$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/ojIlu4dUOWgkbDYK_0cQUIGI_ZU.roa File: ojIlu4dUOWgkbDYK_0cQUIGI_ZU.roa (raw, json) Hash identifier: 4/ARGqNlHdQGPghZUmNgX/VkBPFmCJlBZ7VH7UlKMbI= Subject key identifier: A2:32:25:BB:87:54:39:68:24:6C:36:0A:FF:47:10:50:81:88:FD:95 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 18C8 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ojIlu4dUOWgkbDYK_0cQUIGI_ZU.roa Signing time: Fri 22 Aug 2025 09:02:27 +0000 ROA not before: Fri 22 Aug 2025 09:02:27 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 3462 IP address blocks: 61.217.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 11:29:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6344 (0x18c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:02:27 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=A23225BB87543968246C360AFF4710508188FD95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:22:db:4c:62:68:91:ee:b2:62:86:7a:44:ad: 8a:08:3b:de:8b:1c:b3:35:5b:8d:0c:0d:57:43:12: f3:84:de:45:69:f7:f7:10:40:0c:0c:85:a9:28:bb: 63:c7:07:5e:5a:a2:cb:23:d0:a4:eb:81:7e:ee:f8: e7:37:51:5e:8c:86:bd:61:2b:9f:e0:0c:7a:c5:77: f2:42:b2:f0:0a:74:8e:6f:fe:3f:fa:e5:91:f0:cb: 07:c1:a1:3c:cb:d8:25:87:6b:e1:37:6e:be:41:c3: 28:e0:80:d1:bd:2f:14:dd:e7:ad:a3:11:b8:1d:0e: d0:8f:86:a8:d4:8e:02:5a:ab:37:a9:65:4b:6b:a8: f3:54:dd:7a:46:b3:ef:75:a1:79:51:c7:58:e3:94: bf:35:36:16:00:0e:68:a7:95:f1:e5:ab:7e:2e:47: 6c:df:10:ec:8f:f3:42:fc:c0:66:88:bd:b6:18:98: a8:5a:99:2f:a7:56:b1:1b:58:82:d4:32:fe:25:a6: e9:4f:64:de:74:f6:25:77:0b:ea:f7:3b:d1:e0:e0: fe:58:78:44:e6:4e:54:45:b4:a6:83:2a:d8:c4:1c: 14:1b:67:e4:71:29:36:9d:8a:a6:66:77:31:cb:a8: ed:79:8b:95:53:97:76:b7:80:b3:6d:14:6a:6b:6e: 64:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:32:25:BB:87:54:39:68:24:6C:36:0A:FF:47:10:50:81:88:FD:95 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ojIlu4dUOWgkbDYK_0cQUIGI_ZU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.217.0.0/16 Signature Algorithm: sha256WithRSAEncryption 2b:ea:e8:b3:c7:ab:2e:66:2e:74:b6:ed:c4:de:f3:54:82:e8: b0:cc:61:7b:07:0b:7b:dc:74:f3:d0:64:1d:c3:60:6c:81:32: 45:51:65:2a:b2:05:af:fd:01:66:01:ca:90:f8:9e:6b:35:86: 51:8c:32:f6:2c:04:1f:00:d2:3a:d5:9c:6f:f4:70:a5:2a:a1: 41:b0:66:12:05:76:42:d1:3f:13:e5:99:d9:cc:a4:e3:cd:57: c1:73:62:5c:bf:79:06:5c:06:0e:d6:e5:61:b9:26:a2:53:3b: e5:6a:58:9f:de:62:a4:dc:99:47:48:6e:5a:cf:54:c3:8c:eb: 35:37:47:de:ad:a1:cf:83:48:8b:db:b8:f5:bf:0e:ff:70:af: 3e:b6:27:3d:c8:f8:78:b2:79:7d:46:96:e5:98:f7:28:22:c6: 6b:47:3a:a3:0c:0c:b8:24:bc:c3:22:46:54:8d:0a:d3:84:3c: 79:bb:10:af:53:a9:77:d9:5c:4f:dc:a7:13:f3:bb:ac:c1:0e: 48:d0:9d:ab:1e:d5:d7:d8:91:af:2a:08:15:04:05:21:eb:1a: 2f:4c:20:eb:3a:45:f1:a8:c1:ca:83:fc:b0:02:02:e2:b4:c5: 16:e9:72:f3:c8:8d:2c:6b:92:d0:05:f5:1c:6a:8f:cc:f0:9c: 1b:3a:54:6b -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICGMgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAyMjdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEEyMzIyNUJCODc1NDM5 NjgyNDZDMzYwQUZGNDcxMDUwODE4OEZEOTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD2IttMYmiR7rJihnpErYoIO96LHLM1W40MDVdDEvOE3kVp9/cQ QAwMhakou2PHB15aossj0KTrgX7u+Oc3UV6Mhr1hK5/gDHrFd/JCsvAKdI5v/j/6 5ZHwywfBoTzL2CWHa+E3br5BwyjggNG9LxTd562jEbgdDtCPhqjUjgJaqzepZUtr qPNU3XpGs+91oXlRx1jjlL81NhYADminlfHlq34uR2zfEOyP80L8wGaIvbYYmKha mS+nVrEbWILUMv4lpulPZN509iV3C+r3O9Hg4P5YeETmTlRFtKaDKtjEHBQbZ+Rx KTadiqZmdzHLqO15i5VTl3a3gLNtFGprbmTZAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUojIlu4dUOWgkbDYK/0cQUIGI/ZUwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9vaklsdTRkVU9XZ2tiRFlLXzBj UVVJR0lfWlUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAPdkw DQYJKoZIhvcNAQELBQADggEBACvq6LPHqy5mLnS27cTe81SC6LDMYXsHC3vcdPPQ ZB3DYGyBMkVRZSqyBa/9AWYBypD4nms1hlGMMvYsBB8A0jrVnG/0cKUqoUGwZhIF dkLRPxPlmdnMpOPNV8FzYly/eQZcBg7W5WG5JqJTO+VqWJ/eYqTcmUdIblrPVMOM 6zU3R96toc+DSIvbuPW/Dv9wrz62Jz3I+HiyeX1GluWY9ygixmtHOqMMDLgkvMMi RlSNCtOEPHm7EK9TqXfZXE/cpxPzu6zBDkjQnase1dfYka8qCBUEBSHrGi9MIOs6 RfGowcqD/LACAuK0xRbpcvPIjSxrktAF9Rxqj8zwnBs6VGs= -----END CERTIFICATE-----Generated at Wed Nov 5 08:07:10 2025 by rpki-client