$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/vh8YstnkOTRqhGCEmr6GpdEiypA.roa File: vh8YstnkOTRqhGCEmr6GpdEiypA.roa (raw, json) Hash identifier: /yXfdAjOwuewjvMb8wYZh2wU5RqejN+lBSltfsXcHLs= Subject key identifier: BE:1F:18:B2:D9:E4:39:34:6A:84:60:84:9A:BE:86:A5:D1:22:CA:90 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 18E4 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/vh8YstnkOTRqhGCEmr6GpdEiypA.roa Signing time: Fri 22 Aug 2025 09:02:35 +0000 ROA not before: Fri 22 Aug 2025 09:02:35 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9678 IP address blocks: 203.66.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6372 (0x18e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:02:35 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=BE1F18B2D9E439346A8460849ABE86A5D122CA90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:69:1d:c0:0c:b0:d7:77:a7:10:c0:f6:e5:57: 37:1a:f1:68:95:e0:54:f2:ed:31:20:28:d6:d2:6c: dc:6c:4a:ea:fc:cf:e6:22:5f:2f:b1:c7:a0:18:43: 43:27:27:62:d8:d2:39:b6:0b:3f:9e:ca:0b:a1:c9: db:d8:ce:b6:0c:d3:ba:88:9e:7f:13:29:d4:6d:3d: 45:5a:ff:7b:8d:a5:c1:da:03:28:18:4a:c9:00:6e: c8:cb:9b:77:10:22:a5:a7:ed:58:cf:2b:89:2c:48: 4b:5d:fa:fb:c7:72:86:f7:62:3f:0d:e3:55:98:f9: f7:b0:b2:46:ab:58:59:b2:9d:1d:8a:aa:45:16:0d: 3d:1d:56:8e:dc:96:04:47:1b:48:7a:88:f6:01:8b: 47:51:00:d1:64:bf:af:61:88:c9:85:99:0b:0e:dc: d2:93:e4:6a:81:12:a1:64:bd:0e:e7:a8:42:9a:37: 55:7c:82:c6:dd:8d:89:0e:94:bd:89:41:10:94:66: b6:1a:e9:b3:93:9a:13:95:16:07:2c:5b:35:f4:a5: 19:21:d7:e6:08:db:2b:ca:b5:d6:c4:7b:05:dc:7a: 27:ef:0f:b9:1b:0f:29:c7:bc:e8:f6:97:11:a6:90: e3:1a:d8:86:c0:85:c0:ed:d6:bc:64:8f:06:03:40: a8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:1F:18:B2:D9:E4:39:34:6A:84:60:84:9A:BE:86:A5:D1:22:CA:90 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/vh8YstnkOTRqhGCEmr6GpdEiypA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.66.151.0/24 Signature Algorithm: sha256WithRSAEncryption 48:c6:b2:57:51:5f:02:e2:ef:f4:85:73:db:cf:5d:4b:4d:b5: dd:29:24:aa:03:ce:04:33:07:47:fb:a4:1b:fc:4f:cd:be:62: 0a:f2:d7:f3:23:d4:0d:3c:64:d2:17:94:df:38:19:d7:01:a7: 58:fd:1a:6b:37:f7:7b:23:d2:13:b9:d8:ed:d7:6c:5e:0a:35: b1:0e:9b:d3:fa:09:18:6b:d4:e4:fb:6f:9f:e5:b1:d0:1a:b7: 59:3e:4e:2a:79:9f:11:a9:71:da:e9:cd:51:7d:a3:bc:ce:62: a5:3b:2d:69:0c:64:89:24:b6:65:24:93:5d:04:11:d7:5c:4e: d7:1c:5b:54:5a:61:94:ca:12:fc:48:08:bc:04:8d:89:33:2c: 4f:74:01:ed:4d:0d:6d:e2:aa:76:a1:e4:dc:bc:25:74:04:ac: e5:aa:fa:7d:cd:4b:42:dd:df:85:1d:58:b1:37:5d:6f:ce:5f: 86:db:90:42:94:96:42:af:21:62:c8:2d:3b:43:a0:1e:c4:45: 3c:8a:10:1a:f7:3a:d3:bf:37:ee:0b:fb:27:4f:28:da:d2:8c: a1:c0:e6:20:9a:9e:52:87:e7:97:c0:b0:55:04:7f:cc:38:33: dd:0b:05:03:f4:d3:73:9e:93:b6:4c:33:f0:8a:66:34:8c:81: 44:24:b3:8c -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICGOQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAyMzVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEJFMUYxOEIyRDlFNDM5 MzQ2QTg0NjA4NDlBQkU4NkE1RDEyMkNBOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCoaR3ADLDXd6cQwPblVzca8WiV4FTy7TEgKNbSbNxsSur8z+Yi Xy+xx6AYQ0MnJ2LY0jm2Cz+eyguhydvYzrYM07qInn8TKdRtPUVa/3uNpcHaAygY SskAbsjLm3cQIqWn7VjPK4ksSEtd+vvHcob3Yj8N41WY+fewskarWFmynR2KqkUW DT0dVo7clgRHG0h6iPYBi0dRANFkv69hiMmFmQsO3NKT5GqBEqFkvQ7nqEKaN1V8 gsbdjYkOlL2JQRCUZrYa6bOTmhOVFgcsWzX0pRkh1+YI2yvKtdbEewXceifvD7kb DynHvOj2lxGmkOMa2IbAhcDt1rxkjwYDQKi7AgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUvh8YstnkOTRqhGCEmr6GpdEiypAwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC92aDhZc3Rua09UUnFoR0NFbXI2 R3BkRWl5cEEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy0KX MA0GCSqGSIb3DQEBCwUAA4IBAQBIxrJXUV8C4u/0hXPbz11LTbXdKSSqA84EMwdH +6Qb/E/NvmIK8tfzI9QNPGTSF5TfOBnXAadY/RprN/d7I9ITudjt12xeCjWxDpvT +gkYa9Tk+2+f5bHQGrdZPk4qeZ8RqXHa6c1RfaO8zmKlOy1pDGSJJLZlJJNdBBHX XE7XHFtUWmGUyhL8SAi8BI2JMyxPdAHtTQ1t4qp2oeTcvCV0BKzlqvp9zUtC3d+F HVixN11vzl+G25BClJZCryFiyC07Q6AexEU8ihAa9zrTvzfuC/snTyja0oyhwOYg mp5Sh+eXwLBVBH/MODPdCwUD9NNznpO2TDPwimY0jIFEJLOM -----END CERTIFICATE-----Generated at Sun Aug 24 09:45:04 2025 by rpki-client