$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/TAncpJZTfMbRURmiw6-m5QqyXco.roa File: TAncpJZTfMbRURmiw6-m5QqyXco.roa (raw, json) Hash identifier: iPBhxprm94sXs0pd/1aC2LonUA9eRt0oECOXkrPS8Js= Subject key identifier: 4C:09:DC:A4:96:53:7C:C6:D1:51:19:A2:C3:AF:A6:E5:0A:B2:5D:CA Certificate issuer: /CN=257DB7B9919975697366B7014F8CFE28EF364E73 Certificate serial: 08B8 Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/TAncpJZTfMbRURmiw6-m5QqyXco.roa Signing time: Fri 22 Aug 2025 09:02:03 +0000 ROA not before: Fri 22 Aug 2025 09:02:03 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 20473 IP address blocks: 2406:48c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2232 (0x8b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73 Validity Not Before: Aug 22 09:02:03 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=4C09DCA496537CC6D15119A2C3AFA6E50AB25DCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f2:3d:21:f2:e7:d9:88:7a:83:7a:5d:52:61: c8:69:99:26:77:e3:aa:19:bf:89:ad:f4:32:3a:a1: 99:9c:3e:31:09:6d:e2:e2:92:d5:da:cd:14:b1:d6: b1:5c:17:b3:20:f0:aa:d2:1a:60:99:95:cd:99:e7: 8f:4e:c6:a4:fd:01:84:e1:94:19:72:94:ec:41:b3: e7:df:63:cf:0f:87:fc:e9:14:cc:22:4f:bd:a4:a5: f8:e0:3c:f9:9d:87:03:c2:92:4a:15:d8:a4:26:f7: eb:0f:18:b9:87:dd:59:7e:5e:de:ee:4c:e0:9a:32: b3:40:63:d9:fd:67:c5:be:35:09:b9:0a:41:15:e2: 6c:c0:a2:cc:87:eb:1b:e4:cb:bc:8f:d1:31:55:7f: b6:61:34:c9:52:4c:a5:6e:9d:13:6a:df:cf:7e:45: 39:03:68:61:89:83:1b:34:17:1d:8d:17:06:df:bb: 4c:43:0e:7d:57:28:a4:80:19:21:d2:e9:0e:cd:83: d9:61:f3:fd:29:cb:28:6e:ff:74:2d:19:ef:39:d6: 71:e3:c4:88:f0:65:16:f9:69:11:e4:6f:1d:98:ff: 98:ef:93:84:4c:90:c4:da:b4:d7:7a:c9:33:57:b8: 11:1e:03:72:05:c7:e8:f8:55:dd:04:ad:8e:7c:c4: ac:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:09:DC:A4:96:53:7C:C6:D1:51:19:A2:C3:AF:A6:E5:0A:B2:5D:CA X509v3 Authority Key Identifier: keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/TAncpJZTfMbRURmiw6-m5QqyXco.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2406:48c0::/32 Signature Algorithm: sha256WithRSAEncryption 15:33:c4:4f:11:6e:14:53:dd:b7:49:7e:d0:05:35:78:62:87: d1:6a:b5:a6:29:5e:7f:6b:58:15:98:db:ed:5e:42:00:64:08: 26:cb:f0:90:a9:ac:bc:c0:6d:df:c9:a9:51:83:30:c4:94:29: b3:11:ea:b5:d2:47:7f:66:c9:8b:9c:24:f5:3c:b3:8a:86:3d: fb:62:6d:b0:81:dc:37:8e:8d:50:57:ce:2f:c6:37:22:b7:79: 14:c5:91:32:58:53:f3:64:88:23:86:3a:94:a3:de:9b:bd:d0: 71:06:a1:4e:92:9e:fc:39:28:ee:14:91:48:24:6b:7b:bc:48: 1b:44:d1:8f:66:bd:49:51:da:8e:a1:65:2b:50:5b:39:38:d7: 3f:e8:36:e9:ff:c6:cd:d9:68:d3:b7:33:ef:66:f0:7a:d1:11: 58:72:91:ef:87:72:d9:19:93:c2:c9:b1:32:68:07:51:80:21: c5:13:db:bc:68:51:ee:d8:12:06:44:af:3c:6a:44:d8:44:f0: 83:75:cc:7b:fc:72:5e:ee:73:83:a6:c9:14:16:2d:e9:53:51: 00:9b:f3:1d:9f:5f:d7:f2:6c:6f:e9:0d:31:91:54:74:8d:4d: 56:69:f2:f9:27:46:9c:17:1d:7e:ab:d1:48:29:8d:77:cf:37: 13:26:70:39 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICCLgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjU3 REI3Qjk5MTk5NzU2OTczNjZCNzAxNEY4Q0ZFMjhFRjM2NEU3MzAeFw0yNTA4MjIw OTAyMDNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDRDMDlEQ0E0OTY1MzdD QzZEMTUxMTlBMkMzQUZBNkU1MEFCMjVEQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJ8j0h8ufZiHqDel1SYchpmSZ346oZv4mt9DI6oZmcPjEJbeLi ktXazRSx1rFcF7Mg8KrSGmCZlc2Z549OxqT9AYThlBlylOxBs+ffY88Ph/zpFMwi T72kpfjgPPmdhwPCkkoV2KQm9+sPGLmH3Vl+Xt7uTOCaMrNAY9n9Z8W+NQm5CkEV 4mzAosyH6xvky7yP0TFVf7ZhNMlSTKVunRNq389+RTkDaGGJgxs0Fx2NFwbfu0xD Dn1XKKSAGSHS6Q7Ng9lh8/0pyyhu/3QtGe851nHjxIjwZRb5aRHkbx2Y/5jvk4RM kMTatNd6yTNXuBEeA3IFx+j4Vd0ErY58xKx9AgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUTAncpJZTfMbRURmiw6+m5QqyXcowHwYDVR0jBBgwFoAUJX23uZGZdWlzZrcB T4z+KO82TnMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RB L0pYMjN1WkdaZFdselpyY0JUNHotS084MlRuTS5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvSlgyM3VaR1pkV2x6WnJjQlQ0ei1LTzgyVG5NLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RBL1RBbmNwSlpUZk1iUlVSbWl3 Ni1tNVFxeVhjby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAk BkjAMA0GCSqGSIb3DQEBCwUAA4IBAQAVM8RPEW4UU923SX7QBTV4YofRarWmKV5/ a1gVmNvtXkIAZAgmy/CQqay8wG3fyalRgzDElCmzEeq10kd/ZsmLnCT1PLOKhj37 Ym2wgdw3jo1QV84vxjcit3kUxZEyWFPzZIgjhjqUo96bvdBxBqFOkp78OSjuFJFI JGt7vEgbRNGPZr1JUdqOoWUrUFs5ONc/6Dbp/8bN2WjTtzPvZvB60RFYcpHvh3LZ GZPCybEyaAdRgCHFE9u8aFHu2BIGRK88akTYRPCDdcx7/HJe7nODpskUFi3pU1EA m/Mdn1/X8mxv6Q0xkVR0jU1WafL5J0acFx1+q9FIKY13zzcTJnA5 -----END CERTIFICATE-----Generated at Sun Aug 24 05:05:38 2025 by rpki-client