$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/p-ESdAaO7IOYidKk1yy-_PRwL8M.roa File: p-ESdAaO7IOYidKk1yy-_PRwL8M.roa (raw, json) Hash identifier: VV3bFxuwkIllDUtWoXuwYUYNBmoiM1oTTrBR1InsILI= Subject key identifier: A7:E1:12:74:06:8E:EC:83:98:89:D2:A4:D7:2C:BE:FC:F4:70:2F:C3 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 18FF Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/p-ESdAaO7IOYidKk1yy-_PRwL8M.roa Signing time: Fri 22 Aug 2025 09:02:41 +0000 ROA not before: Fri 22 Aug 2025 09:02:41 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 23675 IP address blocks: 203.66.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 16:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6399 (0x18ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:02:41 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=A7E11274068EEC839889D2A4D72CBEFCF4702FC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ae:ec:0f:e3:3d:49:c0:7e:1a:16:27:3f:68: be:c2:96:f9:45:dd:a3:46:c2:da:16:b1:68:a6:df: 8c:b0:f9:6c:63:9b:1e:da:97:d5:c9:29:b5:a0:ba: 56:43:13:fc:f9:09:31:3d:51:bd:e7:a6:f8:ad:b8: 44:e0:17:46:c1:a1:fc:a0:d7:76:c4:e7:c9:d3:e5: b4:08:79:a2:a9:cd:df:f2:ec:89:71:c2:16:69:13: 5a:90:25:df:c1:46:ca:6d:f5:5d:0f:74:7a:d7:3f: f1:9a:37:5f:48:8b:33:6b:32:d6:52:93:6a:92:6d: ab:a8:f9:88:d5:e2:16:fa:55:04:e6:6a:73:66:3f: a5:03:6b:43:db:1b:0c:d6:99:00:49:d5:6d:59:51: 07:ea:fc:5d:4c:5a:4b:c7:43:01:0f:0a:a7:54:b8: a1:a3:c1:41:de:c8:52:fd:db:41:5a:d3:69:a1:5a: 02:4e:d2:e6:e1:6f:45:7b:fb:6e:8e:c9:09:68:43: 5a:45:98:87:2a:0d:ca:5b:bb:1a:48:d8:fb:1c:fb: 4e:62:6a:8f:95:48:13:0b:f5:a4:ea:28:aa:50:be: 4b:ad:99:60:3a:1a:04:db:0d:7c:30:5c:ec:46:bb: 0c:7d:7d:c1:95:3c:93:ee:74:1d:42:47:7b:fe:8c: eb:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:E1:12:74:06:8E:EC:83:98:89:D2:A4:D7:2C:BE:FC:F4:70:2F:C3 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/p-ESdAaO7IOYidKk1yy-_PRwL8M.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.66.102.0/24 Signature Algorithm: sha256WithRSAEncryption 22:f7:81:ca:c1:da:54:60:0d:f3:97:d9:4e:31:9a:7a:10:fe: 2d:f0:8d:2c:6f:2a:59:0f:0e:0b:9e:0b:95:8f:fe:c0:02:d5: 44:33:67:43:ad:0d:cb:19:60:f4:cc:6f:e0:cd:e3:c9:d0:f8: da:ae:b5:2c:df:b5:91:d5:57:74:04:fa:de:59:8a:3c:f9:59: 4e:2a:b5:05:c4:7a:47:b2:dc:82:8c:3c:7f:34:27:a7:3b:f4: a3:66:e7:2e:27:8e:dd:e0:63:93:65:a5:d2:1d:d2:34:08:4e: ba:50:39:f4:e8:e0:64:ce:29:46:af:da:b5:49:92:58:a7:ed: e0:19:d7:ca:02:3a:72:71:d9:a2:cf:54:86:de:3a:e6:b9:db: 21:1e:78:1c:61:00:49:e8:55:bc:07:7d:92:99:70:79:d6:1f: 09:01:b6:a5:bc:8f:f9:e3:f9:3f:de:42:55:3b:7d:94:b6:ed: 92:f3:cc:cd:05:cf:87:90:9c:8a:2d:4a:9f:1b:e7:1a:5b:f3: 99:cc:7f:34:a6:de:1d:98:a5:b4:7a:5d:8b:40:6e:9c:2a:27: 17:73:1c:9e:b1:dc:fa:ba:88:e7:9c:65:f7:1e:d1:fc:d7:ac: 1d:3b:c1:36:eb:77:b7:bd:8d:08:1e:07:72:c1:70:d0:63:16: 66:13:7d:88 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICGP8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAyNDFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEE3RTExMjc0MDY4RUVD ODM5ODg5RDJBNEQ3MkNCRUZDRjQ3MDJGQzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzruwP4z1JwH4aFic/aL7ClvlF3aNGwtoWsWim34yw+Wxjmx7a l9XJKbWgulZDE/z5CTE9Ub3npvituETgF0bBofyg13bE58nT5bQIeaKpzd/y7Ilx whZpE1qQJd/BRspt9V0PdHrXP/GaN19IizNrMtZSk2qSbauo+YjV4hb6VQTmanNm P6UDa0PbGwzWmQBJ1W1ZUQfq/F1MWkvHQwEPCqdUuKGjwUHeyFL920Fa02mhWgJO 0ubhb0V7+26OyQloQ1pFmIcqDcpbuxpI2Psc+05iao+VSBML9aTqKKpQvkutmWA6 GgTbDXwwXOxGuwx9fcGVPJPudB1CR3v+jOvXAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUp+ESdAaO7IOYidKk1yy+/PRwL8MwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9wLUVTZEFhTzdJT1lpZEtrMXl5 LV9QUndMOE0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy0Jm MA0GCSqGSIb3DQEBCwUAA4IBAQAi94HKwdpUYA3zl9lOMZp6EP4t8I0sbypZDw4L nguVj/7AAtVEM2dDrQ3LGWD0zG/gzePJ0PjarrUs37WR1Vd0BPreWYo8+VlOKrUF xHpHstyCjDx/NCenO/SjZucuJ47d4GOTZaXSHdI0CE66UDn06OBkzilGr9q1SZJY p+3gGdfKAjpycdmiz1SG3jrmudshHngcYQBJ6FW8B32SmXB51h8JAbalvI/54/k/ 3kJVO32Utu2S88zNBc+HkJyKLUqfG+caW/OZzH80pt4dmKW0el2LQG6cKicXcxye sdz6uojnnGX3HtH816wdO8E263e3vY0IHgdywXDQYxZmE32I -----END CERTIFICATE-----Generated at Wed Nov 5 15:55:07 2025 by rpki-client