$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/uKE6abulwXDE936So8vNO6pwFzY.roa File: uKE6abulwXDE936So8vNO6pwFzY.roa (raw, json) Hash identifier: YFnFPttTBnOuVFBbNTiNnF5T1+X5opx2Vwz9X/ZbOdc= Subject key identifier: B8:A1:3A:69:BB:A5:C1:70:C4:F7:7E:92:A3:CB:CD:3B:AA:70:17:36 Certificate issuer: /CN=257DB7B9919975697366B7014F8CFE28EF364E73 Certificate serial: 08B3 Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/uKE6abulwXDE936So8vNO6pwFzY.roa Signing time: Fri 22 Aug 2025 09:02:01 +0000 ROA not before: Fri 22 Aug 2025 09:02:01 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 20473 IP address blocks: 103.153.176.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2227 (0x8b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73 Validity Not Before: Aug 22 09:02:01 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=B8A13A69BBA5C170C4F77E92A3CBCD3BAA701736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:12:a9:ba:4d:27:1d:9e:eb:83:46:d7:a9:ec: 59:fe:d3:03:91:3f:85:40:1d:ce:28:c4:71:00:88: 92:88:2e:d6:6d:e3:4c:ab:a2:71:be:b0:c4:31:0f: a4:8a:90:7f:1c:3f:55:20:f2:66:c4:eb:83:d0:c6: 69:c4:41:3e:45:32:eb:1d:8a:74:cf:f6:5c:af:e0: a4:d3:0f:54:b6:45:29:f6:b6:c7:0d:94:e0:7e:b7: 6c:1e:72:90:48:2f:db:9f:11:05:a5:30:c9:55:fa: 2a:87:bf:fc:a1:4b:77:92:18:10:2b:55:b9:55:51: d9:59:bd:5a:35:f0:14:9e:7a:d6:d8:a5:68:aa:1e: 03:fc:64:35:1f:9f:36:a1:f7:e5:bc:27:cb:f6:64: 76:e6:61:51:37:76:f8:ef:f6:92:43:29:99:93:78: 5f:43:9a:8a:ef:3e:10:79:86:db:e9:d6:bf:98:4e: be:b3:a2:a7:67:9e:af:e8:43:a8:79:2d:ad:fe:e9: a0:3a:53:ee:29:ad:8c:d9:84:b6:4a:d3:51:40:f3: bd:5f:16:b0:b6:1d:88:fe:1a:66:e0:35:85:a1:a4: 43:cf:c0:6f:b8:c9:00:3f:93:36:7e:cb:68:92:79: b9:0a:70:e4:5e:34:3e:86:49:b5:97:b0:f8:d1:30: ed:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:A1:3A:69:BB:A5:C1:70:C4:F7:7E:92:A3:CB:CD:3B:AA:70:17:36 X509v3 Authority Key Identifier: keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/uKE6abulwXDE936So8vNO6pwFzY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.153.176.0/23 Signature Algorithm: sha256WithRSAEncryption c2:ee:fe:36:33:29:fa:8d:4d:d7:d9:29:90:b8:8b:bb:37:83: 33:f6:70:2b:ca:7d:f9:d0:62:26:89:f4:96:6e:bf:a3:67:56: a5:fb:61:a2:e2:50:0e:dc:40:37:cb:a0:d5:f9:9f:68:ab:bf: d1:3e:b1:98:0b:5e:90:e9:f2:78:cd:f7:5c:c3:fb:47:0a:25: df:51:d2:28:c8:1d:35:44:f5:6f:2f:77:4d:1c:43:94:7d:60: b4:ab:00:82:fe:4a:28:db:ea:60:4e:65:d8:84:a8:c7:17:c8: 18:5d:af:0e:53:ad:f0:1c:b1:cc:bb:91:e9:86:2f:78:7f:b1: 41:f5:ba:0f:08:6a:aa:79:fb:6f:ca:f7:65:79:65:62:10:5e: 65:f0:1a:e6:0e:7d:54:51:ee:e6:b1:f5:8f:e6:ca:58:a2:7b: b8:e2:9b:58:5f:d8:9e:34:b8:15:e8:69:3f:29:5e:87:5e:99: e1:fa:8e:1f:79:3f:3c:79:65:50:a3:b1:5e:be:62:b1:7e:16: 05:d4:9f:7c:39:34:5f:97:8a:3c:4d:ce:13:fb:a6:7b:0f:c3: 14:2a:6c:59:2f:90:40:06:eb:bf:63:eb:7a:8b:16:92:4e:81: 46:88:75:15:09:69:41:dc:4e:b6:7e:c1:0d:e9:f2:26:55:53: 80:a4:2b:cf -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICCLMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjU3 REI3Qjk5MTk5NzU2OTczNjZCNzAxNEY4Q0ZFMjhFRjM2NEU3MzAeFw0yNTA4MjIw OTAyMDFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEI4QTEzQTY5QkJBNUMx NzBDNEY3N0U5MkEzQ0JDRDNCQUE3MDE3MzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCEqm6TScdnuuDRtep7Fn+0wORP4VAHc4oxHEAiJKILtZt40yr onG+sMQxD6SKkH8cP1Ug8mbE64PQxmnEQT5FMusdinTP9lyv4KTTD1S2RSn2tscN lOB+t2wecpBIL9ufEQWlMMlV+iqHv/yhS3eSGBArVblVUdlZvVo18BSeetbYpWiq HgP8ZDUfnzah9+W8J8v2ZHbmYVE3dvjv9pJDKZmTeF9DmorvPhB5htvp1r+YTr6z oqdnnq/oQ6h5La3+6aA6U+4prYzZhLZK01FA871fFrC2HYj+GmbgNYWhpEPPwG+4 yQA/kzZ+y2iSebkKcOReND6GSbWXsPjRMO1LAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUuKE6abulwXDE936So8vNO6pwFzYwHwYDVR0jBBgwFoAUJX23uZGZdWlzZrcB T4z+KO82TnMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RB L0pYMjN1WkdaZFdselpyY0JUNHotS084MlRuTS5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvSlgyM3VaR1pkV2x6WnJjQlQ0ei1LTzgyVG5NLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RBL3VLRTZhYnVsd1hERTkzNlNv OHZOTzZwd0Z6WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFn mbAwDQYJKoZIhvcNAQELBQADggEBAMLu/jYzKfqNTdfZKZC4i7s3gzP2cCvKffnQ YiaJ9JZuv6NnVqX7YaLiUA7cQDfLoNX5n2irv9E+sZgLXpDp8njN91zD+0cKJd9R 0ijIHTVE9W8vd00cQ5R9YLSrAIL+Sijb6mBOZdiEqMcXyBhdrw5TrfAcscy7kemG L3h/sUH1ug8Iaqp5+2/K92V5ZWIQXmXwGuYOfVRR7uax9Y/myliie7jim1hf2J40 uBXoaT8pXodemeH6jh95Pzx5ZVCjsV6+YrF+FgXUn3w5NF+XijxNzhP7pnsPwxQq bFkvkEAG679j63qLFpJOgUaIdRUJaUHcTrZ+wQ3p8iZVU4CkK88= -----END CERTIFICATE-----Generated at Sun Aug 24 05:09:46 2025 by rpki-client