$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/N-HCa4SLNHTnYrg0DbkV8bGRVy0.roa File: N-HCa4SLNHTnYrg0DbkV8bGRVy0.roa (raw, json) Hash identifier: cbliIKrwnJ7IxdUrQeGEiRB44btz2xV87aQFyNtdJa4= Subject key identifier: 37:E1:C2:6B:84:8B:34:74:E7:62:B8:34:0D:B9:15:F1:B1:91:57:2D Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 18E8 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/N-HCa4SLNHTnYrg0DbkV8bGRVy0.roa Signing time: Fri 22 Aug 2025 09:02:35 +0000 ROA not before: Fri 22 Aug 2025 09:02:35 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 800 IP address blocks: 175.111.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 06:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6376 (0x18e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:02:35 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=37E1C26B848B3474E762B8340DB915F1B191572D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:08:be:3b:2c:34:2a:4c:c0:96:cb:6a:74:7f: 2e:aa:65:cb:2a:74:e5:d7:de:9b:3c:8f:58:db:41: 85:75:ae:73:ce:a1:26:74:83:6d:35:c8:32:72:5f: 9d:93:b4:96:e8:2d:0f:48:e2:5a:78:e0:35:92:23: ae:d3:c1:ee:f3:24:96:ec:80:10:06:14:9b:c8:ac: 95:06:37:47:40:53:8a:a6:3d:2a:59:9a:ff:fc:ca: 13:58:f6:f6:80:d4:90:26:db:36:79:87:13:5c:d8: c0:77:38:96:20:88:93:98:6a:7e:7f:10:b1:7f:9d: 73:55:82:b9:0f:49:6c:e6:0f:50:f4:4a:0b:8e:6f: cf:16:d3:5f:3d:e3:ee:8b:f9:1a:23:8f:af:0a:9d: b7:03:8d:e6:55:16:2d:44:5e:3f:d3:cd:c5:b1:6b: f2:c7:b1:ce:7f:5e:a9:a2:2b:2e:b4:e2:87:02:00: d5:4e:50:9a:cd:44:8a:44:6a:ab:ac:ca:c7:81:58: 77:2d:7d:82:7f:02:79:4f:6f:e9:92:76:f6:7e:e4: 6a:c8:aa:4f:7b:1f:f4:e8:c6:69:f5:bf:d4:a4:34: 71:ba:36:fd:fb:d7:ad:ed:f6:1d:81:3a:47:01:9e: b3:3a:64:16:78:e7:cc:a7:a4:8a:12:ae:47:42:3d: 4a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:E1:C2:6B:84:8B:34:74:E7:62:B8:34:0D:B9:15:F1:B1:91:57:2D X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/N-HCa4SLNHTnYrg0DbkV8bGRVy0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 175.111.238.0/24 Signature Algorithm: sha256WithRSAEncryption 41:4d:6e:db:94:a0:a9:15:d5:33:2f:be:a4:91:f4:e6:79:ec: 1c:e1:71:f3:64:d9:ca:31:c9:8d:9c:e4:7e:bc:c2:e1:18:cb: 8a:8f:3b:46:21:02:b0:ef:41:3c:2f:dd:c0:13:af:10:a3:86: 25:0e:d8:0c:dd:32:72:fa:f5:5d:23:5f:bd:ea:95:f3:ff:a0: 6a:c3:43:9a:0f:87:11:56:ef:df:ce:56:3a:21:e3:cf:45:a4: f0:fc:d7:8c:6e:91:64:d4:b0:68:cd:34:56:7f:79:1c:53:c2: 29:f2:48:fa:81:5e:27:e2:fd:98:6b:10:27:82:9e:c1:0f:57: 4f:58:95:21:e7:2d:e6:b3:21:90:8c:bb:46:e5:d8:21:db:90: fd:7a:1e:7e:83:bb:55:51:98:bd:18:c2:0a:ba:95:28:cf:67: 8a:41:11:b6:fd:4c:ac:cf:36:bd:92:2f:40:fc:f9:d0:b8:ae: 67:a5:60:1f:4f:f0:d5:e4:74:ea:53:bb:7e:e0:0e:c8:64:7e: 06:4d:97:c3:1b:4e:d9:ba:de:83:02:ae:1d:11:ef:61:09:6e: 9b:5b:3a:6c:75:db:09:e3:cc:ed:52:12:1d:fe:c3:e2:3a:48: b5:21:9a:cc:a5:0a:d7:e6:ba:6c:43:55:5f:b1:08:f4:4c:e1: 6f:5a:e6:11 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICGOgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAyMzVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDM3RTFDMjZCODQ4QjM0 NzRFNzYyQjgzNDBEQjkxNUYxQjE5MTU3MkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCkCL47LDQqTMCWy2p0fy6qZcsqdOXX3ps8j1jbQYV1rnPOoSZ0 g201yDJyX52TtJboLQ9I4lp44DWSI67Twe7zJJbsgBAGFJvIrJUGN0dAU4qmPSpZ mv/8yhNY9vaA1JAm2zZ5hxNc2MB3OJYgiJOYan5/ELF/nXNVgrkPSWzmD1D0SguO b88W01894+6L+Rojj68KnbcDjeZVFi1EXj/TzcWxa/LHsc5/XqmiKy604ocCANVO UJrNRIpEaqusyseBWHctfYJ/AnlPb+mSdvZ+5GrIqk97H/Toxmn1v9SkNHG6Nv37 163t9h2BOkcBnrM6ZBZ458ynpIoSrkdCPUq5AgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUN+HCa4SLNHTnYrg0DbkV8bGRVy0wHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9OLUhDYTRTTE5IVG5ZcmcwRGJr VjhiR1JWeTAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAr2/u MA0GCSqGSIb3DQEBCwUAA4IBAQBBTW7blKCpFdUzL76kkfTmeewc4XHzZNnKMcmN nOR+vMLhGMuKjztGIQKw70E8L93AE68Qo4YlDtgM3TJy+vVdI1+96pXz/6Bqw0Oa D4cRVu/fzlY6IePPRaTw/NeMbpFk1LBozTRWf3kcU8Ip8kj6gV4n4v2YaxAngp7B D1dPWJUh5y3msyGQjLtG5dgh25D9eh5+g7tVUZi9GMIKupUoz2eKQRG2/Uyszza9 ki9A/PnQuK5npWAfT/DV5HTqU7t+4A7IZH4GTZfDG07Zut6DAq4dEe9hCW6bWzps ddsJ48ztUhId/sPiOki1IZrMpQrX5rpsQ1VfsQj0TOFvWuYR -----END CERTIFICATE-----Generated at Wed Nov 5 02:12:52 2025 by rpki-client