$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/87r84j7jfPJYZTm1hv7pjvtAFwU.roa File: 87r84j7jfPJYZTm1hv7pjvtAFwU.roa (raw, json) Hash identifier: IIXgkSTd3bwL+Y0dBeShavNyFIT1tWMAtC1GTNkOTQA= Subject key identifier: F3:BA:FC:E2:3E:E3:7C:F2:58:65:39:B5:86:FE:E9:8E:FB:40:17:05 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 192F Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/87r84j7jfPJYZTm1hv7pjvtAFwU.roa Signing time: Fri 22 Aug 2025 09:02:51 +0000 ROA not before: Fri 22 Aug 2025 09:02:51 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 3462 IP address blocks: 59.120.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 11:29:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6447 (0x192f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:02:51 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=F3BAFCE23EE37CF2586539B586FEE98EFB401705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:bb:c1:92:5a:2b:63:d4:99:64:93:e2:fc:c6: 21:62:f9:ae:4b:39:13:1c:d3:75:12:87:7b:9d:03: f2:11:35:df:d8:c6:e4:17:90:85:40:ad:85:2c:bb: 9c:7b:20:3f:2f:02:0b:46:10:50:c9:6e:7b:e5:43: a0:57:dc:50:71:66:c5:79:51:9c:4c:0b:3b:af:f1: bd:81:e2:f4:45:8d:60:36:0d:4a:c5:70:44:53:ff: ac:1a:52:a1:24:15:5a:40:99:3f:c8:b8:58:12:f7: 16:06:a1:18:03:64:cd:c9:20:61:46:f2:5a:d7:36: 4a:2c:f5:38:65:fe:d5:ff:47:a7:8e:35:18:26:41: b7:1e:35:97:db:88:8a:3b:84:a2:bb:d7:2d:0c:69: 55:1d:c1:b3:3a:b8:f4:fe:f7:07:75:d4:81:29:1f: 74:a2:d2:22:f8:d5:46:c0:e3:d3:37:55:df:b1:f5: bd:4d:7c:94:09:26:00:6e:5c:79:1e:1f:b0:8e:47: b9:d0:d8:f0:56:72:7b:21:4c:86:8a:fe:71:8a:e2: 71:20:30:0b:89:67:98:d3:1b:71:6b:55:10:9a:e6: b8:de:53:ae:52:c4:43:2f:b5:48:53:b0:3e:13:a1: 4a:3e:0b:1b:25:50:5f:ef:49:18:f7:89:b4:0c:2f: 5c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:BA:FC:E2:3E:E3:7C:F2:58:65:39:B5:86:FE:E9:8E:FB:40:17:05 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/87r84j7jfPJYZTm1hv7pjvtAFwU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 59.120.0.0/14 Signature Algorithm: sha256WithRSAEncryption a8:f6:55:73:1e:af:5e:13:39:b1:51:1c:e2:65:5d:40:be:96: 3c:a2:97:55:94:25:0a:a4:8d:5f:75:af:1c:53:29:9d:ec:87: 54:5f:01:62:f6:d8:86:3c:03:f1:44:eb:20:ad:dd:aa:12:3f: a7:9c:64:00:3b:d6:20:c5:11:50:11:2e:8a:9e:d3:7c:84:16: 16:a8:f1:c5:39:cf:f1:e0:49:d0:46:e2:51:53:70:66:db:34: d3:5a:2d:07:da:11:ab:ff:dc:df:f6:12:2e:c0:7b:2b:24:de: 30:d2:59:39:08:99:f8:fb:85:41:38:c1:ad:4c:dc:63:54:6e: de:8a:59:0a:4f:e4:a2:ba:60:de:bd:08:c8:b0:91:e0:fb:db: 64:3a:b8:43:a8:c0:74:75:ff:6b:dc:a0:67:08:3c:2d:ed:fd: 0d:35:ee:4c:29:bf:e5:ab:63:d6:3b:05:e0:2f:42:0b:86:d0: a9:eb:ef:22:28:09:23:2b:63:41:86:41:31:90:11:31:b9:5b: ef:24:0a:af:1e:db:9b:bb:3a:21:11:2a:d1:9f:0d:7e:54:88: 48:2c:8c:a8:02:67:86:62:5b:cb:fa:f5:6c:f5:7e:d3:9f:3c: 60:a9:27:16:68:89:98:03:8d:de:a8:c0:b2:12:08:28:9c:60: 8c:92:33:e1 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICGS8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAyNTFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEYzQkFGQ0UyM0VFMzdD RjI1ODY1MzlCNTg2RkVFOThFRkI0MDE3MDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDeu8GSWitj1Jlkk+L8xiFi+a5LORMc03USh3udA/IRNd/YxuQX kIVArYUsu5x7ID8vAgtGEFDJbnvlQ6BX3FBxZsV5UZxMCzuv8b2B4vRFjWA2DUrF cERT/6waUqEkFVpAmT/IuFgS9xYGoRgDZM3JIGFG8lrXNkos9Thl/tX/R6eONRgm QbceNZfbiIo7hKK71y0MaVUdwbM6uPT+9wd11IEpH3Si0iL41UbA49M3Vd+x9b1N fJQJJgBuXHkeH7COR7nQ2PBWcnshTIaK/nGK4nEgMAuJZ5jTG3FrVRCa5rjeU65S xEMvtUhTsD4ToUo+CxslUF/vSRj3ibQML1zHAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQU87r84j7jfPJYZTm1hv7pjvtAFwUwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC84N3I4NGo3amZQSllaVG0xaHY3 cGp2dEFGd1Uucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCO3gw DQYJKoZIhvcNAQELBQADggEBAKj2VXMer14TObFRHOJlXUC+ljyil1WUJQqkjV91 rxxTKZ3sh1RfAWL22IY8A/FE6yCt3aoSP6ecZAA71iDFEVARLoqe03yEFhao8cU5 z/HgSdBG4lFTcGbbNNNaLQfaEav/3N/2Ei7Aeysk3jDSWTkImfj7hUE4wa1M3GNU bt6KWQpP5KK6YN69CMiwkeD722Q6uEOowHR1/2vcoGcIPC3t/Q017kwpv+WrY9Y7 BeAvQguG0Knr7yIoCSMrY0GGQTGQETG5W+8kCq8e25u7OiERKtGfDX5UiEgsjKgC Z4ZiW8v69Wz1ftOfPGCpJxZoiZgDjd6owLISCCicYIySM+E= -----END CERTIFICATE-----Generated at Wed Nov 5 08:06:48 2025 by rpki-client