$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/X2UiCk9vhA4j6vCTJ0p9rZ6NxCA.roa File: X2UiCk9vhA4j6vCTJ0p9rZ6NxCA.roa (raw, json) Hash identifier: nqOTVRfepevOp9U9YhnlT4QSHH+TcpSlHk6xqCwAVTg= Subject key identifier: 5F:65:22:0A:4F:6F:84:0E:23:EA:F0:93:27:4A:7D:AD:9E:8D:C4:20 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 1958 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/X2UiCk9vhA4j6vCTJ0p9rZ6NxCA.roa Signing time: Fri 22 Aug 2025 09:03:00 +0000 ROA not before: Fri 22 Aug 2025 09:03:00 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17421 IP address blocks: 211.79.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6488 (0x1958) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:03:00 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=5F65220A4F6F840E23EAF093274A7DAD9E8DC420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:16:c9:25:cb:0c:fc:ab:51:c5:10:ee:86:d5: fe:8e:c6:c9:c8:46:4d:9b:fc:b6:9a:8f:b4:b1:5c: 15:04:61:01:dd:f5:fd:f6:e7:84:97:95:87:b5:43: 11:a8:1f:ce:ef:ee:c7:a9:ae:41:9f:3e:db:a0:05: bd:da:1f:92:e0:2f:f6:c9:5b:6d:df:44:64:14:a7: df:27:ab:25:4f:90:ad:13:58:79:d9:bb:7f:ce:60: 02:04:d4:10:f1:8c:29:83:32:7a:d2:f0:99:82:d2: 28:d5:cc:1b:8a:5b:66:88:d9:35:59:cb:61:89:63: 78:13:23:4e:0c:6f:72:ee:ea:5e:e6:8b:e2:af:64: 0d:d8:21:92:07:81:03:64:a2:cc:6d:c1:3d:5f:6e: cd:30:d7:4f:af:bd:f7:c9:75:83:4c:3d:fd:17:3f: 9d:8e:0c:79:dc:21:c1:f7:f5:8e:5e:37:28:a5:b6: 2d:48:e4:a2:2a:42:0d:ec:6e:5a:a5:cf:61:8c:22: 56:af:23:7e:a8:88:e9:fe:f4:29:15:3a:94:17:4a: 39:a8:25:b5:37:cb:96:aa:1e:bb:33:6b:6e:b2:cd: d2:03:84:9d:89:3c:9d:5f:76:a4:3c:c4:ce:17:18: 36:d7:8e:36:9b:a8:6f:88:5d:1b:0d:7e:19:e3:fc: ab:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:65:22:0A:4F:6F:84:0E:23:EA:F0:93:27:4A:7D:AD:9E:8D:C4:20 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/X2UiCk9vhA4j6vCTJ0p9rZ6NxCA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.79.32.0/20 Signature Algorithm: sha256WithRSAEncryption 75:dc:ed:6e:71:1c:96:d3:9a:96:3d:cf:f1:4c:93:ad:34:62: 69:90:42:3f:c5:39:9d:b0:a8:f1:f4:e6:b5:37:02:14:09:bd: 2f:cd:f2:1d:8b:5b:4a:00:2b:0f:08:41:c4:19:17:1d:04:52: 60:1d:58:1c:88:56:b7:2a:31:e1:9c:1e:29:5d:d3:fa:37:8a: 63:b4:db:a8:8d:0c:04:b7:90:24:0e:e7:82:3c:62:a6:04:b4: 85:13:c0:14:6d:8f:a9:a4:45:64:66:e4:c1:b5:77:e6:97:cb: 95:8a:de:46:f0:49:22:38:b2:97:0b:f2:f4:a8:cf:0b:f4:06: 53:07:c7:d0:70:f1:78:2e:2b:14:13:6f:c5:50:42:93:bb:dd: 9e:bb:23:b8:7d:fc:d5:dc:a3:49:e9:12:66:58:d9:83:0c:86: 09:6a:4c:30:1a:53:1a:1d:49:1c:f0:5c:c4:95:26:73:06:66: 6d:9e:85:d9:82:69:b8:0b:4c:e5:a7:f6:d9:ae:6b:79:22:16: 2e:b1:4a:9a:03:56:03:bc:d7:bc:09:93:50:f3:2c:9b:10:54: 60:e9:81:21:17:96:cf:31:17:b6:fc:42:71:28:83:e8:f9:27: cc:62:79:e8:49:ff:24:48:7d:73:79:63:ca:c9:7d:40:19:4f: 06:c8:0b:3d -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICGVgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAzMDBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDVGNjUyMjBBNEY2Rjg0 MEUyM0VBRjA5MzI3NEE3REFEOUU4REM0MjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXFsklywz8q1HFEO6G1f6OxsnIRk2b/Laaj7SxXBUEYQHd9f32 54SXlYe1QxGoH87v7seprkGfPtugBb3aH5LgL/bJW23fRGQUp98nqyVPkK0TWHnZ u3/OYAIE1BDxjCmDMnrS8JmC0ijVzBuKW2aI2TVZy2GJY3gTI04Mb3Lu6l7mi+Kv ZA3YIZIHgQNkosxtwT1fbs0w10+vvffJdYNMPf0XP52ODHncIcH39Y5eNyilti1I 5KIqQg3sblqlz2GMIlavI36oiOn+9CkVOpQXSjmoJbU3y5aqHrsza26yzdIDhJ2J PJ1fdqQ8xM4XGDbXjjabqG+IXRsNfhnj/KvPAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUX2UiCk9vhA4j6vCTJ0p9rZ6NxCAwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9YMlVpQ2s5dmhBNGo2dkNUSjBw OXJaNk54Q0Eucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE008g MA0GCSqGSIb3DQEBCwUAA4IBAQB13O1ucRyW05qWPc/xTJOtNGJpkEI/xTmdsKjx 9Oa1NwIUCb0vzfIdi1tKACsPCEHEGRcdBFJgHVgciFa3KjHhnB4pXdP6N4pjtNuo jQwEt5AkDueCPGKmBLSFE8AUbY+ppEVkZuTBtXfml8uVit5G8EkiOLKXC/L0qM8L 9AZTB8fQcPF4LisUE2/FUEKTu92euyO4ffzV3KNJ6RJmWNmDDIYJakwwGlMaHUkc 8FzElSZzBmZtnoXZgmm4C0zlp/bZrmt5IhYusUqaA1YDvNe8CZNQ8yybEFRg6YEh F5bPMRe2/EJxKIPo+SfMYnnoSf8kSH1zeWPKyX1AGU8GyAs9 -----END CERTIFICATE-----Generated at Sun Aug 24 09:45:15 2025 by rpki-client