$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/7960XTulI_UNCe1Wq7ZQucTOstM.roa File: 7960XTulI_UNCe1Wq7ZQucTOstM.roa (raw, json) Hash identifier: /erIHRyxwTMyiE/VijPMsxZAyvxY8miiCtIYkZNbbCA= Subject key identifier: EF:DE:B4:5D:3B:A5:23:F5:0D:09:ED:56:AB:B6:50:B9:C4:CE:B2:D3 Certificate issuer: /CN=257DB7B9919975697366B7014F8CFE28EF364E73 Certificate serial: 07AA Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/7960XTulI_UNCe1Wq7ZQucTOstM.roa Signing time: Mon 10 Feb 2025 13:44:38 +0000 ROA not before: Mon 10 Feb 2025 13:44:38 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131657 IP address blocks: 103.122.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 02:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1962 (0x7aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73 Validity Not Before: Feb 10 13:44:38 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=EFDEB45D3BA523F50D09ED56ABB650B9C4CEB2D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:33:51:38:42:77:6e:64:1e:36:fd:e4:4d:c8: f8:59:01:3c:a8:57:53:f1:0c:d8:3f:d4:3a:8a:fd: 33:d3:fa:f6:37:fd:ff:24:1b:42:d0:8b:ad:75:ff: 3c:72:e2:5a:35:f0:7c:fc:49:4f:a1:8d:fd:aa:2f: 10:27:0a:4e:7f:57:ac:44:0c:89:95:94:5c:05:21: f6:99:d4:22:f5:dd:39:4d:d7:26:bb:43:f6:bf:13: a7:c8:39:37:dd:9b:36:60:91:cd:a9:3d:bc:bc:cd: 82:7c:57:00:60:f2:a0:64:da:d4:bd:c1:4a:89:48: 17:7a:6b:06:21:e1:8c:e3:6e:c1:6f:fd:a4:77:93: 40:63:14:9b:d2:fb:4f:2d:33:93:b9:3c:0e:c0:11: 57:46:93:f2:d5:81:bc:04:0f:4a:a5:70:89:3c:3e: 1c:b6:15:fa:d7:e5:6f:c4:d3:15:fc:7d:7e:1b:a7: bc:e5:66:7a:d0:65:48:e4:60:81:fe:d2:ee:28:01: 74:dc:6b:64:9f:45:58:8c:72:a7:fb:6d:c4:fd:d9: 8f:ae:89:3e:c7:cf:be:12:14:eb:03:6e:d9:18:ec: da:30:08:67:15:c1:f6:cd:d9:a4:3f:c0:eb:26:4f: 62:0c:e3:84:4b:eb:42:d5:e9:6b:7d:b0:f9:79:7d: d0:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:DE:B4:5D:3B:A5:23:F5:0D:09:ED:56:AB:B6:50:B9:C4:CE:B2:D3 X509v3 Authority Key Identifier: keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/7960XTulI_UNCe1Wq7ZQucTOstM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.122.188.0/22 Signature Algorithm: sha256WithRSAEncryption 38:f8:2f:87:66:63:b1:73:ef:71:fd:9b:97:4a:46:ed:42:8b: 7e:4c:ea:a3:c0:02:36:46:ee:a6:99:32:d6:a0:86:25:cb:df: 3d:ad:52:f0:e9:ca:2d:8e:c3:8f:0f:7b:3f:de:1a:1b:e7:5f: 7c:19:68:59:0f:d9:5d:37:b2:94:6c:5c:69:87:c4:1d:71:10: 85:1e:6f:d8:a7:b7:34:5b:48:c5:d9:0c:b0:38:a7:74:29:5d: 49:bf:60:a2:bc:4a:a0:a7:af:13:2c:c1:a0:f2:e1:99:78:a0: ad:47:6e:8b:be:51:2a:bc:fb:5b:ee:58:d7:02:e0:15:8d:7e: 39:e7:65:c9:33:fa:35:50:4b:8b:f2:ae:5e:5b:c7:83:b3:36: ee:8c:1c:3b:4f:ef:ba:d5:24:02:43:6f:d7:b4:8d:01:34:4c: 2f:aa:d5:09:c1:b0:24:4b:ac:9e:1b:cc:f5:db:fc:b7:3a:07: 45:a9:3b:ea:85:bd:6e:74:78:fe:42:72:90:8a:2e:ba:ad:f2: f4:23:e1:86:8b:00:34:44:61:e6:b5:ac:06:90:48:39:a1:3f: 89:ca:c0:b7:8d:85:b1:ee:4f:a2:67:7b:3f:50:9c:0a:44:e7: e2:6b:86:a1:4f:19:ce:3f:de:e0:11:01:b7:9d:e9:f2:74:2a: 4c:3e:ba:1f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICB6owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjU3 REI3Qjk5MTk5NzU2OTczNjZCNzAxNEY4Q0ZFMjhFRjM2NEU3MzAeFw0yNTAyMTAx MzQ0MzhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEVGREVCNDVEM0JBNTIz RjUwRDA5RUQ1NkFCQjY1MEI5QzRDRUIyRDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLM1E4QnduZB42/eRNyPhZATyoV1PxDNg/1DqK/TPT+vY3/f8k G0LQi611/zxy4lo18Hz8SU+hjf2qLxAnCk5/V6xEDImVlFwFIfaZ1CL13TlN1ya7 Q/a/E6fIOTfdmzZgkc2pPby8zYJ8VwBg8qBk2tS9wUqJSBd6awYh4YzjbsFv/aR3 k0BjFJvS+08tM5O5PA7AEVdGk/LVgbwED0qlcIk8Phy2FfrX5W/E0xX8fX4bp7zl ZnrQZUjkYIH+0u4oAXTca2SfRViMcqf7bcT92Y+uiT7Hz74SFOsDbtkY7NowCGcV wfbN2aQ/wOsmT2IM44RL60LV6Wt9sPl5fdDpAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU7960XTulI/UNCe1Wq7ZQucTOstMwHwYDVR0jBBgwFoAUJX23uZGZdWlzZrcB T4z+KO82TnMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RB L0pYMjN1WkdaZFdselpyY0JUNHotS084MlRuTS5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvSlgyM3VaR1pkV2x6WnJjQlQ0ei1LTzgyVG5NLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RBLzc5NjBYVHVsSV9VTkNlMVdx N1pRdWNUT3N0TS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJn erwwDQYJKoZIhvcNAQELBQADggEBADj4L4dmY7Fz73H9m5dKRu1Ci35M6qPAAjZG 7qaZMtaghiXL3z2tUvDpyi2Ow48Pez/eGhvnX3wZaFkP2V03spRsXGmHxB1xEIUe b9intzRbSMXZDLA4p3QpXUm/YKK8SqCnrxMswaDy4Zl4oK1Hbou+USq8+1vuWNcC 4BWNfjnnZckz+jVQS4vyrl5bx4OzNu6MHDtP77rVJAJDb9e0jQE0TC+q1QnBsCRL rJ4bzPXb/Lc6B0WpO+qFvW50eP5CcpCKLrqt8vQj4YaLADREYea1rAaQSDmhP4nK wLeNhbHuT6Jnez9QnApE5+JrhqFPGc4/3uARAbed6fJ0Kkw+uh8= -----END CERTIFICATE-----Generated at Sat Apr 5 23:06:26 2025 by rpki-client