$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/U3W_F0OCghARsG03S9dSg9Ac1Cw.roa File: U3W_F0OCghARsG03S9dSg9Ac1Cw.roa (raw, json) Hash identifier: KjuGhY+uZWwl72EPDoWrWQeoTidfl680559n5hdVX3Y= Subject key identifier: 53:75:BF:17:43:82:82:10:11:B0:6D:37:4B:D7:52:83:D0:1C:D4:2C Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 18F9 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/U3W_F0OCghARsG03S9dSg9Ac1Cw.roa Signing time: Fri 22 Aug 2025 09:02:39 +0000 ROA not before: Fri 22 Aug 2025 09:02:39 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 3462 IP address blocks: 211.23.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 16:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6393 (0x18f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:02:39 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=5375BF174382821011B06D374BD75283D01CD42C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e9:6f:85:dc:8b:60:4a:d0:c4:80:52:54:4d: 8b:ef:8d:6b:fd:bc:f1:56:20:e6:f0:9a:94:fb:cd: 62:ab:a7:61:c0:d9:8f:08:38:7b:89:8a:b1:e6:04: ad:a1:bc:c0:05:2b:e6:5b:a8:fb:fb:d6:df:7f:6d: 76:39:24:48:26:a8:0f:82:21:37:03:fc:ec:27:3f: 40:af:28:ee:5b:24:e2:d7:a1:0a:be:fa:d4:8e:77: 48:55:e3:64:40:9f:8a:73:63:2c:20:4d:b4:2f:bd: 4b:d8:b3:5c:6d:a9:1b:99:f8:fa:c0:a3:c0:f6:2b: 7b:7d:b4:66:91:7a:d9:7b:01:da:e1:3d:bb:1b:6d: 8c:cb:12:b4:28:52:cf:31:d2:d4:e5:54:fa:7f:0f: a9:f3:d8:45:70:29:d1:50:4b:6b:30:a6:98:8d:ce: cb:1e:6c:b1:01:45:e7:04:3a:40:c6:49:b1:e3:2b: 97:b7:34:a9:a6:d4:ca:9e:2a:72:10:ca:9d:9d:f7: 87:e8:42:1e:62:a0:f0:7d:20:1b:b3:02:15:81:1e: 39:c0:90:c1:ae:e4:33:95:3a:cc:d5:81:9a:43:f3: c2:ec:9c:57:d6:94:63:8b:2a:d4:a8:1d:b2:82:5c: 35:3e:14:77:8f:92:f4:b9:45:26:52:db:78:66:02: 42:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:75:BF:17:43:82:82:10:11:B0:6D:37:4B:D7:52:83:D0:1C:D4:2C X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/U3W_F0OCghARsG03S9dSg9Ac1Cw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.23.0.0/16 Signature Algorithm: sha256WithRSAEncryption 5e:14:9f:98:07:7f:95:0f:dd:e4:c6:44:bb:fb:55:ef:df:a8: 05:42:6d:c6:50:1d:48:de:c0:6d:c3:e5:a8:bc:14:28:61:67: 0e:d0:06:01:1d:e3:96:0d:7a:b5:b3:40:fa:e0:b1:7b:cb:81: 3e:86:7e:be:de:4b:9e:44:6c:e3:f1:5e:d7:ad:e2:d7:aa:48: 37:d7:8c:5e:4a:53:ae:89:5a:a3:56:61:fd:a1:ed:51:9d:60: f6:61:a5:77:ea:73:da:da:d5:57:de:55:32:6d:21:68:3c:18: ca:ed:3c:34:14:0f:f0:f6:4e:80:d6:cc:97:17:14:d6:88:d8: 9d:65:6e:29:65:a2:c3:25:99:47:6f:97:fd:89:82:0e:1f:dc: 6a:9f:65:40:44:02:15:ee:24:b9:83:a7:d5:95:bd:3b:15:97: f8:bd:dc:bb:5a:3d:ef:10:74:f0:ca:b9:ea:0f:ea:df:2e:a2: 82:4b:74:43:38:32:71:a5:c0:23:e9:6d:4c:71:f2:fb:98:88: f0:0b:0b:e3:8d:83:f1:41:91:86:54:45:bb:b4:76:9f:c1:b2: ad:05:be:c2:35:4e:01:01:62:a5:43:26:09:42:e5:b5:2c:08: e5:94:63:d8:24:cd:fb:e1:25:c9:12:d7:31:9f:6b:76:bb:08: c7:ba:38:da -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICGPkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAyMzlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDUzNzVCRjE3NDM4Mjgy MTAxMUIwNkQzNzRCRDc1MjgzRDAxQ0Q0MkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCy6W+F3ItgStDEgFJUTYvvjWv9vPFWIObwmpT7zWKrp2HA2Y8I OHuJirHmBK2hvMAFK+ZbqPv71t9/bXY5JEgmqA+CITcD/OwnP0CvKO5bJOLXoQq+ +tSOd0hV42RAn4pzYywgTbQvvUvYs1xtqRuZ+PrAo8D2K3t9tGaRetl7AdrhPbsb bYzLErQoUs8x0tTlVPp/D6nz2EVwKdFQS2swppiNzssebLEBRecEOkDGSbHjK5e3 NKmm1MqeKnIQyp2d94foQh5ioPB9IBuzAhWBHjnAkMGu5DOVOszVgZpD88LsnFfW lGOLKtSoHbKCXDU+FHePkvS5RSZS23hmAkLbAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUU3W/F0OCghARsG03S9dSg9Ac1CwwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9VM1dfRjBPQ2doQVJzRzAzUzlk U2c5QWMxQ3cucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA0xcw DQYJKoZIhvcNAQELBQADggEBAF4Un5gHf5UP3eTGRLv7Ve/fqAVCbcZQHUjewG3D 5ai8FChhZw7QBgEd45YNerWzQPrgsXvLgT6Gfr7eS55EbOPxXtet4teqSDfXjF5K U66JWqNWYf2h7VGdYPZhpXfqc9ra1VfeVTJtIWg8GMrtPDQUD/D2ToDWzJcXFNaI 2J1lbillosMlmUdvl/2Jgg4f3GqfZUBEAhXuJLmDp9WVvTsVl/i93LtaPe8QdPDK ueoP6t8uooJLdEM4MnGlwCPpbUxx8vuYiPALC+ONg/FBkYZURbu0dp/Bsq0FvsI1 TgEBYqVDJglC5bUsCOWUY9gkzfvhJckS1zGfa3a7CMe6ONo= -----END CERTIFICATE-----Generated at Wed Nov 5 12:41:22 2025 by rpki-client