$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/u9agsxSQ0obxuF8GO6YR7hoHsfM.roa File: u9agsxSQ0obxuF8GO6YR7hoHsfM.roa (raw, json) Hash identifier: CMfLXs/Jr090QZvsrH3Ul7r5m5+v6oiwIRC6TkK8JpM= Subject key identifier: BB:D6:A0:B3:14:90:D2:86:F1:B8:5F:06:3B:A6:11:EE:1A:07:B1:F3 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 1923 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/u9agsxSQ0obxuF8GO6YR7hoHsfM.roa Signing time: Fri 22 Aug 2025 09:02:48 +0000 ROA not before: Fri 22 Aug 2025 09:02:48 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 3462 IP address blocks: 122.118.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 00:46:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6435 (0x1923) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:02:48 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=BBD6A0B31490D286F1B85F063BA611EE1A07B1F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1f:dd:ed:b8:4f:e5:99:83:ab:a7:87:f5:22: 04:9f:81:1c:44:b7:dd:84:a3:bb:f3:58:38:af:81: 72:df:f4:7e:dd:62:99:87:73:60:38:fe:49:9f:0c: ac:1e:35:93:c8:60:71:0d:02:79:6e:7d:3f:b3:8a: 1b:c1:a7:b6:2a:5a:c8:6d:1c:04:d0:56:f7:25:6a: 65:e9:80:9d:19:ed:34:fd:aa:ed:af:95:5a:da:02: e7:c7:7d:46:b9:be:6b:b9:67:7c:12:b4:fd:d9:43: d9:45:e5:c0:6b:2e:d3:26:4d:6f:b6:ce:03:81:0e: a9:f5:23:5a:3b:84:76:cc:42:3c:4f:af:0f:21:b0: f2:03:2e:b7:51:13:51:38:f9:ea:98:24:ec:af:02: 50:73:ab:0d:54:79:db:60:90:33:8d:b2:fc:c2:6b: be:23:58:b5:15:6f:1d:f9:d7:52:0c:fa:1f:e3:41: be:25:95:fd:a9:77:12:cd:24:72:07:08:4a:23:b8: 62:71:41:33:7a:a7:d2:5c:22:2b:1f:fd:72:04:16: 90:7b:09:59:0c:f3:43:0c:db:9e:6b:1c:c4:e2:23: 60:24:23:f3:11:3b:12:36:70:c8:6a:d7:25:af:d9: e2:eb:a5:ba:43:ea:7b:13:97:45:d4:c8:56:2c:2f: ca:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:D6:A0:B3:14:90:D2:86:F1:B8:5F:06:3B:A6:11:EE:1A:07:B1:F3 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/u9agsxSQ0obxuF8GO6YR7hoHsfM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.118.0.0/16 Signature Algorithm: sha256WithRSAEncryption 02:28:84:cc:8d:d5:f3:de:f6:f4:ba:2b:5f:19:45:49:63:7b: dd:65:95:80:e2:c7:10:c9:de:bf:d0:26:f7:98:01:a7:88:ca: 49:45:c3:c6:16:46:bc:de:0d:95:a1:7d:78:c5:e4:c9:cb:29: a0:59:b6:b6:a2:42:61:76:5f:14:0b:33:e5:2e:55:28:77:81: ca:7b:af:4e:bd:6e:80:69:ea:fe:cb:e8:0f:ad:02:88:a1:51: 80:b5:03:e6:53:4a:27:67:76:30:81:3f:38:b2:cc:c1:b8:92: f6:b8:29:59:5b:32:9e:dd:fa:31:e3:22:1e:5d:2f:44:23:a7: 59:f1:c6:5c:b8:d0:02:ef:56:58:08:66:c2:7a:4d:59:d0:a9: a8:d9:e4:f6:b1:6e:cc:db:bd:22:cd:53:e0:27:88:c1:f3:11: a4:79:9e:44:c2:c5:6c:fc:40:03:06:30:69:81:e5:2a:a0:02: d2:9e:db:4d:01:b7:d2:d0:8e:9d:63:df:f5:5d:77:02:f1:bc: b9:5f:29:c3:98:34:a7:e1:a3:94:c0:ea:7d:ce:f9:26:d3:af: 6b:4a:db:86:d5:61:37:f9:ca:33:9c:66:07:2f:a2:41:73:8c: 8a:0c:8f:71:40:33:59:e7:ac:76:23:76:f4:b2:8a:c4:a2:4b: 97:fa:d4:ef -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICGSMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAyNDhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEJCRDZBMEIzMTQ5MEQy ODZGMUI4NUYwNjNCQTYxMUVFMUEwN0IxRjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIH93tuE/lmYOrp4f1IgSfgRxEt92Eo7vzWDivgXLf9H7dYpmH c2A4/kmfDKweNZPIYHENAnlufT+zihvBp7YqWshtHATQVvclamXpgJ0Z7TT9qu2v lVraAufHfUa5vmu5Z3wStP3ZQ9lF5cBrLtMmTW+2zgOBDqn1I1o7hHbMQjxPrw8h sPIDLrdRE1E4+eqYJOyvAlBzqw1UedtgkDONsvzCa74jWLUVbx3511IM+h/jQb4l lf2pdxLNJHIHCEojuGJxQTN6p9JcIisf/XIEFpB7CVkM80MM255rHMTiI2AkI/MR OxI2cMhq1yWv2eLrpbpD6nsTl0XUyFYsL8pJAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUu9agsxSQ0obxuF8GO6YR7hoHsfMwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC91OWFnc3hTUTBvYnh1RjhHTzZZ Ujdob0hzZk0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAenYw DQYJKoZIhvcNAQELBQADggEBAAIohMyN1fPe9vS6K18ZRUlje91llYDixxDJ3r/Q JveYAaeIyklFw8YWRrzeDZWhfXjF5MnLKaBZtraiQmF2XxQLM+UuVSh3gcp7r069 boBp6v7L6A+tAoihUYC1A+ZTSidndjCBPziyzMG4kva4KVlbMp7d+jHjIh5dL0Qj p1nxxly40ALvVlgIZsJ6TVnQqajZ5PaxbszbvSLNU+AniMHzEaR5nkTCxWz8QAMG MGmB5SqgAtKe200Bt9LQjp1j3/VddwLxvLlfKcOYNKfho5TA6n3O+SbTr2tK24bV YTf5yjOcZgcvokFzjIoMj3FAM1nnrHYjdvSyisSiS5f61O8= -----END CERTIFICATE-----Generated at Fri Sep 5 21:15:37 2025 by rpki-client