$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HEALTHNET/kieT8LagANN4MIdEotBeitC0r8Q.roa File: kieT8LagANN4MIdEotBeitC0r8Q.roa (raw, json) Hash identifier: JWLTLkuk28V9j2y2WhNckU+KVRshz88pQy5IMqv9ZgY= Subject key identifier: 92:27:93:F0:B6:A0:00:D3:78:30:87:44:A2:D0:5E:8A:D0:B4:AF:C4 Certificate issuer: /CN=43FF5C92CC4950A457A7327D168FBC465B218322 Certificate serial: 0D84 Authority key identifier: 43:FF:5C:92:CC:49:50:A4:57:A7:32:7D:16:8F:BC:46:5B:21:83:22 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Q_9cksxJUKRXpzJ9Fo-8RlshgyI.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HEALTHNET/kieT8LagANN4MIdEotBeitC0r8Q.roa Signing time: Fri 22 Aug 2025 08:56:08 +0000 ROA not before: Fri 22 Aug 2025 08:56:08 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 4782 IP address blocks: 203.65.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HEALTHNET/Q_9cksxJUKRXpzJ9Fo-8RlshgyI.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HEALTHNET/Q_9cksxJUKRXpzJ9Fo-8RlshgyI.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Q_9cksxJUKRXpzJ9Fo-8RlshgyI.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3460 (0xd84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43FF5C92CC4950A457A7327D168FBC465B218322 Validity Not Before: Aug 22 08:56:08 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=922793F0B6A000D378308744A2D05E8AD0B4AFC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6c:27:67:01:68:cd:6a:96:ef:e3:16:c6:2b: 77:b6:a7:b3:21:f3:6c:1f:47:9c:9d:b8:06:42:d3: 87:62:53:97:44:c9:6a:f1:67:2a:bb:e1:59:f4:9a: dd:ae:c4:c4:a0:db:6c:e9:20:64:fe:68:f6:7c:59: 13:75:72:26:0a:08:9c:26:ab:75:48:9d:87:02:78: 39:56:b3:de:23:cd:0c:45:d7:55:5c:ee:69:e5:b2: 30:9b:64:9c:8a:9b:4a:54:c0:76:ae:da:b3:de:3e: 5e:d1:d6:aa:77:8c:21:82:f6:3a:04:4f:59:10:bc: de:7f:8f:ae:d4:85:0e:4d:29:fa:33:0e:be:e2:8e: 6b:6a:65:01:73:79:34:b8:3c:12:6b:a5:a2:3f:25: 0a:36:6d:fa:f8:55:ef:f8:ba:79:8c:73:ee:2b:53: ed:11:ef:c0:61:31:c2:4b:f7:02:48:d2:16:a1:f4: 1b:0d:92:10:22:28:e1:8e:af:b5:7a:37:24:75:70: 4a:e5:d9:e8:ec:70:6f:c7:86:0e:3c:5c:62:65:42: 53:9f:91:fa:fb:89:f2:4a:ce:1b:6e:6b:5b:4b:94: 86:34:ed:ad:86:a3:78:44:6a:66:bf:cf:d6:4f:82: 77:87:47:60:be:7c:a7:50:b1:90:b5:7d:9e:b6:62: c6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:27:93:F0:B6:A0:00:D3:78:30:87:44:A2:D0:5E:8A:D0:B4:AF:C4 X509v3 Authority Key Identifier: keyid:43:FF:5C:92:CC:49:50:A4:57:A7:32:7D:16:8F:BC:46:5B:21:83:22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HEALTHNET/Q_9cksxJUKRXpzJ9Fo-8RlshgyI.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Q_9cksxJUKRXpzJ9Fo-8RlshgyI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HEALTHNET/kieT8LagANN4MIdEotBeitC0r8Q.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.65.0.0/17 Signature Algorithm: sha256WithRSAEncryption 7a:98:a5:fc:f2:9b:0e:89:99:84:73:95:7b:08:ba:9a:ea:34: 29:54:04:31:d2:36:02:9d:cf:51:cd:ef:2d:6c:3c:78:f6:5a: ae:8e:ab:66:fa:57:a3:f0:a2:68:7d:54:a1:9d:4d:ed:a1:85: c4:25:0d:d6:11:85:4f:12:66:ef:4e:cf:40:b3:a3:67:03:f7: 31:75:63:41:e2:26:70:71:de:fc:a7:d8:3a:e9:ea:f8:7c:cf: 84:64:09:13:04:77:64:46:06:4f:4e:5e:aa:8c:18:be:43:71: 2d:ec:7b:66:e5:be:b8:1f:f4:c0:2b:07:74:eb:1d:3d:52:67: 9f:ae:6d:41:49:cf:16:bd:9b:16:71:f1:eb:21:66:d4:e2:26: 0b:2d:a7:14:13:ab:aa:69:0c:41:d5:2d:3d:4d:21:62:f3:bc: a0:1f:61:8f:9c:cf:57:da:e2:e0:e0:36:b8:9b:59:f6:06:db: d7:72:04:c9:cc:9d:0a:b3:25:83:cc:3e:ff:67:33:e3:e6:61: a2:47:75:73:98:de:f7:b3:57:01:03:a5:6f:1a:10:85:64:d1: fc:c4:05:b6:64:06:d5:3c:aa:3d:b8:78:d4:c0:70:7d:88:a1: 09:ca:01:55:c5:eb:8e:f9:6a:a0:6e:cc:7c:c6:e1:04:23:2c: 6a:ae:2d:f9 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICDYQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDNG RjVDOTJDQzQ5NTBBNDU3QTczMjdEMTY4RkJDNDY1QjIxODMyMjAeFw0yNTA4MjIw ODU2MDhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDkyMjc5M0YwQjZBMDAw RDM3ODMwODc0NEEyRDA1RThBRDBCNEFGQzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTbCdnAWjNapbv4xbGK3e2p7Mh82wfR5yduAZC04diU5dEyWrx Zyq74Vn0mt2uxMSg22zpIGT+aPZ8WRN1ciYKCJwmq3VInYcCeDlWs94jzQxF11Vc 7mnlsjCbZJyKm0pUwHau2rPePl7R1qp3jCGC9joET1kQvN5/j67UhQ5NKfozDr7i jmtqZQFzeTS4PBJrpaI/JQo2bfr4Ve/4unmMc+4rU+0R78BhMcJL9wJI0hah9BsN khAiKOGOr7V6NyR1cErl2ejscG/Hhg48XGJlQlOfkfr7ifJKzhtua1tLlIY07a2G o3hEama/z9ZPgneHR2C+fKdQsZC1fZ62YsahAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUkieT8LagANN4MIdEotBeitC0r8QwHwYDVR0jBBgwFoAUQ/9cksxJUKRXpzJ9 Fo+8RlshgyIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSEVBTFRI TkVUL1FfOWNrc3hKVUtSWHB6SjlGby04UmxzaGd5SS5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvUV85Y2tzeEpVS1JYcHpKOUZvLThSbHNoZ3lJLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSEVBTFRITkVUL2tpZVQ4TGFnQU5O NE1JZEVvdEJlaXRDMHI4US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAfLQQAwDQYJKoZIhvcNAQELBQADggEBAHqYpfzymw6JmYRzlXsIuprqNClU BDHSNgKdz1HN7y1sPHj2Wq6Oq2b6V6Pwomh9VKGdTe2hhcQlDdYRhU8SZu9Oz0Cz o2cD9zF1Y0HiJnBx3vyn2Drp6vh8z4RkCRMEd2RGBk9OXqqMGL5DcS3se2blvrgf 9MArB3TrHT1SZ5+ubUFJzxa9mxZx8eshZtTiJgstpxQTq6ppDEHVLT1NIWLzvKAf YY+cz1fa4uDgNribWfYG29dyBMnMnQqzJYPMPv9nM+PmYaJHdXOY3vezVwEDpW8a EIVk0fzEBbZkBtU8qj24eNTAcH2IoQnKAVXF6475aqBuzHzG4QQjLGquLfk= -----END CERTIFICATE-----Generated at Sun Aug 24 11:14:23 2025 by rpki-client