$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/07B2LXVi_LgyFGlzVgVntHlIZDw.roa File: 07B2LXVi_LgyFGlzVgVntHlIZDw.roa (raw, json) Hash identifier: m0flpxezxOkgXfctsFs+7rvKTV/ZG4z78RCPVRC4HtU= Subject key identifier: D3:B0:76:2D:75:62:FC:B8:32:14:69:73:56:05:67:B4:79:48:64:3C Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 18FE Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/07B2LXVi_LgyFGlzVgVntHlIZDw.roa Signing time: Fri 22 Aug 2025 09:02:40 +0000 ROA not before: Fri 22 Aug 2025 09:02:40 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 3462 IP address blocks: 1.34.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 11:29:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6398 (0x18fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:02:40 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=D3B0762D7562FCB832146973560567B47948643C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f8:a3:07:64:9a:73:73:62:db:e7:5d:bf:7d: 53:a8:9e:52:4e:f2:f3:5f:7e:f9:2a:db:1b:f4:7e: a7:62:0b:48:7b:6a:bb:6f:34:bd:ba:87:dc:2f:a8: c2:0f:e3:7d:08:40:18:68:09:0e:07:f6:1f:e3:f3: d2:bb:17:2c:91:66:cf:2e:7f:0f:92:0c:85:7a:57: ed:aa:c5:89:67:5c:dc:cd:70:dd:0a:11:b0:60:1d: b4:db:ad:78:aa:a8:6b:20:e1:87:bb:39:eb:d2:34: 89:83:42:45:78:71:2b:51:6b:79:41:24:38:b5:ff: 7e:55:5c:be:27:90:dd:f1:05:1e:40:33:b1:7e:c0: 6f:e4:29:86:7d:42:0c:62:df:8e:e0:27:8b:d4:b9: f9:b9:09:bd:27:71:33:89:92:0b:c4:87:2a:eb:54: 82:f1:0f:9e:da:0a:95:7f:fd:ec:87:54:ff:4a:7b: 26:b6:09:30:02:2a:45:ca:b4:e9:0d:ff:69:11:b3: 74:a6:ff:06:1a:c5:00:87:81:f9:39:59:89:5c:d3: 2d:a5:92:9e:68:58:70:e0:5a:34:9d:60:e3:44:49: b8:e9:0c:ce:59:86:f8:61:83:3b:16:6b:e3:00:cc: 21:15:7f:58:ad:12:de:7b:4e:fc:ec:4d:de:27:85: 68:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:B0:76:2D:75:62:FC:B8:32:14:69:73:56:05:67:B4:79:48:64:3C X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/07B2LXVi_LgyFGlzVgVntHlIZDw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 1.34.0.0/15 Signature Algorithm: sha256WithRSAEncryption 89:e8:6e:70:93:74:a9:11:5b:00:4e:5e:21:3e:0b:9d:4a:14: a8:06:16:d2:1f:2e:8a:bd:f1:ab:5c:a1:8d:17:6c:71:e6:29: ff:30:4a:17:39:68:c5:27:31:e8:60:79:f0:29:14:d7:74:30: 44:46:e0:ee:b4:89:71:d5:f3:c1:92:29:e1:05:7f:13:6a:b1: 5e:3d:33:4f:67:ec:d0:02:fe:8b:ef:f1:d6:b8:d8:06:2f:2f: 4a:60:64:65:6f:27:48:99:ed:17:99:9f:33:87:6b:bb:b1:7a: 05:c3:04:6c:83:69:ce:d0:6b:57:25:05:4a:a5:72:22:b6:f0: d5:b0:80:7e:cc:a4:1d:75:61:b9:70:28:d3:29:d6:9a:ea:5d: 0b:3e:69:6d:83:bb:53:cb:f2:7a:f1:d1:bc:8b:8d:19:3b:61: f7:70:54:00:3c:ea:e0:26:84:b3:09:33:c5:f2:fe:2d:5d:fd: 7b:9f:8a:36:c7:92:a4:eb:4a:29:b5:fe:77:78:94:9d:4f:86: 31:42:4b:fe:ba:25:f3:40:96:00:da:f8:0e:0b:da:56:59:62: 3c:db:b9:0e:2d:56:97:97:37:28:3e:de:c7:6d:35:2e:ee:ee: ef:be:bf:4e:7c:77:0b:5b:98:ad:d8:82:87:a0:74:4d:ec:8a: 65:eb:e8:bd -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICGP4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAyNDBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEQzQjA3NjJENzU2MkZD QjgzMjE0Njk3MzU2MDU2N0I0Nzk0ODY0M0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDU+KMHZJpzc2Lb512/fVOonlJO8vNffvkq2xv0fqdiC0h7artv NL26h9wvqMIP430IQBhoCQ4H9h/j89K7FyyRZs8ufw+SDIV6V+2qxYlnXNzNcN0K EbBgHbTbrXiqqGsg4Ye7OevSNImDQkV4cStRa3lBJDi1/35VXL4nkN3xBR5AM7F+ wG/kKYZ9Qgxi347gJ4vUufm5Cb0ncTOJkgvEhyrrVILxD57aCpV//eyHVP9Keya2 CTACKkXKtOkN/2kRs3Sm/wYaxQCHgfk5WYlc0y2lkp5oWHDgWjSdYONESbjpDM5Z hvhhgzsWa+MAzCEVf1itEt57TvzsTd4nhWhJAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQU07B2LXVi/LgyFGlzVgVntHlIZDwwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC8wN0IyTFhWaV9MZ3lGR2x6VmdW bnRIbElaRHcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBASIw DQYJKoZIhvcNAQELBQADggEBAInobnCTdKkRWwBOXiE+C51KFKgGFtIfLoq98atc oY0XbHHmKf8wShc5aMUnMehgefApFNd0MERG4O60iXHV88GSKeEFfxNqsV49M09n 7NAC/ovv8da42AYvL0pgZGVvJ0iZ7ReZnzOHa7uxegXDBGyDac7Qa1clBUqlciK2 8NWwgH7MpB11YblwKNMp1prqXQs+aW2Du1PL8nrx0byLjRk7YfdwVAA86uAmhLMJ M8Xy/i1d/XufijbHkqTrSim1/nd4lJ1PhjFCS/66JfNAlgDa+A4L2lZZYjzbuQ4t VpeXNyg+3sdtNS7u7u++v058dwtbmK3YgoegdE3simXr6L0= -----END CERTIFICATE-----Generated at Wed Nov 5 08:07:29 2025 by rpki-client