$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/yRoV2ANgQwVhDhCrEWiBzPBiJIE.roa File: yRoV2ANgQwVhDhCrEWiBzPBiJIE.roa (raw, json) Hash identifier: hu+cIHpKw7MYhMqb8SpS/VBUYgp27hmRquteYN8AtJg= Subject key identifier: C9:1A:15:D8:03:60:43:05:61:0E:10:AB:11:68:81:CC:F0:62:24:81 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 18D8 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/yRoV2ANgQwVhDhCrEWiBzPBiJIE.roa Signing time: Fri 22 Aug 2025 09:02:31 +0000 ROA not before: Fri 22 Aug 2025 09:02:31 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 20940 IP address blocks: 210.65.144.192/26 maxlen: 26 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 00:46:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6360 (0x18d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:02:31 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=C91A15D803604305610E10AB116881CCF0622481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3f:c7:23:b0:d2:ae:c2:f9:49:af:24:a3:47: 36:6a:05:1f:3e:72:de:1c:4c:13:ae:72:97:6c:29: 9e:15:29:05:e7:7a:1e:cf:1e:06:01:57:ad:55:7e: 90:cc:5a:fe:f6:99:87:63:c9:a1:98:83:5f:3f:af: c1:ec:e5:65:2f:d3:d5:6a:6c:ea:21:8f:4a:76:1d: 6e:d6:be:5f:da:e8:1e:06:65:05:99:c5:50:2d:3e: f4:a2:1b:04:a7:ec:b6:6a:b0:75:0e:38:b1:35:42: 5c:21:e2:c6:95:76:ec:74:af:15:a9:9d:9b:63:86: da:8d:58:05:c0:39:ef:80:61:e1:fa:9a:35:20:4e: 25:af:e7:37:6a:2a:cd:ec:00:4d:12:e1:3a:e3:ab: 1f:04:f3:f9:db:35:d7:21:32:5f:0e:dd:19:16:47: 37:23:35:07:5d:16:3b:06:8f:a0:1c:84:10:de:59: 09:41:08:c3:7d:89:50:e8:e4:6d:df:c8:98:6a:17: 05:61:8e:41:a0:23:50:d9:9f:8d:5c:ab:66:38:28: a3:88:dc:f7:50:91:83:05:ef:19:13:be:a7:c5:0f: fc:00:b5:43:af:af:7b:e0:68:41:d2:00:38:f6:e5: b9:fe:06:81:0b:71:fe:36:55:68:6f:83:c8:dd:ed: 3d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:1A:15:D8:03:60:43:05:61:0E:10:AB:11:68:81:CC:F0:62:24:81 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/yRoV2ANgQwVhDhCrEWiBzPBiJIE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.65.144.192/26 Signature Algorithm: sha256WithRSAEncryption 2a:32:b3:bf:58:31:14:5e:3c:1c:95:70:ad:f4:9c:2b:0d:d4: aa:d6:6b:be:56:e5:6c:eb:57:53:21:e4:d9:0c:91:ba:6b:0c: 9a:fc:a4:89:6d:14:d4:e4:06:0b:39:53:cd:2f:64:e5:ad:7d: 3c:c9:74:5c:76:27:10:e3:a4:e3:87:86:5b:d5:d0:ee:4b:7c: b4:3b:64:a6:51:82:9a:02:50:3b:cf:53:74:16:0c:52:63:a7: 3b:4b:c3:66:82:51:42:ba:d1:ea:c5:a7:40:e6:45:d8:d6:ad: 31:6a:3e:da:8d:17:36:84:bc:fd:31:92:a6:79:c6:b6:03:44: f6:b8:96:c7:d5:a8:2b:c3:a5:4f:3d:f6:eb:e0:ca:94:be:12: ac:0e:ee:be:02:64:70:8b:82:ce:b0:22:26:65:c7:4a:72:6a: 98:73:65:8b:aa:ba:29:36:a8:d7:9c:93:d7:77:10:ac:4e:fb: 30:e7:5f:58:be:ca:d9:71:1e:23:47:69:e1:35:06:ae:26:c4: 56:1a:2c:1b:25:81:b9:5c:73:7c:00:67:ef:f1:ef:80:a0:d1: f6:76:b4:e1:b0:bc:a5:7a:1c:14:b8:e5:fc:aa:4a:20:74:e7: cb:c4:50:88:21:8e:01:c5:6a:81:43:b5:3e:4d:a3:75:2e:b7: e8:96:5f:7b -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICGNgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAyMzFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEM5MUExNUQ4MDM2MDQz MDU2MTBFMTBBQjExNjg4MUNDRjA2MjI0ODEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYP8cjsNKuwvlJrySjRzZqBR8+ct4cTBOucpdsKZ4VKQXneh7P HgYBV61VfpDMWv72mYdjyaGYg18/r8Hs5WUv09VqbOohj0p2HW7Wvl/a6B4GZQWZ xVAtPvSiGwSn7LZqsHUOOLE1Qlwh4saVdux0rxWpnZtjhtqNWAXAOe+AYeH6mjUg TiWv5zdqKs3sAE0S4Trjqx8E8/nbNdchMl8O3RkWRzcjNQddFjsGj6AchBDeWQlB CMN9iVDo5G3fyJhqFwVhjkGgI1DZn41cq2Y4KKOI3PdQkYMF7xkTvqfFD/wAtUOv r3vgaEHSADj25bn+BoELcf42VWhvg8jd7T1NAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUyRoV2ANgQwVhDhCrEWiBzPBiJIEwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC95Um9WMkFOZ1F3VmhEaENyRVdp QnpQQmlKSUUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUG0kGQ wDANBgkqhkiG9w0BAQsFAAOCAQEAKjKzv1gxFF48HJVwrfScKw3UqtZrvlblbOtX UyHk2QyRumsMmvykiW0U1OQGCzlTzS9k5a19PMl0XHYnEOOk44eGW9XQ7kt8tDtk plGCmgJQO89TdBYMUmOnO0vDZoJRQrrR6sWnQOZF2NatMWo+2o0XNoS8/TGSpnnG tgNE9riWx9WoK8OlTz326+DKlL4SrA7uvgJkcIuCzrAiJmXHSnJqmHNli6q6KTao 15yT13cQrE77MOdfWL7K2XEeI0dp4TUGribEVhosGyWBuVxzfABn7/HvgKDR9na0 4bC8pXocFLjl/KpKIHTny8RQiCGOAcVqgUO1Pk2jdS636JZfew== -----END CERTIFICATE-----Generated at Fri Sep 5 21:10:21 2025 by rpki-client