$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/gJI33dz2qlX-LlAswQPLSA4UXxw.roa File: gJI33dz2qlX-LlAswQPLSA4UXxw.roa (raw, json) Hash identifier: lbxqVqv4qskJzAfd3wnPa92eQALPWN4zhrjDI1oYFoo= Subject key identifier: 80:92:37:DD:DC:F6:AA:55:FE:2E:50:2C:C1:03:CB:48:0E:14:5F:1C Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 18B4 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/gJI33dz2qlX-LlAswQPLSA4UXxw.roa Signing time: Fri 22 Aug 2025 09:02:21 +0000 ROA not before: Fri 22 Aug 2025 09:02:21 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17421 IP address blocks: 116.59.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6324 (0x18b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:02:21 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=809237DDDCF6AA55FE2E502CC103CB480E145F1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:dc:3f:8e:f2:07:30:0a:e6:20:7b:2e:cf:63: 97:4b:f6:ad:24:b4:a4:f4:61:ab:c3:bf:c6:a3:46: 87:92:66:fb:28:ea:66:c3:e2:89:0d:c8:d2:db:44: bc:5f:20:38:07:35:5b:2e:ad:6d:ea:5c:25:51:a2: 28:bb:a7:b8:c0:6f:84:0c:d8:f1:01:81:ed:31:25: 59:92:d4:70:48:f1:89:a1:b0:9e:7d:5b:58:a1:c5: 03:39:25:a4:29:fb:52:46:8f:ac:95:4d:c4:ac:43: e7:c7:84:7b:95:8c:46:4b:cf:91:a7:30:af:e2:2c: d5:80:bd:b0:88:08:75:9f:7f:d8:b2:d9:5b:a7:c4: 0e:cb:47:fb:ff:49:f9:d4:48:3d:b5:8c:ff:09:cd: cd:3c:d3:42:a0:5e:65:93:6a:70:43:97:bc:fc:f2: 68:ce:78:2d:0d:0f:17:2a:9d:af:c1:68:6b:f4:09: d5:59:e5:0d:ec:5c:12:23:19:99:84:a2:c7:7c:31: d2:6a:22:49:bf:c6:fc:58:02:f4:29:4c:d0:37:98: 85:d1:0d:b8:30:52:a8:29:c6:db:0f:89:d7:d7:ac: 2f:8d:ef:90:3c:aa:66:c8:d6:ef:4d:58:3b:14:e3: 28:03:d7:c5:61:49:f2:dd:14:0b:4b:15:41:09:3e: 29:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:92:37:DD:DC:F6:AA:55:FE:2E:50:2C:C1:03:CB:48:0E:14:5F:1C X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/gJI33dz2qlX-LlAswQPLSA4UXxw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 116.59.0.0/16 Signature Algorithm: sha256WithRSAEncryption a2:6a:59:98:b9:49:ec:ba:7b:ee:c8:f7:14:bc:14:af:ad:63: 38:ff:fd:32:45:61:f2:32:9e:9d:fb:f1:5e:27:39:93:77:9c: 13:85:ac:96:a0:6f:51:6c:55:80:e6:7b:48:f7:87:59:c8:20: eb:26:c8:2e:a4:40:98:30:c0:6b:c2:44:3e:27:c1:87:ef:a8: c4:9c:84:85:f8:c8:6d:b1:88:ba:79:b1:6b:6c:25:47:39:2a: a7:f5:da:9a:71:9c:d5:c6:c6:76:71:bf:66:87:26:03:cb:79: 6c:62:ef:2b:34:a6:f1:42:2c:3e:f3:ce:67:f4:31:81:2b:a3: 3a:61:2a:eb:4d:c9:84:0e:54:c6:5f:a8:0e:1f:70:5e:f1:bf: 43:0b:96:b7:83:16:c7:f3:0e:7a:4b:79:ab:ee:47:a2:69:3a: 6e:7c:92:e0:7a:cc:2b:b9:79:67:b3:fc:9b:b4:e4:42:44:a5: b3:f5:df:99:5b:2d:c2:ff:4d:60:50:7a:00:10:c3:31:c0:da: fc:74:1f:20:de:0b:5a:69:d1:2f:ba:09:bd:53:b6:54:24:6b: 5c:38:53:3b:85:b3:86:c9:0c:45:ca:b3:d5:52:48:f3:63:3c: 5e:49:84:64:aa:73:05:bd:c1:6c:11:3e:29:97:eb:a5:5a:0c: 0b:34:16:0d -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICGLQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAyMjFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDgwOTIzN0RERENGNkFB NTVGRTJFNTAyQ0MxMDNDQjQ4MEUxNDVGMUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCv3D+O8gcwCuYgey7PY5dL9q0ktKT0YavDv8ajRoeSZvso6mbD 4okNyNLbRLxfIDgHNVsurW3qXCVRoii7p7jAb4QM2PEBge0xJVmS1HBI8YmhsJ59 W1ihxQM5JaQp+1JGj6yVTcSsQ+fHhHuVjEZLz5GnMK/iLNWAvbCICHWff9iy2Vun xA7LR/v/SfnUSD21jP8Jzc0800KgXmWTanBDl7z88mjOeC0NDxcqna/BaGv0CdVZ 5Q3sXBIjGZmEosd8MdJqIkm/xvxYAvQpTNA3mIXRDbgwUqgpxtsPidfXrC+N75A8 qmbI1u9NWDsU4ygD18VhSfLdFAtLFUEJPiknAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUgJI33dz2qlX+LlAswQPLSA4UXxwwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9nSkkzM2R6MnFsWC1MbEFzd1FQ TFNBNFVYeHcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAdDsw DQYJKoZIhvcNAQELBQADggEBAKJqWZi5Sey6e+7I9xS8FK+tYzj//TJFYfIynp37 8V4nOZN3nBOFrJagb1FsVYDme0j3h1nIIOsmyC6kQJgwwGvCRD4nwYfvqMSchIX4 yG2xiLp5sWtsJUc5Kqf12ppxnNXGxnZxv2aHJgPLeWxi7ys0pvFCLD7zzmf0MYEr ozphKutNyYQOVMZfqA4fcF7xv0MLlreDFsfzDnpLeavuR6JpOm58kuB6zCu5eWez /Ju05EJEpbP135lbLcL/TWBQegAQwzHA2vx0HyDeC1pp0S+6Cb1TtlQka1w4UzuF s4bJDEXKs9VSSPNjPF5JhGSqcwW9wWwRPimX66VaDAs0Fg0= -----END CERTIFICATE-----Generated at Sun Aug 24 09:42:26 2025 by rpki-client