$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/HK664gq5loUJyahSUSaMojB5DTI.roa File: HK664gq5loUJyahSUSaMojB5DTI.roa (raw, json) Hash identifier: Y3UUzMlWv6PmemUdjLB4Jr6WiRB25ViNVo1O9oNoCi0= Subject key identifier: 1C:AE:BA:E2:0A:B9:96:85:09:C9:A8:52:51:26:8C:A2:30:79:0D:32 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 18CC Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/HK664gq5loUJyahSUSaMojB5DTI.roa Signing time: Fri 22 Aug 2025 09:02:27 +0000 ROA not before: Fri 22 Aug 2025 09:02:27 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 23675 IP address blocks: 203.66.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 16:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6348 (0x18cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:02:27 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=1CAEBAE20AB9968509C9A85251268CA230790D32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b1:99:43:3e:d6:5a:1d:6e:8d:65:d2:86:8c: 6b:a9:73:d5:fd:62:15:a4:83:78:00:2b:e3:74:77: b2:b9:01:eb:d4:37:3c:4e:9a:9b:63:92:6a:17:50: 76:c7:34:cf:1f:ef:41:ea:39:b3:db:e5:a9:43:f6: 6e:0e:39:21:53:8f:21:b6:2a:47:3e:29:3a:12:a4: 35:b1:6e:2e:64:2c:e0:cd:8f:9a:54:27:de:af:56: 08:bd:42:d8:f6:90:44:c0:0f:b4:5e:fc:f0:06:5d: 8b:39:c7:95:c8:6d:71:ee:b2:01:a2:ca:35:31:72: ac:3b:4e:1a:ce:2d:0a:9d:d7:c5:28:ab:ae:22:da: 0d:d3:39:2c:75:58:0f:41:23:4f:27:8c:3e:63:65: c0:d6:15:03:c1:c5:c0:61:30:1e:44:79:a4:1c:58: 26:e7:c3:d1:67:64:ca:f7:75:09:6c:40:eb:4f:f5: 61:bb:e0:de:75:0d:b3:94:43:c3:4d:cc:43:b5:25: 23:cc:e6:5f:ff:c4:eb:bc:b6:13:d6:1a:60:70:1e: f6:3b:6e:dc:ec:69:be:b6:aa:a7:1e:ac:23:ea:74: 4a:87:9e:58:13:d0:fd:3a:2c:fc:2d:ac:fc:14:6e: 97:48:68:69:ed:9e:1e:5a:ae:70:c0:67:67:a1:7e: 25:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:AE:BA:E2:0A:B9:96:85:09:C9:A8:52:51:26:8C:A2:30:79:0D:32 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/HK664gq5loUJyahSUSaMojB5DTI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.66.245.0/24 Signature Algorithm: sha256WithRSAEncryption 77:b9:1e:b9:a2:92:d0:e4:d7:96:14:a6:33:f0:e7:9c:f7:99: 50:fe:cb:66:be:4b:fb:20:c1:57:b2:f3:69:f2:0d:2c:0b:37: ea:ef:6c:40:8f:0f:1b:56:ee:e0:ef:1a:0c:8c:9d:1e:06:11: a4:d8:d2:dd:c0:e5:1d:68:73:21:0d:31:53:88:a6:27:b5:fc: 24:4e:7d:e9:96:66:16:ef:65:d1:86:3c:c0:d1:bc:56:29:3d: 5b:f3:65:47:1d:8c:5b:fc:27:a9:8d:75:97:46:4b:7d:83:6d: cf:82:c9:45:34:e3:dd:cb:92:52:ef:49:99:eb:8c:b9:bc:96: b4:03:aa:f3:6f:28:55:a6:31:e6:d1:da:39:e8:bc:61:be:26: 19:25:6e:6c:87:a2:70:d2:39:94:50:1b:ba:8f:9f:ae:05:9d: 05:e0:84:19:92:3a:1a:d6:38:fb:24:1c:a7:6c:b5:43:23:df: 7c:a4:24:81:81:b9:88:cc:9b:e5:42:6e:e6:ba:ac:38:1d:d6: 1d:20:3e:24:91:bf:bc:e0:77:b3:25:00:5d:c1:a5:d7:c1:4a: fd:b0:c1:9b:f5:5a:53:7c:13:72:09:d2:97:56:ce:dd:2f:7c: 3b:79:07:57:d5:08:0a:39:33:a9:46:c0:80:32:bc:d8:1a:d2: 9c:2e:9e:3f -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICGMwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAyMjdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDFDQUVCQUUyMEFCOTk2 ODUwOUM5QTg1MjUxMjY4Q0EyMzA3OTBEMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIsZlDPtZaHW6NZdKGjGupc9X9YhWkg3gAK+N0d7K5AevUNzxO mptjkmoXUHbHNM8f70HqObPb5alD9m4OOSFTjyG2Kkc+KToSpDWxbi5kLODNj5pU J96vVgi9Qtj2kETAD7Re/PAGXYs5x5XIbXHusgGiyjUxcqw7ThrOLQqd18Uoq64i 2g3TOSx1WA9BI08njD5jZcDWFQPBxcBhMB5EeaQcWCbnw9FnZMr3dQlsQOtP9WG7 4N51DbOUQ8NNzEO1JSPM5l//xOu8thPWGmBwHvY7btzsab62qqcerCPqdEqHnlgT 0P06LPwtrPwUbpdIaGntnh5arnDAZ2ehfiVZAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUHK664gq5loUJyahSUSaMojB5DTIwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9ISzY2NGdxNWxvVUp5YWhTVVNh TW9qQjVEVEkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy0L1 MA0GCSqGSIb3DQEBCwUAA4IBAQB3uR65opLQ5NeWFKYz8Oec95lQ/stmvkv7IMFX svNp8g0sCzfq72xAjw8bVu7g7xoMjJ0eBhGk2NLdwOUdaHMhDTFTiKYntfwkTn3p lmYW72XRhjzA0bxWKT1b82VHHYxb/CepjXWXRkt9g23PgslFNOPdy5JS70mZ64y5 vJa0A6rzbyhVpjHm0do56LxhviYZJW5sh6Jw0jmUUBu6j5+uBZ0F4IQZkjoa1jj7 JBynbLVDI998pCSBgbmIzJvlQm7muqw4HdYdID4kkb+84HezJQBdwaXXwUr9sMGb 9VpTfBNyCdKXVs7dL3w7eQdX1QgKOTOpRsCAMrzYGtKcLp4/ -----END CERTIFICATE-----Generated at Wed Nov 5 15:55:14 2025 by rpki-client