$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/y_l5zt2lFbQbuMPtASR32omTzK0.roa File: y_l5zt2lFbQbuMPtASR32omTzK0.roa (raw, json) Hash identifier: qnB26ywgRvntLNYkcZA4EI8DlzmulrueOOLgjz0oyiI= Subject key identifier: CB:F9:79:CE:DD:A5:15:B4:1B:B8:C3:ED:01:24:77:DA:89:93:CC:AD Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 1952 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/y_l5zt2lFbQbuMPtASR32omTzK0.roa Signing time: Fri 22 Aug 2025 09:02:59 +0000 ROA not before: Fri 22 Aug 2025 09:02:59 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 3462 IP address blocks: 2001:b400:e9f0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 11:29:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6482 (0x1952) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:02:59 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=CBF979CEDDA515B41BB8C3ED012477DA8993CCAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:68:23:3d:76:e9:75:3f:ba:9d:a4:2b:56:3e: 1f:b3:a4:00:40:91:4c:e0:56:9a:3c:69:c4:73:c0: 0a:bf:b7:f8:a4:d0:1a:14:56:df:3c:20:42:c3:8e: 88:9d:af:e7:41:bf:15:c9:a8:ab:db:27:28:06:3a: c8:6b:30:a2:fe:7e:b9:1c:76:68:b2:f0:b5:25:7a: 20:a9:87:61:c5:f1:c8:42:bc:c9:64:0e:ae:26:e3: 22:ee:98:16:81:64:c4:82:d2:b3:1a:a7:23:27:a8: dd:3d:fb:19:a3:cb:80:d0:9f:be:24:8b:bf:70:9d: ab:73:74:f3:c8:89:30:b1:ec:5e:23:6c:88:77:e1: 88:ad:fa:31:21:0f:b5:83:8e:51:5b:4a:81:07:d8: c6:6f:ef:f0:e9:69:9e:fa:bf:2a:8f:8f:e9:35:b0: 2a:0e:ad:a1:15:37:f9:2d:58:c2:83:a8:ad:e6:23: 50:ba:80:3f:09:20:dd:66:09:4d:be:1b:b9:b2:0a: f7:63:07:fe:0b:8a:eb:75:dc:dc:d1:3b:d7:c3:77: 56:ef:59:d7:26:4c:61:d0:4d:50:61:2e:e1:52:33: a9:aa:94:78:4e:61:cf:25:4c:56:84:d5:0f:c5:95: 25:56:b5:2b:7e:2b:08:2e:67:b0:52:80:25:4b:3c: 30:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:F9:79:CE:DD:A5:15:B4:1B:B8:C3:ED:01:24:77:DA:89:93:CC:AD X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/y_l5zt2lFbQbuMPtASR32omTzK0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2001:b400:e9f0::/44 Signature Algorithm: sha256WithRSAEncryption 1b:a4:c8:d9:cf:0d:b9:26:3a:a5:d3:e9:e5:71:ca:f7:7f:27: bf:00:b3:4b:fc:c1:dd:46:87:70:63:ca:ad:1a:ff:e6:6f:81: e4:c2:a0:a4:84:8c:cd:c5:bc:b4:6e:63:8e:39:f4:dc:ab:a4: 7d:62:3b:f1:cb:97:51:82:b7:1d:e7:16:6a:af:41:ec:62:f8: 35:3e:3a:46:97:7b:e5:3e:90:02:0a:ca:07:9c:d5:71:b4:cc: af:31:7f:25:fc:a8:96:74:b5:eb:20:3d:b1:5d:aa:50:f9:5b: 06:28:c8:eb:7f:2c:8f:b0:2c:7c:1e:da:ba:90:a5:61:2e:b7: ff:d4:ef:01:fe:e5:11:e1:ea:92:67:57:08:9d:5a:d8:d1:61: 7f:86:bc:33:bf:de:db:80:de:61:ca:d7:dc:15:28:c2:99:4f: 2e:13:a8:31:72:9b:26:3f:9e:bc:3c:39:c6:1a:ad:b0:87:ff: b9:71:6b:54:1e:98:ce:96:be:2d:86:7b:0c:6b:29:c6:26:ad: 9c:85:3e:76:8a:36:a0:07:4c:37:ad:32:91:24:8d:c1:2a:85: b0:35:3d:b1:51:f3:8a:2f:e7:c2:c2:e3:56:e2:40:5d:73:b4: aa:d2:46:91:d4:ae:88:f3:80:52:9b:17:b0:c0:65:f7:44:24: b9:5d:3b:62 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICGVIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAyNTlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKENCRjk3OUNFRERBNTE1 QjQxQkI4QzNFRDAxMjQ3N0RBODk5M0NDQUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3aCM9dul1P7qdpCtWPh+zpABAkUzgVpo8acRzwAq/t/ik0BoU Vt88IELDjoidr+dBvxXJqKvbJygGOshrMKL+frkcdmiy8LUleiCph2HF8chCvMlk Dq4m4yLumBaBZMSC0rMapyMnqN09+xmjy4DQn74ki79wnatzdPPIiTCx7F4jbIh3 4Yit+jEhD7WDjlFbSoEH2MZv7/DpaZ76vyqPj+k1sCoOraEVN/ktWMKDqK3mI1C6 gD8JIN1mCU2+G7myCvdjB/4Liut13NzRO9fDd1bvWdcmTGHQTVBhLuFSM6mqlHhO Yc8lTFaE1Q/FlSVWtSt+KwguZ7BSgCVLPDDxAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUy/l5zt2lFbQbuMPtASR32omTzK0wHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC95X2w1enQybEZiUWJ1TVB0QVNS MzJvbVR6SzAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEIAG0 AOnwMA0GCSqGSIb3DQEBCwUAA4IBAQAbpMjZzw25Jjql0+nlccr3fye/ALNL/MHd RodwY8qtGv/mb4HkwqCkhIzNxby0bmOOOfTcq6R9Yjvxy5dRgrcd5xZqr0HsYvg1 PjpGl3vlPpACCsoHnNVxtMyvMX8l/KiWdLXrID2xXapQ+VsGKMjrfyyPsCx8Htq6 kKVhLrf/1O8B/uUR4eqSZ1cInVrY0WF/hrwzv97bgN5hytfcFSjCmU8uE6gxcpsm P568PDnGGq2wh/+5cWtUHpjOlr4thnsMaynGJq2chT52ijagB0w3rTKRJI3BKoWw NT2xUfOKL+fCwuNW4kBdc7Sq0kaR1K6I84BSmxewwGX3RCS5XTti -----END CERTIFICATE-----Generated at Wed Nov 5 08:06:41 2025 by rpki-client