$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/RFEH8nbRHPxcmBjjKjzJz4C6EHQ.roa File: RFEH8nbRHPxcmBjjKjzJz4C6EHQ.roa (raw, json) Hash identifier: fHRiiBVrCBY9l9rvGgeIer5lQ2xQ39u3MunmoVWgWyQ= Subject key identifier: 44:51:07:F2:76:D1:1C:FC:5C:98:18:E3:2A:3C:C9:CF:80:BA:10:74 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 1961 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/RFEH8nbRHPxcmBjjKjzJz4C6EHQ.roa Signing time: Fri 22 Aug 2025 09:03:03 +0000 ROA not before: Fri 22 Aug 2025 09:03:03 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 3462 IP address blocks: 210.241.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 11:29:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6497 (0x1961) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:03:03 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=445107F276D11CFC5C9818E32A3CC9CF80BA1074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7e:7f:e6:af:a3:52:a4:60:a8:76:91:3d:0d: a4:3a:21:17:76:d3:df:15:e2:7b:17:ac:77:cf:14: b8:cb:ce:53:d7:5d:4e:4e:22:3a:54:55:1a:3a:2a: 6c:a2:94:fc:fd:a6:57:88:b7:2a:5e:4e:d9:86:f6: ad:9d:cf:48:e8:da:dc:8c:a3:9b:4f:be:0c:4d:8f: 9c:ec:69:39:b7:c4:a3:86:64:e6:2c:85:4e:e1:5c: 4a:7a:ca:a7:a6:70:53:57:ef:62:f1:e2:6b:cf:53: a2:68:7d:07:fd:68:5c:39:35:57:46:f9:d2:d0:dd: a8:75:c0:8b:03:c8:ac:e6:5c:41:6e:32:dd:dd:ad: 4a:d2:6d:50:1c:13:a4:5a:6e:14:05:36:c5:45:d7: d7:ef:44:56:29:0f:47:34:f4:31:ae:32:ab:17:a5: 7b:25:99:24:4f:cb:f0:b1:47:e4:08:26:45:5a:19: fc:b5:ec:d7:64:4d:05:1f:ad:ad:83:51:89:84:1b: d1:3a:b0:ae:bd:2e:ac:ea:81:65:30:9e:50:48:5b: 4c:50:cf:d1:3d:d8:f4:2b:4e:ee:16:a8:c5:60:9b: e3:b0:04:b8:45:7c:fd:0b:e8:bf:c5:3a:a4:43:3f: 90:b1:9e:26:f2:9b:c0:f0:23:ec:a1:d6:b4:b9:6b: 59:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:51:07:F2:76:D1:1C:FC:5C:98:18:E3:2A:3C:C9:CF:80:BA:10:74 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/RFEH8nbRHPxcmBjjKjzJz4C6EHQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.241.224.0/19 Signature Algorithm: sha256WithRSAEncryption 1d:82:9b:0e:cf:14:ba:08:c6:0f:85:9e:a7:a6:5b:2b:99:b0: fa:13:80:c6:60:34:e7:2c:80:f9:c9:80:ab:58:09:38:82:d5: d7:67:3b:f0:6f:04:ab:53:aa:30:39:a3:cc:6e:4f:e0:52:4f: 3d:bb:01:d1:8a:0c:c3:c6:5c:a4:98:51:c6:32:8c:92:17:de: a9:d5:6e:e2:08:0c:88:02:67:9b:22:14:82:b4:eb:90:92:29: 4c:c8:3b:8d:e1:75:58:ea:04:5a:7d:51:0b:b2:77:ad:b3:bd: ed:b2:cd:4a:b6:97:69:74:6e:ad:12:40:f3:e6:d1:b0:64:33: 3e:75:fe:4e:6a:82:c9:e6:f1:40:ba:0b:a2:c5:51:dd:56:7c: fc:21:25:bf:ee:1f:ed:ff:ef:3c:ea:b9:6d:2a:ce:5e:d2:42: 27:c3:88:eb:4c:7c:50:50:ce:bc:b3:31:f4:42:96:3d:dc:1e: 64:91:b4:03:fb:23:61:c4:17:d3:f1:cb:42:86:4d:48:14:2d: 46:c3:cd:ac:aa:08:7c:9b:01:9d:8c:e2:5f:c1:92:c4:f9:de: 7c:a3:3d:ae:cd:64:30:d1:a8:b6:be:26:6e:46:23:a3:df:91: 7d:14:5c:cd:2e:7d:63:f3:a1:3a:cf:b9:02:ff:b1:29:cc:4d: 94:d5:19:23 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICGWEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAzMDNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDQ0NTEwN0YyNzZEMTFD RkM1Qzk4MThFMzJBM0NDOUNGODBCQTEwNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7fn/mr6NSpGCodpE9DaQ6IRd2098V4nsXrHfPFLjLzlPXXU5O IjpUVRo6KmyilPz9pleItypeTtmG9q2dz0jo2tyMo5tPvgxNj5zsaTm3xKOGZOYs hU7hXEp6yqemcFNX72Lx4mvPU6JofQf9aFw5NVdG+dLQ3ah1wIsDyKzmXEFuMt3d rUrSbVAcE6RabhQFNsVF19fvRFYpD0c09DGuMqsXpXslmSRPy/CxR+QIJkVaGfy1 7NdkTQUfra2DUYmEG9E6sK69LqzqgWUwnlBIW0xQz9E92PQrTu4WqMVgm+OwBLhF fP0L6L/FOqRDP5Cxnibym8DwI+yh1rS5a1nhAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQURFEH8nbRHPxcmBjjKjzJz4C6EHQwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9SRkVIOG5iUkhQeGNtQmpqS2p6 Sno0QzZFSFEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0vHg MA0GCSqGSIb3DQEBCwUAA4IBAQAdgpsOzxS6CMYPhZ6nplsrmbD6E4DGYDTnLID5 yYCrWAk4gtXXZzvwbwSrU6owOaPMbk/gUk89uwHRigzDxlykmFHGMoySF96p1W7i CAyIAmebIhSCtOuQkilMyDuN4XVY6gRafVELsnets73tss1KtpdpdG6tEkDz5tGw ZDM+df5OaoLJ5vFAuguixVHdVnz8ISW/7h/t/+886rltKs5e0kInw4jrTHxQUM68 szH0QpY93B5kkbQD+yNhxBfT8ctChk1IFC1Gw82sqgh8mwGdjOJfwZLE+d58oz2u zWQw0ai2viZuRiOj35F9FFzNLn1j86E6z7kC/7EpzE2U1Rkj -----END CERTIFICATE-----Generated at Wed Nov 5 08:07:45 2025 by rpki-client