$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/xWTz16iFcSYkiyq9IhPgOCbMIc0.roa File: xWTz16iFcSYkiyq9IhPgOCbMIc0.roa (raw, json) Hash identifier: FrryQARhwzXJyHrunPlGiMxmAYwRNsJ4AuLV3pOb3/w= Subject key identifier: C5:64:F3:D7:A8:85:71:26:24:8B:2A:BD:22:13:E0:38:26:CC:21:CD Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 193B Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xWTz16iFcSYkiyq9IhPgOCbMIc0.roa Signing time: Fri 22 Aug 2025 09:02:53 +0000 ROA not before: Fri 22 Aug 2025 09:02:53 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 15133 IP address blocks: 203.74.4.64/26 maxlen: 26 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 16:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6459 (0x193b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:02:53 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=C564F3D7A8857126248B2ABD2213E03826CC21CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ec:bc:c9:a4:7c:45:7e:3f:77:6e:13:96:45: 37:a4:29:d0:f1:9d:61:7f:89:9e:0b:1e:9d:e5:3e: 51:48:89:40:a5:53:70:d9:e9:7e:36:f3:ea:14:a0: d2:17:a5:44:39:ba:2f:50:17:fa:15:76:00:73:2b: 37:1c:cd:6c:76:20:e9:5a:b1:52:06:0b:ab:68:98: 6c:f1:23:f9:39:fd:2a:c0:d3:60:a1:2c:57:36:5d: 2f:05:45:94:52:38:22:68:84:c8:66:2b:88:45:8c: 41:47:b1:c5:df:e5:cc:ea:8d:f3:45:a3:8b:f9:d3: b4:ae:3f:e1:1d:35:4b:67:42:ef:db:15:c8:c3:3f: 46:67:fc:32:d3:fa:cd:82:38:1a:a0:70:d7:e7:08: 5a:1b:4e:2f:85:8d:42:ff:e8:ca:27:93:76:37:46: cd:85:a8:69:dd:dc:0c:28:17:9a:cb:b0:e4:76:f4: 2a:d7:04:6e:78:d8:cc:d8:76:ac:e5:59:7c:a6:cc: 4b:6a:44:b4:9d:a4:b4:7e:51:f2:3a:8f:ae:6f:72: a6:3f:f4:81:e9:95:d7:d0:92:48:b0:31:76:c8:71: 48:9f:32:4a:3d:f1:12:f2:c7:fc:6a:b6:12:58:ce: ec:e6:45:e1:19:b6:1a:ce:70:63:90:e9:c4:33:19: 31:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:64:F3:D7:A8:85:71:26:24:8B:2A:BD:22:13:E0:38:26:CC:21:CD X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xWTz16iFcSYkiyq9IhPgOCbMIc0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.74.4.64/26 Signature Algorithm: sha256WithRSAEncryption 1e:a7:f5:b4:a7:82:7f:14:a8:5f:57:ea:36:33:d2:59:70:09: 8f:de:70:f9:f3:46:0c:cb:a0:13:38:a1:f3:78:02:f1:a2:22: 30:c7:f0:e7:0f:2e:51:d7:7f:55:37:15:07:ed:50:53:bf:06: fb:e6:c7:e8:ef:cc:f6:da:4a:68:f1:b1:08:93:38:89:e4:8c: fd:c0:8b:5a:7d:f4:df:58:7b:ec:70:c0:22:7d:88:d1:9f:7b: c7:57:57:61:45:a0:c3:d6:29:49:79:45:fc:cc:94:9d:49:69: a2:c3:23:7c:81:d2:b5:33:10:bd:78:41:74:b0:d3:da:85:8d: dc:ee:47:6a:a1:71:5a:5c:72:7b:e3:e1:d3:15:84:a2:9d:00: df:9f:8f:ad:0a:e6:d2:59:05:cd:64:8f:ae:48:78:7a:0b:5d: 37:36:72:1f:df:dc:48:3a:13:6a:98:bf:2c:18:de:e8:6f:c4: 23:76:de:ad:d6:b8:57:23:fb:53:e3:fe:4f:ee:6e:8e:69:9b: ea:59:07:b9:78:98:b8:46:a7:46:59:d2:f0:57:55:e1:72:ac: 99:0d:bb:9f:e9:f3:86:a9:13:91:55:35:a8:43:78:f4:b3:ce: 65:7d:6d:38:69:6d:7e:42:03:4b:ce:6c:c5:b6:dd:91:ee:73: 6f:7f:8f:a4 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICGTswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAyNTNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEM1NjRGM0Q3QTg4NTcx MjYyNDhCMkFCRDIyMTNFMDM4MjZDQzIxQ0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDa7LzJpHxFfj93bhOWRTekKdDxnWF/iZ4LHp3lPlFIiUClU3DZ 6X428+oUoNIXpUQ5ui9QF/oVdgBzKzcczWx2IOlasVIGC6tomGzxI/k5/SrA02Ch LFc2XS8FRZRSOCJohMhmK4hFjEFHscXf5czqjfNFo4v507SuP+EdNUtnQu/bFcjD P0Zn/DLT+s2COBqgcNfnCFobTi+FjUL/6Monk3Y3Rs2FqGnd3AwoF5rLsOR29CrX BG542MzYdqzlWXymzEtqRLSdpLR+UfI6j65vcqY/9IHpldfQkkiwMXbIcUifMko9 8RLyx/xqthJYzuzmReEZthrOcGOQ6cQzGTFZAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUxWTz16iFcSYkiyq9IhPgOCbMIc0wHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC94V1R6MTZpRmNTWWtpeXE5SWhQ Z09DYk1JYzAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUGy0oE QDANBgkqhkiG9w0BAQsFAAOCAQEAHqf1tKeCfxSoX1fqNjPSWXAJj95w+fNGDMug Ezih83gC8aIiMMfw5w8uUdd/VTcVB+1QU78G++bH6O/M9tpKaPGxCJM4ieSM/cCL Wn3031h77HDAIn2I0Z97x1dXYUWgw9YpSXlF/MyUnUlposMjfIHStTMQvXhBdLDT 2oWN3O5HaqFxWlxye+Ph0xWEop0A35+PrQrm0lkFzWSPrkh4egtdNzZyH9/cSDoT api/LBje6G/EI3berda4VyP7U+P+T+5ujmmb6lkHuXiYuEanRlnS8FdV4XKsmQ27 n+nzhqkTkVU1qEN49LPOZX1tOGltfkIDS85sxbbdke5zb3+PpA== -----END CERTIFICATE-----Generated at Wed Nov 5 15:07:28 2025 by rpki-client