$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/_kXaFcAPmD_lg9lkDNn_YfaRz2s.roa File: _kXaFcAPmD_lg9lkDNn_YfaRz2s.roa (raw, json) Hash identifier: vgnqIw7f6zfyAJXq6Wath4365tb2MIwdb7chjLNcf84= Subject key identifier: FE:45:DA:15:C0:0F:98:3F:E5:83:D9:64:0C:D9:FF:61:F6:91:CF:6B Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 194A Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/_kXaFcAPmD_lg9lkDNn_YfaRz2s.roa Signing time: Fri 22 Aug 2025 09:02:56 +0000 ROA not before: Fri 22 Aug 2025 09:02:56 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131660 IP address blocks: 2001:b000:594::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6474 (0x194a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:02:56 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=FE45DA15C00F983FE583D9640CD9FF61F691CF6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d3:79:a0:0f:6a:9d:35:8e:e6:a4:50:27:32: 59:de:57:ee:c6:8d:02:58:69:7e:74:15:9e:9c:65: 58:fc:98:b2:04:6d:0e:06:63:bc:93:5a:92:b0:0c: 78:11:1a:aa:40:c3:f5:c9:06:51:0a:83:41:28:07: f7:d9:6f:4e:3d:b0:ea:55:47:3b:0d:59:08:aa:31: 7f:6c:99:c8:a0:0c:ef:56:2c:fe:a4:45:c5:81:7b: 82:06:63:b4:90:b0:e0:be:ca:ab:b7:f8:b8:44:e2: 50:4b:e3:35:1a:bb:db:5e:dd:60:7c:7d:dc:fe:03: c5:7c:39:16:2f:5d:fb:ad:6f:74:b0:d4:86:06:e7: a0:fb:e6:60:c9:9c:1e:23:4b:bd:19:1f:74:a0:ef: 31:37:ed:8e:4a:a8:06:ef:d9:b8:d7:91:4d:57:18: ad:09:9e:5a:83:85:f5:d3:e5:c1:61:6e:dd:85:08: 3d:ef:6b:8a:ef:c0:94:b6:62:9d:f9:93:59:91:db: f5:85:12:a9:f2:e4:4e:65:1c:7f:a0:0a:7e:ea:c8: df:2a:8b:d4:49:17:35:45:36:79:f6:da:8f:13:fd: 2f:db:aa:21:77:eb:cf:98:92:b9:b5:51:01:32:86: e3:ea:8e:6b:d6:29:d6:59:14:47:24:c7:96:dd:25: 88:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:45:DA:15:C0:0F:98:3F:E5:83:D9:64:0C:D9:FF:61:F6:91:CF:6B X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/_kXaFcAPmD_lg9lkDNn_YfaRz2s.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2001:b000:594::/48 Signature Algorithm: sha256WithRSAEncryption a3:3d:de:c7:64:94:74:60:f8:18:42:64:f8:19:71:21:27:37: 87:4c:14:9e:a4:aa:a4:1a:c4:2f:23:5d:51:c1:7f:1a:00:a8: 24:f2:2d:ef:84:a1:e8:df:34:09:e1:89:35:0d:c6:23:05:7a: 72:84:2c:50:4f:39:8b:1d:cd:54:3b:46:91:4d:ee:56:8b:28: ab:e7:e0:3b:dc:53:89:95:8a:8e:ec:73:76:78:27:a8:53:a5: 94:b9:a1:a8:c0:44:bc:c3:26:3f:d2:72:a9:a5:f9:d7:07:28: 37:ce:e2:75:08:ed:81:71:c1:1d:df:76:e3:06:74:dc:b3:bb: 07:0d:0b:84:ca:bc:b5:86:98:49:46:af:96:b6:fe:d1:36:4a: 64:78:c1:4b:76:3a:3b:42:2f:e5:69:54:17:dd:9b:5f:09:80: 95:8c:cf:f1:74:63:58:63:af:9f:0b:d1:fb:94:a3:00:d5:c1: 0f:ac:04:c2:65:51:c4:05:30:54:e8:82:e9:b5:91:a9:f9:69: 6f:7e:e1:4f:ec:e2:0a:4d:65:7b:46:9c:e5:3b:ab:d6:32:89: 85:2a:46:64:48:db:a9:a4:01:e6:a6:79:7e:63:ef:b6:03:c9: 55:75:b7:17:b6:fb:84:60:0a:02:aa:3a:ea:65:c8:26:52:99: bd:2d:0e:9e -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICGUowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAyNTZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEZFNDVEQTE1QzAwRjk4 M0ZFNTgzRDk2NDBDRDlGRjYxRjY5MUNGNkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCm03mgD2qdNY7mpFAnMlneV+7GjQJYaX50FZ6cZVj8mLIEbQ4G Y7yTWpKwDHgRGqpAw/XJBlEKg0EoB/fZb049sOpVRzsNWQiqMX9smcigDO9WLP6k RcWBe4IGY7SQsOC+yqu3+LhE4lBL4zUau9te3WB8fdz+A8V8ORYvXfutb3Sw1IYG 56D75mDJnB4jS70ZH3Sg7zE37Y5KqAbv2bjXkU1XGK0JnlqDhfXT5cFhbt2FCD3v a4rvwJS2Yp35k1mR2/WFEqny5E5lHH+gCn7qyN8qi9RJFzVFNnn22o8T/S/bqiF3 68+Ykrm1UQEyhuPqjmvWKdZZFEckx5bdJYizAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQU/kXaFcAPmD/lg9lkDNn/YfaRz2swHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9fa1hhRmNBUG1EX2xnOWxrRE5u X1lmYVJ6MnMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAGw AAWUMA0GCSqGSIb3DQEBCwUAA4IBAQCjPd7HZJR0YPgYQmT4GXEhJzeHTBSepKqk GsQvI11RwX8aAKgk8i3vhKHo3zQJ4Yk1DcYjBXpyhCxQTzmLHc1UO0aRTe5Wiyir 5+A73FOJlYqO7HN2eCeoU6WUuaGowES8wyY/0nKppfnXByg3zuJ1CO2BccEd33bj BnTcs7sHDQuEyry1hphJRq+Wtv7RNkpkeMFLdjo7Qi/laVQX3ZtfCYCVjM/xdGNY Y6+fC9H7lKMA1cEPrATCZVHEBTBU6ILptZGp+WlvfuFP7OIKTWV7RpzlO6vWMomF KkZkSNuppAHmpnl+Y++2A8lVdbcXtvuEYAoCqjrqZcgmUpm9LQ6e -----END CERTIFICATE-----Generated at Sun Aug 24 09:39:52 2025 by rpki-client