$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/LhUBlqfsdgFTXhBfvY9P0OK1pzs.roa File: LhUBlqfsdgFTXhBfvY9P0OK1pzs.roa (raw, json) Hash identifier: XHMA+xNikscXArWUHtNZrgp0coxPfQkvsc3a20oGkMI= Subject key identifier: 2E:15:01:96:A7:EC:76:01:53:5E:10:5F:BD:8F:4F:D0:E2:B5:A7:3B Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 190F Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/LhUBlqfsdgFTXhBfvY9P0OK1pzs.roa Signing time: Fri 22 Aug 2025 09:02:43 +0000 ROA not before: Fri 22 Aug 2025 09:02:43 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 54994 IP address blocks: 203.74.117.128/27 maxlen: 27 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 06:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6415 (0x190f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:02:43 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=2E150196A7EC7601535E105FBD8F4FD0E2B5A73B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3a:ce:75:6e:1a:81:50:a7:76:a5:22:52:f4: d6:eb:43:7d:33:84:ba:6b:ac:67:2a:d6:77:64:c0: de:78:41:0a:29:eb:f2:2c:90:f6:8d:df:18:42:49: 8b:1b:ff:03:18:5f:29:3b:26:c2:22:4e:72:d8:f4: e2:27:e4:13:53:a8:4d:d8:d1:fd:c5:00:8d:ce:87: 14:4a:50:67:5e:c6:61:2a:18:97:fc:a2:fd:07:07: 23:12:0f:2d:68:9f:29:7b:d1:76:ba:3b:70:1e:4c: 48:99:ff:8f:45:5d:7e:02:8f:43:18:06:d4:9f:c0: 86:a9:71:64:ae:8a:c4:a0:5d:ea:70:1d:15:c0:c6: ca:ed:db:1e:35:14:2a:57:de:a5:f6:0c:7e:3a:72: 2b:18:c9:23:4d:2b:e9:a0:f5:46:a3:a9:b2:9c:a1: 4e:99:e4:ef:93:ba:45:85:e7:c2:af:11:77:55:98: a0:82:14:6e:df:7a:20:70:c9:29:c7:11:cb:ad:5f: 74:3c:76:3d:cc:81:cd:1d:d1:88:20:67:ee:0c:b9: 5b:1a:86:13:58:eb:26:42:22:61:0f:d7:ae:1a:5e: b7:c8:50:ef:92:ef:31:2c:b4:01:c1:9d:c1:75:36: a9:88:39:06:3c:86:8b:1d:82:f9:e3:36:8c:c1:1b: 53:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:15:01:96:A7:EC:76:01:53:5E:10:5F:BD:8F:4F:D0:E2:B5:A7:3B X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/LhUBlqfsdgFTXhBfvY9P0OK1pzs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.74.117.128/27 Signature Algorithm: sha256WithRSAEncryption 87:60:02:7c:6f:00:8d:85:77:9d:e7:4b:a8:9c:95:11:1f:78: 31:7c:2f:f1:0a:02:6b:8e:67:24:1c:59:73:af:13:54:7a:ce: 56:d6:dc:bf:d1:ed:47:5a:1c:01:19:83:2f:6e:40:db:73:b1: ed:a9:01:ab:03:6b:b5:b7:30:b0:8f:54:02:89:05:5c:a8:e0: ae:e6:44:d0:ee:22:ca:59:1a:02:51:f5:b4:c5:2c:b7:78:88: 50:36:95:92:e8:6f:93:38:6e:7f:33:d1:18:11:3c:fb:80:17: db:21:c6:19:bb:2f:6c:07:1d:fc:31:13:b3:98:d8:c8:2c:96: ea:86:e6:fb:80:1f:76:e9:cd:a4:dc:3a:bb:cb:64:fc:76:3c: c3:98:d4:65:14:3a:51:72:31:91:db:d0:ce:85:11:19:96:67: 9a:78:34:af:13:a0:9f:65:36:9e:11:ac:83:cf:16:98:32:d5: a0:da:af:e8:3b:7b:f0:92:29:71:c9:34:eb:c1:d1:cf:ec:99: 37:61:67:1e:f5:0e:45:e7:f3:8d:3d:20:b9:2a:9f:2e:85:fa: 17:dc:3d:dc:2f:50:0f:b9:36:45:aa:4c:df:0c:6a:26:13:7a: 5f:89:c6:49:59:55:31:0d:a1:54:ff:5e:6d:1d:ce:3d:69:60: 6d:0b:5e:cf -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICGQ8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAyNDNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDJFMTUwMTk2QTdFQzc2 MDE1MzVFMTA1RkJEOEY0RkQwRTJCNUE3M0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEOs51bhqBUKd2pSJS9NbrQ30zhLprrGcq1ndkwN54QQop6/Is kPaN3xhCSYsb/wMYXyk7JsIiTnLY9OIn5BNTqE3Y0f3FAI3OhxRKUGdexmEqGJf8 ov0HByMSDy1onyl70Xa6O3AeTEiZ/49FXX4Cj0MYBtSfwIapcWSuisSgXepwHRXA xsrt2x41FCpX3qX2DH46cisYySNNK+mg9UajqbKcoU6Z5O+TukWF58KvEXdVmKCC FG7feiBwySnHEcutX3Q8dj3Mgc0d0YggZ+4MuVsahhNY6yZCImEP164aXrfIUO+S 7zEstAHBncF1NqmIOQY8hosdgvnjNozBG1PTAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQULhUBlqfsdgFTXhBfvY9P0OK1pzswHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9MaFVCbHFmc2RnRlRYaEJmdlk5 UDBPSzFwenMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUFy0p1 gDANBgkqhkiG9w0BAQsFAAOCAQEAh2ACfG8AjYV3nedLqJyVER94MXwv8QoCa45n JBxZc68TVHrOVtbcv9HtR1ocARmDL25A23Ox7akBqwNrtbcwsI9UAokFXKjgruZE 0O4iylkaAlH1tMUst3iIUDaVkuhvkzhufzPRGBE8+4AX2yHGGbsvbAcd/DETs5jY yCyW6obm+4AfdunNpNw6u8tk/HY8w5jUZRQ6UXIxkdvQzoURGZZnmng0rxOgn2U2 nhGsg88WmDLVoNqv6Dt78JIpcck068HRz+yZN2FnHvUORefzjT0guSqfLoX6F9w9 3C9QD7k2RapM3wxqJhN6X4nGSVlVMQ2hVP9ebR3OPWlgbQtezw== -----END CERTIFICATE-----Generated at Wed Nov 5 04:41:25 2025 by rpki-client