$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JHVFLRwlGh_Tv3Q_KE0Otl292Do.roa File: JHVFLRwlGh_Tv3Q_KE0Otl292Do.roa (raw, json) Hash identifier: L7vv9DKyQLO0xEBZc1pHCrRTQvVlah+24CqcaY+c2n0= Subject key identifier: 24:75:45:2D:1C:25:1A:1F:D3:BF:74:3F:28:4D:0E:B6:5D:BD:D8:3A Certificate issuer: /CN=257DB7B9919975697366B7014F8CFE28EF364E73 Certificate serial: 08A6 Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JHVFLRwlGh_Tv3Q_KE0Otl292Do.roa Signing time: Fri 22 Aug 2025 09:01:57 +0000 ROA not before: Fri 22 Aug 2025 09:01:57 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 134823 IP address blocks: 103.153.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2214 (0x8a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73 Validity Not Before: Aug 22 09:01:57 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=2475452D1C251A1FD3BF743F284D0EB65DBDD83A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:73:83:89:cd:22:61:ee:2b:7d:40:20:24:5b: 77:e5:47:33:6d:29:aa:02:59:99:a0:32:0f:e2:85: 60:a0:e1:0b:0d:63:c9:9b:04:c5:1a:18:ef:73:0a: 7f:9c:8c:75:d9:1d:57:3a:84:fb:fe:4c:7f:51:80: c7:35:32:7b:ba:7f:8d:a9:f1:d1:31:e1:44:d3:e8: da:44:cb:2a:94:19:10:b3:19:93:95:19:db:b5:77: 43:48:3b:ed:39:d7:a7:a4:fa:04:b3:bb:58:4e:33: 5c:cf:7b:0b:3c:a9:b5:eb:48:85:7f:d6:e7:3b:87: 5a:e0:fb:8b:e2:36:e8:ce:45:f9:8a:ae:e7:bd:b3: 4d:34:1b:75:13:ec:dc:68:53:6c:51:29:62:68:fa: a8:c3:78:b0:c5:ce:99:c4:04:a2:cd:0f:08:c7:b1: 3e:65:aa:c8:64:ae:27:ad:39:24:6d:d5:1c:0b:d4: 48:3e:0d:5f:a9:d6:2e:8b:d9:98:0f:8e:2d:e9:3a: f8:65:16:e2:4d:e6:19:66:f8:98:1b:06:1f:a1:77: e6:8a:d3:82:f6:e6:84:53:c8:bc:ba:f1:6b:62:36: ac:3f:8a:3a:91:bb:c0:17:21:29:ef:4c:39:83:cd: e8:06:4b:96:5b:fe:6e:56:40:33:0e:ef:66:e9:a9: 06:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:75:45:2D:1C:25:1A:1F:D3:BF:74:3F:28:4D:0E:B6:5D:BD:D8:3A X509v3 Authority Key Identifier: keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JHVFLRwlGh_Tv3Q_KE0Otl292Do.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.153.177.0/24 Signature Algorithm: sha256WithRSAEncryption 54:44:08:34:3e:e3:4f:81:aa:6c:06:25:bf:53:21:1c:8a:b2: da:8a:6c:39:ac:1f:98:4f:29:eb:6c:69:96:b6:b6:39:35:34: 99:3b:5f:22:8c:c5:31:de:b7:5c:8e:94:b8:e1:7c:12:a5:0c: 6f:1c:0d:9a:8a:22:92:c3:e9:cf:79:6a:e8:0e:d1:64:64:91: d8:9d:b5:84:e3:96:52:eb:cc:5f:dc:e8:11:a5:af:8f:95:d6: 5f:87:95:1c:07:c3:70:96:cd:3d:cb:47:01:62:fd:24:57:db: 7d:22:39:d3:33:7d:0e:98:f6:88:c4:d6:fd:a9:ad:7c:e3:b7: 82:90:10:16:ac:69:7c:ff:f6:fd:78:11:65:c5:7c:2b:8c:8c: b9:c2:df:6b:72:79:78:61:6b:58:43:e7:f1:9b:2f:fb:fa:21: 5d:35:32:78:fa:fa:dc:8b:3d:80:f4:fb:e0:a9:c4:75:0b:c7: 5e:b5:cb:fe:5a:6a:dc:d9:32:0a:36:95:74:9a:76:4f:3e:b1: 0d:96:2d:3d:a0:63:77:c7:fb:c5:c1:4a:bb:f3:77:8f:64:c5: 58:ff:23:fe:92:20:79:ad:7f:71:5b:29:3e:30:44:ce:ce:f9: d7:cc:b4:14:04:d5:4c:d6:7b:41:0c:f6:06:a5:ff:6f:c2:53: c0:cd:2a:36 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICCKYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjU3 REI3Qjk5MTk5NzU2OTczNjZCNzAxNEY4Q0ZFMjhFRjM2NEU3MzAeFw0yNTA4MjIw OTAxNTdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDI0NzU0NTJEMUMyNTFB MUZEM0JGNzQzRjI4NEQwRUI2NURCREQ4M0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCTc4OJzSJh7it9QCAkW3flRzNtKaoCWZmgMg/ihWCg4QsNY8mb BMUaGO9zCn+cjHXZHVc6hPv+TH9RgMc1Mnu6f42p8dEx4UTT6NpEyyqUGRCzGZOV Gdu1d0NIO+0516ek+gSzu1hOM1zPews8qbXrSIV/1uc7h1rg+4viNujORfmKrue9 s000G3UT7NxoU2xRKWJo+qjDeLDFzpnEBKLNDwjHsT5lqshkrietOSRt1RwL1Eg+ DV+p1i6L2ZgPji3pOvhlFuJN5hlm+JgbBh+hd+aK04L25oRTyLy68WtiNqw/ijqR u8AXISnvTDmDzegGS5Zb/m5WQDMO72bpqQZfAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUJHVFLRwlGh/Tv3Q/KE0Otl292DowHwYDVR0jBBgwFoAUJX23uZGZdWlzZrcB T4z+KO82TnMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RB L0pYMjN1WkdaZFdselpyY0JUNHotS084MlRuTS5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvSlgyM3VaR1pkV2x6WnJjQlQ0ei1LTzgyVG5NLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RBL0pIVkZMUndsR2hfVHYzUV9L RTBPdGwyOTJEby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn mbEwDQYJKoZIhvcNAQELBQADggEBAFRECDQ+40+BqmwGJb9TIRyKstqKbDmsH5hP KetsaZa2tjk1NJk7XyKMxTHet1yOlLjhfBKlDG8cDZqKIpLD6c95augO0WRkkdid tYTjllLrzF/c6BGlr4+V1l+HlRwHw3CWzT3LRwFi/SRX230iOdMzfQ6Y9ojE1v2p rXzjt4KQEBasaXz/9v14EWXFfCuMjLnC32tyeXhha1hD5/GbL/v6IV01Mnj6+tyL PYD0++CpxHULx161y/5aatzZMgo2lXSadk8+sQ2WLT2gY3fH+8XBSrvzd49kxVj/ I/6SIHmtf3FbKT4wRM7O+dfMtBQE1UzWe0EM9gal/2/CU8DNKjY= -----END CERTIFICATE-----Generated at Sun Aug 24 05:06:14 2025 by rpki-client