$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/sfsoGHInp142PD6xaaPooWU5Row.roa File: sfsoGHInp142PD6xaaPooWU5Row.roa (raw, json) Hash identifier: dOw+1LNUnv2YgzSCV2+qlcmWAmalvxWRE0Srx/B9D3k= Subject key identifier: B1:FB:28:18:72:27:A7:5E:36:3C:3E:B1:69:A3:E8:A1:65:39:46:8C Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 18BB Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/sfsoGHInp142PD6xaaPooWU5Row.roa Signing time: Fri 22 Aug 2025 09:02:23 +0000 ROA not before: Fri 22 Aug 2025 09:02:23 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 3462 IP address blocks: 202.39.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 20:59:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6331 (0x18bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:02:23 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=B1FB28187227A75E363C3EB169A3E8A16539468C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ab:c7:f8:69:0e:86:d8:be:e0:d2:f0:90:40: d3:df:32:c4:01:b9:32:c6:20:95:85:c9:f0:f7:e8: 1e:78:d8:01:fa:98:46:11:a7:7a:1c:39:ef:6f:14: 79:cb:8e:07:59:59:48:30:79:dc:20:88:37:cd:4e: bc:ef:65:23:d8:f4:30:8c:31:5f:3d:63:11:66:64: 89:0b:19:bd:c3:ad:c3:84:23:99:ea:37:6b:58:7c: 7a:72:33:03:0f:f7:b0:e9:2b:81:27:a1:45:78:94: 68:9c:ed:58:c1:9c:3f:45:05:27:4e:af:fc:b9:81: 0a:32:e3:e2:27:9f:a7:b3:17:e6:b6:0d:0a:0e:74: 7b:65:b9:0d:bf:5b:90:a2:19:89:06:b7:29:ee:4d: 93:76:58:78:e6:34:ec:d9:34:19:74:0a:9d:e1:81: e5:62:9f:0a:61:b4:0f:3f:12:af:eb:36:06:9f:61: 37:ca:94:b3:26:00:df:d5:28:23:5e:9a:0f:fa:47: f9:c8:d2:eb:48:ea:c7:6d:f8:d7:a1:c9:e2:c9:ae: 41:43:36:9a:44:2f:1b:06:88:30:c4:2b:af:b6:c9: e0:50:4b:aa:f7:20:a6:3d:45:b4:e5:ee:cd:bf:2f: d4:55:35:40:1d:c0:25:f6:fb:ba:03:ab:0c:17:0c: 0c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:FB:28:18:72:27:A7:5E:36:3C:3E:B1:69:A3:E8:A1:65:39:46:8C X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/sfsoGHInp142PD6xaaPooWU5Row.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.39.128.0/17 Signature Algorithm: sha256WithRSAEncryption 9f:05:9e:19:72:54:bf:7a:65:2d:05:aa:0f:ae:19:4e:06:08: 35:c7:f5:99:85:2b:1f:2b:b3:9f:0b:8a:f6:9e:de:be:19:b7: 52:82:57:3b:90:8b:f5:85:61:2e:a4:1c:a0:98:8f:7c:65:90: 5c:ad:a8:50:ee:70:d6:d2:43:53:e2:f0:de:96:62:3f:6e:d4: 3d:42:b8:92:d2:e7:43:72:ba:4b:5b:43:04:4f:c4:7e:d3:49: 98:1a:81:1d:d7:9b:61:d5:24:12:69:af:0b:f4:dc:8b:b2:af: 7f:49:37:76:94:03:f4:a3:db:5f:e4:fe:14:10:b1:cb:d0:ae: 5a:5f:86:4c:54:f9:4a:03:28:c3:b5:08:dd:ef:b1:ce:4a:76: 94:f3:f5:d0:de:4e:cc:ef:34:51:79:2c:ba:c2:46:65:58:00: c3:5c:03:e5:dc:22:99:6d:a1:ca:84:83:80:81:b9:9c:e5:e6: b6:45:df:26:ed:ec:64:88:f7:1a:7d:23:fe:43:4c:4e:81:5f: a6:23:86:69:d2:df:5e:f4:2b:2b:38:97:00:35:9d:09:9d:5a: a0:46:62:2b:c6:8f:67:b9:bd:44:05:fa:a9:02:32:3f:1a:43: 2f:68:38:13:01:7f:b6:f4:43:3c:35:f6:d2:1a:b0:d2:76:a0: 64:5c:89:9b -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICGLswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAyMjNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEIxRkIyODE4NzIyN0E3 NUUzNjNDM0VCMTY5QTNFOEExNjUzOTQ2OEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMq8f4aQ6G2L7g0vCQQNPfMsQBuTLGIJWFyfD36B542AH6mEYR p3ocOe9vFHnLjgdZWUgwedwgiDfNTrzvZSPY9DCMMV89YxFmZIkLGb3DrcOEI5nq N2tYfHpyMwMP97DpK4EnoUV4lGic7VjBnD9FBSdOr/y5gQoy4+Inn6ezF+a2DQoO dHtluQ2/W5CiGYkGtynuTZN2WHjmNOzZNBl0Cp3hgeVinwphtA8/Eq/rNgafYTfK lLMmAN/VKCNemg/6R/nI0utI6sdt+NehyeLJrkFDNppELxsGiDDEK6+2yeBQS6r3 IKY9RbTl7s2/L9RVNUAdwCX2+7oDqwwXDAw1AgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUsfsoGHInp142PD6xaaPooWU5RowwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9zZnNvR0hJbnAxNDJQRDZ4YWFQ b29XVTVSb3cucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHyieA MA0GCSqGSIb3DQEBCwUAA4IBAQCfBZ4ZclS/emUtBaoPrhlOBgg1x/WZhSsfK7Of C4r2nt6+GbdSglc7kIv1hWEupBygmI98ZZBcrahQ7nDW0kNT4vDelmI/btQ9QriS 0udDcrpLW0MET8R+00mYGoEd15th1SQSaa8L9NyLsq9/STd2lAP0o9tf5P4UELHL 0K5aX4ZMVPlKAyjDtQjd77HOSnaU8/XQ3k7M7zRReSy6wkZlWADDXAPl3CKZbaHK hIOAgbmc5ea2Rd8m7exkiPcafSP+Q0xOgV+mI4Zp0t9e9CsrOJcANZ0JnVqgRmIr xo9nub1EBfqpAjI/GkMvaDgTAX+29EM8NfbSGrDSdqBkXImb -----END CERTIFICATE-----Generated at Wed Nov 5 19:38:09 2025 by rpki-client