$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/Z4ZpLecSTdEXhUbQCyMVkVzdpH8.roa File: Z4ZpLecSTdEXhUbQCyMVkVzdpH8.roa (raw, json) Hash identifier: dCpmLNpLubwU5a/gZDJ97IkLuWFPW86ydLtKaaEu1WA= Subject key identifier: 67:86:69:2D:E7:12:4D:D1:17:85:46:D0:0B:23:15:91:5C:DD:A4:7F Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 1916 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Z4ZpLecSTdEXhUbQCyMVkVzdpH8.roa Signing time: Fri 22 Aug 2025 09:02:45 +0000 ROA not before: Fri 22 Aug 2025 09:02:45 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 3462 IP address blocks: 203.66.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 11:29:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6422 (0x1916) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:02:45 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=6786692DE7124DD1178546D00B2315915CDDA47F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1e:3d:50:98:3f:5b:1f:9b:1f:43:b8:90:0e: e1:80:44:18:73:05:84:f8:85:44:59:1d:66:bc:0e: dd:b5:ca:d9:10:8a:b4:8e:d9:61:78:11:8b:ca:51: 29:58:20:bb:51:70:4e:df:d9:7b:3b:7f:ed:53:78: fd:ea:28:6d:f1:f3:4d:71:c1:57:9d:8b:45:e3:db: 32:0f:ae:fd:30:a4:41:ec:c4:80:b8:65:9a:4d:3b: e1:83:be:d8:fd:e3:ba:06:3c:60:15:7b:dc:0b:ce: 03:23:b0:c3:ad:c5:8b:3b:43:14:96:72:08:07:a0: f7:65:e2:a8:f3:53:88:cf:3c:4d:fa:ad:06:84:e0: 5d:95:49:89:93:08:c6:74:5b:54:a0:d4:ff:d3:81: 79:2b:09:af:e6:ee:49:89:87:53:08:db:a2:8a:fb: 5d:a0:b9:0f:6a:68:ab:0d:df:f9:b3:52:b8:14:84: f9:23:0f:d2:ad:eb:5a:20:f1:94:f5:d2:67:ca:57: 76:da:9e:27:aa:1c:91:28:ce:69:b0:28:f8:48:59: 63:ba:21:de:8c:79:49:27:df:34:11:02:91:c4:1d: ec:8e:fe:d4:8f:19:d7:dd:7c:17:30:ea:c6:d1:17: c1:76:f5:c8:77:aa:f8:10:14:16:92:74:7a:89:01: 27:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:86:69:2D:E7:12:4D:D1:17:85:46:D0:0B:23:15:91:5C:DD:A4:7F X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Z4ZpLecSTdEXhUbQCyMVkVzdpH8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.66.0.0/16 Signature Algorithm: sha256WithRSAEncryption 50:8f:30:ab:b1:6f:1b:f9:0a:90:63:ea:ca:a3:22:75:85:cf: 14:bc:1d:d1:66:5d:2d:b8:1c:f9:c8:4b:62:7d:56:c8:f6:24: 75:a3:cc:0b:2d:b7:ce:e5:3f:a2:78:64:b1:80:b6:9d:3a:2d: 01:18:b9:4b:16:ee:f5:ff:9a:31:71:68:5f:ff:fd:a4:8d:8b: cf:28:6d:9a:c3:cc:77:01:21:f9:9a:92:7b:40:2b:03:4d:da: de:80:5b:3a:34:44:1f:63:83:98:02:8c:a7:1c:c3:8b:a0:57: e5:4b:e6:58:b1:fe:46:44:60:3c:0f:02:66:cf:f2:da:69:24: 61:ac:59:8f:91:22:a9:48:2a:50:f9:1d:a0:fd:f1:08:22:92: f8:f1:42:32:4c:f8:1c:c5:07:6d:db:a2:44:34:41:3c:f2:c3: 0b:a7:98:5b:a9:3e:19:f5:68:4b:db:ee:95:28:f0:bd:b3:23: df:5d:a6:31:ae:04:d0:54:50:d9:0a:61:2a:41:03:32:48:14: 7f:6a:87:a3:a3:e2:fc:ca:6a:4a:66:3b:86:17:83:ea:f9:e4: 2e:32:f3:61:30:5e:c4:7a:07:8a:8a:7b:18:14:51:71:1f:f1: 25:9b:cc:52:5a:c4:18:7f:60:38:d3:58:c5:e0:de:02:5a:a2: 9f:3e:f6:df -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICGRYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAyNDVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDY3ODY2OTJERTcxMjRE RDExNzg1NDZEMDBCMjMxNTkxNUNEREE0N0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCHj1QmD9bH5sfQ7iQDuGARBhzBYT4hURZHWa8Dt21ytkQirSO 2WF4EYvKUSlYILtRcE7f2Xs7f+1TeP3qKG3x801xwVedi0Xj2zIPrv0wpEHsxIC4 ZZpNO+GDvtj947oGPGAVe9wLzgMjsMOtxYs7QxSWcggHoPdl4qjzU4jPPE36rQaE 4F2VSYmTCMZ0W1Sg1P/TgXkrCa/m7kmJh1MI26KK+12guQ9qaKsN3/mzUrgUhPkj D9Kt61og8ZT10mfKV3banieqHJEozmmwKPhIWWO6Id6MeUkn3zQRApHEHeyO/tSP GdfdfBcw6sbRF8F29ch3qvgQFBaSdHqJASexAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUZ4ZpLecSTdEXhUbQCyMVkVzdpH8wHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9aNFpwTGVjU1RkRVhoVWJRQ3lN VmtWemRwSDgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAy0Iw DQYJKoZIhvcNAQELBQADggEBAFCPMKuxbxv5CpBj6sqjInWFzxS8HdFmXS24HPnI S2J9Vsj2JHWjzAstt87lP6J4ZLGAtp06LQEYuUsW7vX/mjFxaF///aSNi88obZrD zHcBIfmakntAKwNN2t6AWzo0RB9jg5gCjKccw4ugV+VL5lix/kZEYDwPAmbP8tpp JGGsWY+RIqlIKlD5HaD98QgikvjxQjJM+BzFB23bokQ0QTzywwunmFupPhn1aEvb 7pUo8L2zI99dpjGuBNBUUNkKYSpBAzJIFH9qh6Oj4vzKakpmO4YXg+r55C4y82Ew XsR6B4qKexgUUXEf8SWbzFJaxBh/YDjTWMXg3gJaop8+9t8= -----END CERTIFICATE-----Generated at Wed Nov 5 09:38:07 2025 by rpki-client