$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/FUDI7kIHxd-NcT-421YLewE35Rs.roa File: FUDI7kIHxd-NcT-421YLewE35Rs.roa (raw, json) Hash identifier: ntU+q99e9bgr3+GL65Rzb6/HPfRAIl+RQ0qVj8OHWIs= Subject key identifier: 15:40:C8:EE:42:07:C5:DF:8D:71:3F:B8:DB:56:0B:7B:01:37:E5:1B Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 1919 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/FUDI7kIHxd-NcT-421YLewE35Rs.roa Signing time: Fri 22 Aug 2025 09:02:45 +0000 ROA not before: Fri 22 Aug 2025 09:02:45 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9505 IP address blocks: 175.41.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 20:59:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6425 (0x1919) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:02:45 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=1540C8EE4207C5DF8D713FB8DB560B7B0137E51B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:26:54:0c:10:16:e2:3a:96:92:53:19:fd:b6: 44:64:cc:d0:53:7f:33:cb:49:ba:b1:79:eb:1f:4f: 58:5c:92:07:8e:73:9a:01:fb:c1:45:13:5e:6f:87: 0e:21:ef:b7:f0:42:24:f6:f6:e6:07:f2:45:1a:52: e3:1c:a1:3d:bc:d6:01:db:59:43:4c:58:db:f8:be: 00:69:ba:e6:9a:a7:1b:58:7f:2a:47:da:fa:c3:af: 86:9f:72:df:cd:a9:e5:d9:03:24:2a:a6:d0:1d:9d: 8d:07:14:f1:26:68:ac:f5:58:63:33:05:60:57:53: ed:0b:60:74:77:d7:18:63:ce:a3:b4:d9:06:66:9c: 84:07:a9:c6:7a:cf:7d:7b:00:e4:a0:3f:02:f6:1f: 4d:9a:c8:dd:37:b3:ba:54:31:c7:c8:f1:89:97:e8: f2:63:a2:1f:7c:21:cf:fb:38:d7:a6:e1:67:5c:9f: 8d:fb:1e:66:d1:c7:97:88:26:b6:d8:45:b9:1b:6e: a6:f0:ac:93:16:92:d7:5e:1d:b7:7c:fc:bf:3b:4e: a5:a2:ec:2a:ec:ea:08:05:93:6a:8e:03:10:6b:7d: e5:8a:24:bb:81:38:57:87:a9:8e:fe:56:a1:00:f0: f2:69:43:80:58:8f:a2:aa:9b:00:62:fa:07:06:20: d7:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:40:C8:EE:42:07:C5:DF:8D:71:3F:B8:DB:56:0B:7B:01:37:E5:1B X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/FUDI7kIHxd-NcT-421YLewE35Rs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 175.41.48.0/20 Signature Algorithm: sha256WithRSAEncryption 03:64:df:17:e7:94:61:5c:df:76:31:b6:7a:3d:2e:fc:d8:10: eb:e5:f2:13:e0:30:23:fd:ad:6e:e8:c8:f2:f8:c0:e4:a7:dc: a0:ec:f8:d8:85:64:d2:0b:7a:b3:4c:17:cc:d6:06:a4:22:7f: d9:31:fb:ca:93:b2:cb:ea:dd:82:0a:ee:ee:4b:44:7c:5e:4c: 89:6b:9a:91:91:41:1b:f9:a2:4b:bc:9e:50:d1:36:83:42:9c: 20:5f:5b:4f:df:70:30:a5:97:78:33:34:f7:a6:0a:1a:65:3b: b5:ae:11:13:7a:52:d6:84:36:9c:fc:1d:d7:f5:14:3d:02:da: 82:1e:be:0b:97:a8:9e:ed:b3:f1:bc:85:ed:30:19:80:e1:b0: 58:0d:63:63:11:e7:68:4d:72:ab:92:0d:d7:21:8a:a7:49:fb: 1e:1e:49:dc:c0:6e:3f:8e:61:60:62:f7:14:d3:b1:c2:58:3d: 0e:c5:d7:33:ce:03:a8:7b:9c:27:f0:b6:c2:d9:34:8b:0c:89: d4:c7:13:f6:9a:b5:a8:5f:12:02:97:91:cd:76:4d:6d:13:c6: ea:e2:a7:79:df:fb:45:28:bd:b2:47:48:e4:62:5a:04:b7:9a: 22:84:77:ca:f0:08:8a:8d:1a:79:9f:c9:94:ba:fd:72:0c:4d: c3:bb:4b:27 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICGRkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAyNDVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDE1NDBDOEVFNDIwN0M1 REY4RDcxM0ZCOERCNTYwQjdCMDEzN0U1MUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAJlQMEBbiOpaSUxn9tkRkzNBTfzPLSbqxeesfT1hckgeOc5oB +8FFE15vhw4h77fwQiT29uYH8kUaUuMcoT281gHbWUNMWNv4vgBpuuaapxtYfypH 2vrDr4afct/NqeXZAyQqptAdnY0HFPEmaKz1WGMzBWBXU+0LYHR31xhjzqO02QZm nIQHqcZ6z317AOSgPwL2H02ayN03s7pUMcfI8YmX6PJjoh98Ic/7ONem4Wdcn437 HmbRx5eIJrbYRbkbbqbwrJMWktdeHbd8/L87TqWi7Crs6ggFk2qOAxBrfeWKJLuB OFeHqY7+VqEA8PJpQ4BYj6KqmwBi+gcGINeLAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUFUDI7kIHxd+NcT+421YLewE35RswHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9GVURJN2tJSHhkLU5jVC00MjFZ TGV3RTM1UnMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErykw MA0GCSqGSIb3DQEBCwUAA4IBAQADZN8X55RhXN92MbZ6PS782BDr5fIT4DAj/a1u 6Mjy+MDkp9yg7PjYhWTSC3qzTBfM1gakIn/ZMfvKk7LL6t2CCu7uS0R8XkyJa5qR kUEb+aJLvJ5Q0TaDQpwgX1tP33AwpZd4MzT3pgoaZTu1rhETelLWhDac/B3X9RQ9 AtqCHr4Ll6ie7bPxvIXtMBmA4bBYDWNjEedoTXKrkg3XIYqnSfseHkncwG4/jmFg YvcU07HCWD0OxdczzgOoe5wn8LbC2TSLDInUxxP2mrWoXxICl5HNdk1tE8bq4qd5 3/tFKL2yR0jkYloEt5oihHfK8AiKjRp5n8mUuv1yDE3Du0sn -----END CERTIFICATE-----Generated at Wed Nov 5 16:58:42 2025 by rpki-client