$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/H7ipcX_HyWLW9l69hm8aWLh-h6I.roa File: H7ipcX_HyWLW9l69hm8aWLh-h6I.roa (raw, json) Hash identifier: AOXINXVjnBXJMrXbqT5N/LLP7DolAH7JM7o0b7u7f0w= Subject key identifier: 1F:B8:A9:71:7F:C7:C9:62:D6:F6:5E:BD:86:6F:1A:58:B8:7E:87:A2 Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Certificate serial: 1071 Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/H7ipcX_HyWLW9l69hm8aWLh-h6I.roa Signing time: Fri 22 Aug 2025 08:55:29 +0000 ROA not before: Fri 22 Aug 2025 08:55:29 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 1659 IP address blocks: 120.125.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4209 (0x1071) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Validity Not Before: Aug 22 08:55:29 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=1FB8A9717FC7C962D6F65EBD866F1A58B87E87A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:9e:c9:07:1a:96:d8:60:0a:e1:29:19:1c:56: 95:d8:f4:4e:30:41:ee:f6:b7:3f:97:ee:e4:3a:e8: 8f:1a:27:e5:99:44:22:5a:d5:2f:92:90:0d:91:1d: 59:3b:a7:1e:cf:5c:de:89:33:3a:ab:ba:4e:23:35: b2:d5:90:bf:94:1e:81:95:69:5e:97:59:2d:41:65: 24:18:d5:c5:39:81:81:65:de:55:6f:65:29:fd:4d: d0:a1:8b:04:7f:fd:81:77:f0:1b:87:60:cd:b4:15: ae:26:e1:be:4e:0b:f5:25:c1:39:c8:7a:70:81:58: 69:d1:b1:5b:e7:37:6e:7c:24:99:a9:26:27:f7:d1: 15:c2:5f:7e:a5:8a:48:5c:97:a7:6d:c8:37:b5:6f: 35:12:3b:9c:8a:c2:1d:66:61:1c:05:fc:0d:33:ad: 7b:07:3a:f8:f4:e8:34:ba:5e:ef:88:0c:b7:04:b0: bc:dc:1a:89:c8:24:f8:f5:e3:e4:6d:db:d8:fd:e8: 87:17:32:46:25:0f:7b:c7:40:d7:be:a3:34:0e:e2: 81:e7:c0:2c:93:a6:62:6f:f1:b1:aa:9e:aa:08:78: 9b:89:4e:ae:54:32:f5:da:c8:38:ab:dd:3b:89:10: 3f:9c:61:6d:f1:61:2d:69:8c:bd:5f:cc:5f:be:c4: c8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:B8:A9:71:7F:C7:C9:62:D6:F6:5E:BD:86:6F:1A:58:B8:7E:87:A2 X509v3 Authority Key Identifier: keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/H7ipcX_HyWLW9l69hm8aWLh-h6I.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 120.125.0.0/16 Signature Algorithm: sha256WithRSAEncryption 87:ec:88:e0:bd:16:1e:fb:a3:e2:8e:1f:96:f1:97:40:b6:cd: 1a:7a:cc:78:98:2a:b5:88:fb:14:40:a4:ca:8f:92:9e:dc:4e: 13:1b:2b:a6:b8:fb:b5:2b:53:14:12:cd:82:ef:3e:b6:cc:18: 2d:db:56:fb:53:75:88:94:9a:85:29:50:73:a8:74:86:42:63: e1:c8:86:52:f1:6d:62:a6:73:33:04:f2:1d:c2:be:1e:49:43: e2:0c:1c:82:18:40:8e:10:9b:3a:0f:50:68:fe:36:59:ec:15: e2:38:ed:33:18:a1:e4:9d:22:94:e6:02:eb:8a:8b:8e:7a:97: 18:94:0b:a8:7b:e7:04:73:dd:f6:6a:d3:69:f9:09:3e:5d:33: ce:2e:ad:a4:2c:05:03:d3:a4:2d:10:fd:e8:d2:b8:49:72:70: 65:a1:a4:00:23:ee:84:22:f6:ac:48:9c:7c:ee:dd:c3:82:ff: 39:50:df:93:ed:12:c7:8d:10:72:18:f0:8b:72:70:e3:d6:a6: 30:b7:8f:e5:c6:4a:04:93:f2:c2:ab:b6:30:4d:ed:c1:2f:3d: 32:a1:b7:67:ad:a7:30:a9:c7:88:ca:37:f9:ab:8f:26:ef:1b: 9f:2c:87:84:03:4c:03:44:5f:a9:b0:09:9b:00:e8:ef:03:86: 37:a9:b6:9c -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICEHEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNTA4MjIw ODU1MjlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDFGQjhBOTcxN0ZDN0M5 NjJENkY2NUVCRDg2NkYxQTU4Qjg3RTg3QTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDmnskHGpbYYArhKRkcVpXY9E4wQe72tz+X7uQ66I8aJ+WZRCJa 1S+SkA2RHVk7px7PXN6JMzqruk4jNbLVkL+UHoGVaV6XWS1BZSQY1cU5gYFl3lVv ZSn9TdChiwR//YF38BuHYM20Fa4m4b5OC/UlwTnIenCBWGnRsVvnN258JJmpJif3 0RXCX36likhcl6dtyDe1bzUSO5yKwh1mYRwF/A0zrXsHOvj06DS6Xu+IDLcEsLzc GonIJPj14+Rt29j96IcXMkYlD3vHQNe+ozQO4oHnwCyTpmJv8bGqnqoIeJuJTq5U MvXayDir3TuJED+cYW3xYS1pjL1fzF++xMitAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUH7ipcX/HyWLW9l69hm8aWLh+h6IwHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF /peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9IN2lwY1hfSHlXTFc5bDY5aG04 YVdMaC1oNkkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAeH0w DQYJKoZIhvcNAQELBQADggEBAIfsiOC9Fh77o+KOH5bxl0C2zRp6zHiYKrWI+xRA pMqPkp7cThMbK6a4+7UrUxQSzYLvPrbMGC3bVvtTdYiUmoUpUHOodIZCY+HIhlLx bWKmczME8h3Cvh5JQ+IMHIIYQI4QmzoPUGj+NlnsFeI47TMYoeSdIpTmAuuKi456 lxiUC6h75wRz3fZq02n5CT5dM84uraQsBQPTpC0Q/ejSuElycGWhpAAj7oQi9qxI nHzu3cOC/zlQ35PtEseNEHIY8ItycOPWpjC3j+XGSgST8sKrtjBN7cEvPTKht2et pzCpx4jKN/mrjybvG58sh4QDTANEX6mwCZsA6O8Dhjeptpw= -----END CERTIFICATE-----Generated at Sun Aug 24 07:57:19 2025 by rpki-client