$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/h9JbJMjpGwolDA7qMo9Wm8_ezus.roa File: h9JbJMjpGwolDA7qMo9Wm8_ezus.roa (raw, json) Hash identifier: lbNyAMdDOJL4KvaAk3jFMh0EePgAGmP3pKDHDFdAe14= Subject key identifier: 87:D2:5B:24:C8:E9:1B:0A:25:0C:0E:EA:32:8F:56:9B:CF:DE:CE:EB Certificate issuer: /CN=0C78961642A04BE132708DB193D7BA916B2B67CB Certificate serial: 0E27 Authority key identifier: 0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/h9JbJMjpGwolDA7qMo9Wm8_ezus.roa Signing time: Fri 22 Aug 2025 08:51:58 +0000 ROA not before: Fri 22 Aug 2025 08:51:58 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38851 IP address blocks: 103.234.76.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/DHiWFkKgS-EycI2xk9e6kWsrZ8s.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/DHiWFkKgS-EycI2xk9e6kWsrZ8s.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3623 (0xe27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C78961642A04BE132708DB193D7BA916B2B67CB Validity Not Before: Aug 22 08:51:58 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=87D25B24C8E91B0A250C0EEA328F569BCFDECEEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ca:90:51:8f:27:d5:c0:a5:ad:0a:09:23:70: 7e:40:b9:1b:6b:3e:15:bf:39:d9:af:f9:d3:a2:38: f4:ba:e6:21:ec:c3:bd:0e:dd:12:f9:be:3d:4c:7c: a4:81:d1:1f:7b:cd:4d:4f:59:19:95:2f:e8:ae:2f: 1e:5b:eb:b3:87:55:cf:2c:db:c4:8d:8e:61:27:66: b6:ce:9b:70:36:4d:8b:58:a7:b8:d5:76:dd:58:cf: 67:d2:30:38:80:04:08:9c:77:12:bd:6c:01:8e:3a: 70:31:c2:84:2b:32:ac:46:95:29:25:90:75:70:33: 97:48:a3:76:6f:f8:73:76:11:d7:36:47:51:e2:bb: f0:16:a6:c2:26:a8:97:42:c0:86:c7:d9:1f:f8:64: bb:75:2d:0c:02:af:fb:bb:13:17:b7:cd:d5:d4:53: 82:db:1f:69:23:13:b0:8f:b9:ab:69:07:ef:a4:df: 0e:4d:3f:98:ba:9d:e3:e7:35:ed:7e:44:c0:82:87: d4:e1:32:26:68:3f:ed:c4:ba:14:f9:fc:52:1b:42: 26:81:b8:7f:35:e2:1e:32:03:ab:7f:a4:10:75:33: b7:95:d6:ea:69:47:0e:77:15:cc:1d:23:b4:f9:68: fd:97:af:90:1b:13:57:7a:bc:ca:fd:59:2d:ac:74: 3c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D2:5B:24:C8:E9:1B:0A:25:0C:0E:EA:32:8F:56:9B:CF:DE:CE:EB X509v3 Authority Key Identifier: keyid:0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/DHiWFkKgS-EycI2xk9e6kWsrZ8s.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/h9JbJMjpGwolDA7qMo9Wm8_ezus.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.234.76.0/22 Signature Algorithm: sha256WithRSAEncryption d0:85:5a:d4:bd:e2:b0:c5:aa:4b:fc:d4:b2:75:4d:3e:75:8f: 76:d9:67:4c:46:22:6c:e8:c5:54:fc:31:57:82:fb:f2:61:bf: a3:29:09:46:9a:f5:7a:68:f3:d3:13:f6:23:09:2a:62:41:6a: d5:7a:4f:6a:bb:86:d8:45:ef:d0:95:0e:a0:59:f5:5a:c4:5a: 87:ff:41:b7:46:54:a6:26:d9:1b:44:6e:2b:48:e8:c0:c1:a4: a3:6a:24:14:41:2b:84:a3:dc:f0:82:50:bc:08:62:82:a2:25: 27:3e:6a:77:f7:3e:39:fb:05:f0:7f:98:3d:78:d6:b0:b4:99: 7e:08:f9:05:38:8e:cc:0b:ee:8d:a5:76:9c:14:c8:1f:f0:38: f3:59:57:b6:31:d8:82:c1:88:7c:fa:7d:f9:ba:d4:9e:f7:d3: a3:53:76:10:d6:50:b8:0f:4c:1b:c8:de:be:21:e6:95:02:07: 16:12:08:36:db:f7:85:53:26:ce:9c:75:5c:7d:8d:6b:eb:30: a1:3a:8b:43:87:60:ce:0e:ac:ee:2c:0c:4d:b0:b5:5c:a2:64: 97:05:e8:9b:2c:c2:5d:09:e7:7e:61:75:3b:4c:73:ac:62:dd: d0:d2:a7:70:8e:2f:dc:ee:f9:c2:ff:23:76:40:4d:15:22:4a: 25:af:76:6b -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICDicwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEM3 ODk2MTY0MkEwNEJFMTMyNzA4REIxOTNEN0JBOTE2QjJCNjdDQjAeFw0yNTA4MjIw ODUxNThaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDg3RDI1QjI0QzhFOTFC MEEyNTBDMEVFQTMyOEY1NjlCQ0ZERUNFRUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1ypBRjyfVwKWtCgkjcH5AuRtrPhW/Odmv+dOiOPS65iHsw70O 3RL5vj1MfKSB0R97zU1PWRmVL+iuLx5b67OHVc8s28SNjmEnZrbOm3A2TYtYp7jV dt1Yz2fSMDiABAicdxK9bAGOOnAxwoQrMqxGlSklkHVwM5dIo3Zv+HN2Edc2R1Hi u/AWpsImqJdCwIbH2R/4ZLt1LQwCr/u7Exe3zdXUU4LbH2kjE7CPuatpB++k3w5N P5i6nePnNe1+RMCCh9ThMiZoP+3EuhT5/FIbQiaBuH814h4yA6t/pBB1M7eV1upp Rw53FcwdI7T5aP2Xr5AbE1d6vMr9WS2sdDyLAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUh9JbJMjpGwolDA7qMo9Wm8/ezuswHwYDVR0jBBgwFoAUDHiWFkKgS+EycI2x k9e6kWsrZ8swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRE9OR0ZP TkcvREhpV0ZrS2dTLUV5Y0kyeGs5ZTZrV3NyWjhzLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9ESGlXRmtLZ1MtRXljSTJ4azllNmtXc3JaOHMuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ET05HRk9ORy9oOUpiSk1qcEd3b2xE QTdxTW85V204X2V6dXMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZ+pMMA0GCSqGSIb3DQEBCwUAA4IBAQDQhVrUveKwxapL/NSydU0+dY922WdM RiJs6MVU/DFXgvvyYb+jKQlGmvV6aPPTE/YjCSpiQWrVek9qu4bYRe/QlQ6gWfVa xFqH/0G3RlSmJtkbRG4rSOjAwaSjaiQUQSuEo9zwglC8CGKCoiUnPmp39z45+wXw f5g9eNawtJl+CPkFOI7MC+6NpXacFMgf8DjzWVe2MdiCwYh8+n35utSe99OjU3YQ 1lC4D0wbyN6+IeaVAgcWEgg22/eFUybOnHVcfY1r6zChOotDh2DODqzuLAxNsLVc omSXBeibLMJdCed+YXU7THOsYt3Q0qdwji/c7vnC/yN2QE0VIkolr3Zr -----END CERTIFICATE-----Generated at Sun Aug 24 07:17:33 2025 by rpki-client