$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/yJ7_oD0LdypvFT0M5WHAAfnxWRY.roa File: yJ7_oD0LdypvFT0M5WHAAfnxWRY.roa (raw, json) Hash identifier: 72tkHS443EdsTJNhPWrL15DFO1Pl3Y0MRSrbH7RsAk4= Subject key identifier: C8:9E:FF:A0:3D:0B:77:2A:6F:15:3D:0C:E5:61:C0:01:F9:F1:59:16 Certificate issuer: /CN=257DB7B9919975697366B7014F8CFE28EF364E73 Certificate serial: 08AD Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/yJ7_oD0LdypvFT0M5WHAAfnxWRY.roa Signing time: Fri 22 Aug 2025 09:02:00 +0000 ROA not before: Fri 22 Aug 2025 09:02:00 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 134823 IP address blocks: 103.122.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2221 (0x8ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73 Validity Not Before: Aug 22 09:02:00 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=C89EFFA03D0B772A6F153D0CE561C001F9F15916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:92:3a:15:39:6f:d9:30:1d:93:b3:6c:06:51: 9f:54:23:fb:c7:a1:97:63:a3:6f:2d:6e:c9:a1:6c: d6:be:a6:b0:f5:c3:f2:18:c1:b9:33:0c:7f:63:56: 3f:6d:f8:f2:bc:ac:76:df:ce:16:04:a1:65:28:3f: ea:7c:91:14:56:88:a0:32:aa:47:ef:c2:6c:db:9b: 8f:f8:a2:d4:a5:ed:c7:47:37:c4:a7:1e:3a:61:f8: 7a:82:d4:5e:13:34:49:cc:11:36:cf:06:ea:53:9a: b1:2a:8b:db:4f:f6:7f:f9:f8:de:40:91:6c:39:2f: f2:57:ec:92:38:02:4b:8b:9e:49:33:29:28:1a:65: bf:1a:69:a5:6b:f9:77:b9:3e:98:de:a3:e3:c6:9c: 4b:fe:9f:79:fc:12:38:1b:49:ae:27:7c:73:d9:b0: 27:72:db:40:f3:e2:c6:e9:98:f6:6e:5d:04:44:63: 42:62:5e:c5:dc:39:33:df:e4:af:64:b8:8e:b3:da: f3:3d:0b:66:37:d1:06:16:e3:ea:02:8f:66:81:bd: 65:26:f9:9d:1a:ed:56:4b:8e:86:db:e4:d3:a2:1b: 6e:8c:2c:6f:8f:6d:3d:24:ae:f2:05:24:3b:c2:00: 0a:1c:bb:34:4e:87:32:1a:3f:1c:15:02:a7:10:7a: 2e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:9E:FF:A0:3D:0B:77:2A:6F:15:3D:0C:E5:61:C0:01:F9:F1:59:16 X509v3 Authority Key Identifier: keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/yJ7_oD0LdypvFT0M5WHAAfnxWRY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.122.191.0/24 Signature Algorithm: sha256WithRSAEncryption 15:44:de:73:68:22:df:16:44:09:55:1f:17:d8:d7:c8:ef:46: 10:32:30:6a:e1:4f:c0:06:70:de:98:09:16:91:4a:90:a1:dc: 62:ec:9b:da:b8:f2:5b:19:1c:da:af:fe:90:62:3f:ef:48:7f: 6f:23:3d:69:55:18:d3:c1:7a:ba:c3:dd:84:82:fd:26:47:48: 28:80:8a:dc:cd:40:2a:19:cf:a0:a3:26:67:e0:98:49:66:09: bb:10:4f:41:fc:9f:92:1d:ae:94:6d:ed:88:88:1b:29:8e:72: 75:ae:9c:e1:71:87:be:5b:06:75:bc:42:f7:be:55:d0:30:af: bf:cd:92:b3:b3:c9:e8:67:fd:a0:ff:39:f5:68:51:6a:5d:36: 5c:20:67:45:a7:6b:c5:51:bb:6c:56:33:09:75:1e:03:00:56: ba:b3:5c:c3:37:d1:90:99:aa:4d:16:a5:1e:4f:f9:85:77:0f: 6e:74:f1:3b:a7:4f:9e:99:f6:96:e4:a0:58:3a:95:12:03:2c: 81:81:a0:70:2d:f7:2f:54:cc:f2:63:30:9d:e7:c2:5b:3b:af: 3e:1f:d3:30:de:2e:c0:5e:d7:e1:27:55:f0:23:ec:aa:19:9c: d8:ff:8b:45:7c:a8:97:1b:cb:7e:f1:eb:2a:7e:7c:51:47:0b: c7:a3:7e:d2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICCK0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjU3 REI3Qjk5MTk5NzU2OTczNjZCNzAxNEY4Q0ZFMjhFRjM2NEU3MzAeFw0yNTA4MjIw OTAyMDBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEM4OUVGRkEwM0QwQjc3 MkE2RjE1M0QwQ0U1NjFDMDAxRjlGMTU5MTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCkkjoVOW/ZMB2Ts2wGUZ9UI/vHoZdjo28tbsmhbNa+prD1w/IY wbkzDH9jVj9t+PK8rHbfzhYEoWUoP+p8kRRWiKAyqkfvwmzbm4/4otSl7cdHN8Sn Hjph+HqC1F4TNEnMETbPBupTmrEqi9tP9n/5+N5AkWw5L/JX7JI4AkuLnkkzKSga Zb8aaaVr+Xe5Ppjeo+PGnEv+n3n8EjgbSa4nfHPZsCdy20Dz4sbpmPZuXQREY0Ji XsXcOTPf5K9kuI6z2vM9C2Y30QYW4+oCj2aBvWUm+Z0a7VZLjobb5NOiG26MLG+P bT0krvIFJDvCAAocuzROhzIaPxwVAqcQei4DAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUyJ7/oD0LdypvFT0M5WHAAfnxWRYwHwYDVR0jBBgwFoAUJX23uZGZdWlzZrcB T4z+KO82TnMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RB L0pYMjN1WkdaZFdselpyY0JUNHotS084MlRuTS5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvSlgyM3VaR1pkV2x6WnJjQlQ0ei1LTzgyVG5NLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RBL3lKN19vRDBMZHlwdkZUME01 V0hBQWZueFdSWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn er8wDQYJKoZIhvcNAQELBQADggEBABVE3nNoIt8WRAlVHxfY18jvRhAyMGrhT8AG cN6YCRaRSpCh3GLsm9q48lsZHNqv/pBiP+9If28jPWlVGNPBerrD3YSC/SZHSCiA itzNQCoZz6CjJmfgmElmCbsQT0H8n5IdrpRt7YiIGymOcnWunOFxh75bBnW8Qve+ VdAwr7/NkrOzyehn/aD/OfVoUWpdNlwgZ0Wna8VRu2xWMwl1HgMAVrqzXMM30ZCZ qk0WpR5P+YV3D2508TunT56Z9pbkoFg6lRIDLIGBoHAt9y9UzPJjMJ3nwls7rz4f 0zDeLsBe1+EnVfAj7KoZnNj/i0V8qJcby37x6yp+fFFHC8ejftI= -----END CERTIFICATE-----Generated at Sun Aug 24 05:05:48 2025 by rpki-client