$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/1PbSh-akEpBWdwH8TxknKcGI2Qc.roa File: 1PbSh-akEpBWdwH8TxknKcGI2Qc.roa (raw, json) Hash identifier: FlgYEhUB8Co5VEc6Z95U4RQMMdUsfTUC/n0BNBCQcvg= Subject key identifier: D4:F6:D2:87:E6:A4:12:90:56:77:01:FC:4F:19:27:29:C1:88:D9:07 Certificate issuer: /CN=257DB7B9919975697366B7014F8CFE28EF364E73 Certificate serial: 07A7 Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/1PbSh-akEpBWdwH8TxknKcGI2Qc.roa Signing time: Mon 10 Feb 2025 13:44:38 +0000 ROA not before: Mon 10 Feb 2025 13:44:38 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 20473 IP address blocks: 103.122.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 18:48:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1959 (0x7a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73 Validity Not Before: Feb 10 13:44:38 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D4F6D287E6A41290567701FC4F192729C188D907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:a7:a7:e4:98:5d:b7:e5:a3:bf:6b:1b:70:1e: 98:0b:d0:02:43:ce:e6:39:45:4a:25:ce:3c:34:4a: b9:ec:b8:3a:5c:fa:8f:e5:af:0f:77:4f:07:21:99: a2:e0:c4:18:ef:19:b5:bc:f7:cc:19:16:de:fc:b7: 2b:38:45:18:3d:39:41:1e:33:d4:82:a1:c3:7d:e5: 01:d7:fa:13:e2:f6:6d:38:7d:84:4b:55:c1:8e:f6: 1f:2b:94:f9:c0:db:c9:3b:31:ff:c0:ea:ef:99:56: a3:27:cd:7c:d5:00:75:30:8a:db:4f:32:39:9e:ec: e8:65:98:d8:6e:5d:30:45:a3:f7:d9:f0:b1:da:cb: c5:40:93:98:c4:6d:99:d3:9c:87:b3:ae:e2:f6:47: 2b:c7:41:4d:b8:bd:cc:80:67:39:88:70:b0:e0:58: 0f:fb:57:45:a5:a6:46:3a:47:52:73:0d:51:0d:d3: 44:70:53:00:2c:bd:41:1a:a1:4e:cd:f0:2f:8a:6d: eb:a2:48:5c:2d:a5:25:f1:de:c7:38:61:a4:dc:8b: 8e:52:a1:ac:27:42:e3:62:ca:4c:d6:e5:be:47:4b: 33:72:c5:d8:f3:65:f9:f6:16:df:fa:9e:0f:1e:32: df:a0:a0:fb:93:0e:f0:c1:cd:cb:1f:d2:9e:5a:ae: 72:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:F6:D2:87:E6:A4:12:90:56:77:01:FC:4F:19:27:29:C1:88:D9:07 X509v3 Authority Key Identifier: keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/1PbSh-akEpBWdwH8TxknKcGI2Qc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.122.191.0/24 Signature Algorithm: sha256WithRSAEncryption 51:b6:7f:55:da:8f:b0:a2:13:fb:2f:32:36:a6:50:5f:f1:85: ad:14:8a:8e:53:e2:24:d6:aa:39:27:f9:0e:91:55:e9:07:2d: 2b:4b:23:72:73:ae:db:18:b5:7a:0b:c2:8d:f9:83:e9:f2:fd: 2b:c8:84:ba:65:1b:88:53:5f:fe:24:60:2d:38:4b:37:7f:56: 2c:0e:5f:11:8e:33:e3:51:9d:56:18:1e:b0:ca:82:5e:8c:41: 9e:1b:52:4d:fe:86:c7:17:cd:88:14:ea:8d:73:3f:a5:74:b8: d4:0b:b5:5c:87:12:a8:1c:3a:5b:26:bf:f6:f5:ce:6d:92:17: bf:a6:df:ba:b1:73:1a:36:a2:f7:da:a0:87:b9:52:06:c1:55: e0:14:62:62:96:c1:68:fe:2a:22:69:47:e3:a3:f2:f9:81:a5: b9:17:de:76:58:19:8e:b4:31:d2:fc:83:84:e0:38:f2:6a:c7: c0:48:e2:20:99:79:4b:2f:2c:61:40:40:e6:b5:1d:00:f7:28: cb:46:4a:ea:69:57:27:65:3e:ad:a1:cb:fd:55:85:ba:67:40: ca:64:6b:39:1c:03:12:ad:96:1b:cf:7d:4e:16:f1:25:07:03: 36:f7:1b:e2:ca:aa:ec:bd:5b:9f:6f:55:12:24:d9:2c:15:c5: 09:5d:d2:1f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICB6cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjU3 REI3Qjk5MTk5NzU2OTczNjZCNzAxNEY4Q0ZFMjhFRjM2NEU3MzAeFw0yNTAyMTAx MzQ0MzhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQ0RjZEMjg3RTZBNDEy OTA1Njc3MDFGQzRGMTkyNzI5QzE4OEQ5MDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDrp6fkmF235aO/axtwHpgL0AJDzuY5RUolzjw0SrnsuDpc+o/l rw93TwchmaLgxBjvGbW898wZFt78tys4RRg9OUEeM9SCocN95QHX+hPi9m04fYRL VcGO9h8rlPnA28k7Mf/A6u+ZVqMnzXzVAHUwittPMjme7OhlmNhuXTBFo/fZ8LHa y8VAk5jEbZnTnIezruL2RyvHQU24vcyAZzmIcLDgWA/7V0WlpkY6R1JzDVEN00Rw UwAsvUEaoU7N8C+KbeuiSFwtpSXx3sc4YaTci45SoawnQuNiykzW5b5HSzNyxdjz Zfn2Ft/6ng8eMt+goPuTDvDBzcsf0p5arnJRAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU1PbSh+akEpBWdwH8TxknKcGI2QcwHwYDVR0jBBgwFoAUJX23uZGZdWlzZrcB T4z+KO82TnMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RB L0pYMjN1WkdaZFdselpyY0JUNHotS084MlRuTS5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvSlgyM3VaR1pkV2x6WnJjQlQ0ei1LTzgyVG5NLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RBLzFQYlNoLWFrRXBCV2R3SDhU eGtuS2NHSTJRYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn er8wDQYJKoZIhvcNAQELBQADggEBAFG2f1Xaj7CiE/svMjamUF/xha0Uio5T4iTW qjkn+Q6RVekHLStLI3JzrtsYtXoLwo35g+ny/SvIhLplG4hTX/4kYC04Szd/ViwO XxGOM+NRnVYYHrDKgl6MQZ4bUk3+hscXzYgU6o1zP6V0uNQLtVyHEqgcOlsmv/b1 zm2SF7+m37qxcxo2ovfaoIe5UgbBVeAUYmKWwWj+KiJpR+Oj8vmBpbkX3nZYGY60 MdL8g4TgOPJqx8BI4iCZeUsvLGFAQOa1HQD3KMtGSuppVydlPq2hy/1VhbpnQMpk azkcAxKtlhvPfU4W8SUHAzb3G+LKquy9W59vVRIk2SwVxQld0h8= -----END CERTIFICATE-----Generated at Thu Apr 24 15:53:51 2025 by rpki-client on console.sobornost.net