$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGJAY/OnANaopDZ2gZ38qRhuXJO57anPA.roa File: OnANaopDZ2gZ38qRhuXJO57anPA.roa (raw, json) Hash identifier: cY0SVgT+VGIHEvX96PtXshcTqaGKwH54YX29KBFOxCU= Subject key identifier: 3A:70:0D:6A:8A:43:67:68:19:DF:CA:91:86:E5:C9:3B:9E:DA:9C:F0 Certificate issuer: /CN=324A7E6EBF678F98B87228EC8466C3690A43DDB6 Certificate serial: 0D72 Authority key identifier: 32:4A:7E:6E:BF:67:8F:98:B8:72:28:EC:84:66:C3:69:0A:43:DD:B6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Mkp-br9nj5i4cijshGbDaQpD3bY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGJAY/OnANaopDZ2gZ38qRhuXJO57anPA.roa Signing time: Fri 22 Aug 2025 08:44:26 +0000 ROA not before: Fri 22 Aug 2025 08:44:26 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 133948 IP address blocks: 103.197.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGJAY/Mkp-br9nj5i4cijshGbDaQpD3bY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGJAY/Mkp-br9nj5i4cijshGbDaQpD3bY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Mkp-br9nj5i4cijshGbDaQpD3bY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3442 (0xd72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324A7E6EBF678F98B87228EC8466C3690A43DDB6 Validity Not Before: Aug 22 08:44:26 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=3A700D6A8A43676819DFCA9186E5C93B9EDA9CF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e8:b0:9e:1c:c4:b3:8d:fd:e5:dc:54:25:fc: 5c:f5:eb:5c:fa:7a:ed:8c:e9:27:0a:09:35:65:2e: c7:47:0d:c4:18:d2:42:51:ff:20:63:ee:e5:eb:28: 5d:3a:16:6e:df:01:5e:42:a2:19:68:39:05:79:f2: 28:9d:70:b1:28:8a:57:67:b4:25:19:c5:15:44:31: 22:20:ea:50:39:ed:89:c2:5a:99:53:8c:02:ac:a1: ae:9a:d2:61:1d:0f:8f:25:95:8c:41:88:cf:27:42: 9a:d1:57:42:dc:be:01:6e:90:51:e7:b0:35:39:15: d2:ca:99:66:79:a8:69:b0:25:99:26:0b:e5:1a:e1: 40:e7:68:10:56:2b:58:d6:89:7a:61:38:62:b8:19: a3:84:87:a9:f5:c8:1c:d0:a2:22:c3:1a:fa:5c:8b: f1:38:43:58:d7:58:f4:c5:f0:71:fe:21:2a:c1:6d: ad:86:60:ee:67:d6:ef:ca:7d:ea:cd:78:2b:19:0b: d0:40:94:03:45:2c:bd:55:d8:ce:ef:de:7f:cf:ae: 0c:40:6f:d1:d6:95:ae:05:2c:41:3e:ae:a6:86:b3: e2:5e:52:85:0a:ab:fd:41:76:94:96:b5:86:75:fe: d3:43:b6:26:0c:db:f3:bf:f5:99:1f:e3:af:db:dc: 1a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:70:0D:6A:8A:43:67:68:19:DF:CA:91:86:E5:C9:3B:9E:DA:9C:F0 X509v3 Authority Key Identifier: keyid:32:4A:7E:6E:BF:67:8F:98:B8:72:28:EC:84:66:C3:69:0A:43:DD:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGJAY/Mkp-br9nj5i4cijshGbDaQpD3bY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Mkp-br9nj5i4cijshGbDaQpD3bY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGJAY/OnANaopDZ2gZ38qRhuXJO57anPA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.197.172.0/24 Signature Algorithm: sha256WithRSAEncryption 57:0e:18:09:2f:71:de:2c:b3:36:60:c7:f1:64:e1:c3:14:8c: 92:d4:5c:ed:85:aa:4a:e7:6b:2d:52:ea:cf:52:d3:8a:95:61: a0:de:c0:64:9c:20:ce:e1:f5:7a:fb:e2:74:12:6e:c8:b5:b6: 20:3f:c5:21:6e:57:4a:f2:34:e5:aa:c0:b6:46:80:42:55:da: d3:2d:a2:68:37:10:ea:9b:80:62:0b:70:f6:ef:6e:a2:28:04: 26:50:a6:48:25:7d:db:c4:77:23:55:e2:f1:11:ef:96:aa:92: e2:e7:27:b3:ac:b7:30:d4:c4:80:9e:7a:fd:22:b5:64:8e:1e: 6c:e6:28:76:2f:de:ce:5f:e9:5e:f0:55:3f:89:94:e3:95:e7: 10:9d:6e:d8:d0:8d:a6:74:74:1f:8f:79:4d:44:25:a7:f3:ed: 10:1a:06:50:61:f0:2a:ee:87:77:2f:3b:fd:2a:96:6b:c3:b4: 03:e4:31:65:a1:51:50:1e:1d:2a:d2:90:40:1e:40:b9:6e:a2: d1:e4:fc:9d:6b:91:fc:a6:06:4b:8d:7b:2d:37:d5:66:2d:c8: 9c:ef:23:1b:c1:40:66:df:71:1d:c8:0f:96:94:4c:67:5e:d1: 71:f1:29:94:00:08:99:66:ed:9b:8b:de:94:ef:54:25:1a:3e: f4:48:4b:5a -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICDXIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzI0 QTdFNkVCRjY3OEY5OEI4NzIyOEVDODQ2NkMzNjkwQTQzRERCNjAeFw0yNTA4MjIw ODQ0MjZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDNBNzAwRDZBOEE0MzY3 NjgxOURGQ0E5MTg2RTVDOTNCOUVEQTlDRjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC66LCeHMSzjf3l3FQl/Fz161z6eu2M6ScKCTVlLsdHDcQY0kJR /yBj7uXrKF06Fm7fAV5CohloOQV58iidcLEoildntCUZxRVEMSIg6lA57YnCWplT jAKsoa6a0mEdD48llYxBiM8nQprRV0LcvgFukFHnsDU5FdLKmWZ5qGmwJZkmC+Ua 4UDnaBBWK1jWiXphOGK4GaOEh6n1yBzQoiLDGvpci/E4Q1jXWPTF8HH+ISrBba2G YO5n1u/KferNeCsZC9BAlANFLL1V2M7v3n/PrgxAb9HWla4FLEE+rqaGs+JeUoUK q/1BdpSWtYZ1/tNDtiYM2/O/9Zkf46/b3BqvAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUOnANaopDZ2gZ38qRhuXJO57anPAwHwYDVR0jBBgwFoAUMkp+br9nj5i4cijs hGbDaQpD3bYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0pB WS9Na3AtYnI5bmo1aTRjaWpzaEdiRGFRcEQzYlkuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL01rcC1icjluajVpNGNpanNoR2JEYVFwRDNiWS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0hPTkdKQVkvT25BTmFvcERaMmdaMzhx Umh1WEpPNTdhblBBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AGfFrDANBgkqhkiG9w0BAQsFAAOCAQEAVw4YCS9x3iyzNmDH8WThwxSMktRc7YWq SudrLVLqz1LTipVhoN7AZJwgzuH1evvidBJuyLW2ID/FIW5XSvI05arAtkaAQlXa 0y2iaDcQ6puAYgtw9u9uoigEJlCmSCV928R3I1Xi8RHvlqqS4ucns6y3MNTEgJ56 /SK1ZI4ebOYodi/ezl/pXvBVP4mU45XnEJ1u2NCNpnR0H495TUQlp/PtEBoGUGHw Ku6Hdy87/SqWa8O0A+QxZaFRUB4dKtKQQB5AuW6i0eT8nWuR/KYGS417LTfVZi3I nO8jG8FAZt9xHcgPlpRMZ17RcfEplAAImWbtm4velO9UJRo+9EhLWg== -----END CERTIFICATE-----Generated at Sun Aug 24 09:45:15 2025 by rpki-client