$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/2sIaEJO1lhXuygM5MBnBSqJ5Aoo.roa File: 2sIaEJO1lhXuygM5MBnBSqJ5Aoo.roa (raw, json) Hash identifier: TJAKclQ7FC09EEWSaWV6Qf1HFoJkjkv9SJZoHhGKv88= Subject key identifier: DA:C2:1A:10:93:B5:96:15:EE:CA:03:39:30:19:C1:4A:A2:79:02:8A Certificate issuer: /CN=257DB7B9919975697366B7014F8CFE28EF364E73 Certificate serial: 0797 Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/2sIaEJO1lhXuygM5MBnBSqJ5Aoo.roa Signing time: Mon 10 Feb 2025 13:44:34 +0000 ROA not before: Mon 10 Feb 2025 13:44:34 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131657 IP address blocks: 103.153.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 22:06:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1943 (0x797) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73 Validity Not Before: Feb 10 13:44:34 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=DAC21A1093B59615EECA03393019C14AA279028A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d5:59:1b:e0:8e:39:6c:02:fe:22:ee:39:e8: 7f:a2:71:6a:ad:26:17:49:63:42:d9:b4:b3:d8:04: 44:60:6a:75:b7:6f:8c:c3:d7:6a:27:14:59:c5:79: a3:1d:ab:65:9a:66:d4:2b:f0:84:53:d3:be:b7:1a: c9:dd:df:d9:43:23:b3:80:bc:a7:71:23:0b:78:a5: 7a:96:7b:45:5f:cd:37:76:f4:b0:d2:bc:e2:05:95: 73:8c:0c:ab:8b:91:26:39:4e:ea:1f:70:a1:5a:3f: 76:75:e2:11:a5:80:24:38:90:ca:c3:dd:61:23:59: 88:c6:81:cf:bf:26:1a:04:36:ce:39:58:43:1b:29: 14:30:db:e2:e7:b2:6f:6c:28:e8:98:5a:21:78:4b: 4e:7e:2d:b6:d2:68:90:e9:ba:ab:d7:e7:c6:bc:25: 6c:06:93:13:79:49:5c:07:b6:2f:c1:b2:ba:d0:00: 92:a5:7d:5e:1d:79:18:66:d9:8d:9a:d1:96:92:f0: 63:3a:6e:19:02:9e:ae:19:71:f3:fb:23:4b:94:e9: b3:d3:3c:53:e1:fd:fe:76:a4:8f:9e:11:fe:6c:0c: 2a:be:98:94:b5:eb:33:82:9c:11:13:9c:95:c1:4c: 06:3c:1c:45:16:52:91:9b:23:ea:cd:8c:f7:50:bf: a1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:C2:1A:10:93:B5:96:15:EE:CA:03:39:30:19:C1:4A:A2:79:02:8A X509v3 Authority Key Identifier: keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/2sIaEJO1lhXuygM5MBnBSqJ5Aoo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.153.176.0/24 Signature Algorithm: sha256WithRSAEncryption 98:76:3d:cf:39:a6:e2:61:08:fa:77:7e:d0:aa:e6:9c:2a:e2: 7e:dc:06:17:0f:13:39:18:65:01:81:60:b5:6e:0c:bf:37:43: 67:55:46:2f:75:3e:ea:06:df:85:63:87:41:d1:57:6d:7e:36: 8a:43:50:0c:96:75:1d:19:83:b6:fb:b2:06:63:e9:37:df:ac: 63:07:63:63:d8:f8:45:aa:e6:06:f3:fa:54:9b:c4:7c:d5:1e: 39:c7:c3:29:ba:9b:50:dd:6f:46:50:8a:d5:e1:1e:c2:ef:bc: fa:2a:01:c0:25:75:ec:68:71:52:a0:35:06:1c:61:27:4b:34: ec:12:6a:ae:23:1b:eb:61:89:b8:98:dd:1e:ed:b3:cb:82:63: f0:8a:f6:5b:63:44:34:3b:b1:e1:d1:69:78:74:c1:1c:89:62: 42:c5:ad:c1:51:9c:79:d8:a6:36:07:91:3f:1b:95:86:2e:a9: 36:ec:91:d9:95:cf:d0:f4:cf:8b:08:d5:8a:48:e1:52:0f:92: 04:02:65:ce:5f:26:fa:42:33:36:bf:ee:74:b9:06:3b:55:80: e9:0d:2e:67:67:1f:cb:48:9e:f7:e6:95:5b:cd:88:dd:f2:d6: b7:62:07:05:89:c5:d2:ca:16:77:ad:56:bf:bc:89:65:a3:5e: 26:f2:8c:5d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICB5cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjU3 REI3Qjk5MTk5NzU2OTczNjZCNzAxNEY4Q0ZFMjhFRjM2NEU3MzAeFw0yNTAyMTAx MzQ0MzRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKERBQzIxQTEwOTNCNTk2 MTVFRUNBMDMzOTMwMTlDMTRBQTI3OTAyOEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDP1Vkb4I45bAL+Iu456H+icWqtJhdJY0LZtLPYBERganW3b4zD 12onFFnFeaMdq2WaZtQr8IRT0763Gsnd39lDI7OAvKdxIwt4pXqWe0VfzTd29LDS vOIFlXOMDKuLkSY5TuofcKFaP3Z14hGlgCQ4kMrD3WEjWYjGgc+/JhoENs45WEMb KRQw2+Lnsm9sKOiYWiF4S05+LbbSaJDpuqvX58a8JWwGkxN5SVwHti/BsrrQAJKl fV4deRhm2Y2a0ZaS8GM6bhkCnq4ZcfP7I0uU6bPTPFPh/f52pI+eEf5sDCq+mJS1 6zOCnBETnJXBTAY8HEUWUpGbI+rNjPdQv6G/AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU2sIaEJO1lhXuygM5MBnBSqJ5AoowHwYDVR0jBBgwFoAUJX23uZGZdWlzZrcB T4z+KO82TnMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RB L0pYMjN1WkdaZFdselpyY0JUNHotS084MlRuTS5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvSlgyM3VaR1pkV2x6WnJjQlQ0ei1LTzgyVG5NLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RBLzJzSWFFSk8xbGhYdXlnTTVN Qm5CU3FKNUFvby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn mbAwDQYJKoZIhvcNAQELBQADggEBAJh2Pc85puJhCPp3ftCq5pwq4n7cBhcPEzkY ZQGBYLVuDL83Q2dVRi91PuoG34Vjh0HRV21+NopDUAyWdR0Zg7b7sgZj6TffrGMH Y2PY+EWq5gbz+lSbxHzVHjnHwym6m1Ddb0ZQitXhHsLvvPoqAcAldexocVKgNQYc YSdLNOwSaq4jG+thibiY3R7ts8uCY/CK9ltjRDQ7seHRaXh0wRyJYkLFrcFRnHnY pjYHkT8blYYuqTbskdmVz9D0z4sI1YpI4VIPkgQCZc5fJvpCMza/7nS5BjtVgOkN LmdnH8tInvfmlVvNiN3y1rdiBwWJxdLKFnetVr+8iWWjXibyjF0= -----END CERTIFICATE-----Generated at Sat Apr 5 19:51:42 2025 by rpki-client