$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/P4RGcVXUiuVhH-0kHWgkrqdaYB4.roa File: P4RGcVXUiuVhH-0kHWgkrqdaYB4.roa (raw, json) Hash identifier: sXqE00+Lu5HDJ9MwVN2WqJ511seTNba7coAbUdqUbMc= Subject key identifier: 3F:84:46:71:55:D4:8A:E5:61:1F:ED:24:1D:68:24:AE:A7:5A:60:1E Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 18EA Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/P4RGcVXUiuVhH-0kHWgkrqdaYB4.roa Signing time: Fri 22 Aug 2025 09:02:36 +0000 ROA not before: Fri 22 Aug 2025 09:02:36 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17714 IP address blocks: 203.78.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 11:29:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6378 (0x18ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:02:36 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=3F84467155D48AE5611FED241D6824AEA75A601E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:63:df:5f:6a:25:f1:5b:81:10:0d:ff:29:28: f4:b5:e3:55:fe:86:8c:c0:23:c4:b4:95:13:71:de: 1f:6d:53:a9:2e:8d:e2:03:2b:cf:35:50:86:f9:62: da:25:fd:de:5e:22:8c:65:70:15:4d:bd:62:d2:35: 54:5b:fb:4b:41:7d:52:b7:6b:84:e2:b1:b5:32:b1: c5:eb:bd:08:97:b3:6f:b0:27:1f:2f:96:a6:f7:5f: 97:ca:b5:76:b8:cb:b4:1b:92:03:9e:12:51:36:25: e0:57:3c:4e:39:4c:8c:eb:a0:d2:76:b2:94:92:21: ad:85:b0:f8:85:6e:5d:75:39:3c:6f:26:27:39:30: d7:57:96:1d:f0:af:bf:91:05:cc:ec:df:f0:08:9a: 5d:7e:a1:3d:27:0a:e4:2e:60:f4:35:b0:56:17:48: 1a:f4:63:c0:47:bf:a6:1f:d6:7b:17:50:79:0f:94: e8:7c:35:ac:5d:2c:b7:d0:77:88:8d:f7:23:47:c6: de:ed:56:9f:2b:5b:5f:9a:69:40:af:f3:d9:7c:af: d2:b3:cd:74:de:41:31:0f:06:2b:cf:27:cc:80:a2: 80:6b:ad:87:e5:5d:16:e8:69:bf:a1:be:0f:6f:13: 43:3c:fe:cc:80:33:9a:f0:f4:6f:f5:69:49:65:a1: 2c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:84:46:71:55:D4:8A:E5:61:1F:ED:24:1D:68:24:AE:A7:5A:60:1E X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/P4RGcVXUiuVhH-0kHWgkrqdaYB4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.78.190.0/24 Signature Algorithm: sha256WithRSAEncryption a3:5c:29:7b:23:95:37:93:24:65:36:56:89:1f:ad:df:a4:51: d8:a9:85:5d:9f:85:e7:35:ba:88:78:ad:1a:57:89:ba:cd:cc: 67:14:9c:e6:5a:e4:7d:64:81:0d:fc:a0:19:b8:ca:3f:4c:32: d9:e1:72:15:62:eb:f7:bb:97:6f:50:8c:91:1a:ab:3c:d5:fd: 6c:0e:e1:d6:71:98:2e:71:2f:90:86:e8:ce:41:5d:4e:6f:5b: a9:98:76:59:97:42:00:20:d4:4d:f3:d6:d8:a3:0c:d2:2a:76: fa:5e:da:19:b9:e0:7f:a0:44:48:d4:ae:47:f7:35:e8:52:35: 23:d7:76:f0:71:01:86:0f:ff:9e:bf:72:1a:c2:c1:fe:9e:3d: 74:f6:96:51:02:df:92:a8:22:cc:35:ca:11:b5:a9:2d:0e:53: 24:86:69:c0:f3:19:68:6f:82:c7:c9:48:a2:75:44:92:dc:cf: 0d:a1:8d:76:a3:ab:58:85:8b:71:c5:b9:b4:73:fe:03:8e:f0: 7f:40:69:f3:e4:eb:29:7d:18:97:46:20:91:bf:64:ca:af:aa: 95:09:28:cb:cc:75:bb:d9:57:d8:b6:dd:72:bd:6f:50:f2:5b: a9:ca:54:63:c3:b3:ac:5b:54:33:76:cd:2d:a7:ea:f5:74:d0: 02:13:78:b5 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICGOowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAyMzZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDNGODQ0NjcxNTVENDhB RTU2MTFGRUQyNDFENjgyNEFFQTc1QTYwMUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqY99faiXxW4EQDf8pKPS141X+hozAI8S0lRNx3h9tU6kujeID K881UIb5Ytol/d5eIoxlcBVNvWLSNVRb+0tBfVK3a4TisbUyscXrvQiXs2+wJx8v lqb3X5fKtXa4y7QbkgOeElE2JeBXPE45TIzroNJ2spSSIa2FsPiFbl11OTxvJic5 MNdXlh3wr7+RBczs3/AIml1+oT0nCuQuYPQ1sFYXSBr0Y8BHv6Yf1nsXUHkPlOh8 NaxdLLfQd4iN9yNHxt7tVp8rW1+aaUCv89l8r9KzzXTeQTEPBivPJ8yAooBrrYfl XRboab+hvg9vE0M8/syAM5rw9G/1aUlloSzTAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUP4RGcVXUiuVhH+0kHWgkrqdaYB4wHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9QNFJHY1ZYVWl1VmhILTBrSFdn a3JxZGFZQjQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy06+ MA0GCSqGSIb3DQEBCwUAA4IBAQCjXCl7I5U3kyRlNlaJH63fpFHYqYVdn4XnNbqI eK0aV4m6zcxnFJzmWuR9ZIEN/KAZuMo/TDLZ4XIVYuv3u5dvUIyRGqs81f1sDuHW cZgucS+QhujOQV1Ob1upmHZZl0IAINRN89bYowzSKnb6XtoZueB/oERI1K5H9zXo UjUj13bwcQGGD/+ev3IawsH+nj109pZRAt+SqCLMNcoRtaktDlMkhmnA8xlob4LH yUiidUSS3M8NoY12o6tYhYtxxbm0c/4DjvB/QGnz5OspfRiXRiCRv2TKr6qVCSjL zHW72VfYtt1yvW9Q8lupylRjw7OsW1Qzds0tp+r1dNACE3i1 -----END CERTIFICATE-----Generated at Wed Nov 5 11:20:17 2025 by rpki-client