$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/jpew59qx6UPVy-0-xOi0e_itFSs.roa File: jpew59qx6UPVy-0-xOi0e_itFSs.roa (raw, json) Hash identifier: YsRANFW6omaVwPzKaorZE6M8kkMVovhnmhHBGZNJNMA= Subject key identifier: 8E:97:B0:E7:DA:B1:E9:43:D5:CB:ED:3E:C4:E8:B4:7B:F8:AD:15:2B Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 1933 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/jpew59qx6UPVy-0-xOi0e_itFSs.roa Signing time: Fri 22 Aug 2025 09:02:51 +0000 ROA not before: Fri 22 Aug 2025 09:02:51 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 3462 IP address blocks: 61.220.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 16:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6451 (0x1933) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:02:51 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=8E97B0E7DAB1E943D5CBED3EC4E8B47BF8AD152B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:86:8c:2a:21:a1:02:7e:af:53:0b:97:4e:07: 31:90:64:f9:bf:18:8e:63:28:05:93:c1:58:bf:a1: b3:e4:b2:d2:fc:b3:69:cc:05:cc:59:7a:0b:84:9f: 7f:f5:75:93:63:39:8e:c5:d0:54:1e:36:01:f5:2b: 64:cf:c0:fe:46:93:35:d5:e4:9a:fb:f7:f6:a5:3c: 82:99:44:52:7a:05:92:b1:7c:9b:fb:f8:f6:79:fc: 19:86:ad:66:c9:0a:2c:5d:1e:f2:0f:1d:78:8f:ce: f3:49:91:ca:19:5a:66:fc:0b:91:72:8d:a0:67:7c: c4:45:45:96:50:ba:70:ab:c2:0a:86:ba:a7:10:25: 42:67:94:dd:06:e5:51:93:06:54:1f:79:3c:e0:de: 1f:63:b5:be:4c:06:8b:e5:91:4f:17:39:61:e8:2f: ef:b0:de:16:7e:5c:6b:89:dc:58:83:4d:ee:49:d4: 84:a3:a3:c3:7a:f8:7b:36:60:53:b7:e7:95:37:bf: 93:bb:26:ba:19:ff:37:35:51:41:4b:26:5c:38:85: d1:d8:7b:ac:6d:34:23:9a:67:8b:b2:1a:15:b1:41: 07:76:07:75:f8:6f:3e:7d:f1:cc:5a:a7:73:24:72: 1d:b0:f4:dc:85:4e:06:c1:f1:ec:da:7d:3b:d3:75: 43:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:97:B0:E7:DA:B1:E9:43:D5:CB:ED:3E:C4:E8:B4:7B:F8:AD:15:2B X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/jpew59qx6UPVy-0-xOi0e_itFSs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.220.0.0/14 Signature Algorithm: sha256WithRSAEncryption 87:81:c9:98:52:ad:d7:7b:ce:3e:7b:3a:0f:48:e5:f3:9f:fe: b8:7e:55:df:20:b0:37:d0:91:59:cc:32:f1:c4:60:9f:0f:18: 5d:7a:d3:6b:e1:2f:b1:63:3a:cb:0e:73:2e:fe:4e:86:37:ad: a4:a4:fe:94:65:1e:23:51:b0:84:62:ed:7e:a3:37:7d:d5:c2: eb:31:fb:3b:60:31:77:e4:a3:5f:c7:16:ab:92:7b:3b:3c:72: 64:ef:d3:71:01:58:d2:4d:3a:2f:b4:9d:cc:d6:57:33:84:ae: 4b:7e:10:af:4c:df:4d:49:65:d2:7d:60:1e:87:4f:a2:e2:3c: 67:f8:64:25:d7:31:cb:c6:54:87:eb:9a:bc:d0:3e:30:6a:1a: c4:77:b4:95:39:c7:3f:77:7c:84:46:d5:7d:c3:a2:af:39:06: bd:5e:be:a9:6c:90:3e:8d:5b:76:e1:ec:b6:57:a7:a8:9e:74: c8:55:80:ec:69:13:03:d6:8d:5b:b8:f3:40:bf:8e:3f:60:ad: a5:2e:3a:be:74:2b:1d:f2:a2:6e:d1:8d:49:2d:87:00:64:9a: 3e:82:b0:b8:33:57:fd:1e:5e:39:10:ac:18:f8:46:8b:66:3d: 1c:63:a0:ac:d5:81:27:e4:1c:55:be:7e:ec:f8:45:56:55:9f: 63:d4:27:c1 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICGTMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAyNTFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDhFOTdCMEU3REFCMUU5 NDNENUNCRUQzRUM0RThCNDdCRjhBRDE1MkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDhowqIaECfq9TC5dOBzGQZPm/GI5jKAWTwVi/obPkstL8s2nM BcxZeguEn3/1dZNjOY7F0FQeNgH1K2TPwP5GkzXV5Jr79/alPIKZRFJ6BZKxfJv7 +PZ5/BmGrWbJCixdHvIPHXiPzvNJkcoZWmb8C5FyjaBnfMRFRZZQunCrwgqGuqcQ JUJnlN0G5VGTBlQfeTzg3h9jtb5MBovlkU8XOWHoL++w3hZ+XGuJ3FiDTe5J1ISj o8N6+Hs2YFO355U3v5O7JroZ/zc1UUFLJlw4hdHYe6xtNCOaZ4uyGhWxQQd2B3X4 bz598cxap3Mkch2w9NyFTgbB8ezafTvTdUMBAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUjpew59qx6UPVy+0+xOi0e/itFSswHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9qcGV3NTlxeDZVUFZ5LTAteE9p MGVfaXRGU3Mucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCPdww DQYJKoZIhvcNAQELBQADggEBAIeByZhSrdd7zj57Og9I5fOf/rh+Vd8gsDfQkVnM MvHEYJ8PGF1602vhL7FjOssOcy7+ToY3raSk/pRlHiNRsIRi7X6jN33Vwusx+ztg MXfko1/HFquSezs8cmTv03EBWNJNOi+0nczWVzOErkt+EK9M301JZdJ9YB6HT6Li PGf4ZCXXMcvGVIfrmrzQPjBqGsR3tJU5xz93fIRG1X3Doq85Br1evqlskD6NW3bh 7LZXp6iedMhVgOxpEwPWjVu480C/jj9graUuOr50Kx3yom7RjUkthwBkmj6CsLgz V/0eXjkQrBj4RotmPRxjoKzVgSfkHFW+fuz4RVZVn2PUJ8E= -----END CERTIFICATE-----Generated at Wed Nov 5 12:42:32 2025 by rpki-client