$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/iMLLLszhgMcOrAL1HNTEm0P8Mf4.roa File: iMLLLszhgMcOrAL1HNTEm0P8Mf4.roa (raw, json) Hash identifier: xM6i0DA9srtJl/bd0TosWTPdW2fqkkvZP/EG2aKBPDg= Subject key identifier: 88:C2:CB:2E:CC:E1:80:C7:0E:AC:02:F5:1C:D4:C4:9B:43:FC:31:FE Certificate issuer: /CN=257DB7B9919975697366B7014F8CFE28EF364E73 Certificate serial: 089C Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/iMLLLszhgMcOrAL1HNTEm0P8Mf4.roa Signing time: Fri 22 Aug 2025 09:01:54 +0000 ROA not before: Fri 22 Aug 2025 09:01:54 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 134823 IP address blocks: 2406:48c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2204 (0x89c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73 Validity Not Before: Aug 22 09:01:54 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=88C2CB2ECCE180C70EAC02F51CD4C49B43FC31FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:15:93:8f:f4:d0:91:ba:78:28:86:b6:b7:54: 97:8e:fa:e4:70:db:2d:4f:d2:b6:b2:e8:40:00:fa: bd:72:af:f0:f1:7f:2c:a6:00:df:06:d2:c1:28:40: c7:33:9a:5e:dd:9d:5a:a4:93:38:5e:2d:66:cb:ab: 68:30:e7:fa:94:57:23:77:55:8e:30:6f:8c:47:a5: df:cd:78:65:f6:4f:bd:a8:7d:b2:27:4a:a0:6f:f7: 6c:94:b1:ce:82:9c:b2:ae:ba:c7:41:1b:03:5f:76: aa:4a:04:ac:0d:83:48:eb:27:0b:d9:8f:63:df:93: b0:54:71:4a:14:a7:41:5b:1e:a2:a2:b7:b0:58:62: c9:e5:48:87:68:3a:29:31:0c:c4:01:ce:9e:1a:27: b2:ae:11:55:46:a7:a0:1b:fc:93:06:f1:f0:eb:9d: 17:f2:5b:83:59:9c:bc:73:a1:8c:d5:05:c0:06:2a: e0:3d:fd:ca:85:9e:bb:9e:69:19:e1:e9:53:11:d9: 1c:c7:7f:6f:75:a5:ae:95:7f:df:7e:07:23:78:a7: b1:00:88:46:5a:d5:d9:e0:dc:68:72:56:68:d2:45: b4:ff:7b:ae:9c:c3:40:2f:49:0f:78:59:e4:76:9c: 78:49:3b:be:f5:8c:59:f2:94:9c:c0:d2:9c:ae:80: 9a:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:C2:CB:2E:CC:E1:80:C7:0E:AC:02:F5:1C:D4:C4:9B:43:FC:31:FE X509v3 Authority Key Identifier: keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/iMLLLszhgMcOrAL1HNTEm0P8Mf4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2406:48c0::/32 Signature Algorithm: sha256WithRSAEncryption 57:81:90:91:fa:39:ee:2c:03:90:49:b6:3d:d8:4e:8a:17:a3: 67:f2:07:cc:a1:13:4e:42:7c:cc:1b:59:8a:1d:2e:3c:5c:23: 7e:ff:c8:bd:2f:de:82:ab:b0:2f:41:35:53:5b:b4:08:9d:2f: b5:d4:d4:a6:23:f4:2c:b4:dc:f5:b4:2e:6c:28:17:64:86:ca: 77:80:38:8c:7d:2a:89:8d:db:77:5a:39:01:af:f5:41:24:d6: bb:dc:fe:e5:cc:90:5a:cc:4e:17:d2:ad:49:a6:a2:c2:04:7a: d2:a0:31:79:91:15:da:07:a7:e5:e1:f7:e5:ba:bf:f9:38:97: 6c:ef:5a:00:88:45:c2:29:1f:4f:fd:55:7b:4b:d8:a2:4f:96: 95:57:6c:14:f7:3c:38:af:49:72:f6:5c:4d:b7:3b:ec:b4:df: 94:a6:b8:52:a9:17:a1:9b:32:d4:fd:96:b0:4b:15:3e:db:e1: 33:d8:d5:88:0f:7c:87:67:52:29:29:87:92:b0:7e:6f:30:1b: ca:5f:1b:33:32:d2:f1:eb:54:37:75:e5:53:1d:89:74:4c:2d: 31:87:88:50:92:48:90:d4:b0:d7:e7:9d:c5:1a:ca:39:d8:68: 8c:c3:08:89:a0:5f:5e:bc:06:62:9c:05:26:49:45:10:06:d9: 86:91:6d:2e -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICCJwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjU3 REI3Qjk5MTk5NzU2OTczNjZCNzAxNEY4Q0ZFMjhFRjM2NEU3MzAeFw0yNTA4MjIw OTAxNTRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDg4QzJDQjJFQ0NFMTgw QzcwRUFDMDJGNTFDRDRDNDlCNDNGQzMxRkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCeFZOP9NCRungohra3VJeO+uRw2y1P0ray6EAA+r1yr/Dxfyym AN8G0sEoQMczml7dnVqkkzheLWbLq2gw5/qUVyN3VY4wb4xHpd/NeGX2T72ofbIn SqBv92yUsc6CnLKuusdBGwNfdqpKBKwNg0jrJwvZj2Pfk7BUcUoUp0FbHqKit7BY YsnlSIdoOikxDMQBzp4aJ7KuEVVGp6Ab/JMG8fDrnRfyW4NZnLxzoYzVBcAGKuA9 /cqFnrueaRnh6VMR2RzHf291pa6Vf99+ByN4p7EAiEZa1dng3GhyVmjSRbT/e66c w0AvSQ94WeR2nHhJO771jFnylJzA0pyugJrjAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUiMLLLszhgMcOrAL1HNTEm0P8Mf4wHwYDVR0jBBgwFoAUJX23uZGZdWlzZrcB T4z+KO82TnMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RB L0pYMjN1WkdaZFdselpyY0JUNHotS084MlRuTS5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvSlgyM3VaR1pkV2x6WnJjQlQ0ei1LTzgyVG5NLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RBL2lNTExMc3poZ01jT3JBTDFI TlRFbTBQOE1mNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAk BkjAMA0GCSqGSIb3DQEBCwUAA4IBAQBXgZCR+jnuLAOQSbY92E6KF6Nn8gfMoRNO QnzMG1mKHS48XCN+/8i9L96Cq7AvQTVTW7QInS+11NSmI/QstNz1tC5sKBdkhsp3 gDiMfSqJjdt3WjkBr/VBJNa73P7lzJBazE4X0q1JpqLCBHrSoDF5kRXaB6fl4ffl ur/5OJds71oAiEXCKR9P/VV7S9iiT5aVV2wU9zw4r0ly9lxNtzvstN+UprhSqReh mzLU/ZawSxU+2+Ez2NWID3yHZ1IpKYeSsH5vMBvKXxszMtLx61Q3deVTHYl0TC0x h4hQkkiQ1LDX553FGso52GiMwwiJoF9evAZinAUmSUUQBtmGkW0u -----END CERTIFICATE-----Generated at Sun Aug 24 05:08:22 2025 by rpki-client