$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/VCmiOhluUr2b2UYDs4CkLTEn-pw.roa File: VCmiOhluUr2b2UYDs4CkLTEn-pw.roa (raw, json) Hash identifier: w8L0p59yz2QHYjfUjw8g3loODqU2CB1aMlv+5rwcXGs= Subject key identifier: 54:29:A2:3A:19:6E:52:BD:9B:D9:46:03:B3:80:A4:2D:31:27:FA:9C Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 1927 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/VCmiOhluUr2b2UYDs4CkLTEn-pw.roa Signing time: Fri 22 Aug 2025 09:02:49 +0000 ROA not before: Fri 22 Aug 2025 09:02:49 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17421 IP address blocks: 42.64.0.0/12 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 22:26:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6439 (0x1927) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:02:49 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=5429A23A196E52BD9BD94603B380A42D3127FA9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:18:a1:90:7c:0f:96:64:e0:39:0e:d2:99:ca: 8d:2e:c3:ee:7b:0c:96:19:2a:91:64:e4:4c:b5:6d: 66:ca:b9:7a:4d:4d:40:12:aa:ce:2e:63:76:84:bf: 43:ab:01:cf:cf:92:68:ff:6d:66:5c:1c:38:90:e1: aa:c8:fe:89:a6:23:0d:21:5f:f3:c4:bb:08:60:d3: 38:c2:ac:a0:56:d6:d3:8c:22:f3:a2:82:88:a8:0d: c2:7c:44:4d:30:bb:b7:8c:d1:aa:28:72:bd:71:25: be:f7:17:6b:b0:3b:8b:6d:98:d4:da:8a:2f:e3:cb: d8:8e:76:3b:f0:f9:27:25:fb:f6:13:5d:4e:f9:21: 16:fa:2e:6a:76:04:c6:42:c0:f8:80:2d:c9:5d:74: 39:a8:eb:52:cd:f5:76:eb:03:5f:24:be:6c:f5:11: 84:97:29:06:21:9b:00:1b:2e:b3:b7:1a:89:28:d5: 0b:c8:f4:8b:9a:51:5a:9b:af:b9:4b:ce:f0:35:47: 8f:3a:e4:62:6e:69:60:5d:ff:d0:df:8a:a6:99:d7: 9c:90:cb:11:40:cc:1f:b7:1b:a0:df:bb:27:c4:bc: 16:31:6f:b7:79:af:f9:f4:3d:ef:94:10:f8:cd:00: b4:c2:79:9a:ab:3c:54:b3:2f:31:cc:c8:65:30:58: b3:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:29:A2:3A:19:6E:52:BD:9B:D9:46:03:B3:80:A4:2D:31:27:FA:9C X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/VCmiOhluUr2b2UYDs4CkLTEn-pw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 42.64.0.0/12 Signature Algorithm: sha256WithRSAEncryption a2:a5:97:b5:ec:41:38:e3:8d:96:68:65:a0:43:d5:13:6c:5a: 6b:54:40:cc:01:59:ec:8c:db:9d:92:24:c1:ca:98:56:bd:51: eb:13:93:5b:96:be:d7:a7:77:6a:cc:84:84:a3:95:d0:17:60: 7b:53:bb:2e:bb:82:ea:7a:0f:97:65:08:c9:0a:65:32:1e:1c: 35:fe:cc:a7:98:cf:97:a1:ff:6a:f0:ea:8c:a9:9d:1e:dc:7a: e5:c3:54:3b:2e:65:fb:98:49:b0:3f:0b:d2:36:c7:5d:ed:03: 79:34:e0:6c:ad:54:43:5d:2b:f7:aa:29:0d:fa:dd:af:16:e6: ed:bc:fd:a3:84:00:e7:0c:83:c0:16:0f:bd:1c:29:50:0a:dd: 1d:86:3a:8f:59:dc:b0:18:a0:f4:79:b1:4d:89:17:c8:e1:a2: 55:52:be:a6:df:fa:94:01:89:06:bc:ad:46:72:33:f3:16:a0: 1e:8b:57:4b:e2:03:f1:f9:83:15:c4:69:25:52:67:39:cf:e3: bb:4a:b3:11:a0:94:39:62:85:7c:05:7a:0f:88:53:63:ec:91: a8:16:0e:94:f0:13:e1:09:84:86:8e:a6:a9:12:c4:2c:22:13: c4:44:ba:a7:04:0c:d0:4a:5b:70:63:09:c3:61:7f:ce:65:19: 16:b4:54:4b -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICGScwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAyNDlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDU0MjlBMjNBMTk2RTUy QkQ5QkQ5NDYwM0IzODBBNDJEMzEyN0ZBOUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGGKGQfA+WZOA5DtKZyo0uw+57DJYZKpFk5Ey1bWbKuXpNTUAS qs4uY3aEv0OrAc/Pkmj/bWZcHDiQ4arI/ommIw0hX/PEuwhg0zjCrKBW1tOMIvOi goioDcJ8RE0wu7eM0aoocr1xJb73F2uwO4ttmNTaii/jy9iOdjvw+Scl+/YTXU75 IRb6Lmp2BMZCwPiALclddDmo61LN9XbrA18kvmz1EYSXKQYhmwAbLrO3Goko1QvI 9IuaUVqbr7lLzvA1R4865GJuaWBd/9DfiqaZ15yQyxFAzB+3G6DfuyfEvBYxb7d5 r/n0Pe+UEPjNALTCeZqrPFSzLzHMyGUwWLMjAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUVCmiOhluUr2b2UYDs4CkLTEn+pwwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9WQ21pT2hsdVVyMmIyVVlEczRD a0xURW4tcHcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMEKkAw DQYJKoZIhvcNAQELBQADggEBAKKll7XsQTjjjZZoZaBD1RNsWmtUQMwBWeyM252S JMHKmFa9UesTk1uWvtend2rMhISjldAXYHtTuy67gup6D5dlCMkKZTIeHDX+zKeY z5eh/2rw6oypnR7ceuXDVDsuZfuYSbA/C9I2x13tA3k04GytVENdK/eqKQ363a8W 5u28/aOEAOcMg8AWD70cKVAK3R2GOo9Z3LAYoPR5sU2JF8jholVSvqbf+pQBiQa8 rUZyM/MWoB6LV0viA/H5gxXEaSVSZznP47tKsxGglDlihXwFeg+IU2PskagWDpTw E+EJhIaOpqkSxCwiE8REuqcEDNBKW3BjCcNhf85lGRa0VEs= -----END CERTIFICATE-----Generated at Mon Oct 20 19:10:56 2025 by rpki-client