$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/3CRCBhvZKL47FA7dQM6LlcRLycA.roa File: 3CRCBhvZKL47FA7dQM6LlcRLycA.roa (raw, json) Hash identifier: cNQnQWxYmCU1ThFaaE3WL4BdyXyoRJ8eQysMF6xP4mg= Subject key identifier: DC:24:42:06:1B:D9:28:BE:3B:14:0E:DD:40:CE:8B:95:C4:4B:C9:C0 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 1911 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/3CRCBhvZKL47FA7dQM6LlcRLycA.roa Signing time: Fri 22 Aug 2025 09:02:44 +0000 ROA not before: Fri 22 Aug 2025 09:02:44 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 198949 IP address blocks: 210.61.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 20:59:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6417 (0x1911) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:02:44 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=DC2442061BD928BE3B140EDD40CE8B95C44BC9C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:36:2e:44:71:df:2b:62:f5:47:f9:14:42:e5: ab:df:d1:a4:f3:0e:99:a5:f3:84:78:8b:92:aa:85: 3a:cb:e9:99:02:b9:65:fc:25:e1:00:66:16:d5:e5: 84:c6:c2:2c:81:19:b9:8e:67:39:47:78:3f:f6:bf: 5b:64:54:35:a2:a6:42:25:6b:84:a3:51:a4:2e:c7: 0f:1e:1f:91:16:0e:65:2f:6b:ae:55:9f:01:6e:ec: f4:dd:74:aa:16:e8:54:27:c3:37:0d:c8:da:25:54: fa:44:c2:b7:a4:2b:b0:74:98:26:87:d8:fe:d1:5d: 82:d8:47:74:c5:f0:79:d7:40:c2:88:8d:73:3c:f3: c9:b2:7f:fb:56:b3:f3:b4:25:1d:0e:6c:8d:26:45: b0:31:32:1c:42:eb:06:d4:9f:90:ab:70:8b:33:11: f0:08:a7:74:ef:21:f0:23:47:cb:3f:6d:a4:1f:5d: 4d:c4:87:16:8c:9c:63:1c:e5:ab:4d:a1:71:04:f8: ce:d0:20:97:18:66:95:ab:98:2f:f5:03:03:64:d6: e7:56:01:03:78:cd:d9:d1:f8:e5:68:cd:1d:f5:d1: e1:58:31:e2:06:8c:62:c1:7f:11:c7:4e:05:77:ca: 13:65:56:58:a5:90:61:00:ff:32:c3:1b:6b:4f:eb: cb:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:24:42:06:1B:D9:28:BE:3B:14:0E:DD:40:CE:8B:95:C4:4B:C9:C0 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/3CRCBhvZKL47FA7dQM6LlcRLycA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.61.114.0/24 Signature Algorithm: sha256WithRSAEncryption 07:ff:0b:01:0d:b9:aa:a8:a0:4d:4d:f1:b5:c9:a6:f5:80:e5: 61:6a:64:b5:77:1c:31:e9:43:e0:b2:ce:fb:b7:78:49:03:7d: 87:c6:c2:59:18:58:9b:18:6f:a0:87:84:53:b1:40:f2:e4:32: cf:5d:fa:32:95:b3:d7:dd:1d:bc:fa:6e:ca:ce:9d:96:b0:43: de:a4:1c:9a:40:5e:17:53:2d:46:62:77:a1:3d:6f:f1:5a:c0: 51:f2:1f:ff:7b:da:ec:62:3a:09:0e:9e:13:44:0e:a4:21:79: 77:22:d3:07:5a:a5:01:90:79:fe:9b:e8:3c:c5:9d:07:f6:f2: c1:82:36:86:6c:52:64:00:71:ad:d7:6b:85:cf:94:67:c8:d7: a3:2d:73:7b:71:6d:97:bf:6f:e8:48:cb:d5:9f:73:25:97:5a: e5:2c:97:1d:f2:56:01:72:2c:83:90:45:a3:f5:67:89:4e:7e: bf:15:e8:8a:ad:97:3a:9f:52:6a:9b:f9:a7:b4:a5:29:30:e7: 12:af:35:1e:3b:b0:cd:3c:30:32:fb:41:dd:93:72:05:40:f1: 0a:f3:16:bb:b9:fa:ca:3e:3a:bd:61:00:b4:c0:1d:f9:be:a3: 0c:d0:dd:bb:22:c8:ba:fd:4f:dd:32:1f:87:e9:6a:f5:09:49: 36:63:45:9a -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICGREwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAyNDRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKERDMjQ0MjA2MUJEOTI4 QkUzQjE0MEVERDQwQ0U4Qjk1QzQ0QkM5QzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9Ni5Ecd8rYvVH+RRC5avf0aTzDpml84R4i5KqhTrL6ZkCuWX8 JeEAZhbV5YTGwiyBGbmOZzlHeD/2v1tkVDWipkIla4SjUaQuxw8eH5EWDmUva65V nwFu7PTddKoW6FQnwzcNyNolVPpEwrekK7B0mCaH2P7RXYLYR3TF8HnXQMKIjXM8 88myf/tWs/O0JR0ObI0mRbAxMhxC6wbUn5CrcIszEfAIp3TvIfAjR8s/baQfXU3E hxaMnGMc5atNoXEE+M7QIJcYZpWrmC/1AwNk1udWAQN4zdnR+OVozR310eFYMeIG jGLBfxHHTgV3yhNlVlilkGEA/zLDG2tP68tDAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU3CRCBhvZKL47FA7dQM6LlcRLycAwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC8zQ1JDQmh2WktMNDdGQTdkUU02 TGxjUkx5Y0Eucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0j1y MA0GCSqGSIb3DQEBCwUAA4IBAQAH/wsBDbmqqKBNTfG1yab1gOVhamS1dxwx6UPg ss77t3hJA32HxsJZGFibGG+gh4RTsUDy5DLPXfoylbPX3R28+m7Kzp2WsEPepBya QF4XUy1GYnehPW/xWsBR8h//e9rsYjoJDp4TRA6kIXl3ItMHWqUBkHn+m+g8xZ0H 9vLBgjaGbFJkAHGt12uFz5RnyNejLXN7cW2Xv2/oSMvVn3Mll1rlLJcd8lYBciyD kEWj9WeJTn6/FeiKrZc6n1Jqm/mntKUpMOcSrzUeO7DNPDAy+0Hdk3IFQPEK8xa7 ufrKPjq9YQC0wB35vqMM0N27Isi6/U/dMh+H6Wr1CUk2Y0Wa -----END CERTIFICATE-----Generated at Wed Nov 5 19:08:34 2025 by rpki-client