$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/tNfwwK4W--otkskXA1UzRbtswSw.roa File: tNfwwK4W--otkskXA1UzRbtswSw.roa (raw, json) Hash identifier: nf/GbMCCOxDO98GswMF+j1FjnJPKsWFlxEzESgr8d58= Subject key identifier: B4:D7:F0:C0:AE:16:FB:EA:2D:92:C9:17:03:55:33:45:BB:6C:C1:2C Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 191B Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/tNfwwK4W--otkskXA1UzRbtswSw.roa Signing time: Fri 22 Aug 2025 09:02:46 +0000 ROA not before: Fri 22 Aug 2025 09:02:46 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9505 IP address blocks: 175.111.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6427 (0x191b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:02:46 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=B4D7F0C0AE16FBEA2D92C91703553345BB6CC12C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:cf:4f:5a:72:46:40:d8:9a:85:78:97:54:38: 90:3f:fc:9f:26:d2:2b:17:28:a0:dc:7f:48:b0:0b: 5d:af:e2:f2:8f:29:cb:04:36:49:93:35:ce:65:52: cd:8e:3a:df:df:9b:8d:61:24:3c:3e:02:d3:88:fd: 6f:40:29:a9:85:45:4d:a5:f6:b1:89:dc:c3:b4:bd: ff:24:61:0f:b8:d5:41:9d:0a:03:30:a3:c4:71:4d: 50:87:a8:b3:5b:9f:50:39:12:76:98:0b:89:8f:44: c1:b6:d3:55:6b:a9:8a:25:71:a2:ff:99:10:bc:d2: c2:1c:68:52:40:88:82:f8:c5:71:33:09:dc:54:21: 1a:e4:e0:a9:e6:06:b9:08:fe:c1:14:4a:46:d8:06: 22:58:27:12:a1:38:a5:fb:72:c6:4d:3e:2f:77:71: 43:57:6d:e9:1c:15:04:7a:26:90:c7:f4:75:7f:f8: 16:f7:12:e4:f2:84:bb:7e:7c:a3:e2:a7:b2:84:62: d5:40:c7:be:da:54:09:8b:89:48:be:3c:22:77:06: 34:fc:8d:15:43:96:fc:9c:29:3b:2a:ad:08:59:6f: 7a:ac:29:52:59:07:8e:2e:89:55:ea:05:8b:79:ee: 7e:47:eb:bc:8a:46:0e:b9:07:9c:ca:ce:4a:6c:7f: 8a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:D7:F0:C0:AE:16:FB:EA:2D:92:C9:17:03:55:33:45:BB:6C:C1:2C X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/tNfwwK4W--otkskXA1UzRbtswSw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 175.111.238.0/24 Signature Algorithm: sha256WithRSAEncryption 25:fc:cc:ff:c7:69:64:84:f8:33:7b:7e:29:71:18:be:21:f4: 49:16:6c:78:72:20:ef:d9:10:12:0d:67:68:d4:ec:9e:5a:7f: e1:86:69:95:b8:a6:6d:54:c2:cd:04:7e:fe:2a:e9:d8:0c:86: 84:c7:a5:c9:ad:88:83:66:95:f1:e6:19:68:01:79:c6:7e:43: 7c:ed:e8:0a:00:07:85:5f:2d:28:5c:28:9f:c7:32:ca:7e:82: c3:22:81:30:05:32:7e:f1:0e:03:fc:6e:52:4f:a4:01:60:4a: 6f:e6:f1:fa:3e:59:9e:90:6f:27:c3:d5:e8:20:57:83:b7:0c: 56:66:37:1f:c4:2b:ee:80:9b:a7:df:f6:f8:17:5a:c7:18:57: fa:04:34:4c:54:cb:06:5b:f4:80:95:c2:c8:7c:f9:04:ed:f8: e5:71:f6:b4:ee:f3:a0:96:69:a9:4e:c7:1f:44:56:b1:1a:0b: 0a:86:ef:86:96:23:03:8d:42:2b:fc:7a:35:65:5e:d6:01:98: 4e:9f:ef:f9:d8:16:ef:6d:1d:dc:70:a2:c1:9e:6a:a6:39:61: 91:0f:58:0f:81:5d:dc:ad:37:5e:17:65:05:13:b1:31:ab:bb: ca:5b:a5:e1:d0:00:75:15:15:f2:9f:73:6a:d3:cd:53:2c:bd: 7c:f9:45:fa -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICGRswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAyNDZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEI0RDdGMEMwQUUxNkZC RUEyRDkyQzkxNzAzNTUzMzQ1QkI2Q0MxMkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSz09ackZA2JqFeJdUOJA//J8m0isXKKDcf0iwC12v4vKPKcsE NkmTNc5lUs2OOt/fm41hJDw+AtOI/W9AKamFRU2l9rGJ3MO0vf8kYQ+41UGdCgMw o8RxTVCHqLNbn1A5EnaYC4mPRMG201VrqYolcaL/mRC80sIcaFJAiIL4xXEzCdxU IRrk4KnmBrkI/sEUSkbYBiJYJxKhOKX7csZNPi93cUNXbekcFQR6JpDH9HV/+Bb3 EuTyhLt+fKPip7KEYtVAx77aVAmLiUi+PCJ3BjT8jRVDlvycKTsqrQhZb3qsKVJZ B44uiVXqBYt57n5H67yKRg65B5zKzkpsf4pdAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUtNfwwK4W++otkskXA1UzRbtswSwwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC90TmZ3d0s0Vy0tb3Rrc2tYQTFV elJidHN3U3cucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAr2/u MA0GCSqGSIb3DQEBCwUAA4IBAQAl/Mz/x2lkhPgze34pcRi+IfRJFmx4ciDv2RAS DWdo1OyeWn/hhmmVuKZtVMLNBH7+KunYDIaEx6XJrYiDZpXx5hloAXnGfkN87egK AAeFXy0oXCifxzLKfoLDIoEwBTJ+8Q4D/G5ST6QBYEpv5vH6PlmekG8nw9XoIFeD twxWZjcfxCvugJun3/b4F1rHGFf6BDRMVMsGW/SAlcLIfPkE7fjlcfa07vOglmmp TscfRFaxGgsKhu+GliMDjUIr/Ho1ZV7WAZhOn+/52BbvbR3ccKLBnmqmOWGRD1gP gV3crTdeF2UFE7Exq7vKW6Xh0AB1FRXyn3Nq081TLL18+UX6 -----END CERTIFICATE-----Generated at Wed Nov 5 21:11:28 2025 by rpki-client