$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/OPEN/hFBgGwCt5GL_bhH_EA7ARAyo_G4.roa File: hFBgGwCt5GL_bhH_EA7ARAyo_G4.roa (raw, json) Hash identifier: 0KSGzv+Oi6FSZ6T88iHICyfFFmvh2P557/puOMNwYNA= Subject key identifier: 84:50:60:1B:00:AD:E4:62:FF:6E:11:FF:10:0E:C0:44:0C:A8:FC:6E Certificate issuer: /CN=96B8A08E759C90211732DEE84FD4BE259DAA0FFD Certificate serial: 07 Authority key identifier: 96:B8:A0:8E:75:9C:90:21:17:32:DE:E8:4F:D4:BE:25:9D:AA:0F:FD Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/lrigjnWckCEXMt7oT9S-JZ2qD_0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/OPEN/hFBgGwCt5GL_bhH_EA7ARAyo_G4.roa Signing time: Tue 16 Sep 2025 06:37:03 +0000 ROA not before: Tue 16 Sep 2025 06:37:03 +0000 ROA not after: Wed 09 Sep 2026 15:30:25 +0000 asID: 9923 IP address blocks: 2402:28e0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/OPEN/lrigjnWckCEXMt7oT9S-JZ2qD_0.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/OPEN/lrigjnWckCEXMt7oT9S-JZ2qD_0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/lrigjnWckCEXMt7oT9S-JZ2qD_0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 22:26:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96B8A08E759C90211732DEE84FD4BE259DAA0FFD Validity Not Before: Sep 16 06:37:03 2025 GMT Not After : Sep 9 15:30:25 2026 GMT Subject: CN=8450601B00ADE462FF6E11FF100EC0440CA8FC6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:30:83:00:7a:07:69:00:36:aa:e9:e9:96:d9: 07:2f:60:f2:18:ea:db:ec:75:30:eb:3c:0f:17:f3: 44:07:74:ad:3f:6d:96:af:83:3c:79:0e:cb:3c:96: 32:2e:c3:1f:0e:0c:c9:f1:ce:43:5e:e8:f5:c2:d4: 42:63:2c:73:6d:fa:76:ec:b8:e3:b3:f6:27:f4:a2: 06:60:b1:67:40:2c:c7:c8:2e:7b:c9:7a:c2:ca:df: 16:5f:7c:f8:6e:8b:3c:e1:a1:81:4c:50:13:81:4a: 2e:71:82:e8:98:5e:28:c9:53:db:f5:10:8e:a6:8d: e6:f7:81:cd:af:e9:e3:a7:92:70:c2:8c:86:93:d6: 7c:46:12:ec:18:32:2b:73:2d:c7:dc:0f:b9:99:77: c4:62:e6:5c:04:63:56:2d:b5:9f:61:92:5e:9c:c5: 10:6f:67:64:20:db:ed:c3:f2:83:8c:2d:d5:12:86: d8:f7:f0:d3:b0:6b:0a:ea:da:99:e1:d5:53:bb:84: 95:8e:5a:25:ba:f6:ca:3c:c3:cf:82:58:21:c3:93: b4:1a:ec:4e:41:fd:0e:a2:41:ca:85:12:58:84:7b: e7:87:74:a5:ca:31:94:4a:15:08:c1:c2:c5:e1:07: 72:18:e0:96:b6:d7:75:6e:24:f5:b0:b2:4b:09:44: 56:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:50:60:1B:00:AD:E4:62:FF:6E:11:FF:10:0E:C0:44:0C:A8:FC:6E X509v3 Authority Key Identifier: keyid:96:B8:A0:8E:75:9C:90:21:17:32:DE:E8:4F:D4:BE:25:9D:AA:0F:FD X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OPEN/lrigjnWckCEXMt7oT9S-JZ2qD_0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/lrigjnWckCEXMt7oT9S-JZ2qD_0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OPEN/hFBgGwCt5GL_bhH_EA7ARAyo_G4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2402:28e0::/32 Signature Algorithm: sha256WithRSAEncryption a7:01:95:3e:f5:3d:cc:9c:02:d7:ac:64:1e:5f:30:a8:17:95: c9:11:e5:5f:09:46:76:dd:9a:ba:82:6b:16:dc:a3:d2:cd:72: cb:a5:0c:1e:88:c2:c3:5f:0c:46:9e:3c:1d:de:8b:e0:ce:78: 0b:dd:e8:81:44:ba:76:a7:8d:37:25:40:86:4b:8c:3c:d7:3f: 6e:4d:08:78:0f:72:db:99:3f:77:85:31:49:16:7d:58:78:60: 8c:0f:05:01:00:05:ef:89:fe:ae:f7:fc:8d:22:d2:cd:69:f8: f3:6b:d4:bb:e6:3b:50:bb:00:4d:3e:a4:cb:ce:17:b0:9c:27: 5e:ae:a0:6c:e1:59:17:9b:01:4c:cf:19:b7:f3:25:16:c8:af: ab:08:5d:2f:d0:ed:6f:32:e4:2c:6b:38:01:a2:14:15:f7:69: 88:0d:3c:3b:bf:98:2d:63:10:a8:dc:87:f8:65:41:e4:6d:b9: e3:f5:d6:99:90:28:4d:5b:de:81:9b:33:5d:f8:1d:d2:a2:b0: 96:af:8a:44:cc:0d:18:ff:e2:c3:d8:9c:41:61:0d:d0:80:08: 5b:c9:2e:05:9d:ea:01:59:c2:cc:71:7d:02:47:f6:76:f8:9c: 4a:cd:67:c1:91:4d:b3:ec:d8:53:70:56:a5:73:23:b0:22:c8: 17:d4:48:f1 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgIBBzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NkI4 QTA4RTc1OUM5MDIxMTczMkRFRTg0RkQ0QkUyNTlEQUEwRkZEMB4XDTI1MDkxNjA2 MzcwM1oXDTI2MDkwOTE1MzAyNVowMzExMC8GA1UEAxMoODQ1MDYwMUIwMEFERTQ2 MkZGNkUxMUZGMTAwRUMwNDQwQ0E4RkM2RTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAM4wgwB6B2kANqrp6ZbZBy9g8hjq2+x1MOs8DxfzRAd0rT9tlq+D PHkOyzyWMi7DHw4MyfHOQ17o9cLUQmMsc236duy447P2J/SiBmCxZ0Asx8gue8l6 wsrfFl98+G6LPOGhgUxQE4FKLnGC6JheKMlT2/UQjqaN5veBza/p46eScMKMhpPW fEYS7BgyK3Mtx9wPuZl3xGLmXARjVi21n2GSXpzFEG9nZCDb7cPyg4wt1RKG2Pfw 07BrCurameHVU7uElY5aJbr2yjzDz4JYIcOTtBrsTkH9DqJByoUSWIR754d0pcox lEoVCMHCxeEHchjglrbXdW4k9bCySwlEVtMCAwEAAaOCAeswggHnMB0GA1UdDgQW BBSEUGAbAK3kYv9uEf8QDsBEDKj8bjAfBgNVHSMEGDAWgBSWuKCOdZyQIRcy3uhP 1L4lnaoP/TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFoGA1UdHwRTMFEwT6BN oEuGSXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9PUEVOL2xy aWdqbldja0NFWE10N29UOVMtSloycURfMC5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev bHJpZ2puV2NrQ0VYTXQ3b1Q5Uy1KWjJxRF8wLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZoGCCsGAQUFBwELBIGNMIGKMFUGCCsGAQUFBzALhklyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvT1BFTi9oRkJnR3dDdDVHTF9iaEhfRUE3QVJB eW9fRzQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcvcnJk cC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAIo4DAN BgkqhkiG9w0BAQsFAAOCAQEApwGVPvU9zJwC16xkHl8wqBeVyRHlXwlGdt2auoJr Ftyj0s1yy6UMHojCw18MRp48Hd6L4M54C93ogUS6dqeNNyVAhkuMPNc/bk0IeA9y 25k/d4UxSRZ9WHhgjA8FAQAF74n+rvf8jSLSzWn482vUu+Y7ULsATT6ky84XsJwn Xq6gbOFZF5sBTM8Zt/MlFsivqwhdL9DtbzLkLGs4AaIUFfdpiA08O7+YLWMQqNyH +GVB5G254/XWmZAoTVvegZszXfgd0qKwlq+KRMwNGP/iw9icQWEN0IAIW8kuBZ3q AVnCzHF9Akf2dvicSs1nwZFNs+zYU3BWpXMjsCLIF9RI8Q== -----END CERTIFICATE-----Generated at Mon Oct 20 20:53:02 2025 by rpki-client