$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/ChLup3y4UUGh8X5S6MMFnuLHsXs.roa File: ChLup3y4UUGh8X5S6MMFnuLHsXs.roa (raw, json) Hash identifier: xZSOWOikiR3GB/yB/1Z6NK9lRmBtIrPJD+Ml+CkbRPM= Subject key identifier: 0A:12:EE:A7:7C:B8:51:41:A1:F1:7E:52:E8:C3:05:9E:E2:C7:B1:7B Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 1954 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ChLup3y4UUGh8X5S6MMFnuLHsXs.roa Signing time: Fri 22 Aug 2025 09:02:59 +0000 ROA not before: Fri 22 Aug 2025 09:02:59 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 3462 IP address blocks: 43.255.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 11:29:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6484 (0x1954) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:02:59 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=0A12EEA77CB85141A1F17E52E8C3059EE2C7B17B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:1e:b3:c2:70:3e:2e:8f:55:11:6d:70:f0:2c: 43:86:9a:d4:e5:a9:84:47:1c:09:8d:8f:65:f7:ac: fb:0d:f4:19:c7:bb:37:f9:fc:bf:6f:eb:59:51:31: 89:5e:a0:e6:08:45:95:fd:b4:2e:9d:d3:48:d8:f0: 74:94:f8:d3:05:67:15:0d:10:a7:22:1b:a3:ba:25: 65:21:d2:62:a7:0d:0d:7e:ca:56:e4:f9:39:8c:6d: 7b:e6:24:ba:8e:02:ef:76:53:ed:b7:6d:4c:e9:25: 80:41:11:e0:9a:d1:4f:d1:ac:16:54:32:1f:18:0a: b8:fd:8c:96:5c:94:28:5a:36:fa:54:c3:70:9a:0a: ff:0e:6d:69:27:82:64:4f:7e:80:8b:00:7e:e4:58: a2:fb:49:bc:ea:86:54:a2:df:59:0a:ff:f6:a8:17: 34:d8:ca:ba:77:69:fd:3f:e4:a5:5f:35:bf:f6:97: eb:61:64:f5:aa:95:00:b0:51:b7:92:00:32:82:80: 5a:0e:a9:a4:fd:22:fa:5f:e4:c9:c8:ab:d5:b6:28: 5b:1f:c1:41:d3:93:9e:4b:58:a5:9a:fe:43:95:10: 13:2c:a8:66:3f:eb:f6:c9:41:3a:74:ca:2d:2d:ea: b6:5d:13:be:ce:df:e5:96:4d:c9:76:fa:42:85:10: be:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:12:EE:A7:7C:B8:51:41:A1:F1:7E:52:E8:C3:05:9E:E2:C7:B1:7B X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ChLup3y4UUGh8X5S6MMFnuLHsXs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.255.92.0/22 Signature Algorithm: sha256WithRSAEncryption 67:0f:78:99:22:be:01:7f:fb:0e:a7:b8:78:40:bd:cc:cd:7b: 6e:ef:0a:74:26:19:e8:63:cc:33:1f:37:98:4d:f4:68:40:05: f6:a6:3b:34:e4:52:3f:67:c7:7c:4b:40:68:6f:32:c7:f8:18: 7f:41:49:06:ea:a7:20:b7:85:56:94:b3:c4:30:ba:5a:64:37: 13:90:73:21:94:c3:35:48:d6:c7:1b:2b:4f:40:b3:0d:53:1f: b9:a5:31:2b:4f:20:55:3e:ca:fa:64:91:12:c1:c5:12:76:35: 30:43:1e:fe:99:d9:79:6d:21:6e:22:8b:61:5c:06:d0:f1:b3: b6:58:39:77:d9:de:74:25:a1:5e:f1:b2:45:33:28:7d:c7:09: 4b:78:5f:e4:f7:db:b4:62:58:c9:ef:cc:10:6e:43:65:3e:ff: 41:8d:ec:10:69:67:c5:de:53:05:da:fd:93:41:be:24:a3:d6: c7:8e:2e:f3:b2:94:1e:21:e7:12:01:1a:39:08:f9:d7:7b:80: 10:9a:96:e9:a0:21:b2:0c:54:b0:c5:9a:0a:7c:a5:85:9a:0d: 9a:7a:05:c7:d7:d0:17:73:67:88:48:68:4f:e9:bb:fc:6c:7c: 50:31:f5:d5:e3:b1:f0:47:69:c3:4d:75:78:b4:55:26:42:e1: 9e:b5:f8:65 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICGVQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAyNTlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDBBMTJFRUE3N0NCODUx NDFBMUYxN0U1MkU4QzMwNTlFRTJDN0IxN0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDeHrPCcD4uj1URbXDwLEOGmtTlqYRHHAmNj2X3rPsN9BnHuzf5 /L9v61lRMYleoOYIRZX9tC6d00jY8HSU+NMFZxUNEKciG6O6JWUh0mKnDQ1+ylbk +TmMbXvmJLqOAu92U+23bUzpJYBBEeCa0U/RrBZUMh8YCrj9jJZclChaNvpUw3Ca Cv8ObWkngmRPfoCLAH7kWKL7SbzqhlSi31kK//aoFzTYyrp3af0/5KVfNb/2l+th ZPWqlQCwUbeSADKCgFoOqaT9Ivpf5MnIq9W2KFsfwUHTk55LWKWa/kOVEBMsqGY/ 6/bJQTp0yi0t6rZdE77O3+WWTcl2+kKFEL7vAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUChLup3y4UUGh8X5S6MMFnuLHsXswHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9DaEx1cDN5NFVVR2g4WDVTNk1N Rm51TEhzWHMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCK/9c MA0GCSqGSIb3DQEBCwUAA4IBAQBnD3iZIr4Bf/sOp7h4QL3MzXtu7wp0JhnoY8wz HzeYTfRoQAX2pjs05FI/Z8d8S0BobzLH+Bh/QUkG6qcgt4VWlLPEMLpaZDcTkHMh lMM1SNbHGytPQLMNUx+5pTErTyBVPsr6ZJESwcUSdjUwQx7+mdl5bSFuIothXAbQ 8bO2WDl32d50JaFe8bJFMyh9xwlLeF/k99u0YljJ78wQbkNlPv9BjewQaWfF3lMF 2v2TQb4ko9bHji7zspQeIecSARo5CPnXe4AQmpbpoCGyDFSwxZoKfKWFmg2aegXH 19AXc2eISGhP6bv8bHxQMfXV47HwR2nDTXV4tFUmQuGetfhl -----END CERTIFICATE-----Generated at Wed Nov 5 07:48:34 2025 by rpki-client