22:08: eb:c5:27:da:83:fe:6c:ab:c1:a4:c2:8f:a1:2b:62:d4:f1:90: cf:bd:d8:c8:53:87:4b:46:2b:9a:51:b6:36:1c:20:d8:0b:e9: ec:30:c9:64:ce:75:8a:1d:72:ae:b8:1d:ef:fc:10:36:60:47: 89:6f:9a:c7:26:cd:2c:43:a4:bf:0d:e7:c9:a1:89:fe:fa:2f: fa:ba:5a:81:57:52:23:30:5c:44:01:8f:e6:ba:ba:6c:03:21: 22:5f:f6:53:57:ea:ef:eb:29:be:d2:ff:50:d0:a2:8b:9e:5f: 2b:30:55:b6:5d:d2:de:2f:db:0c:df:97:d1:3f:5c:63:23:c9: be:80:e9:53 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICGWcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAzMDVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEIwMUZCNjY4NjdCQzg3 QUQwMjUwRUVBODAzNEFFODZFQkFFMkYyNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuKSCDFQVQgpVbzsUqk8XixstiXS0CKMCNvGxqIshMG8p6eNiU UiUUxuQjhZejl0sRl2j34gPXeG7tYeH3GIwECo4zG6k3FDFu7cIFJ2oN9DcIrlZJ wtdCH5FO3ndajcz4OyLy2cMfb8KfnqktT7mGcJ8jmuKjCvRSOBhvqBfS9spv2hqp RykXU2Wkza7mDwwq9dPS+g4FVk8F1qAMPBJnRQ88XHQG+HBxHcoi/ZGPTIFkart6 Jc9mUnYXxh39QNuZWR6felrlF+tNHpLt/27Q+j2GQH8lfTXbpIZ/mYNpf0ndd6PY 3/leoMkgTqQNrQdO+2dZW3uq/F/0ZafimOgvAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUsB+2aGe8h60CUO6oA0robrri8lUwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9zQi0yYUdlOGg2MENVTzZvQTBy b2Jycmk4bFUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAy0sw DQYJKoZIhvcNAQELBQADggEBAHQoUxWw5xzuri9uFUr6QvfKUW2J6uAnfYXrPvkO pBBrEVcwbV+/SP07lwbTk09xemBZHCu6lACB0URx8mAWOfx+jhXiRXJVuCNjTZVc bHuAQB/ZvQt90Rb6PZ8zC6k3QStLXZor1XejLHyFpRwJTMzLMGWJqOI/WLp/O3Ii COvFJ9qD/myrwaTCj6ErYtTxkM+92MhTh0tGK5pRtjYcINgL6ewwyWTOdYodcq64 He/8EDZgR4lvmscmzSxDpL8N58mhif76L/q6WoFXUiMwXEQBj+a6umwDISJf9lNX 6u/rKb7S/1DQooueXyswVbZd0t4v2wzfl9E/XGMjyb6A6VM= -----END CERTIFICATE-----Generated at Fri Sep 5 21:13:55 2025 by rpki-client