$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/cqq8xGsiyUlJIrK-JLYtQ1J8uLg.roa File: cqq8xGsiyUlJIrK-JLYtQ1J8uLg.roa (raw, json) Hash identifier: 0BLcCvsux6irLZhgQkmaCtfQjrPgTEEzJyz6fe8SrYQ= Subject key identifier: 72:AA:BC:C4:6B:22:C9:49:49:22:B2:BE:24:B6:2D:43:52:7C:B8:B8 Certificate issuer: /CN=257DB7B9919975697366B7014F8CFE28EF364E73 Certificate serial: 08B9 Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/cqq8xGsiyUlJIrK-JLYtQ1J8uLg.roa Signing time: Fri 22 Aug 2025 09:02:03 +0000 ROA not before: Fri 22 Aug 2025 09:02:03 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131657 IP address blocks: 103.122.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2233 (0x8b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73 Validity Not Before: Aug 22 09:02:03 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=72AABCC46B22C9494922B2BE24B62D43527CB8B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f7:db:bc:0f:b7:69:71:78:84:ef:8a:35:c5: 21:ba:a2:85:e9:1f:a4:c3:54:5f:f8:48:74:85:b1: 6f:ee:54:07:b8:56:52:87:da:2b:0c:76:18:96:c9: 5a:d6:78:49:94:57:6c:a4:d3:9e:50:b2:ed:71:e8: 0a:c2:fd:53:71:1a:3a:93:62:33:38:bc:b4:c6:f9: 78:eb:dd:c5:0f:15:49:4d:bb:9c:eb:80:d9:b8:c2: ba:93:4f:f9:df:63:8a:35:c1:54:db:57:e0:f4:ae: 08:ba:30:4e:57:ab:c7:cb:8d:44:ab:1f:78:1f:7f: af:97:3d:3f:39:43:0c:8c:b4:16:ec:c4:cc:c6:df: cd:9b:c4:bc:33:46:bd:41:dc:43:5f:87:2c:05:1c: 8c:b6:34:ff:3a:81:23:60:0a:73:69:71:a6:1d:42: 78:0a:d2:29:e6:87:5c:7b:6a:fa:1c:4d:4e:76:24: a2:09:b3:18:76:cc:4d:90:26:1e:ae:41:de:2d:d9: 19:e7:69:cf:66:7d:85:a7:9e:e2:f7:2b:83:3f:df: db:0d:1f:7a:01:c2:0d:50:45:e1:d1:c9:1c:2d:e5: a8:d0:95:48:ee:42:cc:2b:d8:ef:d9:a1:0c:fa:eb: 01:60:8b:43:e7:af:04:f0:60:80:75:f4:5b:e5:58: a6:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:AA:BC:C4:6B:22:C9:49:49:22:B2:BE:24:B6:2D:43:52:7C:B8:B8 X509v3 Authority Key Identifier: keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/cqq8xGsiyUlJIrK-JLYtQ1J8uLg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.122.189.0/24 Signature Algorithm: sha256WithRSAEncryption 85:b8:39:48:89:97:2c:66:2e:83:67:46:4a:5b:98:15:08:99: 56:e3:f2:34:68:d2:64:c2:2b:73:51:52:c6:af:25:0c:1f:59: 07:ca:df:9c:85:94:13:36:cf:e9:79:b1:1c:53:5d:97:e8:3f: 49:f3:21:f7:85:32:2a:0f:d7:22:43:bd:dd:90:86:bb:27:1c: cc:84:56:f4:6d:c6:9c:6b:3c:d9:10:13:e3:0a:96:b0:40:2d: c5:20:77:4d:7b:cc:d6:9d:d9:79:26:7e:fe:29:ac:0e:79:98: 9f:ba:30:ae:ed:b5:b4:9f:9f:d3:e9:53:25:d2:32:1e:9b:69: 9b:7b:ec:30:ff:33:b3:22:e7:00:05:1c:aa:0e:ba:46:24:3f: b7:22:d4:f5:7b:64:4f:6e:b0:24:79:21:fd:1d:5c:06:20:1f: ef:8a:db:e8:ac:19:0f:59:f5:48:13:52:fd:1b:ce:41:99:3d: 55:f2:97:1c:24:8a:46:3c:de:c7:38:6d:96:7f:ef:03:03:fb: d9:32:d1:41:db:96:d6:1e:1b:b0:64:4c:cb:3d:04:8d:64:8a: 02:4f:63:b9:6f:1b:9c:b9:f1:7a:2e:76:a2:ae:ae:f1:87:5a: bc:34:db:2e:4c:eb:37:9f:d4:ab:1f:23:4c:99:b4:e7:43:1e: c5:27:5f:55 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICCLkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjU3 REI3Qjk5MTk5NzU2OTczNjZCNzAxNEY4Q0ZFMjhFRjM2NEU3MzAeFw0yNTA4MjIw OTAyMDNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDcyQUFCQ0M0NkIyMkM5 NDk0OTIyQjJCRTI0QjYyRDQzNTI3Q0I4QjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCw99u8D7dpcXiE74o1xSG6ooXpH6TDVF/4SHSFsW/uVAe4VlKH 2isMdhiWyVrWeEmUV2yk055Qsu1x6ArC/VNxGjqTYjM4vLTG+Xjr3cUPFUlNu5zr gNm4wrqTT/nfY4o1wVTbV+D0rgi6ME5Xq8fLjUSrH3gff6+XPT85QwyMtBbsxMzG 382bxLwzRr1B3ENfhywFHIy2NP86gSNgCnNpcaYdQngK0inmh1x7avocTU52JKIJ sxh2zE2QJh6uQd4t2Rnnac9mfYWnnuL3K4M/39sNH3oBwg1QReHRyRwt5ajQlUju Qswr2O/ZoQz66wFgi0PnrwTwYIB19FvlWKbDAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUcqq8xGsiyUlJIrK+JLYtQ1J8uLgwHwYDVR0jBBgwFoAUJX23uZGZdWlzZrcB T4z+KO82TnMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RB L0pYMjN1WkdaZFdselpyY0JUNHotS084MlRuTS5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvSlgyM3VaR1pkV2x6WnJjQlQ0ei1LTzgyVG5NLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RBL2NxcTh4R3NpeVVsSklySy1K TFl0UTFKOHVMZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn er0wDQYJKoZIhvcNAQELBQADggEBAIW4OUiJlyxmLoNnRkpbmBUImVbj8jRo0mTC K3NRUsavJQwfWQfK35yFlBM2z+l5sRxTXZfoP0nzIfeFMioP1yJDvd2QhrsnHMyE VvRtxpxrPNkQE+MKlrBALcUgd017zNad2Xkmfv4prA55mJ+6MK7ttbSfn9PpUyXS Mh6baZt77DD/M7Mi5wAFHKoOukYkP7ci1PV7ZE9usCR5If0dXAYgH++K2+isGQ9Z 9UgTUv0bzkGZPVXylxwkikY83sc4bZZ/7wMD+9ky0UHbltYeG7BkTMs9BI1kigJP Y7lvG5y58XoudqKurvGHWrw02y5M6zef1KsfI0yZtOdDHsUnX1U= -----END CERTIFICATE-----Generated at Sun Aug 24 05:10:30 2025 by rpki-client