$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WARNERLINK/Hgt7dxLsqQNWJz7J29V5dlNNdXg.roa File: Hgt7dxLsqQNWJz7J29V5dlNNdXg.roa (raw, json) Hash identifier: Ys8GED1CA1sECdocWHecHrjzA+Q390l3x/YoUIbxvGc= Subject key identifier: 1E:0B:7B:77:12:EC:A9:03:56:27:3E:C9:DB:D5:79:76:53:4D:75:78 Certificate issuer: /CN=6E6B044FF35B9831131F39B8304FE8CAFDE39909 Certificate serial: 06 Authority key identifier: 6E:6B:04:4F:F3:5B:98:31:13:1F:39:B8:30:4F:E8:CA:FD:E3:99:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/bmsET_NbmDETHzm4ME_oyv3jmQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WARNERLINK/Hgt7dxLsqQNWJz7J29V5dlNNdXg.roa Signing time: Fri 31 Oct 2025 10:09:50 +0000 ROA not before: Fri 31 Oct 2025 10:09:50 +0000 ROA not after: Wed 09 Sep 2026 15:30:29 +0000 asID: 18427 IP address blocks: 2402:2860::/32 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/WARNERLINK/bmsET_NbmDETHzm4ME_oyv3jmQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/WARNERLINK/bmsET_NbmDETHzm4ME_oyv3jmQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/bmsET_NbmDETHzm4ME_oyv3jmQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 05:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E6B044FF35B9831131F39B8304FE8CAFDE39909 Validity Not Before: Oct 31 10:09:50 2025 GMT Not After : Sep 9 15:30:29 2026 GMT Subject: CN=1E0B7B7712ECA90356273EC9DBD57976534D7578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7e:06:bf:61:c0:24:1e:e7:70:23:d1:23:d1: 9b:69:fd:de:c2:54:a7:fa:4d:0c:2b:7a:5b:d9:b1: 38:6e:71:c8:7d:f5:93:89:a3:6f:02:7f:38:38:f1: f0:b4:2e:11:8b:e3:9a:a4:91:58:26:a8:f4:6e:0a: f5:62:24:77:27:5f:33:d7:05:10:1b:e8:d8:d9:34: 5d:bc:9c:9a:69:39:ae:96:88:20:ad:cf:f9:14:58: 15:e8:60:27:cc:05:6b:f9:6d:c8:98:db:b1:b6:1d: 45:7e:13:a2:d6:db:9a:5d:69:15:f4:bd:b8:87:8c: d8:26:f3:9d:49:17:cb:df:64:d3:ba:30:98:8f:41: ef:2d:61:59:72:df:c8:58:e3:8e:03:5d:6a:c6:41: 5d:a3:91:48:63:11:b4:a2:57:ab:58:c8:c2:32:32: b3:a4:09:d6:53:8d:00:df:9b:c9:7e:0f:10:36:f5: 8e:00:e5:67:5f:17:1f:86:4a:9a:46:19:84:e9:2d: 83:18:d0:e9:a7:52:c0:79:b8:a2:2b:20:96:8a:64: 5b:24:ea:d9:38:c4:56:31:70:f3:2d:c3:7a:e8:81: 28:21:1d:92:07:70:c1:f9:a1:33:1f:5f:06:a9:b8: 24:05:ed:54:5d:7b:bf:50:98:de:78:78:c8:e5:f7: 88:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:0B:7B:77:12:EC:A9:03:56:27:3E:C9:DB:D5:79:76:53:4D:75:78 X509v3 Authority Key Identifier: keyid:6E:6B:04:4F:F3:5B:98:31:13:1F:39:B8:30:4F:E8:CA:FD:E3:99:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WARNERLINK/bmsET_NbmDETHzm4ME_oyv3jmQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/bmsET_NbmDETHzm4ME_oyv3jmQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WARNERLINK/Hgt7dxLsqQNWJz7J29V5dlNNdXg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2402:2860::/32 Signature Algorithm: sha256WithRSAEncryption c4:30:94:4d:e7:e1:b6:74:3e:b3:3b:24:96:6b:87:5a:3e:9b: f5:6d:90:4c:bb:af:52:64:d4:84:e6:cc:e4:43:99:ec:8a:1f: 5a:fc:22:c0:25:67:27:86:fc:b0:fc:49:24:49:15:e3:70:59: 45:8c:f8:cd:51:e9:d1:49:ae:aa:ba:6c:8a:cd:b9:8e:47:6f: 93:e8:6f:df:23:71:62:53:db:e3:06:4e:7f:52:f4:c1:1f:3a: ad:75:99:eb:b6:45:d1:3e:31:9c:2d:4d:58:b1:a8:0c:62:e3: fc:fe:c3:63:cb:51:01:20:6d:9b:be:2c:0d:4b:03:81:30:3b: 38:5c:b2:18:69:63:3a:cd:69:d0:70:25:43:ff:83:86:a0:d1: ad:82:6c:0d:0f:ca:f4:39:9e:78:12:73:bf:84:ee:76:11:a1: e1:12:47:fe:63:a0:03:ec:71:dd:10:20:06:ba:8e:3a:d9:2e: fc:77:46:64:8b:b7:31:2a:c4:50:c3:84:88:e0:2e:33:9a:ba: dc:b6:92:f1:c3:49:32:e7:50:cf:c4:61:5f:04:9d:ce:9b:50: 8f:c8:40:e6:b9:51:4a:19:92:46:61:fd:01:c6:a9:46:d0:82: b5:c1:f5:7e:e7:4a:7c:6e:4a:d1:71:26:aa:4e:d2:70:8e:08: 58:4d:01:a3 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgIBBjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2RTZC MDQ0RkYzNUI5ODMxMTMxRjM5QjgzMDRGRThDQUZERTM5OTA5MB4XDTI1MTAzMTEw MDk1MFoXDTI2MDkwOTE1MzAyOVowMzExMC8GA1UEAxMoMUUwQjdCNzcxMkVDQTkw MzU2MjczRUM5REJENTc5NzY1MzRENzU3ODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALt+Br9hwCQe53Aj0SPRm2n93sJUp/pNDCt6W9mxOG5xyH31k4mj bwJ/ODjx8LQuEYvjmqSRWCao9G4K9WIkdydfM9cFEBvo2Nk0Xbycmmk5rpaIIK3P +RRYFehgJ8wFa/ltyJjbsbYdRX4Totbbml1pFfS9uIeM2CbznUkXy99k07owmI9B 7y1hWXLfyFjjjgNdasZBXaORSGMRtKJXq1jIwjIys6QJ1lONAN+byX4PEDb1jgDl Z18XH4ZKmkYZhOktgxjQ6adSwHm4oisglopkWyTq2TjEVjFw8y3DeuiBKCEdkgdw wfmhMx9fBqm4JAXtVF17v1CY3nh4yOX3iJsCAwEAAaOCAfcwggHzMB0GA1UdDgQW BBQeC3t3EuypA1YnPsnb1Xl2U011eDAfBgNVHSMEGDAWgBRuawRP81uYMRMfObgw T+jK/eOZCTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGAGA1UdHwRZMFcwVaBT oFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9XQVJORVJM SU5LL2Jtc0VUX05ibURFVEh6bTRNRV9veXYzam1Ray5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvYm1zRVRfTmJtREVUSHptNE1FX295djNqbVFrLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgaAGCCsGAQUFBwELBIGTMIGQMFsGCCsGAQUFBzALhk9yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0FSTkVSTElOSy9IZ3Q3ZHhMc3FR TldKejdKMjlWNWRsTk5kWGcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAu dHduaWMudHcvcnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIA AjAHAwUAJAIoYDANBgkqhkiG9w0BAQsFAAOCAQEAxDCUTefhtnQ+szsklmuHWj6b 9W2QTLuvUmTUhObM5EOZ7IofWvwiwCVnJ4b8sPxJJEkV43BZRYz4zVHp0Umuqrps is25jkdvk+hv3yNxYlPb4wZOf1L0wR86rXWZ67ZF0T4xnC1NWLGoDGLj/P7DY8tR ASBtm74sDUsDgTA7OFyyGGljOs1p0HAlQ/+DhqDRrYJsDQ/K9DmeeBJzv4TudhGh 4RJH/mOgA+xx3RAgBrqOOtku/HdGZIu3MSrEUMOEiOAuM5q63LaS8cNJMudQz8Rh XwSdzptQj8hA5rlRShmSRmH9AcapRtCCtcH1fudKfG5K0XEmqk7ScI4IWE0Bow== -----END CERTIFICATE-----Generated at Wed Nov 5 04:41:30 2025 by rpki-client