$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/XgsnXrFlNs1pHBOKh0e47gZ3uqo.roa File: XgsnXrFlNs1pHBOKh0e47gZ3uqo.roa (raw, json) Hash identifier: vGR5LGz1mKpSjqqtEsG6BWEj3/dniGeVcBglZb6O5Z8= Subject key identifier: 5E:0B:27:5E:B1:65:36:CD:69:1C:13:8A:87:47:B8:EE:06:77:BA:AA Certificate issuer: /CN=257DB7B9919975697366B7014F8CFE28EF364E73 Certificate serial: 08AC Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/XgsnXrFlNs1pHBOKh0e47gZ3uqo.roa Signing time: Fri 22 Aug 2025 09:01:59 +0000 ROA not before: Fri 22 Aug 2025 09:01:59 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131657 IP address blocks: 2406:48c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2220 (0x8ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73 Validity Not Before: Aug 22 09:01:59 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=5E0B275EB16536CD691C138A8747B8EE0677BAAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:96:14:3c:0b:d0:76:07:4e:9b:f4:7b:03:4e: a0:11:24:98:51:a1:aa:28:18:cf:94:7a:ee:55:76: 6a:69:e1:09:be:ea:36:13:a0:1f:85:9b:0a:c4:cf: c4:ff:5f:a7:90:47:e1:98:90:50:08:e7:11:d2:e4: 88:99:ef:ba:f6:d3:c3:3a:1e:1e:08:90:49:af:d0: 03:aa:93:cc:e6:98:dc:11:53:bd:28:77:76:ab:fe: 2a:f1:66:ac:be:db:d0:b8:58:18:0e:a5:1a:fb:28: 67:f8:0d:ac:2d:87:7d:cb:c9:ee:12:2c:aa:ae:6e: 6e:df:36:61:84:a7:df:c5:6b:f4:5e:e0:7e:f3:5f: 5f:c0:f3:75:8e:1c:65:e5:4d:c3:31:7a:6c:1b:9e: 9b:e0:3c:31:7e:9f:d4:ae:d6:30:50:5e:79:53:63: 84:4f:6f:1e:d2:b8:9b:56:d1:14:8f:62:29:1e:37: 8b:20:c6:33:e5:9a:b1:6c:49:07:c7:cc:80:07:94: 57:77:ef:24:2c:78:16:94:32:43:ab:15:6f:47:36: b2:51:6a:06:75:7a:66:e2:f3:6a:e0:56:e9:71:09: bb:14:99:aa:7a:df:11:2a:78:8c:de:be:4a:e2:57: 2a:c2:82:90:0d:1e:0d:d8:fc:39:52:25:fc:f2:84: 5c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:0B:27:5E:B1:65:36:CD:69:1C:13:8A:87:47:B8:EE:06:77:BA:AA X509v3 Authority Key Identifier: keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/XgsnXrFlNs1pHBOKh0e47gZ3uqo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2406:48c0::/48 Signature Algorithm: sha256WithRSAEncryption aa:c8:fa:1b:c6:4c:a0:ab:73:5f:21:2f:4c:af:ea:b4:ce:7b: ad:f8:dd:90:ed:af:fb:67:50:62:5b:5c:cc:2a:b6:81:32:04: a3:bb:84:8c:75:84:b2:6c:ab:54:23:63:f3:fb:5a:a4:25:11: 8b:db:5a:88:8f:fc:62:4b:3f:5b:e6:24:04:26:9e:e5:f4:03: e2:0a:7b:5d:9a:08:14:b5:de:48:16:2e:91:36:a2:e6:73:9d: ab:af:a3:4a:45:d5:aa:89:b4:df:e7:9d:67:98:9b:66:dc:08: d7:e8:a3:b7:21:df:db:4c:7a:2b:3a:27:0f:d4:5f:bb:8b:47: 99:4c:6f:b9:60:e6:bb:7b:ac:1d:72:39:45:21:60:83:13:d3: b6:a9:f3:05:13:e4:7b:0f:0f:8c:c3:53:f2:73:d4:fc:d0:2e: 40:80:53:e5:36:e9:50:7c:e6:ca:fb:09:54:90:00:77:3d:80: 35:28:e2:0f:96:ac:76:ed:67:a5:bc:a9:80:93:79:0b:47:ab: 10:24:5f:18:23:4c:24:50:dc:f8:29:74:40:b4:6b:0b:dc:3f: b8:0e:98:b7:0a:dc:dd:7c:25:95:02:fe:fc:ab:19:e2:c1:80: 5a:31:91:60:02:6e:b9:71:52:55:05:ff:61:f3:1d:e0:8f:de: d4:24:4d:f2 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICCKwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjU3 REI3Qjk5MTk5NzU2OTczNjZCNzAxNEY4Q0ZFMjhFRjM2NEU3MzAeFw0yNTA4MjIw OTAxNTlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDVFMEIyNzVFQjE2NTM2 Q0Q2OTFDMTM4QTg3NDdCOEVFMDY3N0JBQUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9lhQ8C9B2B06b9HsDTqARJJhRoaooGM+Ueu5Vdmpp4Qm+6jYT oB+FmwrEz8T/X6eQR+GYkFAI5xHS5IiZ77r208M6Hh4IkEmv0AOqk8zmmNwRU70o d3ar/irxZqy+29C4WBgOpRr7KGf4Dawth33Lye4SLKqubm7fNmGEp9/Fa/Re4H7z X1/A83WOHGXlTcMxemwbnpvgPDF+n9Su1jBQXnlTY4RPbx7SuJtW0RSPYikeN4sg xjPlmrFsSQfHzIAHlFd37yQseBaUMkOrFW9HNrJRagZ1embi82rgVulxCbsUmap6 3xEqeIzevkriVyrCgpANHg3Y/DlSJfzyhFxvAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUXgsnXrFlNs1pHBOKh0e47gZ3uqowHwYDVR0jBBgwFoAUJX23uZGZdWlzZrcB T4z+KO82TnMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RB L0pYMjN1WkdaZFdselpyY0JUNHotS084MlRuTS5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvSlgyM3VaR1pkV2x6WnJjQlQ0ei1LTzgyVG5NLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RBL1hnc25YckZsTnMxcEhCT0to MGU0N2daM3Vxby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk BkjAAAAwDQYJKoZIhvcNAQELBQADggEBAKrI+hvGTKCrc18hL0yv6rTOe6343ZDt r/tnUGJbXMwqtoEyBKO7hIx1hLJsq1QjY/P7WqQlEYvbWoiP/GJLP1vmJAQmnuX0 A+IKe12aCBS13kgWLpE2ouZznauvo0pF1aqJtN/nnWeYm2bcCNfoo7ch39tMeis6 Jw/UX7uLR5lMb7lg5rt7rB1yOUUhYIMT07ap8wUT5HsPD4zDU/Jz1PzQLkCAU+U2 6VB85sr7CVSQAHc9gDUo4g+WrHbtZ6W8qYCTeQtHqxAkXxgjTCRQ3PgpdEC0awvc P7gOmLcK3N18JZUC/vyrGeLBgFoxkWACbrlxUlUF/2HzHeCP3tQkTfI= -----END CERTIFICATE-----Generated at Sun Aug 24 05:10:31 2025 by rpki-client