$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/H3G7_U6UkWWsVL6GBy7-oxFkRds.roa File: H3G7_U6UkWWsVL6GBy7-oxFkRds.roa (raw, json) Hash identifier: dHlZIvhju5pEZ0aXPLXRqPNqhPoEFF2agjr8v2cFY3g= Subject key identifier: 1F:71:BB:FD:4E:94:91:65:AC:54:BE:86:07:2E:FE:A3:11:64:45:DB Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1A28 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/H3G7_U6UkWWsVL6GBy7-oxFkRds.roa Signing time: Fri 22 Aug 2025 08:53:47 +0000 ROA not before: Fri 22 Aug 2025 08:53:47 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9919 IP address blocks: 203.67.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 06:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6696 (0x1a28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 22 08:53:47 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=1F71BBFD4E949165AC54BE86072EFEA3116445DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cb:3d:52:05:a0:eb:94:45:50:d6:43:2f:41: 9e:36:c0:34:f5:f9:eb:c1:14:b6:6f:06:54:c7:9f: c2:ef:6a:5d:c1:fd:29:01:82:c7:8f:26:50:71:a4: 2f:ae:0a:e4:c3:cb:87:6c:4e:dc:91:32:b0:13:49: 75:73:a9:4f:2d:75:93:6b:6e:7c:26:d8:c3:3c:04: 72:8f:ce:b3:a0:d6:3d:bd:90:2f:c0:26:97:88:44: bb:07:34:7f:b1:da:05:5d:9f:3f:00:99:5b:55:c9: 7f:e2:34:28:9f:10:3d:ad:17:73:70:ec:2b:83:99: c9:ee:13:eb:50:48:aa:0f:f4:ed:d9:44:36:76:ed: 54:16:d1:1b:ed:ae:bb:aa:1f:66:45:9a:f3:87:12: f7:01:8b:2f:f7:d6:25:64:e4:43:1d:28:84:f6:4f: ee:d9:40:9b:38:83:77:ef:08:03:4e:52:7c:82:64: d2:13:8c:2b:a2:20:d7:90:c3:27:f3:fe:ad:10:34: 00:a1:ea:e0:89:25:cc:20:5b:64:ef:52:f1:da:0c: 3f:b4:36:07:f9:f0:07:1c:04:d9:77:fd:e1:65:04: 02:1f:43:e2:07:5e:34:6d:c5:b0:a2:8e:74:99:51: 44:95:70:9b:0f:dd:dd:89:23:70:16:2c:bb:7e:c5: ab:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:71:BB:FD:4E:94:91:65:AC:54:BE:86:07:2E:FE:A3:11:64:45:DB X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/H3G7_U6UkWWsVL6GBy7-oxFkRds.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.67.0.0/16 Signature Algorithm: sha256WithRSAEncryption ba:6a:38:b2:11:83:10:50:fa:b2:d2:24:91:72:47:30:40:87: 60:87:a7:3c:32:6a:a6:da:90:bd:7c:7b:50:01:05:35:a6:20: 40:b6:ae:f2:2c:aa:0e:97:bf:6a:95:f2:35:14:09:cc:a7:89: bd:79:d7:15:8e:ce:9d:33:49:81:e9:5f:bc:2f:d7:8e:66:81: 46:92:61:50:39:43:ce:68:11:b3:26:01:7d:46:24:85:40:08: dc:96:2c:7a:d2:2c:6a:92:aa:38:20:67:d6:3d:08:a6:c2:95: cc:c6:cf:ea:aa:20:98:55:ca:a2:1c:a0:a5:e3:ef:bb:13:8c: 36:84:4d:8c:48:4e:66:9d:97:2a:c9:53:00:09:b1:15:cb:80: bf:6e:7a:83:df:ac:05:35:4b:0d:8f:00:0b:04:27:95:ca:e2: 6d:6e:f9:81:29:9b:01:ab:56:e9:b3:f1:41:13:a9:7c:01:f0: dc:17:b3:c3:d3:4f:09:8e:18:ec:e7:66:e5:7d:c4:fd:81:1e: 12:95:2d:e4:5d:1e:bb:5a:d8:b3:39:e8:33:3f:f4:5f:67:04: f4:ba:a0:04:4e:96:5f:32:b8:c6:96:5a:20:2f:b9:a8:bc:f7: 62:3d:1a:2b:7e:b6:6c:74:9f:df:08:c6:b9:f4:32:bd:b9:08: df:1c:50:41 -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICGigwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4MjIw ODUzNDdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDFGNzFCQkZENEU5NDkx NjVBQzU0QkU4NjA3MkVGRUEzMTE2NDQ1REIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCnyz1SBaDrlEVQ1kMvQZ42wDT1+evBFLZvBlTHn8Lval3B/SkB gsePJlBxpC+uCuTDy4dsTtyRMrATSXVzqU8tdZNrbnwm2MM8BHKPzrOg1j29kC/A JpeIRLsHNH+x2gVdnz8AmVtVyX/iNCifED2tF3Nw7CuDmcnuE+tQSKoP9O3ZRDZ2 7VQW0RvtrruqH2ZFmvOHEvcBiy/31iVk5EMdKIT2T+7ZQJs4g3fvCANOUnyCZNIT jCuiINeQwyfz/q0QNACh6uCJJcwgW2TvUvHaDD+0Ngf58AccBNl3/eFlBAIfQ+IH XjRtxbCijnSZUUSVcJsP3d2JI3AWLLt+xasRAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQUH3G7/U6UkWWsVL6GBy7+oxFkRdswHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvSDNHN19VNlVrV1dzVkw2R0J5Ny1v eEZrUmRzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAMtDMA0G CSqGSIb3DQEBCwUAA4IBAQC6ajiyEYMQUPqy0iSRckcwQIdgh6c8Mmqm2pC9fHtQ AQU1piBAtq7yLKoOl79qlfI1FAnMp4m9edcVjs6dM0mB6V+8L9eOZoFGkmFQOUPO aBGzJgF9RiSFQAjclix60ixqkqo4IGfWPQimwpXMxs/qqiCYVcqiHKCl4++7E4w2 hE2MSE5mnZcqyVMACbEVy4C/bnqD36wFNUsNjwALBCeVyuJtbvmBKZsBq1bps/FB E6l8AfDcF7PD008Jjhjs52blfcT9gR4SlS3kXR67WtizOegzP/RfZwT0uqAETpZf MrjGllogL7movPdiPRorfrZsdJ/fCMa59DK9uQjfHFBB -----END CERTIFICATE-----Generated at Wed Nov 5 06:21:38 2025 by rpki-client