$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/hVmEBUWzBlGYrGUyw2c9In3H1To.roa File: hVmEBUWzBlGYrGUyw2c9In3H1To.roa (raw, json) Hash identifier: 9QY7/lX5ov36PEHDlU/PQB7YUCizzNXZ4bVnFJoVhF4= Subject key identifier: 85:59:84:05:45:B3:06:51:98:AC:65:32:C3:67:3D:22:7D:C7:D5:3A Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Certificate serial: 1095 Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/hVmEBUWzBlGYrGUyw2c9In3H1To.roa Signing time: Fri 22 Aug 2025 08:55:38 +0000 ROA not before: Fri 22 Aug 2025 08:55:38 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 1659 IP address blocks: 163.28.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4245 (0x1095) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Validity Not Before: Aug 22 08:55:38 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=8559840545B3065198AC6532C3673D227DC7D53A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:cc:a6:fb:0c:3d:90:09:3c:b0:f3:de:b7:83: 25:d6:c8:de:43:ea:d1:92:dd:0d:d6:4c:4f:e2:ba: bf:05:de:bf:5d:1e:32:d6:3a:77:fa:21:79:55:a5: 75:9b:cd:31:96:39:54:bd:7c:44:19:96:78:bd:db: 54:a8:06:95:8b:f6:76:ca:1b:09:d1:03:e0:a6:ab: 75:75:2b:4e:94:d0:56:6e:07:ea:e3:66:f9:7a:d9: 33:03:76:ca:3a:83:5a:80:7a:cc:ed:80:6c:c4:dd: bb:32:11:01:91:e7:15:cc:51:65:25:b3:0f:69:aa: de:d8:bc:87:f3:d7:90:8e:3a:d7:b8:72:98:08:cf: dc:85:9e:7e:de:23:aa:d5:d4:2e:f5:d0:b9:28:bf: 0d:4b:32:04:05:dd:49:ca:f2:47:84:45:00:f5:d2: 2e:6c:94:c0:bc:30:18:00:df:e5:d5:30:7f:44:8a: f9:c6:c4:f2:80:f3:c5:88:f9:dc:29:c5:87:b9:6c: 37:d6:87:a1:f2:2b:6d:ad:3c:21:7b:a9:c5:cc:c7: 89:e8:22:8a:f3:2f:74:a9:72:3b:c5:11:86:12:da: 74:f1:ef:8c:fd:2f:e4:af:d6:9d:9c:ff:f0:e8:55: dc:dc:4b:c6:49:e6:95:1b:c8:d7:3b:12:e6:1b:41: 07:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:59:84:05:45:B3:06:51:98:AC:65:32:C3:67:3D:22:7D:C7:D5:3A X509v3 Authority Key Identifier: keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/hVmEBUWzBlGYrGUyw2c9In3H1To.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 163.28.0.0/16 Signature Algorithm: sha256WithRSAEncryption ad:60:87:b4:a6:f0:5b:69:c9:ae:8a:de:4a:b6:ef:3b:13:9a: 64:45:f8:0e:aa:d5:07:cc:1d:eb:3f:a3:2e:2f:ae:b1:b5:7e: 59:92:82:32:57:67:6c:46:65:59:f3:cf:24:2c:ea:58:47:70: a9:8b:b9:a8:28:0d:08:a4:a5:b7:22:b1:40:ac:b8:5c:20:b1: 08:cb:c5:2f:e8:1c:7e:6b:c3:5c:af:84:43:5d:92:c6:ff:fc: 4e:3e:84:46:c9:5d:48:65:1e:e5:54:24:c7:f5:f5:ce:fb:90: a8:89:cc:8a:f6:5d:eb:4e:3d:dc:24:be:48:b3:58:01:19:37: b8:93:51:67:d5:11:f2:e9:7f:a9:64:c8:de:4e:c2:76:db:99: f1:36:30:19:97:05:74:6d:dd:e3:ed:b2:b2:9e:3d:92:c6:3c: 89:bb:30:5a:34:86:b0:aa:f9:90:77:b7:86:f2:97:76:52:d8: 6c:48:c4:f6:83:10:9c:51:1f:80:7d:82:68:54:8d:f1:c7:95: f6:97:22:18:32:24:ea:c8:9b:d2:b5:0a:c0:f6:3a:96:b6:bb: 6d:d1:ab:3d:b5:dd:bc:27:df:18:e9:eb:4c:67:23:1c:56:c3: 1d:64:3b:19:6b:78:95:f9:6f:0a:e2:03:ab:9c:d0:b5:a3:5e: 40:c6:8c:9d -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICEJUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNTA4MjIw ODU1MzhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDg1NTk4NDA1NDVCMzA2 NTE5OEFDNjUzMkMzNjczRDIyN0RDN0Q1M0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDozKb7DD2QCTyw8963gyXWyN5D6tGS3Q3WTE/iur8F3r9dHjLW Onf6IXlVpXWbzTGWOVS9fEQZlni921SoBpWL9nbKGwnRA+Cmq3V1K06U0FZuB+rj Zvl62TMDdso6g1qAesztgGzE3bsyEQGR5xXMUWUlsw9pqt7YvIfz15COOte4cpgI z9yFnn7eI6rV1C710Lkovw1LMgQF3UnK8keERQD10i5slMC8MBgA3+XVMH9EivnG xPKA88WI+dwpxYe5bDfWh6HyK22tPCF7qcXMx4noIorzL3SpcjvFEYYS2nTx74z9 L+Sv1p2c//DoVdzcS8ZJ5pUbyNc7EuYbQQcTAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUhVmEBUWzBlGYrGUyw2c9In3H1TowHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF /peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9oVm1FQlVXekJsR1lyR1V5dzJj OUluM0gxVG8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAoxww DQYJKoZIhvcNAQELBQADggEBAK1gh7Sm8Ftpya6K3kq27zsTmmRF+A6q1QfMHes/ oy4vrrG1flmSgjJXZ2xGZVnzzyQs6lhHcKmLuagoDQikpbcisUCsuFwgsQjLxS/o HH5rw1yvhENdksb//E4+hEbJXUhlHuVUJMf19c77kKiJzIr2XetOPdwkvkizWAEZ N7iTUWfVEfLpf6lkyN5OwnbbmfE2MBmXBXRt3ePtsrKePZLGPIm7MFo0hrCq+ZB3 t4byl3ZS2GxIxPaDEJxRH4B9gmhUjfHHlfaXIhgyJOrIm9K1CsD2Opa2u23Rqz21 3bwn3xjp60xnIxxWwx1kOxlreJX5bwriA6uc0LWjXkDGjJ0= -----END CERTIFICATE-----Generated at Sun Aug 24 07:57:27 2025 by rpki-client