$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/_i6rrQUjHS9Px-yYNJJc6f3WLOU.roa File: _i6rrQUjHS9Px-yYNJJc6f3WLOU.roa (raw, json) Hash identifier: TZYFhaSsIhZfMWXgCLRnXKkaeygdodpBzwCSw6VnGRM= Subject key identifier: FE:2E:AB:AD:05:23:1D:2F:4F:C7:EC:98:34:92:5C:E9:FD:D6:2C:E5 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 18F6 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/_i6rrQUjHS9Px-yYNJJc6f3WLOU.roa Signing time: Fri 22 Aug 2025 09:02:39 +0000 ROA not before: Fri 22 Aug 2025 09:02:39 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17714 IP address blocks: 114.30.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6390 (0x18f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:02:39 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=FE2EABAD05231D2F4FC7EC9834925CE9FDD62CE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:67:a1:7d:ae:fc:82:b4:7e:e7:a6:b8:e7:0d: 26:89:f2:71:b3:57:ea:7c:a4:9f:6e:56:92:6a:0a: 1b:08:39:ae:5c:18:5e:48:b8:a5:0e:51:03:c7:7d: 6e:82:99:1b:f8:b2:a6:b5:7a:29:52:e6:9d:8e:fc: a8:82:90:45:4e:d0:c5:09:59:d6:d2:bc:48:7a:08: c0:04:8d:08:dd:a1:14:20:a0:60:d0:81:89:47:b5: f9:1f:84:bd:c4:48:1b:4a:d2:ae:c3:a1:dc:2a:62: dc:c3:a0:de:4a:e6:66:db:22:cb:c3:a7:1a:3f:60: 5b:57:96:48:4b:c0:ac:7d:1f:3f:18:e4:ca:dc:6a: 75:a6:e3:57:7e:c9:1f:1d:f6:2a:52:6b:e2:6e:fc: d3:f8:86:a0:ec:9c:ea:ea:ee:50:1a:45:ad:4f:18: 96:b4:23:8b:46:a4:f3:dc:0e:16:60:eb:74:a1:f5: 78:64:57:26:dd:88:70:84:ad:4b:a2:79:f4:94:a7: f4:45:79:f2:fb:39:a5:f3:cb:be:6b:78:c9:f8:cb: a8:f7:f3:e3:24:aa:21:3a:f1:b5:b8:ac:4c:90:3d: e4:ed:6f:57:ac:26:77:a6:a8:d5:57:cd:3a:76:3e: 31:1e:77:4e:22:74:3c:e4:22:f0:9b:37:88:0f:2b: 5b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:2E:AB:AD:05:23:1D:2F:4F:C7:EC:98:34:92:5C:E9:FD:D6:2C:E5 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/_i6rrQUjHS9Px-yYNJJc6f3WLOU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 114.30.35.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:dc:15:73:8f:7c:5e:19:43:65:91:d3:ca:05:58:62:f3:69: ec:8b:20:a3:67:90:e9:48:48:ee:0d:90:fb:10:f4:97:4c:1b: a2:f1:ee:b9:fe:a3:9a:5c:7e:89:e6:7f:63:96:35:3c:c8:8c: b4:83:3f:da:35:ff:70:0c:87:dd:72:d2:19:69:27:57:1f:44: f4:f0:e7:e7:f9:3a:ff:2f:6c:11:c6:27:29:13:a3:6d:34:6c: 68:34:8d:b2:80:a0:0c:38:87:79:5b:4e:46:7c:dd:bf:97:5d: d5:29:bd:f2:28:9b:01:4b:17:95:00:a2:f7:56:ee:5e:48:1d: 49:42:d4:88:ae:57:a5:3a:5f:0d:1c:14:f9:78:ac:e3:bd:9d: 35:82:28:58:67:14:c8:f8:9c:24:97:c0:04:38:07:ef:88:5a: ee:17:5d:b7:94:6d:5e:11:fb:c7:67:2e:1f:bd:78:e9:3e:07: 0c:90:12:96:8d:2f:bb:fb:92:9b:7e:8a:80:c2:63:b5:ff:52: 1b:83:14:b4:6a:45:c6:12:0f:87:4b:12:df:99:d5:11:4a:f3: 39:a9:cf:d3:77:5b:2d:b8:ac:52:e0:30:95:50:67:9e:80:88: 0c:2d:63:35:d2:23:ac:42:08:00:56:b3:b3:c6:a3:83:84:50: 9d:60:31:e8 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICGPYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAyMzlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEZFMkVBQkFEMDUyMzFE MkY0RkM3RUM5ODM0OTI1Q0U5RkRENjJDRTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuZ6F9rvyCtH7nprjnDSaJ8nGzV+p8pJ9uVpJqChsIOa5cGF5I uKUOUQPHfW6CmRv4sqa1eilS5p2O/KiCkEVO0MUJWdbSvEh6CMAEjQjdoRQgoGDQ gYlHtfkfhL3ESBtK0q7DodwqYtzDoN5K5mbbIsvDpxo/YFtXlkhLwKx9Hz8Y5Mrc anWm41d+yR8d9ipSa+Ju/NP4hqDsnOrq7lAaRa1PGJa0I4tGpPPcDhZg63Sh9Xhk VybdiHCErUuiefSUp/RFefL7OaXzy75reMn4y6j38+MkqiE68bW4rEyQPeTtb1es JnemqNVXzTp2PjEed04idDzkIvCbN4gPK1u9AgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU/i6rrQUjHS9Px+yYNJJc6f3WLOUwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9faTZyclFVakhTOVB4LXlZTkpK YzZmM1dMT1Uucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAch4j MA0GCSqGSIb3DQEBCwUAA4IBAQB63BVzj3xeGUNlkdPKBVhi82nsiyCjZ5DpSEju DZD7EPSXTBui8e65/qOaXH6J5n9jljU8yIy0gz/aNf9wDIfdctIZaSdXH0T08Ofn +Tr/L2wRxicpE6NtNGxoNI2ygKAMOId5W05GfN2/l13VKb3yKJsBSxeVAKL3Vu5e SB1JQtSIrlelOl8NHBT5eKzjvZ01gihYZxTI+Jwkl8AEOAfviFruF123lG1eEfvH Zy4fvXjpPgcMkBKWjS+7+5KbfoqAwmO1/1IbgxS0akXGEg+HSxLfmdURSvM5qc/T d1stuKxS4DCVUGeegIgMLWM10iOsQggAVrOzxqODhFCdYDHo -----END CERTIFICATE-----Generated at Sun Aug 24 09:42:27 2025 by rpki-client