$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/YQN5Dj7KfDY6amC8v1sQVuePG4A.roa File: YQN5Dj7KfDY6amC8v1sQVuePG4A.roa (raw, json) Hash identifier: WFpmz9sNW8XJotCXiGy/AgBmmPK8So+dxXGCKnhOdq4= Subject key identifier: 61:03:79:0E:3E:CA:7C:36:3A:6A:60:BC:BF:5B:10:56:E7:8F:1B:80 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 18FD Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/YQN5Dj7KfDY6amC8v1sQVuePG4A.roa Signing time: Fri 22 Aug 2025 09:02:40 +0000 ROA not before: Fri 22 Aug 2025 09:02:40 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 3462 IP address blocks: 59.124.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 16:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6397 (0x18fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:02:40 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=6103790E3ECA7C363A6A60BCBF5B1056E78F1B80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1c:2f:dc:b8:e8:95:85:44:d1:55:f3:af:6a: 08:58:cb:2a:83:68:01:1e:8e:dc:df:12:94:dd:cf: 89:26:e5:27:e9:89:24:52:0a:92:04:7a:4d:42:14: d1:cc:fc:6e:5f:db:ce:70:8e:23:67:11:00:f2:9b: 77:2a:03:09:75:5f:f2:6b:f0:90:e7:5a:46:ed:8a: 9c:c4:8d:00:73:41:6e:ee:df:fc:ce:fe:68:c5:da: 57:55:6f:6d:99:b7:1a:6f:3a:6f:fa:66:ce:3e:1c: a7:bd:d8:98:92:59:82:ac:fd:69:bd:48:b6:8a:21: 12:67:3c:d4:3c:9b:f2:f2:4c:50:2c:43:96:36:67: c6:88:1f:19:c0:20:af:00:df:35:45:e7:79:d2:73: 5e:83:b7:c9:e7:82:5e:de:89:53:a3:db:33:04:87: 68:76:84:bd:7b:eb:fa:44:19:e1:96:a5:85:b6:03: 5c:cb:8d:6b:a5:83:d4:95:cc:4e:60:c0:59:e7:c5: 2f:be:13:99:64:27:6a:61:15:72:e8:b8:f8:3f:3a: bb:d8:54:92:f5:bf:88:a9:bd:03:7b:c9:d8:3f:69: 91:f6:47:79:04:5e:89:b5:63:f5:b5:b2:5f:06:23: bb:00:49:13:f6:d3:fd:96:09:90:d5:24:6d:75:5c: cc:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:03:79:0E:3E:CA:7C:36:3A:6A:60:BC:BF:5B:10:56:E7:8F:1B:80 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/YQN5Dj7KfDY6amC8v1sQVuePG4A.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 59.124.0.0/14 Signature Algorithm: sha256WithRSAEncryption c7:89:03:f8:f3:45:99:83:4f:de:c4:e5:64:3d:b4:d9:84:06: 70:ff:b2:ec:bc:a4:f3:89:8a:0b:73:f5:c9:3b:c1:e4:b8:b5: 71:91:1f:11:f3:8b:14:22:f6:1d:d2:13:ad:c4:bf:43:fa:51: cc:30:19:cb:22:e4:4a:f4:73:cb:e2:be:b7:81:d9:0c:58:5e: 42:75:96:04:48:09:82:40:be:65:c5:c0:e0:d2:18:fb:fb:cb: b7:27:7b:a5:f2:04:92:f2:fe:d3:f3:e4:18:34:8b:88:3a:6a: c1:ba:e9:6d:47:b4:91:7f:44:60:cd:c3:9f:d5:63:fb:da:fc: 5f:e8:e5:6e:12:de:b6:9f:31:41:9d:ff:a4:d5:30:0d:55:4b: 8c:cc:9d:29:80:20:04:d8:17:89:e2:a9:95:be:41:e4:0a:14: ff:90:ea:98:45:7a:12:a4:30:27:dd:2c:7f:9d:27:b0:9b:38: 1a:db:61:dc:55:1e:37:dc:6b:e8:5b:bf:16:8b:fd:7e:b7:e8: be:c6:b9:a2:66:7d:6f:c9:61:95:a4:19:64:81:8c:c2:09:f9: 2c:f1:39:36:86:65:77:c8:ef:b7:cb:ad:7e:99:0c:b9:15:50: a6:ff:42:52:10:89:84:cb:83:f8:24:63:6f:37:46:a4:72:31: 0b:66:17:57 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICGP0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAyNDBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDYxMDM3OTBFM0VDQTdD MzYzQTZBNjBCQ0JGNUIxMDU2RTc4RjFCODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1HC/cuOiVhUTRVfOvaghYyyqDaAEejtzfEpTdz4km5SfpiSRS CpIEek1CFNHM/G5f285wjiNnEQDym3cqAwl1X/Jr8JDnWkbtipzEjQBzQW7u3/zO /mjF2ldVb22ZtxpvOm/6Zs4+HKe92JiSWYKs/Wm9SLaKIRJnPNQ8m/LyTFAsQ5Y2 Z8aIHxnAIK8A3zVF53nSc16Dt8nngl7eiVOj2zMEh2h2hL176/pEGeGWpYW2A1zL jWulg9SVzE5gwFnnxS++E5lkJ2phFXLouPg/OrvYVJL1v4ipvQN7ydg/aZH2R3kE Xom1Y/W1sl8GI7sASRP20/2WCZDVJG11XMzZAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUYQN5Dj7KfDY6amC8v1sQVuePG4AwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9ZUU41RGo3S2ZEWTZhbUM4djFz UVZ1ZVBHNEEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCO3ww DQYJKoZIhvcNAQELBQADggEBAMeJA/jzRZmDT97E5WQ9tNmEBnD/suy8pPOJigtz 9ck7weS4tXGRHxHzixQi9h3SE63Ev0P6UcwwGcsi5Er0c8vivreB2QxYXkJ1lgRI CYJAvmXFwODSGPv7y7cne6XyBJLy/tPz5Bg0i4g6asG66W1HtJF/RGDNw5/VY/va /F/o5W4S3rafMUGd/6TVMA1VS4zMnSmAIATYF4niqZW+QeQKFP+Q6phFehKkMCfd LH+dJ7CbOBrbYdxVHjfca+hbvxaL/X636L7GuaJmfW/JYZWkGWSBjMIJ+SzxOTaG ZXfI77fLrX6ZDLkVUKb/QlIQiYTLg/gkY283RqRyMQtmF1c= -----END CERTIFICATE-----Generated at Wed Nov 5 14:02:10 2025 by rpki-client