$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/76oT6jpWsLAS7z093S6dgaZjmzI.roa File: 76oT6jpWsLAS7z093S6dgaZjmzI.roa (raw, json) Hash identifier: QUSDtgbib6QrKIz1dSqYYed6Cgs0O3SeV5rjIxBCa5o= Subject key identifier: EF:AA:13:EA:3A:56:B0:B0:12:EF:3D:3D:DD:2E:9D:81:A6:63:9B:32 Certificate issuer: /CN=257DB7B9919975697366B7014F8CFE28EF364E73 Certificate serial: 08B4 Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/76oT6jpWsLAS7z093S6dgaZjmzI.roa Signing time: Fri 22 Aug 2025 09:02:01 +0000 ROA not before: Fri 22 Aug 2025 09:02:01 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131657 IP address blocks: 103.122.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 10:18:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2228 (0x8b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73 Validity Not Before: Aug 22 09:02:01 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=EFAA13EA3A56B0B012EF3D3DDD2E9D81A6639B32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d7:8a:f4:44:02:6a:4e:25:fa:82:43:3c:a5: 50:ac:19:ad:95:75:98:47:d4:8f:d9:55:5b:91:42: 65:f1:3a:ef:a6:66:8d:a7:9d:33:9a:c6:61:b9:7c: f8:7c:08:32:ed:54:27:ae:a0:eb:56:d7:38:03:68: 52:41:f8:cb:7e:16:cb:ae:e2:ad:60:20:fd:e1:68: 20:4b:8d:b3:d1:03:ff:ee:44:6c:45:1c:02:46:98: 5a:a4:18:9d:97:80:7f:0f:87:03:3b:67:c3:17:1a: 52:27:be:4a:af:2b:87:2c:7a:95:50:26:62:fd:7c: 77:5e:68:8b:51:cf:a3:b2:f7:78:0c:08:0c:b3:53: 26:19:f9:01:9e:6f:91:73:ba:db:29:cc:3d:32:c7: 6e:ef:16:de:71:8d:6e:75:8d:17:0f:81:87:6f:ea: 3a:79:35:c1:13:01:de:bd:96:4b:83:cc:da:34:9c: 3e:99:16:1e:ac:53:4b:88:6f:17:80:ac:84:3b:c9: 85:a9:2e:dd:88:87:82:5e:47:8e:b7:38:ee:23:36: fb:3b:16:57:6e:44:7d:0b:00:4f:a2:24:8f:d1:af: db:e8:72:1b:1d:2b:11:ec:5a:9e:d9:09:47:5d:28: 2b:4b:cd:e7:36:c7:37:e9:d8:9b:b0:b5:be:08:ff: 86:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:AA:13:EA:3A:56:B0:B0:12:EF:3D:3D:DD:2E:9D:81:A6:63:9B:32 X509v3 Authority Key Identifier: keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/76oT6jpWsLAS7z093S6dgaZjmzI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.122.188.0/22 Signature Algorithm: sha256WithRSAEncryption 55:ae:c9:65:0d:97:da:6e:b5:5d:d8:25:86:0d:3a:3c:6c:e1: ae:e7:cb:20:28:fd:49:7d:7d:30:88:18:70:a8:02:32:56:a4: 47:5f:ac:8e:69:6f:af:f2:b3:29:94:d3:ea:ae:ec:01:7c:41: d1:83:26:11:47:a1:93:a3:a6:64:0d:d6:c5:9f:aa:4b:81:b5: 33:95:fc:52:0b:cd:5d:84:e9:93:4b:b3:ee:b8:35:b8:fb:73: 96:ea:63:aa:fe:9a:ea:bc:7b:f8:4c:7d:4f:85:00:97:13:54: 44:0b:d0:76:3f:94:ca:15:9c:5b:2d:78:b8:0c:43:d6:a2:cc: 3c:e5:b9:54:8b:f6:ac:22:da:2a:11:9a:de:18:f1:24:0d:1d: 38:0d:cf:1b:b7:67:1a:29:c3:ca:64:50:12:0e:ca:04:ea:0b: 68:4b:ab:2c:ba:ae:ae:fe:30:ae:49:0c:b4:dd:e7:35:52:4d: ad:01:67:c6:ef:22:2f:9e:32:e3:50:cf:c9:5b:c6:1d:de:9f: ec:6f:7b:f5:59:46:49:7f:e2:f6:bd:c4:8d:17:7d:b6:2f:19: 65:ba:97:32:f0:fc:c0:62:6b:39:3b:4d:fa:4c:d1:ed:fa:ac: 7b:db:69:6a:d0:b8:4b:a9:17:67:12:5a:3f:c6:55:bb:e0:2c: e5:1a:53:21 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICCLQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjU3 REI3Qjk5MTk5NzU2OTczNjZCNzAxNEY4Q0ZFMjhFRjM2NEU3MzAeFw0yNTA4MjIw OTAyMDFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEVGQUExM0VBM0E1NkIw QjAxMkVGM0QzREREMkU5RDgxQTY2MzlCMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDL14r0RAJqTiX6gkM8pVCsGa2VdZhH1I/ZVVuRQmXxOu+mZo2n nTOaxmG5fPh8CDLtVCeuoOtW1zgDaFJB+Mt+Fsuu4q1gIP3haCBLjbPRA//uRGxF HAJGmFqkGJ2XgH8PhwM7Z8MXGlInvkqvK4csepVQJmL9fHdeaItRz6Oy93gMCAyz UyYZ+QGeb5FzutspzD0yx27vFt5xjW51jRcPgYdv6jp5NcETAd69lkuDzNo0nD6Z Fh6sU0uIbxeArIQ7yYWpLt2Ih4JeR463OO4jNvs7FlduRH0LAE+iJI/Rr9vochsd KxHsWp7ZCUddKCtLzec2xzfp2Juwtb4I/4YrAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU76oT6jpWsLAS7z093S6dgaZjmzIwHwYDVR0jBBgwFoAUJX23uZGZdWlzZrcB T4z+KO82TnMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RB L0pYMjN1WkdaZFdselpyY0JUNHotS084MlRuTS5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvSlgyM3VaR1pkV2x6WnJjQlQ0ei1LTzgyVG5NLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RBLzc2b1Q2anBXc0xBUzd6MDkz UzZkZ2Faam16SS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJn erwwDQYJKoZIhvcNAQELBQADggEBAFWuyWUNl9putV3YJYYNOjxs4a7nyyAo/Ul9 fTCIGHCoAjJWpEdfrI5pb6/ysymU0+qu7AF8QdGDJhFHoZOjpmQN1sWfqkuBtTOV /FILzV2E6ZNLs+64Nbj7c5bqY6r+muq8e/hMfU+FAJcTVEQL0HY/lMoVnFsteLgM Q9aizDzluVSL9qwi2ioRmt4Y8SQNHTgNzxu3Zxopw8pkUBIOygTqC2hLqyy6rq7+ MK5JDLTd5zVSTa0BZ8bvIi+eMuNQz8lbxh3en+xve/VZRkl/4va9xI0XfbYvGWW6 lzLw/MBiazk7TfpM0e36rHvbaWrQuEupF2cSWj/GVbvgLOUaUyE= -----END CERTIFICATE-----Generated at Tue Sep 9 06:19:04 2025 by rpki-client