$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/AVwJ2j0qf-krWQztwFkkcifzoU4.roa File: AVwJ2j0qf-krWQztwFkkcifzoU4.roa (raw, json) Hash identifier: fnvvW7J5318PZAgxWBn3E8ARZmrc900Jy6YKqKleXj0= Subject key identifier: 01:5C:09:DA:3D:2A:7F:E9:2B:59:0C:ED:C0:59:24:72:27:F3:A1:4E Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 192D Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/AVwJ2j0qf-krWQztwFkkcifzoU4.roa Signing time: Fri 22 Aug 2025 09:02:50 +0000 ROA not before: Fri 22 Aug 2025 09:02:50 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 20940 IP address blocks: 2001:b034:700:600::/56 maxlen: 56 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 06:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6445 (0x192d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:02:50 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=015C09DA3D2A7FE92B590CEDC059247227F3A14E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:af:b1:8f:30:1c:7f:d7:89:92:d8:77:0f:8a: 12:93:6c:77:34:64:6b:2a:5a:63:ad:df:2d:25:bc: bd:d7:27:b8:ea:20:10:27:70:29:5a:5f:e3:14:25: 41:6d:83:a1:a5:40:ac:f8:82:5b:66:00:56:e4:ad: 00:66:33:32:79:d6:8f:2a:2c:6f:3a:70:97:0f:ea: db:99:9a:d8:44:0e:55:f9:ad:64:69:98:19:c7:bd: 45:9c:d6:e2:bc:88:36:b4:7e:c4:78:b8:84:d8:ee: d6:55:b2:94:04:0b:4c:05:f9:fb:f9:df:50:e6:d9: 45:c7:e9:c2:7f:aa:3c:f8:c2:f9:83:60:af:d7:b2: 33:b8:b0:8c:34:cb:fb:19:c5:ef:43:d4:f1:15:0b: 8a:51:84:bd:91:f7:44:aa:0b:5b:9f:04:2f:0a:8c: 50:77:0d:f0:8b:64:a5:75:53:60:ae:61:97:65:4a: 1e:b4:35:de:37:de:3b:26:b1:85:7a:50:5b:72:a3: 7c:48:ab:94:c8:78:87:09:93:42:da:b8:67:50:16: 71:1b:fb:1a:a6:a3:ec:7d:7c:ac:e4:55:7a:cc:92: 97:b5:7c:d5:39:78:f6:01:31:b9:b5:fd:8a:49:55: 26:9f:a6:e0:83:70:d2:32:d2:8b:19:ac:8d:10:93: bd:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:5C:09:DA:3D:2A:7F:E9:2B:59:0C:ED:C0:59:24:72:27:F3:A1:4E X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/AVwJ2j0qf-krWQztwFkkcifzoU4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2001:b034:700:600::/56 Signature Algorithm: sha256WithRSAEncryption 38:84:a7:50:f2:8a:c6:8b:9c:bf:92:77:d2:c4:8d:be:d5:3c: d0:6c:da:72:f1:33:9d:50:bd:ef:b3:fb:36:be:f8:61:16:0f: 8c:0a:f9:35:eb:4d:e6:cd:f4:63:5e:f9:a4:97:a4:a2:c0:e8: d6:07:04:26:7e:18:89:30:06:42:da:76:63:05:f9:04:cf:1e: 1d:38:c0:dc:f7:a5:20:db:ef:fc:67:5b:c4:12:2c:ae:5a:c1: f0:79:47:4d:ee:a8:3a:ce:26:f3:3a:06:b7:f9:3e:56:da:ec: 8e:3b:f7:88:73:c2:c8:16:b9:80:05:5d:46:4c:97:4a:b1:73: 98:a6:84:ac:30:fb:67:5d:7a:e7:8b:1c:18:18:0b:0b:ab:e2: a2:2c:6b:55:06:79:11:f7:93:9a:40:ec:ce:c8:d5:17:f8:7b: 4f:8b:24:96:0b:bd:d2:cd:f0:7c:2c:9b:51:de:ee:77:b0:f8: a6:e6:8b:ba:6f:a1:37:c9:4f:15:9f:06:ae:77:5e:b0:85:1b: 08:fc:b1:45:be:dc:57:66:cc:c4:b8:96:a1:2f:fd:24:ac:b8: e9:0b:d2:60:91:e1:ff:77:71:19:e3:9c:62:e0:82:2d:3f:2c: 0b:61:af:87:d1:e7:b7:ab:27:51:9a:82:1d:dd:da:7d:90:7c: 42:42:4f:40 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICGS0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAyNTBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDAxNUMwOURBM0QyQTdG RTkyQjU5MENFREMwNTkyNDcyMjdGM0ExNEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIr7GPMBx/14mS2HcPihKTbHc0ZGsqWmOt3y0lvL3XJ7jqIBAn cClaX+MUJUFtg6GlQKz4gltmAFbkrQBmMzJ51o8qLG86cJcP6tuZmthEDlX5rWRp mBnHvUWc1uK8iDa0fsR4uITY7tZVspQEC0wF+fv531Dm2UXH6cJ/qjz4wvmDYK/X sjO4sIw0y/sZxe9D1PEVC4pRhL2R90SqC1ufBC8KjFB3DfCLZKV1U2CuYZdlSh60 Nd433jsmsYV6UFtyo3xIq5TIeIcJk0LauGdQFnEb+xqmo+x9fKzkVXrMkpe1fNU5 ePYBMbm1/YpJVSafpuCDcNIy0osZrI0Qk72bAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUAVwJ2j0qf+krWQztwFkkcifzoU4wHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9BVndKMmowcWYta3JXUXp0d0Zr a2NpZnpvVTQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAAjAKAwgAIAGw NAcABjANBgkqhkiG9w0BAQsFAAOCAQEAOISnUPKKxoucv5J30sSNvtU80GzacvEz nVC977P7Nr74YRYPjAr5NetN5s30Y175pJekosDo1gcEJn4YiTAGQtp2YwX5BM8e HTjA3PelINvv/GdbxBIsrlrB8HlHTe6oOs4m8zoGt/k+Vtrsjjv3iHPCyBa5gAVd RkyXSrFzmKaErDD7Z11654scGBgLC6vioixrVQZ5EfeTmkDszsjVF/h7T4sklgu9 0s3wfCybUd7ud7D4puaLum+hN8lPFZ8GrndesIUbCPyxRb7cV2bMxLiWoS/9JKy4 6QvSYJHh/3dxGeOcYuCCLT8sC2Gvh9Hnt6snUZqCHd3afZB8QkJPQA== -----END CERTIFICATE-----Generated at Wed Nov 5 04:42:05 2025 by rpki-client