$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/ooNUsHf7dmO7xZIkZPXjKDMXIJ4.roa File: ooNUsHf7dmO7xZIkZPXjKDMXIJ4.roa (raw, json) Hash identifier: L1wKVGhZpn45YrHNtXHENGZxASdq5AXA/m8Kquu1knA= Subject key identifier: A2:83:54:B0:77:FB:76:63:BB:C5:92:24:64:F5:E3:28:33:17:20:9E Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 18BC Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ooNUsHf7dmO7xZIkZPXjKDMXIJ4.roa Signing time: Fri 22 Aug 2025 09:02:23 +0000 ROA not before: Fri 22 Aug 2025 09:02:23 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 3462 IP address blocks: 210.65.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 11:29:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6332 (0x18bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:02:23 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=A28354B077FB7663BBC5922464F5E3283317209E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:54:41:12:03:7f:94:e6:ec:8d:93:d7:b1:34: 8d:61:96:ec:8d:e1:26:3b:0d:6c:8a:58:da:30:d2: 19:de:a1:e6:cf:2c:c6:e3:2b:43:e2:ff:36:6d:ea: 4f:82:b4:07:8a:f9:d2:99:19:5f:87:f4:af:41:b1: 9c:15:16:af:49:e7:88:4e:e2:64:61:d4:8f:ff:58: 8e:ec:a2:63:29:53:05:da:8d:71:7a:86:0f:6a:e8: 15:df:33:8b:0c:aa:07:93:d5:8d:48:16:7b:ed:a8: bf:4b:43:51:46:82:d0:1e:1a:71:1d:5c:25:95:a6: 6f:26:40:e0:13:9b:4e:f1:63:eb:e0:63:56:09:2c: 96:f1:ff:a1:92:2a:6a:dc:2b:50:8a:82:f2:12:25: 9d:0b:13:c2:5c:34:be:87:9d:16:3a:4b:26:68:94: 0f:b7:97:6a:7e:c2:bd:16:cf:a2:76:55:bd:2c:b5: 36:ba:85:04:62:12:8b:4a:28:be:89:b9:63:5b:4e: 41:34:93:27:7f:69:ce:a7:c8:cb:23:ec:f2:50:88: 8a:ef:d0:21:26:25:9a:49:23:56:2d:a1:79:dc:a1: a9:d9:cd:91:09:64:ba:b6:db:05:7c:0a:66:72:9e: 9f:2d:9b:a4:7a:f1:b0:29:36:2a:d5:84:cf:72:23: 88:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:83:54:B0:77:FB:76:63:BB:C5:92:24:64:F5:E3:28:33:17:20:9E X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ooNUsHf7dmO7xZIkZPXjKDMXIJ4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.65.0.0/16 Signature Algorithm: sha256WithRSAEncryption 1c:5a:ba:98:16:07:84:dd:a0:a7:9e:84:59:1b:c6:5d:89:cb: c3:51:f8:59:05:4e:4d:04:38:02:c4:56:c1:ed:99:fe:8f:7f: a1:01:e3:92:af:b9:d5:60:09:74:4a:2f:44:0a:9a:c8:7b:29: b6:99:0e:a2:d5:1b:72:3b:a0:e3:40:ec:f6:77:32:cd:e0:60: dd:bc:dc:29:2a:0c:7d:39:6d:c8:a0:74:e2:9f:f7:af:4d:f1: e0:c6:3b:a5:7e:32:58:1d:03:00:bc:f3:ed:77:fb:fd:e6:0d: c4:95:97:4a:13:75:e9:11:26:61:88:58:51:d9:d8:c5:4a:27: 84:0c:e2:c0:c3:52:c5:4d:26:83:8a:74:56:51:f3:1d:59:50: c9:61:bf:1f:c4:8f:39:ca:4f:4b:ed:0a:b1:42:02:1b:05:10: 66:b7:be:7c:a7:0c:de:4c:68:0d:20:74:19:a7:3d:b0:aa:42: df:ab:27:d5:8c:33:ab:54:78:ad:48:32:d5:8c:66:59:67:e4: ea:ec:31:b7:30:01:dd:8a:d5:13:c5:fe:23:29:42:48:c9:2b: 56:de:16:ef:44:66:b4:4c:d5:d4:94:49:39:ba:6c:30:a9:08: 37:92:18:e9:40:e1:81:86:bf:0d:b5:38:17:19:14:3b:9f:f8: 9a:02:e2:6a -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICGLwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAyMjNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEEyODM1NEIwNzdGQjc2 NjNCQkM1OTIyNDY0RjVFMzI4MzMxNzIwOUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxVEESA3+U5uyNk9exNI1hluyN4SY7DWyKWNow0hneoebPLMbj K0Pi/zZt6k+CtAeK+dKZGV+H9K9BsZwVFq9J54hO4mRh1I//WI7somMpUwXajXF6 hg9q6BXfM4sMqgeT1Y1IFnvtqL9LQ1FGgtAeGnEdXCWVpm8mQOATm07xY+vgY1YJ LJbx/6GSKmrcK1CKgvISJZ0LE8JcNL6HnRY6SyZolA+3l2p+wr0Wz6J2Vb0stTa6 hQRiEotKKL6JuWNbTkE0kyd/ac6nyMsj7PJQiIrv0CEmJZpJI1YtoXncoanZzZEJ ZLq22wV8CmZynp8tm6R68bApNirVhM9yI4ixAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUooNUsHf7dmO7xZIkZPXjKDMXIJ4wHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9vb05Vc0hmN2RtTzd4WklrWlBY aktETVhJSjQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA0kEw DQYJKoZIhvcNAQELBQADggEBABxaupgWB4TdoKeehFkbxl2Jy8NR+FkFTk0EOALE VsHtmf6Pf6EB45KvudVgCXRKL0QKmsh7KbaZDqLVG3I7oONA7PZ3Ms3gYN283Ckq DH05bcigdOKf969N8eDGO6V+MlgdAwC88+13+/3mDcSVl0oTdekRJmGIWFHZ2MVK J4QM4sDDUsVNJoOKdFZR8x1ZUMlhvx/EjznKT0vtCrFCAhsFEGa3vnynDN5MaA0g dBmnPbCqQt+rJ9WMM6tUeK1IMtWMZlln5OrsMbcwAd2K1RPF/iMpQkjJK1beFu9E ZrRM1dSUSTm6bDCpCDeSGOlA4YGGvw21OBcZFDuf+JoC4mo= -----END CERTIFICATE-----Generated at Wed Nov 5 09:37:39 2025 by rpki-client