$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/MI15WzhiJDIeiZAm547SrpMzKM4.roa File: MI15WzhiJDIeiZAm547SrpMzKM4.roa (raw, json) Hash identifier: MWFMLv1insxGmqNEExFkctuHGxv3LXydCfVCGwMQ+ew= Subject key identifier: 30:8D:79:5B:38:62:24:32:1E:89:90:26:E7:8E:D2:AE:93:33:28:CE Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 1947 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/MI15WzhiJDIeiZAm547SrpMzKM4.roa Signing time: Fri 22 Aug 2025 09:02:55 +0000 ROA not before: Fri 22 Aug 2025 09:02:55 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17421 IP address blocks: 2001:b401::/32 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6471 (0x1947) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:02:55 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=308D795B386224321E899026E78ED2AE933328CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e4:ab:ac:93:21:9e:f3:70:44:5f:b2:97:74: 24:75:a4:88:0c:d6:03:7e:7e:3a:bc:04:64:0d:4e: a9:bc:39:84:76:31:b8:15:b1:ad:9e:97:1d:45:72: 7b:68:f0:38:48:f2:56:e1:08:bf:8e:95:b9:3e:3b: d8:f6:00:e3:25:3d:51:70:8b:c4:5f:36:3f:d8:46: 52:f5:19:9d:dd:d7:6f:91:05:ea:0c:d3:8a:37:6f: a1:25:dd:d8:32:b6:d2:ef:58:ea:09:6f:5c:bd:2d: 69:52:ee:27:05:87:43:7f:70:b8:25:b6:1a:ff:d6: 72:3c:92:a4:4e:b4:31:e1:7f:13:53:94:a1:0d:bf: 5b:4c:5c:42:15:55:96:f8:9a:04:d3:e2:31:65:99: 65:36:0f:de:8d:61:db:5b:25:be:e4:bd:31:43:1d: ed:1c:94:a2:2e:12:da:36:bd:d6:d5:b4:f0:22:70: 77:b0:d2:24:86:f2:09:ae:3d:54:c4:8c:ab:88:60: cf:51:78:74:57:3c:d1:2d:20:3a:7f:c2:34:15:47: 0b:4d:1d:fa:78:ea:a4:e7:c7:70:5f:2d:d2:70:f5: e3:ec:c5:14:8f:97:a2:f8:06:3f:91:69:d9:5f:03: 12:c7:27:ab:97:7b:da:94:68:1c:51:62:97:2a:7b: 12:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:8D:79:5B:38:62:24:32:1E:89:90:26:E7:8E:D2:AE:93:33:28:CE X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/MI15WzhiJDIeiZAm547SrpMzKM4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2001:b401::/32 Signature Algorithm: sha256WithRSAEncryption 86:c0:20:37:3e:da:b0:c5:24:dd:00:df:31:22:dc:90:a0:7a: a7:e0:d1:04:fb:7d:f3:67:bb:83:aa:55:f5:54:95:c5:6b:c3: 49:fc:16:86:70:16:f6:0d:42:a1:1a:20:cf:0f:c6:93:08:78: d3:51:46:da:f3:e6:14:33:be:7e:b3:b9:58:ef:ab:c2:e8:55: e9:19:76:7d:80:f4:74:df:56:ee:3c:57:8a:df:d7:e2:1e:8e: f0:4a:69:e9:e6:9e:7d:f8:1e:92:19:db:df:a1:8b:b6:cd:d1: f7:4c:fe:11:1b:68:87:1e:6f:f3:bc:0c:e2:4e:28:60:c3:ea: ed:07:00:bc:5b:51:e8:57:17:a6:58:53:31:40:09:d2:87:c4: 03:66:6b:81:51:05:53:d0:1b:79:c0:45:7a:fc:91:71:63:5c: 88:a9:a1:25:34:95:11:e1:3d:0a:b0:16:d1:3e:44:41:30:59: aa:a7:2e:e9:85:6f:6d:a2:c7:c5:4d:39:e4:8b:81:fb:af:70: 3e:0e:74:70:24:3a:c9:ed:ff:52:d7:04:db:21:c3:fb:6e:98: 66:09:22:75:7c:dd:78:cd:d9:a7:db:31:a8:7c:28:a9:19:ea: e1:d1:cf:a0:f9:c3:9b:16:15:2a:27:77:10:82:b0:bc:bb:32: 18:43:b6:92 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICGUcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAyNTVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDMwOEQ3OTVCMzg2MjI0 MzIxRTg5OTAyNkU3OEVEMkFFOTMzMzI4Q0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC45KuskyGe83BEX7KXdCR1pIgM1gN+fjq8BGQNTqm8OYR2MbgV sa2elx1Fcnto8DhI8lbhCL+Olbk+O9j2AOMlPVFwi8RfNj/YRlL1GZ3d12+RBeoM 04o3b6El3dgyttLvWOoJb1y9LWlS7icFh0N/cLglthr/1nI8kqROtDHhfxNTlKEN v1tMXEIVVZb4mgTT4jFlmWU2D96NYdtbJb7kvTFDHe0clKIuEto2vdbVtPAicHew 0iSG8gmuPVTEjKuIYM9ReHRXPNEtIDp/wjQVRwtNHfp46qTnx3BfLdJw9ePsxRSP l6L4Bj+RadlfAxLHJ6uXe9qUaBxRYpcqexIVAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUMI15WzhiJDIeiZAm547SrpMzKM4wHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9NSTE1V3poaUpESWVpWkFtNTQ3 U3JwTXpLTTQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAG0 ATANBgkqhkiG9w0BAQsFAAOCAQEAhsAgNz7asMUk3QDfMSLckKB6p+DRBPt982e7 g6pV9VSVxWvDSfwWhnAW9g1CoRogzw/Gkwh401FG2vPmFDO+frO5WO+rwuhV6Rl2 fYD0dN9W7jxXit/X4h6O8Epp6eaeffgekhnb36GLts3R90z+ERtohx5v87wM4k4o YMPq7QcAvFtR6FcXplhTMUAJ0ofEA2ZrgVEFU9AbecBFevyRcWNciKmhJTSVEeE9 CrAW0T5EQTBZqqcu6YVvbaLHxU055IuB+69wPg50cCQ6ye3/UtcE2yHD+26YZgki dXzdeM3Zp9sxqHwoqRnq4dHPoPnDmxYVKid3EIKwvLsyGEO2kg== -----END CERTIFICATE-----Generated at Sun Aug 24 11:42:02 2025 by rpki-client