$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/R0X2ZZGXnipKb8tfawtpurjWMXE.roa File: R0X2ZZGXnipKb8tfawtpurjWMXE.roa (raw, json) Hash identifier: rQlhAl0JoXasmldHCGizLJJtW3x1AHuacxKVKycm6rM= Subject key identifier: 47:45:F6:65:91:97:9E:2A:4A:6F:CB:5F:6B:0B:69:BA:B8:D6:31:71 Certificate issuer: /CN=257DB7B9919975697366B7014F8CFE28EF364E73 Certificate serial: 0799 Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/R0X2ZZGXnipKb8tfawtpurjWMXE.roa Signing time: Mon 10 Feb 2025 13:44:35 +0000 ROA not before: Mon 10 Feb 2025 13:44:35 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131657 IP address blocks: 103.122.188.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 04:37:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1945 (0x799) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73 Validity Not Before: Feb 10 13:44:35 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=4745F66591979E2A4A6FCB5F6B0B69BAB8D63171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e9:d1:1a:33:32:7c:f6:a1:3b:97:3a:06:95: 5d:5a:5a:3e:1a:f6:3d:21:82:38:87:85:d7:71:4b: 05:5a:ae:b8:ae:d9:fd:0c:68:b6:fa:b1:25:44:fb: 1b:e7:f7:83:62:6a:d4:2a:f8:6c:00:6a:e5:d9:85: 82:f2:a9:1c:55:be:5e:ef:90:e9:0f:fb:e2:ae:49: 51:57:ef:16:55:b1:15:b3:b4:d3:34:07:86:de:9d: 36:e5:52:29:3f:7f:ab:0f:89:8a:98:5c:0a:5f:5f: 48:9a:a4:4b:de:03:64:1f:01:bd:a0:c3:3f:13:5b: 24:37:dc:cf:70:9f:a4:04:99:5b:43:09:7f:5f:97: 01:24:a3:c3:b9:98:6d:be:72:1c:e1:5a:7e:68:6a: 23:70:9e:1a:37:34:e2:29:37:cb:8c:d1:68:97:21: dd:f1:91:db:90:d9:2c:c8:9f:d9:b2:b6:a3:eb:f8: 74:f3:02:81:d4:fb:8a:73:10:01:7b:5a:23:55:44: 0c:2d:f8:cd:b9:a0:d8:d8:e3:05:aa:9e:04:21:b8: 56:08:6e:88:7f:27:24:d8:f2:1c:fb:a6:20:e6:c8: e8:7d:3b:ee:97:48:21:f1:d2:48:69:8b:e4:94:de: 5d:6f:b1:f4:03:e5:90:86:c2:c3:e9:91:cc:fe:96: e3:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:45:F6:65:91:97:9E:2A:4A:6F:CB:5F:6B:0B:69:BA:B8:D6:31:71 X509v3 Authority Key Identifier: keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/R0X2ZZGXnipKb8tfawtpurjWMXE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.122.188.0/22 Signature Algorithm: sha256WithRSAEncryption af:d0:64:05:50:64:a5:4a:57:aa:27:7c:7f:93:4c:01:ed:89: 38:44:28:0c:e2:44:b8:c0:f3:c8:30:e3:06:f7:51:58:48:75: 8f:37:2e:a0:ee:07:4b:f8:db:25:2b:c0:c0:5a:86:97:83:d8: 58:b3:40:4e:4e:1e:19:4f:26:bd:94:c3:2a:0f:0e:32:12:9f: c7:56:7a:51:7d:38:0a:59:0e:b5:9b:69:8d:4f:f1:55:fd:4d: 7d:5f:30:75:24:02:71:0e:5f:d0:59:0c:60:be:12:21:d3:2d: 30:1d:39:a4:6f:64:d5:d8:5a:d3:56:81:a1:5f:f9:b0:5f:87: 4c:f3:c5:89:15:c6:88:be:df:c4:17:67:9e:dd:df:8f:83:50: ef:c4:6c:c5:62:18:87:b5:b5:57:32:10:3d:7a:7b:78:ff:06: 25:7f:60:2d:4d:31:9b:57:74:95:c6:8d:44:4a:da:81:7a:2c: a4:62:82:9d:84:a9:10:aa:0c:ec:ee:27:5e:81:22:32:9e:af: 10:8d:e5:18:9b:59:be:98:cf:f9:b8:4a:59:23:a7:e3:da:f7: 6e:b2:b1:c0:94:75:1a:b4:b7:b5:b4:f0:81:a8:fb:ca:4e:38: 4e:35:0c:27:1f:b6:b1:c2:1d:ee:1a:e6:24:ed:c9:84:d5:69: 19:f0:67:af -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICB5kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjU3 REI3Qjk5MTk5NzU2OTczNjZCNzAxNEY4Q0ZFMjhFRjM2NEU3MzAeFw0yNTAyMTAx MzQ0MzVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQ3NDVGNjY1OTE5NzlF MkE0QTZGQ0I1RjZCMEI2OUJBQjhENjMxNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDM6dEaMzJ89qE7lzoGlV1aWj4a9j0hgjiHhddxSwVarriu2f0M aLb6sSVE+xvn94NiatQq+GwAauXZhYLyqRxVvl7vkOkP++KuSVFX7xZVsRWztNM0 B4benTblUik/f6sPiYqYXApfX0iapEveA2QfAb2gwz8TWyQ33M9wn6QEmVtDCX9f lwEko8O5mG2+chzhWn5oaiNwnho3NOIpN8uM0WiXId3xkduQ2SzIn9mytqPr+HTz AoHU+4pzEAF7WiNVRAwt+M25oNjY4wWqngQhuFYIboh/JyTY8hz7piDmyOh9O+6X SCHx0khpi+SU3l1vsfQD5ZCGwsPpkcz+luMzAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUR0X2ZZGXnipKb8tfawtpurjWMXEwHwYDVR0jBBgwFoAUJX23uZGZdWlzZrcB T4z+KO82TnMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RB L0pYMjN1WkdaZFdselpyY0JUNHotS084MlRuTS5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvSlgyM3VaR1pkV2x6WnJjQlQ0ei1LTzgyVG5NLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RBL1IwWDJaWkdYbmlwS2I4dGZh d3RwdXJqV01YRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJn erwwDQYJKoZIhvcNAQELBQADggEBAK/QZAVQZKVKV6onfH+TTAHtiThEKAziRLjA 88gw4wb3UVhIdY83LqDuB0v42yUrwMBahpeD2FizQE5OHhlPJr2UwyoPDjISn8dW elF9OApZDrWbaY1P8VX9TX1fMHUkAnEOX9BZDGC+EiHTLTAdOaRvZNXYWtNWgaFf +bBfh0zzxYkVxoi+38QXZ57d34+DUO/EbMViGIe1tVcyED16e3j/BiV/YC1NMZtX dJXGjURK2oF6LKRigp2EqRCqDOzuJ16BIjKerxCN5RibWb6Yz/m4Slkjp+Pa926y scCUdRq0t7W08IGo+8pOOE41DCcftrHCHe4a5iTtyYTVaRnwZ68= -----END CERTIFICATE-----Generated at Fri Apr 11 03:54:14 2025 by rpki-client