$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/XYLSxoaia9YW4sek644Ahp0egwQ.roa File: XYLSxoaia9YW4sek644Ahp0egwQ.roa (raw, json) Hash identifier: Ibt8PnvW0L75/GArRSsUROG/LlvatRqzptONQBsR+Kc= Subject key identifier: 5D:82:D2:C6:86:A2:6B:D6:16:E2:C7:A4:EB:8E:00:86:9D:1E:83:04 Certificate issuer: /CN=257DB7B9919975697366B7014F8CFE28EF364E73 Certificate serial: 08BA Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/XYLSxoaia9YW4sek644Ahp0egwQ.roa Signing time: Fri 22 Aug 2025 09:02:03 +0000 ROA not before: Fri 22 Aug 2025 09:02:03 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17418 IP address blocks: 103.153.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2234 (0x8ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73 Validity Not Before: Aug 22 09:02:03 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=5D82D2C686A26BD616E2C7A4EB8E00869D1E8304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:da:f8:72:a7:fa:cf:b7:3d:ff:83:3d:85:ac: 1a:9c:3a:60:cf:db:84:10:63:1b:7c:d0:0e:09:86: 8e:99:57:84:98:51:3b:51:7c:6b:cd:83:6b:51:82: 9d:1f:08:8a:c7:88:22:47:ef:8d:e1:89:56:0d:80: b9:44:7d:77:5b:63:1c:71:ff:23:8a:ef:be:08:11: 3d:67:dd:2b:97:c3:89:cd:35:23:64:f0:08:b8:7f: 1b:db:06:38:ac:19:e2:a5:fd:23:c9:6b:81:f0:7f: 26:e0:c0:59:2c:56:aa:d8:3f:d1:a1:75:b6:43:cc: 0c:57:1e:f8:80:61:5b:8e:f8:19:ee:3b:88:74:e1: dd:a8:f2:22:44:10:d8:d9:aa:3f:66:02:30:7f:12: 29:4d:82:d3:b1:20:7a:2c:a8:07:f2:8f:51:1d:ba: 09:fd:f5:5a:01:ef:a7:41:62:2c:7c:36:84:76:f0: 65:5f:08:4d:f5:1b:00:cd:76:cf:a0:91:28:0c:d9: a0:60:ea:30:66:28:c3:1d:5d:92:16:ff:cf:76:94: 59:e4:99:62:0e:c0:1a:13:e8:f0:89:1d:19:a1:e2: ba:58:e3:d2:80:8a:35:cb:8a:99:e2:37:7c:61:90: 87:29:11:46:2b:53:5a:b1:dd:02:4c:f7:ab:1d:c4: 7e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:82:D2:C6:86:A2:6B:D6:16:E2:C7:A4:EB:8E:00:86:9D:1E:83:04 X509v3 Authority Key Identifier: keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/XYLSxoaia9YW4sek644Ahp0egwQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.153.176.0/24 Signature Algorithm: sha256WithRSAEncryption c6:ac:4d:13:27:f7:1f:ca:fe:ce:f5:b6:bd:a6:83:17:11:ab: bc:37:4b:f8:0d:9c:aa:eb:87:95:8c:94:0a:48:da:35:2a:fd: b8:3f:85:42:84:f3:d4:f7:9c:0b:f4:c8:53:79:96:e0:b5:e3: 3c:60:c6:f9:76:b6:7e:f9:e6:43:ac:a0:c0:5e:ca:fb:b0:a3: 6f:18:f2:11:ad:48:94:01:f4:8b:fe:6d:36:7a:2c:10:02:92: 1b:10:05:fa:0c:c8:b3:4f:96:af:cb:f1:8a:bd:b4:0d:44:ed: ca:e1:32:9a:d7:c6:f2:f0:41:06:1b:d2:16:b5:5c:44:5d:76: f2:5f:3b:4d:95:70:07:cd:8e:05:e8:ef:47:be:7d:ff:58:d5: 26:62:8d:da:f4:b4:6a:8a:3b:8c:1f:3f:2d:e1:14:ff:98:c6: 82:94:4f:48:48:65:ec:22:9f:71:af:f7:b0:b1:60:48:b8:8d: 36:60:5f:94:f9:68:28:97:04:29:01:e7:4d:68:e0:ae:ab:8b: 09:ec:e7:bc:bb:10:69:f5:6e:95:58:4e:55:bf:52:a2:88:d2: 6a:8c:2f:3e:15:41:0f:68:4d:d4:5e:0a:c9:31:63:b5:de:69: 3e:84:1b:99:f2:e1:82:b5:59:73:e1:86:03:1f:22:18:30:a2: 5c:4e:28:14 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICCLowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjU3 REI3Qjk5MTk5NzU2OTczNjZCNzAxNEY4Q0ZFMjhFRjM2NEU3MzAeFw0yNTA4MjIw OTAyMDNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDVEODJEMkM2ODZBMjZC RDYxNkUyQzdBNEVCOEUwMDg2OUQxRTgzMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC52vhyp/rPtz3/gz2FrBqcOmDP24QQYxt80A4Jho6ZV4SYUTtR fGvNg2tRgp0fCIrHiCJH743hiVYNgLlEfXdbYxxx/yOK774IET1n3SuXw4nNNSNk 8Ai4fxvbBjisGeKl/SPJa4HwfybgwFksVqrYP9GhdbZDzAxXHviAYVuO+BnuO4h0 4d2o8iJEENjZqj9mAjB/EilNgtOxIHosqAfyj1Edugn99VoB76dBYix8NoR28GVf CE31GwDNds+gkSgM2aBg6jBmKMMdXZIW/892lFnkmWIOwBoT6PCJHRmh4rpY49KA ijXLipniN3xhkIcpEUYrU1qx3QJM96sdxH4ZAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUXYLSxoaia9YW4sek644Ahp0egwQwHwYDVR0jBBgwFoAUJX23uZGZdWlzZrcB T4z+KO82TnMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RB L0pYMjN1WkdaZFdselpyY0JUNHotS084MlRuTS5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvSlgyM3VaR1pkV2x6WnJjQlQ0ei1LTzgyVG5NLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RBL1hZTFN4b2FpYTlZVzRzZWs2 NDRBaHAwZWd3US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn mbAwDQYJKoZIhvcNAQELBQADggEBAMasTRMn9x/K/s71tr2mgxcRq7w3S/gNnKrr h5WMlApI2jUq/bg/hUKE89T3nAv0yFN5luC14zxgxvl2tn755kOsoMBeyvuwo28Y 8hGtSJQB9Iv+bTZ6LBACkhsQBfoMyLNPlq/L8Yq9tA1E7crhMprXxvLwQQYb0ha1 XERddvJfO02VcAfNjgXo70e+ff9Y1SZijdr0tGqKO4wfPy3hFP+YxoKUT0hIZewi n3Gv97CxYEi4jTZgX5T5aCiXBCkB501o4K6riwns57y7EGn1bpVYTlW/UqKI0mqM Lz4VQQ9oTdReCskxY7XeaT6EG5ny4YK1WXPhhgMfIhgwolxOKBQ= -----END CERTIFICATE-----Generated at Sun Aug 24 05:08:08 2025 by rpki-client