$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/44DuWVKCGNs4Y-0b8EjhD0WAO9c.roa File: 44DuWVKCGNs4Y-0b8EjhD0WAO9c.roa (raw, json) Hash identifier: udgw1+wONRdEpJobVN+O1zmXsmaAE1OdgmDrXjSommA= Subject key identifier: E3:80:EE:59:52:82:18:DB:38:63:ED:1B:F0:48:E1:0F:45:80:3B:D7 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 1959 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/44DuWVKCGNs4Y-0b8EjhD0WAO9c.roa Signing time: Fri 22 Aug 2025 09:03:01 +0000 ROA not before: Fri 22 Aug 2025 09:03:01 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 21859 IP address blocks: 210.61.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 06:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6489 (0x1959) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:03:01 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=E380EE59528218DB3863ED1BF048E10F45803BD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:16:ee:9d:02:65:2d:b7:ba:15:9a:4a:0c:f4: 4d:da:93:3d:9b:d2:1e:8a:21:de:f3:7d:ac:35:40: 93:67:48:93:ad:41:20:dc:be:b3:19:ee:50:00:d9: 70:58:54:b8:bb:38:74:d2:64:c9:e9:c5:8c:01:80: 12:d0:28:f1:f2:2b:d5:11:91:c1:8c:cf:3d:03:c6: b8:a6:be:e6:8d:30:9c:88:c9:e2:1d:0b:d3:a7:3f: 0b:eb:4f:29:4f:5a:8a:46:27:1e:04:fc:6c:7c:1e: 56:44:09:f5:fc:a5:b9:17:ef:f8:0d:0c:ce:c9:db: fe:0b:28:43:cf:f3:97:cb:78:05:20:18:d3:27:61: 80:d2:9d:39:f7:23:0f:81:ad:c5:ec:18:b2:2c:d0: 72:5b:e8:cb:93:eb:27:f3:ed:80:78:2f:a8:b2:45: d6:d1:76:1b:0b:27:74:d2:f5:2a:32:be:b7:06:67: 88:4e:23:c5:86:ce:12:b3:c5:b9:26:6a:46:e0:8b: 4c:a1:34:c9:77:2e:a7:03:2d:19:96:27:be:81:02: a7:ff:ea:6c:e8:56:7e:ef:8b:c1:c9:fe:03:26:e5: 2a:bd:59:be:1a:f7:f5:9d:d6:d0:ac:0f:c3:73:15: fa:10:31:e8:72:8d:77:c9:e5:ab:09:c6:0e:b9:29: f0:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:80:EE:59:52:82:18:DB:38:63:ED:1B:F0:48:E1:0F:45:80:3B:D7 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/44DuWVKCGNs4Y-0b8EjhD0WAO9c.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.61.201.0/24 Signature Algorithm: sha256WithRSAEncryption c8:67:87:5d:77:ec:f4:6d:bf:88:8a:ad:cf:30:4f:d8:cc:fd: 3c:a6:15:e8:20:14:a6:22:eb:0e:10:34:13:07:a9:a5:a5:33: da:56:9d:84:80:f0:55:91:72:77:d8:85:d3:3b:a1:81:1c:d1: f9:1e:98:cf:84:30:b8:69:60:f3:14:5e:68:8e:d0:ab:a1:ea: ba:b1:65:76:78:ef:37:79:04:3c:5e:6e:e9:b6:8a:01:4d:09: 8e:fc:3f:79:9e:93:7a:59:29:7b:fd:b5:1d:3b:87:8b:51:29: a6:49:4b:ac:2f:0b:d9:5d:ee:27:f8:8d:14:3f:f0:56:a0:fb: 0a:66:7b:a2:2e:11:a0:98:6c:75:b5:2a:b4:e1:c5:fc:ed:5d: e5:e1:6f:0e:77:d8:87:2f:3f:45:a8:f5:85:5b:bc:37:2a:15: 78:c2:5a:65:00:c9:f0:dc:67:7e:56:33:28:0c:a2:e9:8d:3e: f6:b6:be:4b:95:d7:ad:07:92:79:e4:15:c7:0b:71:24:0c:ff: 8a:44:b9:71:4d:a5:25:54:e2:13:ce:7d:9c:3d:bb:8e:7a:ab: e1:19:09:1d:a5:c4:f5:97:37:93:b5:a9:03:4c:a9:1c:b5:f1: b3:2d:96:98:9a:ab:85:52:33:0f:c5:e5:f2:37:0a:ec:2f:41: a5:ff:d0:df -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICGVkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAzMDFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEUzODBFRTU5NTI4MjE4 REIzODYzRUQxQkYwNDhFMTBGNDU4MDNCRDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCdFu6dAmUtt7oVmkoM9E3akz2b0h6KId7zfaw1QJNnSJOtQSDc vrMZ7lAA2XBYVLi7OHTSZMnpxYwBgBLQKPHyK9URkcGMzz0DxrimvuaNMJyIyeId C9OnPwvrTylPWopGJx4E/Gx8HlZECfX8pbkX7/gNDM7J2/4LKEPP85fLeAUgGNMn YYDSnTn3Iw+BrcXsGLIs0HJb6MuT6yfz7YB4L6iyRdbRdhsLJ3TS9SoyvrcGZ4hO I8WGzhKzxbkmakbgi0yhNMl3LqcDLRmWJ76BAqf/6mzoVn7vi8HJ/gMm5Sq9Wb4a 9/Wd1tCsD8NzFfoQMehyjXfJ5asJxg65KfDNAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU44DuWVKCGNs4Y+0b8EjhD0WAO9cwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC80NER1V1ZLQ0dOczRZLTBiOEVq aEQwV0FPOWMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0j3J MA0GCSqGSIb3DQEBCwUAA4IBAQDIZ4ddd+z0bb+Iiq3PME/YzP08phXoIBSmIusO EDQTB6mlpTPaVp2EgPBVkXJ32IXTO6GBHNH5HpjPhDC4aWDzFF5ojtCroeq6sWV2 eO83eQQ8Xm7ptooBTQmO/D95npN6WSl7/bUdO4eLUSmmSUusLwvZXe4n+I0UP/BW oPsKZnuiLhGgmGx1tSq04cX87V3l4W8Od9iHLz9FqPWFW7w3KhV4wlplAMnw3Gd+ VjMoDKLpjT72tr5LldetB5J55BXHC3EkDP+KRLlxTaUlVOITzn2cPbuOeqvhGQkd pcT1lzeTtakDTKkctfGzLZaYmquFUjMPxeXyNwrsL0Gl/9Df -----END CERTIFICATE-----Generated at Wed Nov 5 05:37:11 2025 by rpki-client