$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/mnNfCbxgUUvDIlWdnGpko0mXPx4.roa File: mnNfCbxgUUvDIlWdnGpko0mXPx4.roa (raw, json) Hash identifier: TGmrYn5j8+bqLBA5a+CwwdCjAQLg/dDUmqneH6us5OY= Subject key identifier: 9A:73:5F:09:BC:60:51:4B:C3:22:55:9D:9C:6A:64:A3:49:97:3F:1E Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 1938 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/mnNfCbxgUUvDIlWdnGpko0mXPx4.roa Signing time: Fri 22 Aug 2025 09:02:53 +0000 ROA not before: Fri 22 Aug 2025 09:02:53 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 137280 IP address blocks: 203.69.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 16:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6456 (0x1938) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:02:53 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=9A735F09BC60514BC322559D9C6A64A349973F1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:8d:f7:1a:fa:37:c1:8d:07:d0:89:53:a6:3a: 79:d4:8d:ce:56:aa:bb:ce:fd:f9:5a:89:f5:0d:b8: 58:9d:15:3b:8d:5b:54:c3:2f:5c:77:40:53:bd:e6: 69:90:dd:b8:b8:7e:22:f8:ba:e8:15:e1:d2:c5:0f: 07:a7:aa:f4:17:8f:a9:74:48:0e:ed:02:06:79:e8: 1b:c5:19:82:6e:cc:13:48:72:36:e8:dc:08:ce:2f: e3:7f:ac:da:63:47:b1:89:90:03:9d:f1:48:36:6b: 78:95:fe:98:87:d2:e7:00:c7:ed:b1:d4:e9:85:7d: b7:aa:38:3b:d1:b7:40:81:47:d6:d4:68:a2:5c:9b: ce:d2:63:54:56:d9:74:b4:b1:8e:6e:2a:a7:d2:c0: 9a:c3:73:84:71:f9:c6:80:20:1c:10:2b:22:eb:5e: f3:9e:bf:e3:ea:7b:7f:b1:ed:82:c9:a1:ef:26:18: 05:93:eb:63:f0:08:af:ec:b5:0a:31:b7:95:86:63: bf:f2:e2:34:35:ac:c5:63:4c:03:49:c7:e6:49:a9: 86:ec:76:1d:57:51:7c:2b:96:5f:7e:70:16:bf:99: 4d:4f:84:2f:8d:28:22:82:f5:c4:7a:14:bd:18:09: 07:9e:f6:c2:5f:e0:93:53:24:df:50:15:32:7c:e4: e5:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:73:5F:09:BC:60:51:4B:C3:22:55:9D:9C:6A:64:A3:49:97:3F:1E X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/mnNfCbxgUUvDIlWdnGpko0mXPx4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.69.33.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:c7:ec:43:e7:60:1c:e8:e0:f6:f1:a8:ee:b6:6f:93:2b:9e: d9:90:cb:ce:54:7f:65:16:25:9a:ad:66:90:53:ef:11:77:95: 65:e1:00:ab:13:30:11:ac:25:f2:d3:32:78:08:da:4d:11:e2: fb:af:70:33:8d:ca:a0:33:14:d0:b7:90:2a:2a:4f:cd:1e:85: b7:c2:16:42:ad:ad:2c:d1:d7:68:6c:f7:65:f7:bf:51:ef:b7: bd:b3:71:a5:f9:a4:87:7d:79:80:91:99:f9:29:37:b3:cc:c2: 71:76:91:dc:a5:22:c1:d7:a3:f6:96:11:0e:58:b4:ee:9d:7e: 15:1d:ad:db:21:03:cf:6d:ea:ff:df:8b:83:35:92:59:79:df: 7d:f3:0b:f7:dd:f0:7e:2b:bf:7a:21:65:19:3b:01:11:ba:bf: cd:17:40:e0:ba:78:8e:1f:e0:39:71:b2:13:05:66:fa:0d:04: fb:1f:0f:d6:e6:26:e8:05:1d:e3:a0:fc:90:db:82:5b:bb:2a: 6a:fe:40:85:f9:0e:1e:7b:43:47:52:90:53:00:8b:25:c1:f7: 9e:54:92:80:f0:8e:60:1a:2d:73:bd:c5:13:f7:97:da:a4:19: c1:2b:9e:2c:c3:f6:82:50:61:43:d6:ea:3b:ae:b8:0f:5d:7d: 5c:84:b8:dd -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICGTgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAyNTNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDlBNzM1RjA5QkM2MDUx NEJDMzIyNTU5RDlDNkE2NEEzNDk5NzNGMUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD9jfca+jfBjQfQiVOmOnnUjc5WqrvO/flaifUNuFidFTuNW1TD L1x3QFO95mmQ3bi4fiL4uugV4dLFDwenqvQXj6l0SA7tAgZ56BvFGYJuzBNIcjbo 3AjOL+N/rNpjR7GJkAOd8Ug2a3iV/piH0ucAx+2x1OmFfbeqODvRt0CBR9bUaKJc m87SY1RW2XS0sY5uKqfSwJrDc4Rx+caAIBwQKyLrXvOev+Pqe3+x7YLJoe8mGAWT 62PwCK/stQoxt5WGY7/y4jQ1rMVjTANJx+ZJqYbsdh1XUXwrll9+cBa/mU1PhC+N KCKC9cR6FL0YCQee9sJf4JNTJN9QFTJ85OW5AgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUmnNfCbxgUUvDIlWdnGpko0mXPx4wHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9tbk5mQ2J4Z1VVdkRJbFdkbkdw a28wbVhQeDQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy0Uh MA0GCSqGSIb3DQEBCwUAA4IBAQBux+xD52Ac6OD28ajutm+TK57ZkMvOVH9lFiWa rWaQU+8Rd5Vl4QCrEzARrCXy0zJ4CNpNEeL7r3AzjcqgMxTQt5AqKk/NHoW3whZC ra0s0ddobPdl979R77e9s3Gl+aSHfXmAkZn5KTezzMJxdpHcpSLB16P2lhEOWLTu nX4VHa3bIQPPber/34uDNZJZed998wv33fB+K796IWUZOwERur/NF0DguniOH+A5 cbITBWb6DQT7Hw/W5iboBR3joPyQ24Jbuypq/kCF+Q4ee0NHUpBTAIslwfeeVJKA 8I5gGi1zvcUT95fapBnBK54sw/aCUGFD1uo7rrgPXX1chLjd -----END CERTIFICATE-----Generated at Wed Nov 5 13:16:46 2025 by rpki-client