$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/8LiSUpWo3GisGCGHAzofvdkmvW8.roa File: 8LiSUpWo3GisGCGHAzofvdkmvW8.roa (raw, json) Hash identifier: lOdr2vn2CZBp8NGJ/uDKYJlnn8SbTRsD3SqtpX8Rz6o= Subject key identifier: F0:B8:92:52:95:A8:DC:68:AC:18:21:87:03:3A:1F:BD:D9:26:BD:6F Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 18C7 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/8LiSUpWo3GisGCGHAzofvdkmvW8.roa Signing time: Fri 22 Aug 2025 09:02:27 +0000 ROA not before: Fri 22 Aug 2025 09:02:27 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9505 IP address blocks: 175.111.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6343 (0x18c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:02:27 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=F0B8925295A8DC68AC182187033A1FBDD926BD6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:61:99:03:3e:e8:94:46:2f:df:e2:a5:cf:e6: 6e:e6:69:12:ee:c9:36:02:e7:e7:90:af:71:84:7a: 40:fa:fe:2b:da:db:98:e0:cc:89:64:13:b8:23:e4: 71:48:e2:46:8e:91:9f:f4:d6:c2:a5:7d:8e:08:58: 6e:d5:8a:39:de:5e:f1:db:fc:3d:37:5d:30:73:06: 8b:3e:e5:de:48:82:c3:14:3f:fe:a7:4a:bf:37:4b: 96:88:35:36:3d:5c:11:de:ff:b9:8a:42:2b:70:03: 6e:76:07:68:47:21:8a:39:9f:d0:19:3a:15:a4:91: ad:ea:ab:73:a6:1d:c0:ef:7c:cd:73:f5:48:0b:97: 98:72:2b:c7:a8:d3:83:21:e8:6d:5d:0a:39:f9:86: d4:6b:e3:79:44:b5:49:c2:da:f0:0a:ad:8a:23:57: 0a:e9:65:a0:72:1f:33:14:7d:14:e9:86:fa:18:d6: a5:a4:a1:ea:fb:95:8c:6a:38:62:7d:1c:35:11:d5: 3d:5a:bf:49:f3:6b:b9:6f:2c:5f:d2:15:c8:52:aa: 8f:7d:71:e9:37:7c:75:a4:57:09:66:12:ad:2b:7e: 38:cf:cb:7c:a2:fd:e1:f4:e3:9f:35:17:fa:b0:f8: 87:15:3d:e0:8a:08:7f:48:de:d7:d6:a5:79:11:53: d8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:B8:92:52:95:A8:DC:68:AC:18:21:87:03:3A:1F:BD:D9:26:BD:6F X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/8LiSUpWo3GisGCGHAzofvdkmvW8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 175.111.240.0/21 Signature Algorithm: sha256WithRSAEncryption d3:b4:45:1e:91:37:32:0b:7b:31:ca:87:24:81:2d:8b:e5:35: a7:df:ca:42:ad:1a:2a:d1:95:69:ad:62:70:ca:88:81:05:bc: 0a:e3:16:3e:43:89:31:c4:6a:59:a7:a9:d4:d7:85:4e:d2:0e: 3c:71:18:5a:4c:3f:49:2b:26:1a:0f:3d:ce:d2:1a:5c:73:3a: d1:33:d7:76:d1:22:5d:64:0e:6d:a6:92:8b:23:63:cc:b7:e7: 9d:ef:7c:ba:9c:59:f2:b4:e0:4d:c8:92:c7:2b:e6:d9:ca:e4: a3:2a:36:a6:bd:ec:c4:56:84:69:4a:d5:08:83:b1:6a:c2:fc: ec:1e:8f:98:97:03:6a:54:75:0a:40:c8:63:20:55:ee:e7:4b: cc:b0:e3:64:0d:09:f3:87:f0:96:18:e9:68:c7:d7:62:6d:6c: b5:20:c5:94:7f:2a:aa:83:8d:57:b7:0b:92:71:d1:a7:06:6a: 77:f7:64:07:ab:95:75:5c:b7:1b:d6:04:0c:20:bc:a2:78:15: 6a:21:4a:6e:09:cf:19:af:3a:da:38:7d:04:05:03:07:76:3a: 95:9d:d6:c6:5b:eb:29:4c:5f:1b:13:89:f9:21:43:f2:cf:9c: bb:5c:53:5b:5d:7e:f6:0a:cf:78:e2:4f:ac:02:6f:4f:26:f3: 7c:bd:7f:4d -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICGMcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAyMjdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEYwQjg5MjUyOTVBOERD NjhBQzE4MjE4NzAzM0ExRkJERDkyNkJENkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCYZkDPuiURi/f4qXP5m7maRLuyTYC5+eQr3GEekD6/iva25jg zIlkE7gj5HFI4kaOkZ/01sKlfY4IWG7VijneXvHb/D03XTBzBos+5d5IgsMUP/6n Sr83S5aINTY9XBHe/7mKQitwA252B2hHIYo5n9AZOhWkka3qq3OmHcDvfM1z9UgL l5hyK8eo04Mh6G1dCjn5htRr43lEtUnC2vAKrYojVwrpZaByHzMUfRTphvoY1qWk oer7lYxqOGJ9HDUR1T1av0nza7lvLF/SFchSqo99cek3fHWkVwlmEq0rfjjPy3yi /eH04581F/qw+IcVPeCKCH9I3tfWpXkRU9ifAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU8LiSUpWo3GisGCGHAzofvdkmvW8wHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC84TGlTVXBXbzNHaXNHQ0dIQXpv ZnZka212Vzgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDr2/w MA0GCSqGSIb3DQEBCwUAA4IBAQDTtEUekTcyC3sxyockgS2L5TWn38pCrRoq0ZVp rWJwyoiBBbwK4xY+Q4kxxGpZp6nU14VO0g48cRhaTD9JKyYaDz3O0hpcczrRM9d2 0SJdZA5tppKLI2PMt+ed73y6nFnytOBNyJLHK+bZyuSjKjamvezEVoRpStUIg7Fq wvzsHo+YlwNqVHUKQMhjIFXu50vMsONkDQnzh/CWGOlox9dibWy1IMWUfyqqg41X twuScdGnBmp392QHq5V1XLcb1gQMILyieBVqIUpuCc8ZrzraOH0EBQMHdjqVndbG W+spTF8bE4n5IUPyz5y7XFNbXX72Cs944k+sAm9PJvN8vX9N -----END CERTIFICATE-----Generated at Sun Aug 24 11:42:14 2025 by rpki-client