$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/hfqui_asenNhrp4rMLJ_BzvTclw.roa File: hfqui_asenNhrp4rMLJ_BzvTclw.roa (raw, json) Hash identifier: 3WCPr8OFGCkh3ON5FaeSj5Z/7D2Wyc6UN9KzBmn02P4= Subject key identifier: 85:FA:AE:8B:F6:AC:7A:73:61:AE:9E:2B:30:B2:7F:07:3B:D3:72:5C Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965 Certificate serial: 1467 Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/hfqui_asenNhrp4rMLJ_BzvTclw.roa Signing time: Fri 22 Aug 2025 08:51:29 +0000 ROA not before: Fri 22 Aug 2025 08:51:29 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 396982 IP address blocks: 101.101.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 10:16:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5223 (0x1467) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965 Validity Not Before: Aug 22 08:51:29 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=85FAAE8BF6AC7A7361AE9E2B30B27F073BD3725C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e4:e2:33:11:fe:ea:7b:36:8a:14:d5:23:e0: 47:c3:6e:08:b0:5e:53:a8:9b:0d:e6:70:bd:0c:02: fb:c2:a9:44:d5:1a:e2:9b:3b:76:6d:3e:0b:f3:13: 98:dc:7a:d2:77:1b:8e:f5:9c:54:91:62:38:0a:64: 03:4b:3e:95:af:ab:2e:73:f6:c1:f7:08:2b:32:2d: 4c:fe:22:56:33:f1:eb:12:8b:c6:8a:b0:ff:02:90: 6a:ef:92:a1:ea:3f:00:98:31:8c:a7:66:51:34:9a: 44:4d:83:9a:17:ea:ba:35:95:b6:7e:98:12:4b:15: b2:c2:35:b6:c2:18:f7:69:6d:8d:0a:34:a5:d2:f9: 12:2e:a1:63:de:d0:ec:8c:3b:e5:da:97:e9:46:2f: d9:f3:03:f4:d7:e7:f5:e8:ae:fe:89:27:bf:db:8d: 09:67:49:d8:ce:d4:e5:cd:1b:6e:9a:03:96:76:55: 22:d8:4b:6f:16:ce:29:f7:f1:66:cc:e4:55:12:69: 97:01:4f:b9:c6:b8:59:15:19:cf:59:a8:65:b2:2c: ee:4a:59:02:82:7c:cf:97:7e:2e:45:5d:95:3f:14: 91:75:c0:dd:66:31:83:bc:99:f2:36:58:b3:86:2b: 1f:c7:66:56:68:21:82:df:d4:70:f4:c1:73:ec:33: 38:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:FA:AE:8B:F6:AC:7A:73:61:AE:9E:2B:30:B2:7F:07:3B:D3:72:5C X509v3 Authority Key Identifier: keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/hfqui_asenNhrp4rMLJ_BzvTclw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 101.101.101.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:ec:33:6b:83:cd:8f:93:ab:a4:bc:de:3d:a7:3a:e3:e2:f9: 5e:5c:1a:ad:08:00:c8:04:a6:f5:f2:e0:ad:50:eb:34:30:37: cf:70:b5:98:06:d8:16:3f:ab:3f:f3:db:49:9a:e3:2b:a9:6f: f0:dd:69:57:01:94:60:4d:2d:f9:32:bb:dc:5e:d3:39:40:c3: 23:ed:8d:0a:24:00:54:99:17:b7:f8:a0:7a:dc:11:a5:5a:f3: 28:a1:93:f7:4d:fa:06:1b:94:21:fb:0f:f8:d1:5d:2e:a4:f8: ed:34:35:6c:51:9f:a4:4f:2a:91:72:bf:24:6c:91:b8:6a:3d: 8e:79:b8:63:fd:6f:c2:dc:1f:7a:a0:24:55:05:77:8c:fb:e9: 18:6b:7f:d2:8b:83:57:a9:57:40:55:a4:29:60:bb:0b:fc:97: 99:34:21:e4:78:4e:9a:81:74:58:85:b8:35:27:d4:fe:79:5d: 2b:72:e3:5f:ef:b4:45:35:c4:c5:31:bb:fb:2d:3a:c7:ae:f9: 2e:7b:24:be:7b:df:95:ed:ac:85:5c:04:ce:c2:61:cc:93:69: a1:c2:13:a6:e3:11:89:db:77:d8:0a:d0:39:12:cd:06:bd:d4: b3:6d:e0:ab:3f:b0:08:07:25:14:e8:b6:19:30:f3:e4:67:67: 1c:7b:f0:33 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICFGcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREZB OEM0NTQ4MTVDMzAxNzQ1NkVBM0I0QTdEMDAyMTNCQjg1Qzk2NTAeFw0yNTA4MjIw ODUxMjlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDg1RkFBRThCRjZBQzdB NzM2MUFFOUUyQjMwQjI3RjA3M0JEMzcyNUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+5OIzEf7qezaKFNUj4EfDbgiwXlOomw3mcL0MAvvCqUTVGuKb O3ZtPgvzE5jcetJ3G471nFSRYjgKZANLPpWvqy5z9sH3CCsyLUz+IlYz8esSi8aK sP8CkGrvkqHqPwCYMYynZlE0mkRNg5oX6ro1lbZ+mBJLFbLCNbbCGPdpbY0KNKXS +RIuoWPe0OyMO+Xal+lGL9nzA/TX5/Xorv6JJ7/bjQlnSdjO1OXNG26aA5Z2VSLY S28Wzin38WbM5FUSaZcBT7nGuFkVGc9ZqGWyLO5KWQKCfM+Xfi5FXZU/FJF1wN1m MYO8mfI2WLOGKx/HZlZoIYLf1HD0wXPsMzh/AgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUhfqui/asenNhrp4rMLJ/BzvTclwwHwYDVR0jBBgwFoAU36jEVIFcMBdFbqO0 p9ACE7uFyWUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOSUMv MzZqRVZJRmNNQmRGYnFPMHA5QUNFN3VGeVdVLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS8zNmpFVklGY01CZEZicU8wcDlBQ0U3dUZ5V1UuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UV05JQy9oZnF1aV9hc2VuTmhycDRyTUxK X0J6dlRjbHcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZWVl MA0GCSqGSIb3DQEBCwUAA4IBAQA97DNrg82Pk6ukvN49pzrj4vleXBqtCADIBKb1 8uCtUOs0MDfPcLWYBtgWP6s/89tJmuMrqW/w3WlXAZRgTS35MrvcXtM5QMMj7Y0K JABUmRe3+KB63BGlWvMooZP3TfoGG5Qh+w/40V0upPjtNDVsUZ+kTyqRcr8kbJG4 aj2Oebhj/W/C3B96oCRVBXeM++kYa3/Si4NXqVdAVaQpYLsL/JeZNCHkeE6agXRY hbg1J9T+eV0rcuNf77RFNcTFMbv7LTrHrvkueyS+e9+V7ayFXATOwmHMk2mhwhOm 4xGJ23fYCtA5Es0GvdSzbeCrP7AIByUU6LYZMPPkZ2cce/Az -----END CERTIFICATE-----Generated at Sat Sep 6 07:10:00 2025 by rpki-client