$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/gv8AKWRVHsTfZjMRyn67IShBg5c.roa File: gv8AKWRVHsTfZjMRyn67IShBg5c.roa (raw, json) Hash identifier: 2NjU2ZSgVcXnKe/RNchUKopY7vtlejqKOIo5CclIGH4= Subject key identifier: 82:FF:00:29:64:55:1E:C4:DF:66:33:11:CA:7E:BB:21:28:41:83:97 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 18D2 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/gv8AKWRVHsTfZjMRyn67IShBg5c.roa Signing time: Fri 22 Aug 2025 09:02:29 +0000 ROA not before: Fri 22 Aug 2025 09:02:29 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 3462 IP address blocks: 211.21.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 16:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6354 (0x18d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:02:29 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=82FF002964551EC4DF663311CA7EBB2128418397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ce:00:10:33:1c:1c:2c:c9:b4:53:7a:36:99: 1d:ef:d3:71:a9:36:60:6a:80:50:c0:b1:85:99:ea: 80:ea:59:b8:bb:1a:dd:eb:a6:35:fc:b2:0f:bd:29: d1:cd:60:ee:32:b4:7a:8e:a2:f6:b8:3b:46:07:8b: a3:6c:ef:26:5e:d7:31:88:9f:57:18:45:74:47:e0: d4:65:42:3e:1a:71:fb:04:c5:11:1d:a1:ea:5a:32: f1:24:3e:80:54:7a:fe:91:6b:52:2e:9f:c6:82:f7: 87:72:b4:ca:9f:bb:8c:63:ab:48:e4:bd:f4:aa:50: 12:79:bf:38:8d:d2:2f:67:3b:6a:47:fe:00:37:a6: ad:bd:f0:76:e4:83:08:de:71:45:2a:8b:48:37:6d: 8b:16:b0:c1:c7:41:a2:f7:ed:f4:a0:12:f5:75:26: 59:ee:ec:f7:5f:b9:68:59:05:80:1f:26:45:fd:a2: 23:d4:ed:19:52:47:16:27:86:cd:fc:e2:3f:e8:61: b5:ff:fd:92:6d:6f:5a:f2:be:63:dc:92:7d:d3:dc: 2e:e7:5f:b3:bd:da:8d:7b:7c:26:ac:c5:f0:e4:96: 20:55:28:46:ba:a7:08:27:f5:b0:99:c8:77:ea:60: f4:cc:fc:2d:6f:36:68:a0:a1:70:94:e7:7b:3a:9e: cd:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:FF:00:29:64:55:1E:C4:DF:66:33:11:CA:7E:BB:21:28:41:83:97 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/gv8AKWRVHsTfZjMRyn67IShBg5c.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.21.0.0/16 Signature Algorithm: sha256WithRSAEncryption 87:19:f3:a3:94:31:e6:29:2b:e2:6a:24:5e:fc:3d:e1:cb:dc: 77:52:e1:7b:95:c2:01:1c:12:d9:eb:55:db:69:a1:78:e4:b5: e1:a2:5a:eb:6c:d2:31:d1:4a:65:68:e2:57:84:12:66:25:18: 9d:e1:79:57:56:ed:b5:34:d6:08:43:be:8e:c5:76:6a:85:94: 21:a5:50:f1:c6:dc:2e:ed:08:b5:2b:4e:7a:96:59:71:74:70: f9:0f:ba:a0:03:4c:4b:89:76:f1:25:20:0d:aa:1f:ab:76:43: 80:ba:a4:da:b3:c5:56:e8:8b:14:64:73:51:fc:25:a8:a7:8c: 82:3c:df:f0:69:7e:e8:c8:a0:69:7a:06:49:bd:4a:a1:fb:f9: a4:18:74:9d:0e:35:86:da:f1:a1:45:96:01:19:5a:a0:f0:20: db:9b:f7:7b:13:94:a7:4f:3e:36:8f:ef:82:f3:1f:3a:83:e8: 33:82:e2:d1:6b:4b:76:6f:6b:79:83:bc:38:6f:2e:d8:af:45: 3c:dd:71:dc:91:a4:81:b0:60:6c:0a:48:12:97:7b:d1:5a:e5: df:5e:8e:9f:15:bd:07:6e:32:ab:a1:bb:8c:1c:29:6c:54:56: bb:c5:1d:b6:a2:15:b1:fa:db:fb:b4:85:d1:f5:46:94:71:c7: 1d:a9:ee:15 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICGNIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAyMjlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDgyRkYwMDI5NjQ1NTFF QzRERjY2MzMxMUNBN0VCQjIxMjg0MTgzOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9zgAQMxwcLMm0U3o2mR3v03GpNmBqgFDAsYWZ6oDqWbi7Gt3r pjX8sg+9KdHNYO4ytHqOova4O0YHi6Ns7yZe1zGIn1cYRXRH4NRlQj4acfsExREd oepaMvEkPoBUev6Ra1Iun8aC94dytMqfu4xjq0jkvfSqUBJ5vziN0i9nO2pH/gA3 pq298HbkgwjecUUqi0g3bYsWsMHHQaL37fSgEvV1Jlnu7PdfuWhZBYAfJkX9oiPU 7RlSRxYnhs384j/oYbX//ZJtb1ryvmPckn3T3C7nX7O92o17fCasxfDkliBVKEa6 pwgn9bCZyHfqYPTM/C1vNmigoXCU53s6ns3zAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUgv8AKWRVHsTfZjMRyn67IShBg5cwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9ndjhBS1dSVkhzVGZaak1SeW42 N0lTaEJnNWMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA0xUw DQYJKoZIhvcNAQELBQADggEBAIcZ86OUMeYpK+JqJF78PeHL3HdS4XuVwgEcEtnr VdtpoXjkteGiWuts0jHRSmVo4leEEmYlGJ3heVdW7bU01ghDvo7FdmqFlCGlUPHG 3C7tCLUrTnqWWXF0cPkPuqADTEuJdvElIA2qH6t2Q4C6pNqzxVboixRkc1H8Jain jII83/BpfujIoGl6Bkm9SqH7+aQYdJ0ONYba8aFFlgEZWqDwINub93sTlKdPPjaP 74LzHzqD6DOC4tFrS3Zva3mDvDhvLtivRTzdcdyRpIGwYGwKSBKXe9Fa5d9ejp8V vQduMquhu4wcKWxUVrvFHbaiFbH62/u0hdH1RpRxxx2p7hU= -----END CERTIFICATE-----Generated at Wed Nov 5 12:40:48 2025 by rpki-client