$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/LRtyFgOAjdB09Fu1zo1s3S__-lM.roa File: LRtyFgOAjdB09Fu1zo1s3S__-lM.roa (raw, json) Hash identifier: it8AbfL2wkAI+BFvdsrfXtMPNjXpakfnOOFEt7f+b3c= Subject key identifier: 2D:1B:72:16:03:80:8D:D0:74:F4:5B:B5:CE:8D:6C:DD:2F:FF:FA:53 Certificate issuer: /CN=257DB7B9919975697366B7014F8CFE28EF364E73 Certificate serial: 08AF Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/LRtyFgOAjdB09Fu1zo1s3S__-lM.roa Signing time: Fri 22 Aug 2025 09:02:00 +0000 ROA not before: Fri 22 Aug 2025 09:02:00 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131657 IP address blocks: 103.122.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2223 (0x8af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73 Validity Not Before: Aug 22 09:02:00 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=2D1B721603808DD074F45BB5CE8D6CDD2FFFFA53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8e:2e:be:29:71:f6:cf:be:b0:14:ed:dc:09: 11:10:c0:55:e0:aa:23:31:f1:54:7b:a8:c6:79:f4: f0:9f:39:57:97:92:d2:4d:e7:fa:4f:26:31:29:e0: a8:b3:a4:a9:48:e2:58:dc:bb:9d:39:1b:93:e1:e3: 8a:f0:96:a8:c5:05:72:76:8f:d6:5a:a8:7c:38:8c: 4a:1b:03:1d:3b:6c:f7:22:60:86:b0:29:8f:46:0c: 2b:b7:0b:12:02:54:e7:94:93:5f:af:e3:b3:42:9d: ad:5c:ff:c4:3d:84:48:87:a9:8f:20:be:22:9b:7c: a3:a5:4a:31:6f:47:64:01:4c:da:05:d2:3b:61:42: 4b:e7:58:b6:52:4d:6b:6b:e6:1e:cb:0f:34:1b:77: a4:d0:da:ce:3a:62:e5:38:da:37:8e:1f:78:3d:f4: 46:42:d4:78:29:d4:99:e0:14:99:c5:85:45:4a:fb: 2a:f1:a7:d9:c6:c6:01:f4:42:40:bd:59:a9:3f:81: de:97:e1:f9:d7:38:05:53:91:8f:25:82:54:3f:c9: 16:3c:7f:93:6c:8e:40:d7:df:e7:1a:e8:95:a8:39: 22:b6:74:6b:5d:e4:c0:5c:07:a7:15:9f:21:9a:76: 5c:96:32:d4:af:0f:e3:81:ce:c5:9f:17:33:02:7f: c0:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:1B:72:16:03:80:8D:D0:74:F4:5B:B5:CE:8D:6C:DD:2F:FF:FA:53 X509v3 Authority Key Identifier: keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/LRtyFgOAjdB09Fu1zo1s3S__-lM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.122.188.0/22 Signature Algorithm: sha256WithRSAEncryption 58:10:7d:1a:37:bf:64:29:34:d1:af:42:dc:18:e9:66:35:68: 4a:8f:fd:6e:ac:05:d5:bc:62:54:40:18:6e:7c:f0:b1:22:45: 47:72:c2:3a:09:99:1d:fb:2d:67:29:06:9a:ab:e9:55:85:f3: 9f:0c:c1:74:dc:b0:da:54:38:06:f6:9b:37:56:9d:cc:ae:ff: 1f:af:26:63:6d:98:3c:65:45:eb:38:e0:68:ef:14:68:3d:f5: a7:f1:e7:0b:76:9e:f4:bc:45:61:32:0a:82:8d:71:9b:35:7e: 42:65:b9:b1:7b:92:84:c6:49:f9:b3:7e:e3:a3:a1:22:a5:26: 66:ad:16:6b:d9:a1:11:d4:0c:9f:03:f7:46:75:a5:61:36:9f: f1:14:37:c8:34:f7:2a:dc:7d:cd:de:88:5b:52:fa:fe:85:d8: 6a:30:ea:c6:ca:c9:4f:13:38:46:3b:9e:0f:12:20:78:db:86: d4:b0:37:c8:a8:11:64:50:e8:2e:be:5d:98:67:f9:96:96:79: 47:23:37:33:15:31:21:0a:4d:b1:02:47:0b:8d:fb:99:92:8b: 01:28:59:aa:24:ab:a8:f5:07:15:bc:77:c5:a8:54:f4:80:ab: 88:27:b6:13:95:82:6f:f7:1e:2c:e7:2a:96:e5:67:3e:ac:9d: 26:70:a3:c7 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICCK8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjU3 REI3Qjk5MTk5NzU2OTczNjZCNzAxNEY4Q0ZFMjhFRjM2NEU3MzAeFw0yNTA4MjIw OTAyMDBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDJEMUI3MjE2MDM4MDhE RDA3NEY0NUJCNUNFOEQ2Q0REMkZGRkZBNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1ji6+KXH2z76wFO3cCREQwFXgqiMx8VR7qMZ59PCfOVeXktJN 5/pPJjEp4KizpKlI4ljcu505G5Ph44rwlqjFBXJ2j9ZaqHw4jEobAx07bPciYIaw KY9GDCu3CxICVOeUk1+v47NCna1c/8Q9hEiHqY8gviKbfKOlSjFvR2QBTNoF0jth QkvnWLZSTWtr5h7LDzQbd6TQ2s46YuU42jeOH3g99EZC1Hgp1JngFJnFhUVK+yrx p9nGxgH0QkC9Wak/gd6X4fnXOAVTkY8lglQ/yRY8f5NsjkDX3+ca6JWoOSK2dGtd 5MBcB6cVnyGadlyWMtSvD+OBzsWfFzMCf8BjAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQULRtyFgOAjdB09Fu1zo1s3S//+lMwHwYDVR0jBBgwFoAUJX23uZGZdWlzZrcB T4z+KO82TnMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RB L0pYMjN1WkdaZFdselpyY0JUNHotS084MlRuTS5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvSlgyM3VaR1pkV2x6WnJjQlQ0ei1LTzgyVG5NLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RBL0xSdHlGZ09BamRCMDlGdTF6 bzFzM1NfXy1sTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJn erwwDQYJKoZIhvcNAQELBQADggEBAFgQfRo3v2QpNNGvQtwY6WY1aEqP/W6sBdW8 YlRAGG588LEiRUdywjoJmR37LWcpBpqr6VWF858MwXTcsNpUOAb2mzdWncyu/x+v JmNtmDxlRes44GjvFGg99afx5wt2nvS8RWEyCoKNcZs1fkJlubF7koTGSfmzfuOj oSKlJmatFmvZoRHUDJ8D90Z1pWE2n/EUN8g09yrcfc3eiFtS+v6F2Gow6sbKyU8T OEY7ng8SIHjbhtSwN8ioEWRQ6C6+XZhn+ZaWeUcjNzMVMSEKTbECRwuN+5mSiwEo Waokq6j1BxW8d8WoVPSAq4gnthOVgm/3HiznKpblZz6snSZwo8c= -----END CERTIFICATE-----Generated at Sun Aug 24 05:02:57 2025 by rpki-client