$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/aLrw0Gbw13BqSerc2Nn-Sptl-U4.roa File: aLrw0Gbw13BqSerc2Nn-Sptl-U4.roa (raw, json) Hash identifier: Fhd/IPujJwbJmbscOclA/sv96xImoXV09TAO1icBZhE= Subject key identifier: 68:BA:F0:D0:66:F0:D7:70:6A:49:EA:DC:D8:D9:FE:4A:9B:65:F9:4E Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 18F4 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/aLrw0Gbw13BqSerc2Nn-Sptl-U4.roa Signing time: Fri 22 Aug 2025 09:02:38 +0000 ROA not before: Fri 22 Aug 2025 09:02:38 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 3462 IP address blocks: 210.59.138.128/27 maxlen: 27 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 11:29:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6388 (0x18f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:02:38 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=68BAF0D066F0D7706A49EADCD8D9FE4A9B65F94E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5a:76:8b:d6:34:6f:c9:83:06:cc:37:37:18: ca:21:2a:d5:f6:64:6e:af:62:9f:31:7f:bf:29:2e: f9:8c:a8:c5:4f:24:4e:d2:e6:6d:ce:1b:e4:f9:ac: f3:f3:f0:a5:32:4c:93:be:3b:0a:d6:25:b5:e9:62: d8:69:a6:82:0c:f8:eb:8b:ce:c3:40:16:c0:e6:fc: 82:cc:a0:fe:0d:7c:dc:01:53:7c:dd:84:d4:df:62: 20:2a:a3:f1:c3:8c:a7:55:6b:24:a8:1e:03:5c:76: d7:42:c9:87:b5:41:96:14:66:19:14:a3:2d:ea:c1: 2e:7e:af:91:84:db:43:4b:55:6a:ba:45:09:99:d8: ee:29:27:0a:89:82:d0:50:51:b1:db:f5:58:20:d0: d6:65:ae:52:76:51:06:02:34:42:5a:66:78:09:05: 97:fe:fb:40:7a:b6:0d:5d:2f:de:c7:77:5f:03:e4: 16:b7:5a:08:77:5d:4d:56:ec:c8:2a:e8:b5:88:d9: d4:aa:ca:7e:17:97:e8:68:f6:85:2b:1b:0f:d7:2a: 8f:82:f9:11:e8:d3:f7:d7:d4:ba:02:b4:bd:29:0a: f0:39:ba:48:3b:53:24:48:28:48:e8:92:68:62:8b: eb:3f:d0:8d:54:d9:11:50:b3:2c:0a:48:6f:ed:9e: 58:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:BA:F0:D0:66:F0:D7:70:6A:49:EA:DC:D8:D9:FE:4A:9B:65:F9:4E X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/aLrw0Gbw13BqSerc2Nn-Sptl-U4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.59.138.128/27 Signature Algorithm: sha256WithRSAEncryption bb:4c:f1:38:82:45:6d:85:62:61:fa:85:1e:ff:71:0a:f3:21: f3:97:9c:40:dc:f0:a3:6f:75:ff:2d:ce:59:65:20:c1:b9:21: 64:3d:fc:0d:07:5e:05:aa:47:ff:ee:7e:ae:b1:64:c1:f0:2a: a9:4f:c2:92:2e:e2:b4:86:fa:0a:ed:28:4a:e4:a1:50:1b:3e: b0:ef:1c:0b:53:af:77:2d:87:b1:e4:1e:dc:09:0a:e7:72:12: 7c:fb:e5:d1:23:b0:dd:14:46:3b:85:e5:6e:68:30:0e:f0:7b: 65:7d:78:21:84:f2:68:53:6d:b9:72:fd:cf:6c:02:1f:e9:61: c4:71:81:44:ac:03:2d:6b:6a:ba:ed:95:81:b1:ee:d7:7f:cd: c6:d5:96:68:dd:f7:8c:fc:31:33:f9:89:4c:d2:c5:dd:02:c4: 5d:38:33:44:40:21:a6:ab:2a:9a:7d:3b:9f:f3:22:fd:b3:60: 52:17:83:a3:5c:e4:d2:27:a0:4f:2e:e2:c1:67:70:8c:81:fa: b3:37:7f:84:6b:9b:26:45:91:66:32:54:13:c5:40:a6:73:22: e7:ca:f0:05:09:55:d5:5b:59:0e:eb:92:77:8f:3c:d7:45:a4: fc:57:7f:bb:95:08:c9:ea:12:ee:83:97:f4:ef:13:31:ae:a7: 58:c1:16:87 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICGPQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAyMzhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDY4QkFGMEQwNjZGMEQ3 NzA2QTQ5RUFEQ0Q4RDlGRTRBOUI2NUY5NEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2WnaL1jRvyYMGzDc3GMohKtX2ZG6vYp8xf78pLvmMqMVPJE7S 5m3OG+T5rPPz8KUyTJO+OwrWJbXpYthppoIM+OuLzsNAFsDm/ILMoP4NfNwBU3zd hNTfYiAqo/HDjKdVaySoHgNcdtdCyYe1QZYUZhkUoy3qwS5+r5GE20NLVWq6RQmZ 2O4pJwqJgtBQUbHb9Vgg0NZlrlJ2UQYCNEJaZngJBZf++0B6tg1dL97Hd18D5Ba3 Wgh3XU1W7Mgq6LWI2dSqyn4Xl+ho9oUrGw/XKo+C+RHo0/fX1LoCtL0pCvA5ukg7 UyRIKEjokmhii+s/0I1U2RFQsywKSG/tnlj5AgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUaLrw0Gbw13BqSerc2Nn+Sptl+U4wHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9hTHJ3MEdidzEzQnFTZXJjMk5u LVNwdGwtVTQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUF0juK gDANBgkqhkiG9w0BAQsFAAOCAQEAu0zxOIJFbYViYfqFHv9xCvMh85ecQNzwo291 /y3OWWUgwbkhZD38DQdeBapH/+5+rrFkwfAqqU/Cki7itIb6Cu0oSuShUBs+sO8c C1Ovdy2HseQe3AkK53ISfPvl0SOw3RRGO4XlbmgwDvB7ZX14IYTyaFNtuXL9z2wC H+lhxHGBRKwDLWtquu2VgbHu13/NxtWWaN33jPwxM/mJTNLF3QLEXTgzREAhpqsq mn07n/Mi/bNgUheDo1zk0iegTy7iwWdwjIH6szd/hGubJkWRZjJUE8VApnMi58rw BQlV1VtZDuuSd48810Wk/Fd/u5UIyeoS7oOX9O8TMa6nWMEWhw== -----END CERTIFICATE-----Generated at Wed Nov 5 09:37:55 2025 by rpki-client