$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/EwTBR9EUqD9h4nwZq4pTnOjG5Ec.roa File: EwTBR9EUqD9h4nwZq4pTnOjG5Ec.roa (raw, json) Hash identifier: P8gd8zwME4mqR6ZbVGRnc7/skSC+8Ub8bAzbxva+EVM= Subject key identifier: 13:04:C1:47:D1:14:A8:3F:61:E2:7C:19:AB:8A:53:9C:E8:C6:E4:47 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 1946 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/EwTBR9EUqD9h4nwZq4pTnOjG5Ec.roa Signing time: Fri 22 Aug 2025 09:02:55 +0000 ROA not before: Fri 22 Aug 2025 09:02:55 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 10126 IP address blocks: 220.128.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 11:29:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6470 (0x1946) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:02:55 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=1304C147D114A83F61E27C19AB8A539CE8C6E447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e9:17:95:62:87:e3:ee:25:b7:61:a3:b9:5b: 75:05:5b:d9:5d:44:7c:03:ee:2c:4e:cc:2e:a0:95: d3:bc:39:2e:3c:b0:4d:04:99:9c:67:f1:94:4c:d7: e4:83:9b:60:b6:b2:61:3a:79:36:ec:cb:ff:7a:0a: c7:92:73:64:18:5f:96:7b:9b:a8:ff:2e:36:00:f0: 6e:9e:b0:6e:78:93:43:6a:22:4e:7f:68:8f:7b:29: 06:05:f7:bb:48:12:c5:f5:0e:a8:39:1c:df:c2:59: 65:90:81:5f:88:3f:2b:30:c4:95:96:2f:52:a0:0e: 8b:5f:b0:40:31:db:08:37:0e:86:32:3b:14:8b:40: c1:4b:cb:5d:bb:3e:16:d2:f3:5b:67:14:22:e0:1f: 53:8d:a0:3b:d2:85:15:9f:67:7b:69:af:bb:84:be: dd:82:63:49:a4:14:8b:04:a7:07:86:93:68:36:4c: dc:0e:25:f4:64:cf:15:cb:43:17:11:62:3c:57:15: af:ab:38:14:3e:4f:43:57:41:d7:eb:62:38:4b:e2: a4:ea:b0:58:f8:5b:ff:09:93:c4:56:e6:f0:83:c7: e7:81:66:e2:3f:50:3f:d2:30:7b:35:cc:56:11:30: 14:ae:fb:da:94:4f:67:61:c9:e7:27:76:b4:7f:01: 11:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:04:C1:47:D1:14:A8:3F:61:E2:7C:19:AB:8A:53:9C:E8:C6:E4:47 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/EwTBR9EUqD9h4nwZq4pTnOjG5Ec.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 220.128.56.0/21 Signature Algorithm: sha256WithRSAEncryption ce:ba:85:9c:c5:cc:30:52:e4:e9:f0:a6:9f:4e:d7:0e:72:0b: d1:94:d0:67:48:30:4f:6b:bf:0e:b0:62:77:6e:44:ed:79:50: ab:fd:e6:5a:17:d2:8d:1c:07:d1:e2:3f:57:a0:f9:9f:7a:16: 71:d2:03:82:8e:ff:b0:ba:3c:04:14:a9:34:79:72:c4:94:c5: 9f:be:c4:b0:6e:17:f8:12:8b:ef:ee:ae:38:11:69:4a:6d:e5: 9d:db:38:1c:43:00:19:bd:a4:67:0c:7f:c8:54:50:d2:76:34: 13:cc:70:d8:fb:64:1f:1b:45:f7:bc:5c:32:50:87:24:2e:18: 54:9f:7a:fc:00:8c:d4:46:8e:9a:8f:56:7f:57:5c:84:d4:6f: a9:c9:49:7d:3c:25:28:03:ec:1d:6c:a4:cf:6d:6e:cc:b7:1e: a5:fa:6e:a9:45:ea:1e:4c:55:9d:4b:82:7d:5d:b0:c8:19:ff: 85:c2:64:5e:af:86:90:ce:5d:c0:62:37:03:1e:47:fd:59:fa: 1b:fa:68:43:af:41:9c:21:ca:af:ee:6a:f3:bc:fe:c1:e7:eb: 9b:10:4a:0b:e7:fd:f9:d2:65:b6:de:3b:ee:61:75:61:23:bb: 33:fc:2e:3e:ba:e8:9a:52:4e:6c:c6:83:fb:ec:46:f8:c2:e0: f3:14:b7:7f -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICGUYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAyNTVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDEzMDRDMTQ3RDExNEE4 M0Y2MUUyN0MxOUFCOEE1MzlDRThDNkU0NDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCr6ReVYofj7iW3YaO5W3UFW9ldRHwD7ixOzC6gldO8OS48sE0E mZxn8ZRM1+SDm2C2smE6eTbsy/96CseSc2QYX5Z7m6j/LjYA8G6esG54k0NqIk5/ aI97KQYF97tIEsX1Dqg5HN/CWWWQgV+IPyswxJWWL1KgDotfsEAx2wg3DoYyOxSL QMFLy127PhbS81tnFCLgH1ONoDvShRWfZ3tpr7uEvt2CY0mkFIsEpweGk2g2TNwO JfRkzxXLQxcRYjxXFa+rOBQ+T0NXQdfrYjhL4qTqsFj4W/8Jk8RW5vCDx+eBZuI/ UD/SMHs1zFYRMBSu+9qUT2dhyecndrR/ARE9AgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUEwTBR9EUqD9h4nwZq4pTnOjG5EcwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9Fd1RCUjlFVXFEOWg0bndacTRw VG5Pakc1RWMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD3IA4 MA0GCSqGSIb3DQEBCwUAA4IBAQDOuoWcxcwwUuTp8KafTtcOcgvRlNBnSDBPa78O sGJ3bkTteVCr/eZaF9KNHAfR4j9XoPmfehZx0gOCjv+wujwEFKk0eXLElMWfvsSw bhf4Eovv7q44EWlKbeWd2zgcQwAZvaRnDH/IVFDSdjQTzHDY+2QfG0X3vFwyUIck LhhUn3r8AIzURo6aj1Z/V1yE1G+pyUl9PCUoA+wdbKTPbW7Mtx6l+m6pReoeTFWd S4J9XbDIGf+FwmRer4aQzl3AYjcDHkf9Wfob+mhDr0GcIcqv7mrzvP7B5+ubEEoL 5/350mW23jvuYXVhI7sz/C4+uuiaUk5sxoP77Eb4wuDzFLd/ -----END CERTIFICATE-----Generated at Wed Nov 5 08:34:21 2025 by rpki-client