$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGJAY/mGTS2f43YnGyrZTs24_itJRWGVM.roa File: mGTS2f43YnGyrZTs24_itJRWGVM.roa (raw, json) Hash identifier: 3Ap0NM4fTIrhKDtiOVSmd56TK7oF9f75cUAk4eDIuwg= Subject key identifier: 98:64:D2:D9:FE:37:62:71:B2:AD:94:EC:DB:8F:E2:B4:94:56:19:53 Certificate issuer: /CN=324A7E6EBF678F98B87228EC8466C3690A43DDB6 Certificate serial: 0D71 Authority key identifier: 32:4A:7E:6E:BF:67:8F:98:B8:72:28:EC:84:66:C3:69:0A:43:DD:B6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Mkp-br9nj5i4cijshGbDaQpD3bY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGJAY/mGTS2f43YnGyrZTs24_itJRWGVM.roa Signing time: Fri 22 Aug 2025 08:44:26 +0000 ROA not before: Fri 22 Aug 2025 08:44:26 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38851 IP address blocks: 103.197.174.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGJAY/Mkp-br9nj5i4cijshGbDaQpD3bY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGJAY/Mkp-br9nj5i4cijshGbDaQpD3bY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Mkp-br9nj5i4cijshGbDaQpD3bY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3441 (0xd71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324A7E6EBF678F98B87228EC8466C3690A43DDB6 Validity Not Before: Aug 22 08:44:26 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=9864D2D9FE376271B2AD94ECDB8FE2B494561953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:71:b3:af:f8:9a:3d:12:f9:67:db:b4:cf:13: 77:aa:29:ce:3f:a8:d2:1c:66:87:ed:e6:26:2a:00: dc:65:12:f6:1f:32:bb:76:0a:f4:7c:b3:ec:d2:4c: 99:e0:20:70:d3:cc:c9:f1:44:fa:cc:81:e3:a0:2f: e7:97:14:d1:49:f4:12:06:2c:66:67:41:a5:59:5c: a3:7e:d9:14:a3:fa:77:40:82:47:2a:9b:a1:87:81: 8f:af:2f:df:2e:bb:94:83:9a:e7:2f:92:14:c6:83: 11:19:52:6c:a0:ef:35:b3:86:b9:d7:60:35:8d:63: 22:d6:55:d6:ea:81:50:f2:e3:f7:ce:2f:e3:93:4c: 48:4b:ff:55:9d:18:73:47:2c:48:21:b8:87:4a:51: eb:c3:55:85:a6:a6:94:c0:98:9e:e9:e3:36:99:32: 0e:3d:64:ab:a4:74:40:bf:6a:12:1a:fd:39:25:cf: 54:e2:c4:50:51:99:78:90:ba:56:4f:c2:2b:1a:b2: e6:33:03:1f:ab:e3:8e:a9:b1:b1:1c:b5:35:1d:41: bd:fc:15:71:69:87:e3:9a:30:6b:7e:b7:3d:cf:ac: ff:3d:cc:1d:00:13:96:6e:8f:14:e4:0b:8d:a6:43: 7b:6e:4e:8b:0b:f0:9f:f9:ee:b2:2d:f9:0f:ee:e5: 41:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:64:D2:D9:FE:37:62:71:B2:AD:94:EC:DB:8F:E2:B4:94:56:19:53 X509v3 Authority Key Identifier: keyid:32:4A:7E:6E:BF:67:8F:98:B8:72:28:EC:84:66:C3:69:0A:43:DD:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGJAY/Mkp-br9nj5i4cijshGbDaQpD3bY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Mkp-br9nj5i4cijshGbDaQpD3bY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGJAY/mGTS2f43YnGyrZTs24_itJRWGVM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.197.174.0/23 Signature Algorithm: sha256WithRSAEncryption 88:0b:d5:09:1c:47:19:a8:e6:43:24:68:85:c3:b3:ea:89:81: a4:83:76:d2:da:3c:f4:80:0b:b0:75:52:96:5e:47:56:1a:e8: 1a:1e:64:a9:a2:b9:4b:53:7a:97:fa:03:fe:67:a6:f6:36:f6: e3:b9:bc:f6:8d:2d:2a:8b:a8:bb:43:11:72:0f:5f:80:ed:a5: 47:ec:12:99:79:28:74:24:d3:e5:5a:72:35:2a:b3:f5:f9:d2: 71:77:51:f2:83:28:f4:21:33:a5:2d:e5:4e:fd:c0:33:0c:6c: 36:98:dc:db:2a:17:e7:49:c6:c2:46:99:df:09:1c:26:4f:87: b6:56:41:bb:19:1f:c0:b3:4e:39:96:18:7d:0e:4c:4c:7a:d7: f3:d9:43:b8:e2:55:e5:c1:98:74:4c:c0:9c:f4:7a:99:91:d0: 1f:65:06:d6:23:a3:d1:cf:86:1a:32:26:d9:e1:cc:4e:14:33: 51:7f:50:1e:5b:34:83:f4:82:ce:a9:2b:75:76:03:a2:22:a3: 1b:ec:6c:a1:9f:40:14:47:c3:69:05:40:36:0c:b6:6f:a6:04: 4e:f2:85:b4:fa:74:f5:f5:ca:3b:be:0c:c6:80:ef:4c:e2:13: a5:d3:e8:3f:fa:70:04:13:5a:cd:76:a2:37:e5:40:a3:2e:3d: cb:bd:2d:ac -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICDXEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzI0 QTdFNkVCRjY3OEY5OEI4NzIyOEVDODQ2NkMzNjkwQTQzRERCNjAeFw0yNTA4MjIw ODQ0MjZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDk4NjREMkQ5RkUzNzYy NzFCMkFEOTRFQ0RCOEZFMkI0OTQ1NjE5NTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEcbOv+Jo9Evln27TPE3eqKc4/qNIcZoft5iYqANxlEvYfMrt2 CvR8s+zSTJngIHDTzMnxRPrMgeOgL+eXFNFJ9BIGLGZnQaVZXKN+2RSj+ndAgkcq m6GHgY+vL98uu5SDmucvkhTGgxEZUmyg7zWzhrnXYDWNYyLWVdbqgVDy4/fOL+OT TEhL/1WdGHNHLEghuIdKUevDVYWmppTAmJ7p4zaZMg49ZKukdEC/ahIa/Tklz1Ti xFBRmXiQulZPwisasuYzAx+r446psbEctTUdQb38FXFph+OaMGt+tz3PrP89zB0A E5ZujxTkC42mQ3tuTosL8J/57rIt+Q/u5UHBAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUmGTS2f43YnGyrZTs24/itJRWGVMwHwYDVR0jBBgwFoAUMkp+br9nj5i4cijs hGbDaQpD3bYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0pB WS9Na3AtYnI5bmo1aTRjaWpzaEdiRGFRcEQzYlkuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL01rcC1icjluajVpNGNpanNoR2JEYVFwRDNiWS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0hPTkdKQVkvbUdUUzJmNDNZbkd5clpU czI0X2l0SlJXR1ZNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AWfFrjANBgkqhkiG9w0BAQsFAAOCAQEAiAvVCRxHGajmQyRohcOz6omBpIN20to8 9IALsHVSll5HVhroGh5kqaK5S1N6l/oD/mem9jb247m89o0tKouou0MRcg9fgO2l R+wSmXkodCTT5VpyNSqz9fnScXdR8oMo9CEzpS3lTv3AMwxsNpjc2yoX50nGwkaZ 3wkcJk+HtlZBuxkfwLNOOZYYfQ5MTHrX89lDuOJV5cGYdEzAnPR6mZHQH2UG1iOj 0c+GGjIm2eHMThQzUX9QHls0g/SCzqkrdXYDoiKjG+xsoZ9AFEfDaQVANgy2b6YE TvKFtPp09fXKO74MxoDvTOITpdPoP/pwBBNazXaiN+VAoy49y70trA== -----END CERTIFICATE-----Generated at Sun Aug 24 09:05:43 2025 by rpki-client