$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HEALTHNET/eItlqzXK2ZnmvoiEXAvzgFYxlww.roa File: eItlqzXK2ZnmvoiEXAvzgFYxlww.roa (raw, json) Hash identifier: 7k+uZA170TNHumRhdurKt1PUgUul9uB628TPBM/EN/w= Subject key identifier: 78:8B:65:AB:35:CA:D9:99:E6:BE:88:84:5C:0B:F3:80:56:31:97:0C Certificate issuer: /CN=43FF5C92CC4950A457A7327D168FBC465B218322 Certificate serial: 0D83 Authority key identifier: 43:FF:5C:92:CC:49:50:A4:57:A7:32:7D:16:8F:BC:46:5B:21:83:22 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Q_9cksxJUKRXpzJ9Fo-8RlshgyI.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HEALTHNET/eItlqzXK2ZnmvoiEXAvzgFYxlww.roa Signing time: Fri 22 Aug 2025 08:56:07 +0000 ROA not before: Fri 22 Aug 2025 08:56:07 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 4782 IP address blocks: 203.65.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HEALTHNET/Q_9cksxJUKRXpzJ9Fo-8RlshgyI.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HEALTHNET/Q_9cksxJUKRXpzJ9Fo-8RlshgyI.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Q_9cksxJUKRXpzJ9Fo-8RlshgyI.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3459 (0xd83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43FF5C92CC4950A457A7327D168FBC465B218322 Validity Not Before: Aug 22 08:56:07 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=788B65AB35CAD999E6BE88845C0BF3805631970C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:29:93:bf:f2:85:ff:8d:8e:ea:fc:61:39:b4: 33:65:da:50:5b:39:57:ed:85:53:d1:81:f5:db:1f: 89:6a:e2:ec:22:20:77:2d:5f:76:15:23:b3:5e:a9: 12:3c:d2:67:c0:2b:74:d4:fc:18:58:3b:9a:d5:75: 5c:6a:12:28:21:95:3c:fd:29:f1:2a:4e:4e:88:41: 7d:0a:b1:4f:78:1d:1c:69:2c:9b:9b:02:c4:02:6c: 0f:9b:cb:76:80:6d:0c:12:e2:25:7c:1a:b3:9d:e8: 98:82:59:94:71:10:c3:28:c8:ec:ca:22:84:df:d4: f8:60:f0:6f:8f:0d:85:8b:d8:27:d0:5c:4e:4a:f7: 5b:5c:04:42:9c:81:28:b3:87:0e:73:8b:b1:61:49: 18:c9:47:fe:66:b9:72:ab:2d:59:71:18:86:94:75: 84:26:c6:c9:0e:ad:8e:28:80:30:ec:16:9b:63:58: c0:b8:40:d4:56:26:05:ec:5d:68:90:98:17:3a:c1: 8b:fa:d2:66:fe:4a:2a:9d:17:a2:75:73:37:b0:26: 66:c8:a8:c1:90:4f:5d:77:1c:b8:72:0b:b5:63:50: ce:e5:60:3d:22:dc:aa:33:ef:60:9d:45:46:01:ad: a6:67:51:d5:f2:f7:19:ba:df:d3:e0:b5:a9:94:a5: 64:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:8B:65:AB:35:CA:D9:99:E6:BE:88:84:5C:0B:F3:80:56:31:97:0C X509v3 Authority Key Identifier: keyid:43:FF:5C:92:CC:49:50:A4:57:A7:32:7D:16:8F:BC:46:5B:21:83:22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HEALTHNET/Q_9cksxJUKRXpzJ9Fo-8RlshgyI.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Q_9cksxJUKRXpzJ9Fo-8RlshgyI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HEALTHNET/eItlqzXK2ZnmvoiEXAvzgFYxlww.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.65.128.0/19 Signature Algorithm: sha256WithRSAEncryption 56:8d:11:a0:88:bf:05:c5:d6:d3:8b:e2:cc:7b:69:25:4d:78: 69:e2:31:76:40:1a:35:f6:c7:fa:a6:11:6f:7e:d4:36:da:0b: f6:d5:ec:34:bb:61:96:df:f2:dc:f1:a6:f1:c7:2a:9c:e0:4e: f1:31:e5:bd:6b:a9:0b:df:9a:83:d4:22:5e:59:a3:53:55:0b: bf:9c:8d:ec:f0:ec:f0:30:f1:32:d3:ab:7f:97:97:4c:45:66: 20:5f:0a:51:3b:96:bb:59:c3:ac:93:96:f7:b5:5c:ad:4b:51: ae:bc:70:19:93:25:d0:9b:a5:03:be:5c:f2:2d:6d:7e:cd:ba: 72:7b:76:0d:b7:e5:53:e1:68:3c:43:be:72:5e:7b:73:23:35: d5:55:af:ec:d7:e1:e5:84:15:6a:d8:b6:fd:64:3e:ce:ef:02: bf:43:83:4d:98:00:ef:db:92:31:6a:62:d8:47:da:a2:33:13: bb:49:0b:7a:34:46:e8:60:e3:c6:e0:31:4d:cf:64:de:fa:12: e9:54:a7:30:67:40:d4:25:be:a4:3e:b6:02:9c:1b:08:6b:ae: 21:8d:c1:6c:25:3d:a3:be:bf:0d:69:96:71:c0:38:50:47:a6: 64:7c:e8:b8:35:5e:ec:ae:7b:a4:a5:27:cc:17:d2:8b:40:80: af:64:36:59 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICDYMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDNG RjVDOTJDQzQ5NTBBNDU3QTczMjdEMTY4RkJDNDY1QjIxODMyMjAeFw0yNTA4MjIw ODU2MDdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDc4OEI2NUFCMzVDQUQ5 OTlFNkJFODg4NDVDMEJGMzgwNTYzMTk3MEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTKZO/8oX/jY7q/GE5tDNl2lBbOVfthVPRgfXbH4lq4uwiIHct X3YVI7NeqRI80mfAK3TU/BhYO5rVdVxqEighlTz9KfEqTk6IQX0KsU94HRxpLJub AsQCbA+by3aAbQwS4iV8GrOd6JiCWZRxEMMoyOzKIoTf1Phg8G+PDYWL2CfQXE5K 91tcBEKcgSizhw5zi7FhSRjJR/5muXKrLVlxGIaUdYQmxskOrY4ogDDsFptjWMC4 QNRWJgXsXWiQmBc6wYv60mb+SiqdF6J1czewJmbIqMGQT113HLhyC7VjUM7lYD0i 3Koz72CdRUYBraZnUdXy9xm639PgtamUpWQ1AgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUeItlqzXK2ZnmvoiEXAvzgFYxlwwwHwYDVR0jBBgwFoAUQ/9cksxJUKRXpzJ9 Fo+8RlshgyIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSEVBTFRI TkVUL1FfOWNrc3hKVUtSWHB6SjlGby04UmxzaGd5SS5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvUV85Y2tzeEpVS1JYcHpKOUZvLThSbHNoZ3lJLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSEVBTFRITkVUL2VJdGxxelhLMlpu bXZvaUVYQXZ6Z0ZZeGx3dy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXLQYAwDQYJKoZIhvcNAQELBQADggEBAFaNEaCIvwXF1tOL4sx7aSVNeGni MXZAGjX2x/qmEW9+1DbaC/bV7DS7YZbf8tzxpvHHKpzgTvEx5b1rqQvfmoPUIl5Z o1NVC7+cjezw7PAw8TLTq3+Xl0xFZiBfClE7lrtZw6yTlve1XK1LUa68cBmTJdCb pQO+XPItbX7NunJ7dg235VPhaDxDvnJee3MjNdVVr+zX4eWEFWrYtv1kPs7vAr9D g02YAO/bkjFqYthH2qIzE7tJC3o0Ruhg48bgMU3PZN76EulUpzBnQNQlvqQ+tgKc GwhrriGNwWwlPaO+vw1plnHAOFBHpmR86Lg1Xuyue6SlJ8wX0otAgK9kNlk= -----END CERTIFICATE-----Generated at Sun Aug 24 11:15:33 2025 by rpki-client