$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/feMAftpLaYwjfGa7F7S6Sv6Evgk.roa File: feMAftpLaYwjfGa7F7S6Sv6Evgk.roa (raw, json) Hash identifier: e1pEaPAswSW3nEjVHQutSeXIttMzi7vPZHO8addeIZk= Subject key identifier: 7D:E3:00:7E:DA:4B:69:8C:23:7C:66:BB:17:B4:BA:4A:FE:84:BE:09 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 18E6 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/feMAftpLaYwjfGa7F7S6Sv6Evgk.roa Signing time: Fri 22 Aug 2025 09:02:35 +0000 ROA not before: Fri 22 Aug 2025 09:02:35 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 54994 IP address blocks: 203.74.117.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 06:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6374 (0x18e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:02:35 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=7DE3007EDA4B698C237C66BB17B4BA4AFE84BE09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:ca:30:30:38:c8:73:ca:f2:85:ca:4d:7b:ce: bc:81:9a:e0:92:49:46:85:43:41:b9:6b:b9:7e:d1: 3b:63:da:05:a4:bb:5f:6e:ad:58:93:9c:c3:56:22: 51:80:d0:c5:64:8d:b0:e7:40:97:31:25:ca:71:0c: ec:54:26:db:8c:7f:c7:2a:01:26:cb:d5:02:0d:8c: 89:c4:d5:44:c6:e3:3b:f4:71:5f:6a:95:bc:a4:dc: 38:79:2e:1b:91:4f:ce:9a:ec:e2:b2:47:1b:6c:2a: 19:ab:6f:4b:02:02:8c:4e:9d:bb:08:90:11:19:46: e3:75:cb:a2:50:c4:fd:a9:bf:88:80:65:24:ff:c9: 46:ed:20:9a:e4:52:64:1d:60:23:32:b9:8c:7b:ac: 44:2b:05:24:ea:fa:cd:1c:88:de:30:b7:fa:03:48: 1e:ae:4f:1f:9e:d8:9f:f5:05:15:67:28:01:e6:21: 84:8d:3e:b2:d6:6c:81:37:2a:a2:ea:da:7c:3d:11: 3f:cd:26:66:12:86:ba:59:9b:97:2d:20:dc:dd:bc: 1c:4f:80:03:ea:f7:7e:4d:b8:63:26:b9:8e:22:f4: fa:a0:34:9d:19:e4:fa:1e:57:93:1b:12:36:54:7d: f1:11:b0:09:ae:68:3b:18:eb:49:5a:03:38:dd:13: ec:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:E3:00:7E:DA:4B:69:8C:23:7C:66:BB:17:B4:BA:4A:FE:84:BE:09 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/feMAftpLaYwjfGa7F7S6Sv6Evgk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.74.117.0/25 Signature Algorithm: sha256WithRSAEncryption d3:71:b7:0e:6a:b9:c4:f1:15:31:67:e8:20:13:14:bc:b0:2e: 99:17:d2:f5:9e:10:13:8b:08:ec:21:f0:79:5d:e1:00:2d:d9: 60:6f:63:ef:ad:f5:e7:b4:1d:59:af:2f:68:bb:44:b1:15:26: 53:46:b7:db:9c:9d:d8:ef:ec:76:4b:f8:b7:64:83:5b:c4:c9: 40:8c:b2:94:21:c0:40:ff:5f:2b:ed:90:bc:ff:90:08:e9:58: 76:16:5c:16:e4:72:ef:94:a6:41:f0:86:fa:67:e9:cb:39:7c: ea:54:cc:a8:56:16:06:75:bc:09:89:66:25:0a:2d:3f:3e:f2: 5f:d0:de:63:a7:89:18:00:c8:de:11:a1:f6:4b:18:59:eb:4b: a4:c5:95:fd:72:0f:e3:05:84:27:dd:9d:7b:23:d1:af:1e:00: 12:43:79:34:b9:45:60:5e:f4:1c:c0:d9:4e:21:0d:29:34:ca: 08:aa:3b:8b:82:53:a7:73:69:3e:37:de:be:25:91:d4:12:a0: 86:1c:a3:a1:76:1f:9d:01:ac:e1:69:e3:51:b6:e6:06:c1:54: 38:84:27:8f:2e:9d:6d:a4:b7:1e:89:78:a9:85:8b:34:05:e5: 62:ab:74:04:7e:b6:13:92:6f:a3:2a:a1:c4:d9:3a:d7:a8:1e: 98:18:66:a5 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICGOYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAyMzVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDdERTMwMDdFREE0QjY5 OEMyMzdDNjZCQjE3QjRCQTRBRkU4NEJFMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD1yjAwOMhzyvKFyk17zryBmuCSSUaFQ0G5a7l+0Ttj2gWku19u rViTnMNWIlGA0MVkjbDnQJcxJcpxDOxUJtuMf8cqASbL1QINjInE1UTG4zv0cV9q lbyk3Dh5LhuRT86a7OKyRxtsKhmrb0sCAoxOnbsIkBEZRuN1y6JQxP2pv4iAZST/ yUbtIJrkUmQdYCMyuYx7rEQrBSTq+s0ciN4wt/oDSB6uTx+e2J/1BRVnKAHmIYSN PrLWbIE3KqLq2nw9ET/NJmYShrpZm5ctINzdvBxPgAPq935NuGMmuY4i9PqgNJ0Z 5PoeV5MbEjZUffERsAmuaDsY60laAzjdE+zZAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUfeMAftpLaYwjfGa7F7S6Sv6EvgkwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9mZU1BZnRwTGFZd2pmR2E3RjdT NlN2NkV2Z2sucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHy0p1 ADANBgkqhkiG9w0BAQsFAAOCAQEA03G3Dmq5xPEVMWfoIBMUvLAumRfS9Z4QE4sI 7CHweV3hAC3ZYG9j763157QdWa8vaLtEsRUmU0a325yd2O/sdkv4t2SDW8TJQIyy lCHAQP9fK+2QvP+QCOlYdhZcFuRy75SmQfCG+mfpyzl86lTMqFYWBnW8CYlmJQot Pz7yX9DeY6eJGADI3hGh9ksYWetLpMWV/XIP4wWEJ92deyPRrx4AEkN5NLlFYF70 HMDZTiENKTTKCKo7i4JTp3NpPjfeviWR1BKghhyjoXYfnQGs4WnjUbbmBsFUOIQn jy6dbaS3Hol4qYWLNAXlYqt0BH62E5JvoyqhxNk616gemBhmpQ== -----END CERTIFICATE-----Generated at Wed Nov 5 04:42:10 2025 by rpki-client