$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/2Bb-Mvsxf3DW4fR9vlJ-zu8Cv2Y.roa File: 2Bb-Mvsxf3DW4fR9vlJ-zu8Cv2Y.roa (raw, json) Hash identifier: Rm1hQRvEgIx9P/vRvjeGQc83pgLgFpg7J58iZ+gYjZ4= Subject key identifier: D8:16:FE:32:FB:31:7F:70:D6:E1:F4:7D:BE:52:7E:CE:EF:02:BF:66 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 18CE Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/2Bb-Mvsxf3DW4fR9vlJ-zu8Cv2Y.roa Signing time: Fri 22 Aug 2025 09:02:28 +0000 ROA not before: Fri 22 Aug 2025 09:02:28 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9505 IP address blocks: 203.78.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6350 (0x18ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:02:28 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=D816FE32FB317F70D6E1F47DBE527ECEEF02BF66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:8a:54:75:a6:3a:82:82:75:20:b9:e7:d9:5c: 81:52:aa:b1:fc:0b:81:a9:fa:df:be:5a:c6:e3:75: af:f0:73:61:fa:2e:6c:1c:69:81:3f:22:38:38:3c: 3a:aa:28:0d:52:3f:31:5f:e6:b8:fe:6b:5d:9a:81: b4:57:1e:3e:08:66:f9:76:fb:b1:75:89:4d:c3:8f: b4:a4:0e:18:ea:71:ee:7c:81:63:4d:b1:71:0a:5a: 27:4d:bb:83:c1:22:12:2b:5c:28:03:22:a8:89:97: 0f:9c:d9:cf:3c:7d:91:8c:cc:7c:d5:7f:0c:9b:97: 2d:8d:33:04:6f:1e:ca:9a:33:32:03:12:ef:c1:92: 3a:43:f9:af:0b:ae:e9:92:e6:66:b9:e3:64:65:9f: c5:db:0a:fe:6d:f2:ce:d7:2a:a5:d4:7e:95:dd:5a: 42:41:02:4a:23:a5:e2:0c:7f:3f:2e:62:43:1f:09: 62:ee:dd:25:62:b7:9f:fc:54:05:d1:fd:e1:7d:e2: 36:0f:4a:62:36:30:9d:2e:8b:15:d2:3a:07:5b:91: f6:2b:c7:19:e1:89:52:0c:56:3d:19:dc:25:3e:57: af:01:ce:76:5f:2a:fa:50:95:57:af:85:40:01:e8: c6:57:40:a0:3f:69:88:66:5d:35:a9:43:57:a5:4a: 89:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:16:FE:32:FB:31:7F:70:D6:E1:F4:7D:BE:52:7E:CE:EF:02:BF:66 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/2Bb-Mvsxf3DW4fR9vlJ-zu8Cv2Y.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.78.176.0/20 Signature Algorithm: sha256WithRSAEncryption ac:90:c6:eb:0a:9a:19:9a:b6:dc:16:34:70:52:6a:1c:5e:d1: 2e:b8:4c:6a:c9:a0:8e:59:c0:c4:37:9a:0a:c9:46:28:e0:6e: ea:4f:95:fc:0f:87:c6:ae:f2:11:47:d3:ac:19:e0:28:bf:8e: 82:d3:39:00:be:15:e1:d2:2f:79:44:99:b0:0b:1f:33:d8:28: bc:e6:9a:4a:d7:0a:11:1e:02:5e:36:df:f1:73:9d:8e:3d:ae: 88:96:c5:10:4c:b0:70:58:e7:7f:df:83:db:72:c3:b2:aa:b8: 02:72:05:2a:22:cd:41:1c:b7:4a:b1:66:19:2d:3f:48:1d:02: 81:c4:7c:f4:59:ca:7b:eb:84:b7:e1:fb:a1:d1:6a:ac:0a:29: 2c:65:29:e0:c9:1a:d8:bb:55:f7:ac:8c:73:e6:59:0f:ea:b0: 15:52:7d:24:29:0c:03:86:25:2a:4b:1d:1c:4e:dc:ed:22:04: 4e:78:3b:da:f2:b5:da:0d:61:b9:1c:b7:a3:0e:3b:71:a3:9f: ce:4e:af:16:10:da:8e:d0:95:ff:3b:52:e6:7a:90:56:0e:e9: 55:12:49:be:5b:a4:e9:a4:26:2b:0b:99:62:94:04:d5:45:a6: 9a:e2:54:c3:49:bc:51:cf:2d:8c:14:8c:69:03:10:c0:eb:f7: 62:ba:b1:9f -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICGM4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAyMjhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEQ4MTZGRTMyRkIzMTdG NzBENkUxRjQ3REJFNTI3RUNFRUYwMkJGNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXilR1pjqCgnUguefZXIFSqrH8C4Gp+t++Wsbjda/wc2H6Lmwc aYE/Ijg4PDqqKA1SPzFf5rj+a12agbRXHj4IZvl2+7F1iU3Dj7SkDhjqce58gWNN sXEKWidNu4PBIhIrXCgDIqiJlw+c2c88fZGMzHzVfwybly2NMwRvHsqaMzIDEu/B kjpD+a8LrumS5ma542Rln8XbCv5t8s7XKqXUfpXdWkJBAkojpeIMfz8uYkMfCWLu 3SVit5/8VAXR/eF94jYPSmI2MJ0uixXSOgdbkfYrxxnhiVIMVj0Z3CU+V68BznZf KvpQlVevhUAB6MZXQKA/aYhmXTWpQ1elSoklAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU2Bb+Mvsxf3DW4fR9vlJ+zu8Cv2YwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC8yQmItTXZzeGYzRFc0ZlI5dmxK LXp1OEN2Mlkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEy06w MA0GCSqGSIb3DQEBCwUAA4IBAQCskMbrCpoZmrbcFjRwUmocXtEuuExqyaCOWcDE N5oKyUYo4G7qT5X8D4fGrvIRR9OsGeAov46C0zkAvhXh0i95RJmwCx8z2Ci85ppK 1woRHgJeNt/xc52OPa6IlsUQTLBwWOd/34PbcsOyqrgCcgUqIs1BHLdKsWYZLT9I HQKBxHz0Wcp764S34fuh0WqsCiksZSngyRrYu1X3rIxz5lkP6rAVUn0kKQwDhiUq Sx0cTtztIgROeDva8rXaDWG5HLejDjtxo5/OTq8WENqO0JX/O1LmepBWDulVEkm+ W6TppCYrC5lilATVRaaa4lTDSbxRzy2MFIxpAxDA6/diurGf -----END CERTIFICATE-----Generated at Sun Aug 24 11:38:35 2025 by rpki-client