$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/A77J7p-ooupT68SL0fjdMHIPNlg.roa File: A77J7p-ooupT68SL0fjdMHIPNlg.roa (raw, json) Hash identifier: xYdTNBrx2wk/IS7apo6KZiDAkOuuoOxVUZ/461WtZX0= Subject key identifier: 03:BE:C9:EE:9F:A8:A2:EA:53:EB:C4:8B:D1:F8:DD:30:72:0F:36:58 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 1953 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/A77J7p-ooupT68SL0fjdMHIPNlg.roa Signing time: Fri 22 Aug 2025 09:02:59 +0000 ROA not before: Fri 22 Aug 2025 09:02:59 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9505 IP address blocks: 175.111.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6483 (0x1953) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:02:59 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=03BEC9EE9FA8A2EA53EBC48BD1F8DD30720F3658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2c:da:66:f8:41:e9:16:20:c5:88:e4:b2:55: f1:b4:22:18:b6:24:32:f5:84:8a:58:56:16:24:75: 20:c2:75:95:f5:bf:2a:43:2d:fd:69:e3:28:0e:77: 6b:2e:9d:a0:57:4f:83:7d:10:e4:c9:1f:63:9a:56: cd:11:e6:94:f3:68:1f:44:55:4d:c2:05:dc:8e:2d: 01:73:2c:8c:f4:8b:07:89:92:a4:12:d2:e7:3a:a5: 1f:20:04:65:6a:0b:31:41:d0:95:2d:1b:b5:5d:03: a9:ff:72:00:3e:22:d4:ef:19:27:e4:c5:82:cd:e0: f4:db:9b:cc:02:79:1a:31:59:ca:6f:5d:ca:8d:5f: ff:3f:e2:15:35:c4:3e:fa:63:79:49:0a:67:37:8b: 5f:a8:70:61:8a:49:f8:38:af:14:79:cf:5a:ca:a0: a9:0c:1b:16:41:5c:e9:3b:99:1f:84:51:16:56:03: 1e:57:40:cd:c1:05:bd:a7:1c:2a:fe:f7:ec:e9:99: b1:b9:cb:37:aa:5e:a6:e9:55:bf:ed:20:71:13:dc: e0:da:34:88:7f:cc:c3:79:6e:d8:26:ed:f7:84:9f: 05:09:e7:86:19:0e:e9:92:02:c1:f9:5a:41:80:39: df:f2:4b:c5:38:55:73:a8:0b:5b:38:8b:f6:65:cd: 76:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:BE:C9:EE:9F:A8:A2:EA:53:EB:C4:8B:D1:F8:DD:30:72:0F:36:58 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/A77J7p-ooupT68SL0fjdMHIPNlg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 175.111.239.0/24 Signature Algorithm: sha256WithRSAEncryption 36:84:7c:2d:69:7d:47:61:60:be:e0:87:66:71:78:b2:34:0f: c0:ea:a9:5e:db:b2:66:80:a1:c3:c7:a1:7e:26:12:69:a3:fe: 83:7b:d9:99:5e:42:dc:c2:a4:ff:32:18:52:8c:22:7c:5d:f6: fb:63:50:d8:45:33:f7:20:b8:2c:cf:13:a5:11:33:2f:2a:3a: fd:7c:f9:3e:98:86:ca:cb:21:1a:83:e6:d9:ff:fb:f3:f0:52: 0d:cb:66:b0:43:e4:14:f4:8d:c9:b1:49:0f:db:24:ca:c4:2b: d5:0e:1a:1a:f3:da:06:3a:48:f5:a9:a5:72:1b:33:36:0d:8b: 32:23:5c:f3:84:12:62:da:eb:41:0f:0d:bc:dd:ee:94:2e:74: 5b:42:78:71:75:68:fa:b7:72:8a:c2:02:49:fd:c8:8a:9e:0b: e7:2a:e1:d8:51:84:a0:ab:d5:9e:03:ac:dc:7c:c0:9b:a8:b0: d3:ef:58:26:19:8c:36:5f:10:0b:1d:3d:fb:7d:39:f9:9e:85: 26:fb:5b:9f:c0:fe:5d:fe:a4:59:3e:8a:b7:a2:27:65:de:e3: 15:06:2f:47:02:cf:c8:c6:53:50:c0:5b:5c:98:ad:7d:cf:cc: 74:bc:d2:e0:b5:0c:ad:9e:0c:bd:b0:07:9d:00:f9:0c:ee:fb: be:ca:ac:0c -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICGVMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAyNTlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDAzQkVDOUVFOUZBOEEy RUE1M0VCQzQ4QkQxRjhERDMwNzIwRjM2NTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFLNpm+EHpFiDFiOSyVfG0Ihi2JDL1hIpYVhYkdSDCdZX1vypD Lf1p4ygOd2sunaBXT4N9EOTJH2OaVs0R5pTzaB9EVU3CBdyOLQFzLIz0iweJkqQS 0uc6pR8gBGVqCzFB0JUtG7VdA6n/cgA+ItTvGSfkxYLN4PTbm8wCeRoxWcpvXcqN X/8/4hU1xD76Y3lJCmc3i1+ocGGKSfg4rxR5z1rKoKkMGxZBXOk7mR+EURZWAx5X QM3BBb2nHCr+9+zpmbG5yzeqXqbpVb/tIHET3ODaNIh/zMN5btgm7feEnwUJ54YZ DumSAsH5WkGAOd/yS8U4VXOoC1s4i/ZlzXaJAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUA77J7p+ooupT68SL0fjdMHIPNlgwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9BNzdKN3Atb291cFQ2OFNMMGZq ZE1ISVBObGcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAr2/v MA0GCSqGSIb3DQEBCwUAA4IBAQA2hHwtaX1HYWC+4IdmcXiyNA/A6qle27JmgKHD x6F+JhJpo/6De9mZXkLcwqT/MhhSjCJ8Xfb7Y1DYRTP3ILgszxOlETMvKjr9fPk+ mIbKyyEag+bZ//vz8FINy2awQ+QU9I3JsUkP2yTKxCvVDhoa89oGOkj1qaVyGzM2 DYsyI1zzhBJi2utBDw283e6ULnRbQnhxdWj6t3KKwgJJ/ciKngvnKuHYUYSgq9We A6zcfMCbqLDT71gmGYw2XxALHT37fTn5noUm+1ufwP5d/qRZPoq3oidl3uMVBi9H As/IxlNQwFtcmK19z8x0vNLgtQytngy9sAedAPkM7vu+yqwM -----END CERTIFICATE-----Generated at Sun Aug 24 11:40:29 2025 by rpki-client