$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/bjtuDMwrS0xPHbWDRdFtt0YpQak.roa File: bjtuDMwrS0xPHbWDRdFtt0YpQak.roa (raw, json) Hash identifier: RL4+rdJFlOzCDC3kyyug86FI/jaweIyV5/SCsM3bMNU= Subject key identifier: 6E:3B:6E:0C:CC:2B:4B:4C:4F:1D:B5:83:45:D1:6D:B7:46:29:41:A9 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 18AF Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/bjtuDMwrS0xPHbWDRdFtt0YpQak.roa Signing time: Fri 22 Aug 2025 09:02:20 +0000 ROA not before: Fri 22 Aug 2025 09:02:20 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 3462 IP address blocks: 220.129.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 11:29:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6319 (0x18af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:02:20 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=6E3B6E0CCC2B4B4C4F1DB58345D16DB7462941A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:31:96:5c:d8:65:d0:7e:9d:7f:0c:c3:47:c6: d4:17:cd:e5:34:21:42:d4:63:54:fa:e7:a7:a0:21: b1:64:8c:99:7e:3d:30:91:37:01:e2:7e:3d:08:0e: e9:89:e1:4b:4e:01:6e:0f:83:b1:38:00:bc:f9:11: cd:a2:12:5b:a5:77:c1:9a:fc:a0:0d:4c:d2:54:32: 5e:cd:fe:75:64:75:46:ee:2d:89:2c:c7:bb:d1:9a: 33:63:a2:aa:41:04:ce:0c:7c:54:ca:63:f4:0b:e7: 2f:e6:ca:6a:cb:cb:69:fd:df:d5:27:fa:93:49:8a: 36:0c:05:8a:7a:64:1a:ff:0d:26:1b:ba:5a:f2:95: 05:26:fa:d4:b5:48:1c:99:6c:62:fd:23:49:3d:7e: 01:f9:b9:98:2a:4f:57:10:53:8f:32:d8:73:8d:ee: 17:cc:56:df:67:20:98:06:64:e2:d7:40:f6:79:0b: 64:be:15:81:7d:e1:9b:68:cd:0c:8a:38:6e:5b:cf: 73:0b:23:ed:a3:40:41:bc:7d:bf:b3:16:4e:a0:d1: c7:37:6d:50:3d:82:b0:68:5a:b7:72:3e:0e:91:a8: 59:92:78:cc:a4:c0:bb:9f:43:7e:0d:76:9f:eb:46: 4e:76:dc:3f:a0:5d:d7:b3:78:7b:40:6d:ab:42:33: 59:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:3B:6E:0C:CC:2B:4B:4C:4F:1D:B5:83:45:D1:6D:B7:46:29:41:A9 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/bjtuDMwrS0xPHbWDRdFtt0YpQak.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 220.129.0.0/16 Signature Algorithm: sha256WithRSAEncryption 7d:cd:14:56:45:b9:7e:5b:33:e2:d2:9e:0e:5c:01:16:e2:42: 7d:db:05:97:ce:2f:1c:39:4b:30:1b:b9:15:c8:0d:41:24:de: a0:6f:3e:d2:9c:ec:b2:52:a6:cd:99:7b:7b:34:2e:3d:67:c3: a4:8e:40:32:c5:c9:44:6d:4b:04:78:c9:57:28:5f:08:2a:b2: 45:98:72:49:42:de:4f:93:81:25:66:d5:bd:c2:18:76:e1:c4: 90:d3:af:d9:29:ec:cd:b6:66:37:e1:8f:7c:55:b1:8e:64:02: 52:35:fb:36:92:ce:56:0e:a3:7c:c1:8c:4d:95:92:69:0f:11: 27:6c:27:8d:21:98:9a:1b:fa:80:17:e7:6a:d9:d9:21:90:95: 45:7f:63:28:8a:c0:29:81:7b:52:f6:83:67:5b:6c:da:07:e5: e6:7d:9f:d1:5b:d9:13:f2:95:91:fc:1e:bb:9d:60:29:22:d6: 05:03:76:09:c9:e8:d6:f4:7f:30:49:bc:f3:ef:4d:8f:1c:04: 6d:e7:52:6a:91:03:b7:72:69:d6:fe:0f:77:e4:7d:92:3a:35: 04:34:7b:fb:df:6a:da:50:8a:fe:66:f6:c6:82:e0:87:fe:ac: 47:dc:41:1b:44:95:f6:e4:11:c5:56:ec:f8:0a:65:c3:fb:ba: 43:10:21:4c -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICGK8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAyMjBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDZFM0I2RTBDQ0MyQjRC NEM0RjFEQjU4MzQ1RDE2REI3NDYyOTQxQTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDmMZZc2GXQfp1/DMNHxtQXzeU0IULUY1T656egIbFkjJl+PTCR NwHifj0IDumJ4UtOAW4Pg7E4ALz5Ec2iEluld8Ga/KANTNJUMl7N/nVkdUbuLYks x7vRmjNjoqpBBM4MfFTKY/QL5y/mymrLy2n939Un+pNJijYMBYp6ZBr/DSYbulry lQUm+tS1SByZbGL9I0k9fgH5uZgqT1cQU48y2HON7hfMVt9nIJgGZOLXQPZ5C2S+ FYF94ZtozQyKOG5bz3MLI+2jQEG8fb+zFk6g0cc3bVA9grBoWrdyPg6RqFmSeMyk wLufQ34Ndp/rRk523D+gXdezeHtAbatCM1lVAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUbjtuDMwrS0xPHbWDRdFtt0YpQakwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9ianR1RE13clMweFBIYldEUmRG dHQwWXBRYWsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA3IEw DQYJKoZIhvcNAQELBQADggEBAH3NFFZFuX5bM+LSng5cARbiQn3bBZfOLxw5SzAb uRXIDUEk3qBvPtKc7LJSps2Ze3s0Lj1nw6SOQDLFyURtSwR4yVcoXwgqskWYcklC 3k+TgSVm1b3CGHbhxJDTr9kp7M22Zjfhj3xVsY5kAlI1+zaSzlYOo3zBjE2VkmkP ESdsJ40hmJob+oAX52rZ2SGQlUV/YyiKwCmBe1L2g2dbbNoH5eZ9n9Fb2RPylZH8 HrudYCki1gUDdgnJ6Nb0fzBJvPPvTY8cBG3nUmqRA7dyadb+D3fkfZI6NQQ0e/vf atpQiv5m9saC4If+rEfcQRtElfbkEcVW7PgKZcP7ukMQIUw= -----END CERTIFICATE-----Generated at Wed Nov 5 09:39:42 2025 by rpki-client