$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/Un7b-v5ddlkSR_ONwJZVdnpHH1A.roa File: Un7b-v5ddlkSR_ONwJZVdnpHH1A.roa (raw, json) Hash identifier: nvD5GCZns7CID32p50AWkTndW/CBGDuEuk4zDF+RdDs= Subject key identifier: 52:7E:DB:FA:FE:5D:76:59:12:47:F3:8D:C0:96:55:76:7A:47:1F:50 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 18EF Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Un7b-v5ddlkSR_ONwJZVdnpHH1A.roa Signing time: Fri 22 Aug 2025 09:02:38 +0000 ROA not before: Fri 22 Aug 2025 09:02:38 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17714 IP address blocks: 203.78.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6383 (0x18ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:02:38 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=527EDBFAFE5D76591247F38DC09655767A471F50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a0:48:91:4c:a5:04:32:9e:44:dd:fd:40:8c: dd:3b:df:0b:2c:6e:c5:0a:43:7a:18:7e:61:b3:7d: df:22:23:7f:2a:30:ba:a4:a3:2c:c0:2c:cf:94:33: e5:66:58:57:9a:82:5a:8a:9c:bf:f4:3a:d6:62:f8: d9:ef:1a:4b:db:a8:20:ad:42:b7:19:0d:3f:35:7e: 94:e5:23:01:bf:f0:46:28:f8:0b:60:43:94:44:11: 6c:51:eb:b8:6d:be:b1:24:1a:0d:86:f0:57:bd:50: 0d:ec:b8:2a:f4:c1:07:41:12:4b:27:65:ee:2a:81: 93:c2:23:d9:59:5f:5b:b4:29:64:cb:3b:bd:6a:7f: 8a:02:8c:ab:5c:ec:de:d2:c7:96:b8:c2:83:f0:d9: 02:51:70:14:32:4c:81:b2:b3:93:aa:aa:78:47:c4: be:7f:22:ea:0d:3f:f0:1b:48:74:4d:ec:5a:60:0d: 30:be:f4:e7:43:5e:9b:05:fb:d5:97:3e:a4:37:a3: 7b:e6:7b:ee:59:b7:68:68:2a:90:ae:6c:18:00:51: 0f:67:42:48:71:92:01:bb:af:92:4c:1c:f8:d4:e7: 49:a0:cc:13:e5:86:75:84:df:8e:41:7a:75:91:79: ad:d4:06:47:1d:e9:43:70:52:b8:66:86:5e:f5:fc: 4b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:7E:DB:FA:FE:5D:76:59:12:47:F3:8D:C0:96:55:76:7A:47:1F:50 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Un7b-v5ddlkSR_ONwJZVdnpHH1A.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.78.180.0/24 Signature Algorithm: sha256WithRSAEncryption 01:7b:ba:fa:3a:05:d7:ce:03:d9:a7:0d:14:3f:b1:85:0b:34: a3:60:0c:8b:d7:23:2f:40:72:4f:7d:1f:bc:9c:3e:68:83:19: 13:36:31:91:4d:53:dc:52:ed:ac:ce:b8:d3:ae:f9:6a:ba:49: d2:58:8c:3c:7b:9b:d9:c3:a9:64:b2:1d:dd:7e:d8:c9:66:24: ac:73:05:90:0a:fb:f4:4e:90:77:55:1b:41:8f:4c:5b:9d:1f: cd:f3:3e:78:0d:33:06:82:2b:9c:84:ac:fa:87:41:fc:45:b6: 7d:04:27:7c:13:63:fa:ea:65:1a:d8:83:7d:51:08:5d:0e:67: 52:50:20:0a:b4:63:34:c6:de:34:c4:71:2d:a9:11:2d:72:aa: 55:b7:30:d2:b9:32:8e:e4:b5:de:12:0e:96:34:f4:52:19:e2: 1a:b3:95:7c:34:58:f4:36:97:90:cf:89:4f:31:03:a7:f3:59: fe:cc:f1:a9:25:df:24:cc:d6:0e:e1:dd:5c:7c:0e:41:00:ec: 1d:d8:e0:58:99:9b:6b:d8:52:54:23:45:60:02:04:1b:79:89: 70:f6:39:f1:4a:65:74:28:d1:48:1b:f0:3c:9f:e0:62:c5:27: 95:f4:07:3e:bf:fa:f9:b8:89:ed:09:5f:71:3b:f2:96:57:c8: 0a:b4:6f:dc -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICGO8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAyMzhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDUyN0VEQkZBRkU1RDc2 NTkxMjQ3RjM4REMwOTY1NTc2N0E0NzFGNTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXoEiRTKUEMp5E3f1AjN073wssbsUKQ3oYfmGzfd8iI38qMLqk oyzALM+UM+VmWFeaglqKnL/0OtZi+NnvGkvbqCCtQrcZDT81fpTlIwG/8EYo+Atg Q5REEWxR67htvrEkGg2G8Fe9UA3suCr0wQdBEksnZe4qgZPCI9lZX1u0KWTLO71q f4oCjKtc7N7Sx5a4woPw2QJRcBQyTIGys5OqqnhHxL5/IuoNP/AbSHRN7FpgDTC+ 9OdDXpsF+9WXPqQ3o3vme+5Zt2hoKpCubBgAUQ9nQkhxkgG7r5JMHPjU50mgzBPl hnWE345BenWRea3UBkcd6UNwUrhmhl71/EtXAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUUn7b+v5ddlkSR/ONwJZVdnpHH1AwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9VbjdiLXY1ZGRsa1NSX09Od0pa VmRucEhIMUEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy060 MA0GCSqGSIb3DQEBCwUAA4IBAQABe7r6OgXXzgPZpw0UP7GFCzSjYAyL1yMvQHJP fR+8nD5ogxkTNjGRTVPcUu2szrjTrvlquknSWIw8e5vZw6lksh3dftjJZiSscwWQ Cvv0TpB3VRtBj0xbnR/N8z54DTMGgiuchKz6h0H8RbZ9BCd8E2P66mUa2IN9UQhd DmdSUCAKtGM0xt40xHEtqREtcqpVtzDSuTKO5LXeEg6WNPRSGeIas5V8NFj0NpeQ z4lPMQOn81n+zPGpJd8kzNYO4d1cfA5BAOwd2OBYmZtr2FJUI0VgAgQbeYlw9jnx SmV0KNFIG/A8n+BixSeV9Ac+v/r5uIntCV9xO/KWV8gKtG/c -----END CERTIFICATE-----Generated at Sun Aug 24 09:42:32 2025 by rpki-client