$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/ep7G50xFkA2PHyQD4YimPwf6lVU.roa File: ep7G50xFkA2PHyQD4YimPwf6lVU.roa (raw, json) Hash identifier: 4JE7/4KZr4MlzDPI4W0CK0Y1rVpPEdFX/m2zr4Uop9g= Subject key identifier: 7A:9E:C6:E7:4C:45:90:0D:8F:1F:24:03:E1:88:A6:3F:07:FA:95:55 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 18C1 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ep7G50xFkA2PHyQD4YimPwf6lVU.roa Signing time: Fri 22 Aug 2025 09:02:25 +0000 ROA not before: Fri 22 Aug 2025 09:02:25 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17421 IP address blocks: 114.136.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6337 (0x18c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:02:25 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=7A9EC6E74C45900D8F1F2403E188A63F07FA9555 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ad:a4:2d:59:d1:c7:09:80:84:5d:1d:99:c9: b3:b6:7b:75:4a:51:ba:fb:9a:bb:99:68:0b:28:86: 5c:fb:60:1e:2d:05:dd:6a:25:98:31:a2:cc:75:cf: 4b:14:22:9f:cb:f3:5f:75:55:b5:49:99:e1:34:a5: f9:63:52:cd:c6:cf:0b:d6:b6:7f:7e:4c:53:ee:7d: d0:e3:1c:24:42:78:a0:df:4c:b9:46:a0:86:cb:65: 28:b1:b0:07:68:1d:a2:c8:42:3c:4f:39:d0:34:6d: 7e:4a:97:42:75:18:f9:74:c3:4e:fd:ae:59:69:0b: 56:ba:b3:bf:da:18:43:d3:7e:49:2a:41:9c:7d:66: 4b:34:c1:c3:f7:50:cf:a8:16:30:7f:ac:21:e7:81: ac:33:11:07:85:57:55:6b:06:f6:87:53:1e:b2:35: ba:65:88:8c:6e:c5:b8:57:31:8f:a6:09:2c:5e:b8: 53:cb:2d:e7:08:78:71:8a:dc:bb:ae:4e:db:6a:e7: 86:9f:b5:41:14:ed:b3:29:3f:b3:10:a4:95:79:52: ef:05:96:1b:d0:3f:7a:ca:23:43:1b:07:21:83:1b: f2:82:0b:a3:ab:6f:69:98:9d:5a:8c:d3:e4:50:20: f3:c6:2d:3d:8e:a8:20:39:45:9e:fd:2d:66:be:65: a9:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:9E:C6:E7:4C:45:90:0D:8F:1F:24:03:E1:88:A6:3F:07:FA:95:55 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ep7G50xFkA2PHyQD4YimPwf6lVU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 114.136.0.0/15 Signature Algorithm: sha256WithRSAEncryption 88:05:07:d3:11:3e:65:e5:91:77:93:35:da:f2:e7:0f:73:63: 8b:f2:32:73:be:dc:b8:8c:e9:2d:7e:6e:5b:a1:25:b8:ee:dd: 2d:c8:43:18:4c:52:f2:65:b6:b7:18:eb:38:89:26:1c:de:d1: b3:08:d5:d7:fc:18:85:60:f3:c8:4f:5c:11:25:22:65:90:26: 44:97:9c:d7:66:c6:57:91:1e:b6:26:dd:d1:f2:29:32:72:c0: 5a:5c:70:97:4d:2c:ad:ed:3a:63:ef:36:37:cb:d4:9a:45:94: 17:66:9e:c6:aa:10:e1:5d:7a:e3:ea:f0:74:2c:17:68:ea:82: 29:8f:59:6f:9b:f7:29:94:fe:45:7e:4e:9a:92:bd:ef:c4:1e: ed:ac:87:95:db:7c:c7:3d:12:8a:9c:78:7c:55:59:e7:a5:85: ac:68:7a:c3:82:2a:38:38:1b:36:cc:98:94:da:22:e0:4d:ff: b9:43:8b:b0:0a:67:b8:d1:fe:98:6d:0a:a1:db:bc:d4:53:d8: 71:1c:04:1f:03:38:43:be:ee:c8:4f:fa:cb:54:8b:c4:8d:15: 62:7e:06:e3:77:b7:2c:aa:bd:cc:95:3d:03:30:4c:0b:2b:2a: 1d:39:e5:c5:51:d2:78:06:80:30:42:52:85:c6:91:0f:30:54: 20:34:da:4b -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICGMEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAyMjVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDdBOUVDNkU3NEM0NTkw MEQ4RjFGMjQwM0UxODhBNjNGMDdGQTk1NTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHraQtWdHHCYCEXR2ZybO2e3VKUbr7mruZaAsohlz7YB4tBd1q JZgxosx1z0sUIp/L8191VbVJmeE0pfljUs3GzwvWtn9+TFPufdDjHCRCeKDfTLlG oIbLZSixsAdoHaLIQjxPOdA0bX5Kl0J1GPl0w079rllpC1a6s7/aGEPTfkkqQZx9 Zks0wcP3UM+oFjB/rCHngawzEQeFV1VrBvaHUx6yNbpliIxuxbhXMY+mCSxeuFPL LecIeHGK3LuuTttq54aftUEU7bMpP7MQpJV5Uu8FlhvQP3rKI0MbByGDG/KCC6Or b2mYnVqM0+RQIPPGLT2OqCA5RZ79LWa+ZalrAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUep7G50xFkA2PHyQD4YimPwf6lVUwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9lcDdHNTB4RmtBMlBIeVFENFlp bVB3ZjZsVlUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBcogw DQYJKoZIhvcNAQELBQADggEBAIgFB9MRPmXlkXeTNdry5w9zY4vyMnO+3LiM6S1+ bluhJbju3S3IQxhMUvJltrcY6ziJJhze0bMI1df8GIVg88hPXBElImWQJkSXnNdm xleRHrYm3dHyKTJywFpccJdNLK3tOmPvNjfL1JpFlBdmnsaqEOFdeuPq8HQsF2jq gimPWW+b9ymU/kV+TpqSve/EHu2sh5XbfMc9EoqceHxVWeelhaxoesOCKjg4GzbM mJTaIuBN/7lDi7AKZ7jR/phtCqHbvNRT2HEcBB8DOEO+7shP+stUi8SNFWJ+BuN3 tyyqvcyVPQMwTAsrKh055cVR0ngGgDBCUoXGkQ8wVCA02ks= -----END CERTIFICATE-----Generated at Sun Aug 24 11:40:18 2025 by rpki-client