$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/O2wMWBm8tmfVd9GnsCsudEn71vM.roa File: O2wMWBm8tmfVd9GnsCsudEn71vM.roa (raw, json) Hash identifier: nN1dBJU0bYwmEOAXipLgPGRxIrj2GFLfBQHTfLnJ2j0= Subject key identifier: 3B:6C:0C:58:19:BC:B6:67:D5:77:D1:A7:B0:2B:2E:74:49:FB:D6:F3 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 1929 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/O2wMWBm8tmfVd9GnsCsudEn71vM.roa Signing time: Fri 22 Aug 2025 09:02:49 +0000 ROA not before: Fri 22 Aug 2025 09:02:49 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 198949 IP address blocks: 210.242.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 16:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6441 (0x1929) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:02:49 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=3B6C0C5819BCB667D577D1A7B02B2E7449FBD6F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:71:06:8f:0c:2d:d4:92:3e:f9:b9:10:1b:79: d6:01:e5:c9:38:37:2b:1c:b1:01:79:8c:2d:1e:38: 6a:b7:fb:71:cc:e3:d4:09:56:f0:c4:91:d1:d9:bb: f4:d1:47:10:d8:45:0e:4e:c7:90:3a:54:0e:35:5b: 95:9b:49:63:32:17:8b:85:27:6b:2f:92:44:57:79: 03:77:71:af:2e:c8:28:d0:94:bc:cb:7f:2e:5c:87: a7:93:aa:2c:fa:72:f0:5d:17:c3:57:4d:50:ed:d9: ec:55:cc:4a:49:b2:58:f1:00:43:b8:2e:08:f4:82: 62:ea:8e:79:5f:92:24:c7:a0:41:5c:c2:56:e4:20: 4d:df:aa:ec:51:4f:b6:c2:53:10:59:72:e6:82:74: a0:af:69:9c:ba:6c:39:77:f5:6d:f1:83:07:68:39: 39:b0:c7:98:aa:86:15:30:7f:99:49:2b:2f:3f:d2: 89:2c:18:9f:28:bc:8c:60:c7:d2:54:88:08:d8:bb: 71:bc:2a:ca:2f:05:c4:5a:e6:02:e8:12:9e:8c:e8: ed:4c:9a:28:51:f2:77:c1:22:d0:b4:89:00:97:e9: 81:fc:a3:66:6a:87:78:7d:70:eb:43:6a:78:5b:4b: 10:db:41:7b:a4:55:45:38:55:d8:8e:53:20:d0:7e: 7a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:6C:0C:58:19:BC:B6:67:D5:77:D1:A7:B0:2B:2E:74:49:FB:D6:F3 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/O2wMWBm8tmfVd9GnsCsudEn71vM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.242.123.0/24 Signature Algorithm: sha256WithRSAEncryption 03:ff:26:5e:00:45:17:9f:6e:8c:da:59:c7:bb:d6:13:52:8b: 73:92:9b:16:78:d3:95:61:88:b5:f6:1d:bf:93:36:4e:88:68: 98:ce:f1:5a:2a:54:0a:bf:f9:4b:31:fa:b1:ac:09:df:99:9a: f5:fc:d2:10:9c:de:3c:54:e1:25:48:70:ed:5e:16:b4:58:18: 85:a6:dc:b0:f9:2d:2b:90:d5:06:77:04:23:07:c5:4a:78:48: b9:89:7c:67:d6:a4:1c:39:f8:4b:e7:14:ab:95:d2:4d:f1:9e: 16:a7:92:0d:c4:e0:58:f0:b7:63:a9:37:ab:9b:23:36:7f:3a: 1f:52:99:8e:a4:2a:44:09:81:ab:a3:0d:e4:21:df:c4:69:49: 1d:dd:7f:3a:fa:10:08:fb:8b:92:ea:19:da:ea:cc:4a:54:2d: ca:d2:07:d4:c5:45:23:c2:c3:de:34:06:66:7b:76:28:3d:83: b2:62:9c:64:5e:ca:6b:30:bf:db:41:ee:48:ec:0e:92:fc:34: 94:99:99:be:68:a5:c1:20:51:a2:e2:48:61:d8:d2:e8:8d:0b: 25:6e:3d:06:10:41:f1:37:82:7a:a1:5a:cb:bf:c9:4c:86:0d: 0d:0e:78:d5:09:a5:ea:2b:e4:cd:48:18:5e:95:a0:8d:55:02: 7a:f6:1b:ea -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICGSkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAyNDlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDNCNkMwQzU4MTlCQ0I2 NjdENTc3RDFBN0IwMkIyRTc0NDlGQkQ2RjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCscQaPDC3Ukj75uRAbedYB5ck4NyscsQF5jC0eOGq3+3HM49QJ VvDEkdHZu/TRRxDYRQ5Ox5A6VA41W5WbSWMyF4uFJ2svkkRXeQN3ca8uyCjQlLzL fy5ch6eTqiz6cvBdF8NXTVDt2exVzEpJsljxAEO4Lgj0gmLqjnlfkiTHoEFcwlbk IE3fquxRT7bCUxBZcuaCdKCvaZy6bDl39W3xgwdoOTmwx5iqhhUwf5lJKy8/0oks GJ8ovIxgx9JUiAjYu3G8KsovBcRa5gLoEp6M6O1MmihR8nfBItC0iQCX6YH8o2Zq h3h9cOtDanhbSxDbQXukVUU4VdiOUyDQfnpvAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUO2wMWBm8tmfVd9GnsCsudEn71vMwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9PMndNV0JtOHRtZlZkOUduc0Nz dWRFbjcxdk0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0vJ7 MA0GCSqGSIb3DQEBCwUAA4IBAQAD/yZeAEUXn26M2lnHu9YTUotzkpsWeNOVYYi1 9h2/kzZOiGiYzvFaKlQKv/lLMfqxrAnfmZr1/NIQnN48VOElSHDtXha0WBiFptyw +S0rkNUGdwQjB8VKeEi5iXxn1qQcOfhL5xSrldJN8Z4Wp5INxOBY8LdjqTermyM2 fzofUpmOpCpECYGrow3kId/EaUkd3X86+hAI+4uS6hna6sxKVC3K0gfUxUUjwsPe NAZme3YoPYOyYpxkXsprML/bQe5I7A6S/DSUmZm+aKXBIFGi4khh2NLojQslbj0G EEHxN4J6oVrLv8lMhg0NDnjVCaXqK+TNSBhelaCNVQJ69hvq -----END CERTIFICATE-----Generated at Wed Nov 5 13:16:48 2025 by rpki-client