$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/BKZgvJFBIrPRM4J8MMXkPbnGEfA.roa File: BKZgvJFBIrPRM4J8MMXkPbnGEfA.roa (raw, json) Hash identifier: eP0dK0NmD6ToRUp0RaU26DDNdnXSdnGp2yexxMSYTyQ= Subject key identifier: 04:A6:60:BC:91:41:22:B3:D1:33:82:7C:30:C5:E4:3D:B9:C6:11:F0 Certificate issuer: /CN=257DB7B9919975697366B7014F8CFE28EF364E73 Certificate serial: 08A5 Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/BKZgvJFBIrPRM4J8MMXkPbnGEfA.roa Signing time: Fri 22 Aug 2025 09:01:57 +0000 ROA not before: Fri 22 Aug 2025 09:01:57 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 134823 IP address blocks: 103.153.176.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2213 (0x8a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73 Validity Not Before: Aug 22 09:01:57 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=04A660BC914122B3D133827C30C5E43DB9C611F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e8:f2:dc:f7:2f:82:a9:a7:14:01:10:56:32: bc:9a:71:32:ed:83:5d:43:a5:36:14:e1:d6:16:17: 06:68:bd:95:c6:d4:0d:69:74:56:eb:b2:78:38:83: 70:72:6a:26:e3:8d:ad:6f:b1:08:ac:9a:ea:5e:86: 64:27:91:74:fa:9d:b6:f7:88:41:e3:91:44:da:f9: 71:c0:fd:e3:30:a6:fc:74:30:1b:8e:c7:88:c6:5d: 4c:3a:63:26:a8:7e:0d:ad:a4:cf:24:ac:0a:cf:76: 88:b6:6b:d6:07:8b:2e:d6:83:12:2a:f1:f0:9d:71: 07:05:84:11:0c:4d:63:5f:36:7a:6b:52:34:4d:1d: eb:b6:b8:10:f4:78:f4:1f:d1:2e:1e:56:f5:77:fd: b5:79:2f:fc:db:a5:5c:47:4c:c8:4c:d7:23:cd:43: 9a:09:57:2c:71:17:c9:e5:8b:82:b2:d9:fe:47:c8: 05:49:73:98:a5:16:10:03:db:db:a8:cb:e6:61:91: 2f:48:1b:ff:40:2c:fb:d1:b8:d8:67:9d:65:dd:ac: 74:1c:7d:b6:81:43:86:93:7b:66:b8:14:69:a7:11: c6:65:b5:3a:1a:4f:8d:ec:81:f0:75:cb:c5:e6:8d: 0e:62:aa:8c:4a:30:c5:50:25:d9:e1:ec:5f:08:3b: c1:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:A6:60:BC:91:41:22:B3:D1:33:82:7C:30:C5:E4:3D:B9:C6:11:F0 X509v3 Authority Key Identifier: keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/BKZgvJFBIrPRM4J8MMXkPbnGEfA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.153.176.0/23 Signature Algorithm: sha256WithRSAEncryption ab:3d:60:77:ae:f9:71:a1:fe:14:0c:fb:5f:0e:59:e0:e3:1e: 00:cb:93:02:5f:62:e9:92:c0:1b:fd:b4:72:95:e4:9f:2d:4b: 01:1a:86:14:2f:60:ed:b1:75:6a:97:45:02:42:0c:1f:a1:4e: 86:f8:40:22:5d:42:a3:39:40:62:5b:b4:2a:37:37:87:fc:c4: 6d:d5:ba:92:8b:b6:af:fd:ed:8a:85:ca:52:24:24:49:95:51: c7:2f:1c:80:d4:0c:0d:0d:ba:63:d4:6f:64:cc:90:f0:c2:80: df:24:88:08:f6:b7:5b:25:1a:1b:1b:02:b4:19:bf:6e:08:c3: 4d:4f:de:c5:25:ea:5e:38:1c:7b:ba:2d:29:7a:48:3c:20:58: 17:9e:40:6f:da:a6:bc:6e:c5:43:f3:d0:92:a8:d6:a0:7c:60: aa:6f:4d:82:7b:7f:0d:cb:1c:0a:0b:57:91:f3:e8:9b:35:63: f6:c8:c6:0a:3a:20:eb:0c:9e:09:00:18:13:a3:e4:ea:d3:67: ac:2c:0f:f7:ba:20:c0:3e:d0:c1:31:34:45:dc:6d:6d:cb:0a: d9:1b:40:e2:bd:b2:20:a8:54:18:c4:5f:52:50:8e:c6:54:c3: ea:6b:1a:b1:f5:ec:80:3e:3a:2b:51:f3:c7:87:19:6f:3f:6a: 15:3e:66:6d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICCKUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjU3 REI3Qjk5MTk5NzU2OTczNjZCNzAxNEY4Q0ZFMjhFRjM2NEU3MzAeFw0yNTA4MjIw OTAxNTdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDA0QTY2MEJDOTE0MTIy QjNEMTMzODI3QzMwQzVFNDNEQjlDNjExRjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC06PLc9y+CqacUARBWMryacTLtg11DpTYU4dYWFwZovZXG1A1p dFbrsng4g3Byaibjja1vsQismupehmQnkXT6nbb3iEHjkUTa+XHA/eMwpvx0MBuO x4jGXUw6Yyaofg2tpM8krArPdoi2a9YHiy7WgxIq8fCdcQcFhBEMTWNfNnprUjRN Heu2uBD0ePQf0S4eVvV3/bV5L/zbpVxHTMhM1yPNQ5oJVyxxF8nli4Ky2f5HyAVJ c5ilFhAD29uoy+ZhkS9IG/9ALPvRuNhnnWXdrHQcfbaBQ4aTe2a4FGmnEcZltToa T43sgfB1y8XmjQ5iqoxKMMVQJdnh7F8IO8EDAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUBKZgvJFBIrPRM4J8MMXkPbnGEfAwHwYDVR0jBBgwFoAUJX23uZGZdWlzZrcB T4z+KO82TnMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RB L0pYMjN1WkdaZFdselpyY0JUNHotS084MlRuTS5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvSlgyM3VaR1pkV2x6WnJjQlQ0ei1LTzgyVG5NLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RBL0JLWmd2SkZCSXJQUk00SjhN TVhrUGJuR0VmQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFn mbAwDQYJKoZIhvcNAQELBQADggEBAKs9YHeu+XGh/hQM+18OWeDjHgDLkwJfYumS wBv9tHKV5J8tSwEahhQvYO2xdWqXRQJCDB+hTob4QCJdQqM5QGJbtCo3N4f8xG3V upKLtq/97YqFylIkJEmVUccvHIDUDA0NumPUb2TMkPDCgN8kiAj2t1slGhsbArQZ v24Iw01P3sUl6l44HHu6LSl6SDwgWBeeQG/aprxuxUPz0JKo1qB8YKpvTYJ7fw3L HAoLV5Hz6Js1Y/bIxgo6IOsMngkAGBOj5OrTZ6wsD/e6IMA+0MExNEXcbW3LCtkb QOK9siCoVBjEX1JQjsZUw+prGrH17IA+OitR88eHGW8/ahU+Zm0= -----END CERTIFICATE-----Generated at Sun Aug 24 05:08:20 2025 by rpki-client