$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/jzDMpnJqMdWwDz5gxf1UUhMSZaM.roa File: jzDMpnJqMdWwDz5gxf1UUhMSZaM.roa (raw, json) Hash identifier: mfIQs2/7k8EAC7Bet3PUcJCVRTVc78KFbu3H/35vm2Q= Subject key identifier: 8F:30:CC:A6:72:6A:31:D5:B0:0F:3E:60:C5:FD:54:52:13:12:65:A3 Certificate issuer: /CN=257DB7B9919975697366B7014F8CFE28EF364E73 Certificate serial: 07A9 Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/jzDMpnJqMdWwDz5gxf1UUhMSZaM.roa Signing time: Mon 10 Feb 2025 13:44:38 +0000 ROA not before: Mon 10 Feb 2025 13:44:38 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 20473 IP address blocks: 103.153.176.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 13:06:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1961 (0x7a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73 Validity Not Before: Feb 10 13:44:38 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=8F30CCA6726A31D5B00F3E60C5FD5452131265A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:6a:4c:64:3f:53:e1:86:bd:f8:2d:65:77:fb: 15:9f:79:63:1e:be:b7:4f:44:c3:57:d4:5f:f9:c1: 4a:77:95:6f:75:82:0d:4c:1a:a8:e3:9a:ce:d2:86: 5f:c1:de:c3:ca:fd:1a:3b:77:23:07:f7:a0:b9:ce: 0c:bf:41:80:61:85:29:ae:a7:4f:e5:61:b4:94:e0: 60:55:4e:be:5e:20:89:af:c3:69:a2:a3:a6:02:0d: 3a:2c:59:fa:c7:02:f9:c6:4c:6f:80:5b:e3:4b:f2: 82:67:3a:b9:f3:ef:b1:49:7d:50:28:06:24:e2:2c: 19:ae:d6:c4:69:1a:23:8c:27:14:ed:ab:74:2e:e2: fd:99:56:04:ab:09:be:2f:69:d7:c2:09:04:d8:2f: 10:c8:61:15:66:63:72:27:37:90:40:a7:6a:74:33: c8:fc:89:fe:71:ea:12:ad:f2:ac:30:44:56:a6:30: 74:29:d0:85:6b:c7:6a:97:9b:c8:da:10:c4:a6:bd: 18:a9:04:0f:0d:42:2e:a9:27:97:20:7c:2b:da:af: 18:d7:a8:fc:5b:98:44:75:fc:21:91:b4:66:75:bb: e2:51:5e:a4:38:cb:e6:1c:68:7c:c2:20:a5:85:c4: 06:8a:17:1c:b9:42:01:38:37:c8:7e:e7:de:65:d5: 4c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:30:CC:A6:72:6A:31:D5:B0:0F:3E:60:C5:FD:54:52:13:12:65:A3 X509v3 Authority Key Identifier: keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/jzDMpnJqMdWwDz5gxf1UUhMSZaM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.153.176.0/23 Signature Algorithm: sha256WithRSAEncryption 09:73:30:ff:28:85:86:d8:f5:d1:ac:a1:c1:c6:0b:b9:6e:c8: 02:e9:4f:14:b8:07:1b:19:54:6c:61:6b:35:b2:61:76:8a:96: a1:ea:c1:37:d3:c1:b6:57:77:1c:2c:01:e9:c2:bb:dc:55:35: ed:b5:d7:bd:06:69:f7:7d:13:f5:bb:0a:0a:2e:97:8d:f4:e0: d1:35:cf:bf:b5:66:22:8e:a6:ad:5c:bf:ba:64:49:02:53:a4: a3:c0:87:e3:9a:0c:8a:fc:6e:d3:9f:85:c9:52:49:fd:14:4e: 6c:77:93:1c:3f:e8:d8:58:b6:2b:93:1a:bb:be:03:f5:58:56: 85:a4:30:54:f8:fb:09:61:99:f8:78:76:71:f4:a3:2e:f8:1a: ff:8b:6f:4b:fa:1f:a7:cb:5c:3f:d0:96:76:34:45:f0:32:d2: c6:94:7a:43:99:62:63:c2:ea:c8:6e:f8:19:19:84:b7:c1:55: 81:37:4a:b6:50:29:bd:11:88:2d:25:e2:25:7a:75:9c:5f:c9: 2a:f5:83:b9:54:0d:1c:1e:16:e6:41:0f:8b:49:62:f4:8d:c8: 7c:8c:3e:09:64:10:48:50:59:3a:ea:76:34:66:bc:3b:e1:a2: da:5b:bb:c3:a0:fb:91:9c:7a:98:7f:fb:36:ef:7f:18:65:41: c1:2e:c9:a3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICB6kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjU3 REI3Qjk5MTk5NzU2OTczNjZCNzAxNEY4Q0ZFMjhFRjM2NEU3MzAeFw0yNTAyMTAx MzQ0MzhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDhGMzBDQ0E2NzI2QTMx RDVCMDBGM0U2MEM1RkQ1NDUyMTMxMjY1QTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZakxkP1Phhr34LWV3+xWfeWMevrdPRMNX1F/5wUp3lW91gg1M Gqjjms7Shl/B3sPK/Ro7dyMH96C5zgy/QYBhhSmup0/lYbSU4GBVTr5eIImvw2mi o6YCDTosWfrHAvnGTG+AW+NL8oJnOrnz77FJfVAoBiTiLBmu1sRpGiOMJxTtq3Qu 4v2ZVgSrCb4vadfCCQTYLxDIYRVmY3InN5BAp2p0M8j8if5x6hKt8qwwRFamMHQp 0IVrx2qXm8jaEMSmvRipBA8NQi6pJ5cgfCvarxjXqPxbmER1/CGRtGZ1u+JRXqQ4 y+YcaHzCIKWFxAaKFxy5QgE4N8h+595l1UwtAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUjzDMpnJqMdWwDz5gxf1UUhMSZaMwHwYDVR0jBBgwFoAUJX23uZGZdWlzZrcB T4z+KO82TnMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RB L0pYMjN1WkdaZFdselpyY0JUNHotS084MlRuTS5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvSlgyM3VaR1pkV2x6WnJjQlQ0ei1LTzgyVG5NLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RBL2p6RE1wbkpxTWRXd0R6NWd4 ZjFVVWhNU1phTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFn mbAwDQYJKoZIhvcNAQELBQADggEBAAlzMP8ohYbY9dGsocHGC7luyALpTxS4BxsZ VGxhazWyYXaKlqHqwTfTwbZXdxwsAenCu9xVNe21170Gafd9E/W7Cgoul4304NE1 z7+1ZiKOpq1cv7pkSQJTpKPAh+OaDIr8btOfhclSSf0UTmx3kxw/6NhYtiuTGru+ A/VYVoWkMFT4+wlhmfh4dnH0oy74Gv+Lb0v6H6fLXD/QlnY0RfAy0saUekOZYmPC 6shu+BkZhLfBVYE3SrZQKb0RiC0l4iV6dZxfySr1g7lUDRweFuZBD4tJYvSNyHyM PglkEEhQWTrqdjRmvDvhotpbu8Og+5Gceph/+zbvfxhlQcEuyaM= -----END CERTIFICATE-----Generated at Sat Apr 5 12:05:06 2025 by rpki-client