$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/5a10hckju7Nb5Kau56UJrSBWN5Q.roa File: 5a10hckju7Nb5Kau56UJrSBWN5Q.roa (raw, json) Hash identifier: awi/nxAzZr7t3CsVjTuOvQ6wFJBfXTjxb7CVtwpvkLY= Subject key identifier: E5:AD:74:85:C9:23:BB:B3:5B:E4:A6:AE:E7:A5:09:AD:20:56:37:94 Certificate issuer: /CN=257DB7B9919975697366B7014F8CFE28EF364E73 Certificate serial: 0793 Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/5a10hckju7Nb5Kau56UJrSBWN5Q.roa Signing time: Mon 10 Feb 2025 13:44:33 +0000 ROA not before: Mon 10 Feb 2025 13:44:33 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131657 IP address blocks: 103.122.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1939 (0x793) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73 Validity Not Before: Feb 10 13:44:33 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E5AD7485C923BBB35BE4A6AEE7A509AD20563794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:4c:a5:64:84:a5:3b:f3:ec:ef:9d:84:8e:fe: ef:f7:2e:8d:00:71:3b:35:49:81:43:4e:5c:3a:28: bb:53:de:d8:fe:f3:be:f7:f9:c7:c1:fa:d0:70:ce: 2d:4c:bc:b4:f8:61:66:3e:19:3f:40:0d:75:95:fa: be:31:dd:32:22:79:a8:f0:e5:61:db:82:b0:60:54: 8d:92:11:8e:c0:d9:ab:6b:04:9c:d1:99:15:f9:bc: 67:68:c9:ed:ea:ae:55:6e:87:fa:09:11:40:60:a9: f3:fd:6d:6e:17:bb:f1:23:85:46:0f:a4:43:ce:df: ea:8e:3a:7f:a6:eb:bf:71:bc:a2:ef:e2:95:7c:c5: 90:74:a6:92:b0:dd:73:e0:f9:98:51:34:b0:19:24: e2:64:8c:78:28:b9:e2:38:97:7f:9a:19:47:5f:29: 06:79:10:03:bb:d9:aa:46:4d:1f:9d:73:d6:83:27: 48:6a:81:34:e7:39:f5:05:e7:6f:b5:6d:00:a1:a1: 38:1c:74:d6:ef:5d:6c:9e:65:e1:09:0b:6c:f3:e8: aa:40:fb:a9:ae:43:8e:60:6d:ff:03:12:d6:7f:f2: 28:e9:43:b9:8c:25:e0:60:e9:e6:96:4d:03:ff:71: a6:37:69:d7:69:26:4c:0d:ca:97:d9:7d:e2:50:dc: c5:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:AD:74:85:C9:23:BB:B3:5B:E4:A6:AE:E7:A5:09:AD:20:56:37:94 X509v3 Authority Key Identifier: keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/5a10hckju7Nb5Kau56UJrSBWN5Q.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.122.191.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:70:a1:df:7d:e3:0f:93:9c:a5:6a:48:ca:55:29:b8:62:c7: 47:fb:58:c7:b6:df:53:d9:b5:76:da:17:d7:09:44:c8:df:b6: 17:ec:3f:a3:d9:20:b3:50:b0:6d:a0:77:08:7e:e7:e5:36:ef: 8e:f3:0e:85:da:f0:3f:b5:7f:3a:55:ac:c2:f0:a7:11:1f:79: 7c:b2:69:24:74:2a:b5:44:37:11:22:f3:80:7d:2d:22:15:9c: e0:03:37:e4:70:84:34:c4:10:5d:5f:2d:f3:54:21:5c:8e:6b: 92:53:f6:cc:fe:43:18:e0:8a:7a:3b:03:b8:25:16:1b:72:93: 36:9c:72:e9:07:36:98:62:4a:33:04:f9:9e:14:42:bc:87:d9: 63:b3:e9:be:fb:fd:60:f6:1e:2a:c5:b9:32:82:bf:94:78:20: 7a:fb:e3:81:9b:e0:bc:f3:f9:79:bb:51:c3:8c:36:6c:06:c1: c0:6b:8d:75:c6:f1:03:2a:b1:3d:55:9b:78:f7:1b:56:11:7c: 49:fb:4d:f0:11:06:d0:09:4a:ae:01:d8:ff:6b:40:d5:a2:0f: ff:78:77:a0:6a:a4:1f:2f:f5:3f:0b:4b:07:d1:6f:1f:f0:f8: a4:1d:03:f9:7b:ed:9e:d9:c4:f9:ec:b9:17:c9:60:71:0a:8b: 91:f9:80:91 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICB5MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjU3 REI3Qjk5MTk5NzU2OTczNjZCNzAxNEY4Q0ZFMjhFRjM2NEU3MzAeFw0yNTAyMTAx MzQ0MzNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEU1QUQ3NDg1QzkyM0JC QjM1QkU0QTZBRUU3QTUwOUFEMjA1NjM3OTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDvTKVkhKU78+zvnYSO/u/3Lo0AcTs1SYFDTlw6KLtT3tj+8773 +cfB+tBwzi1MvLT4YWY+GT9ADXWV+r4x3TIieajw5WHbgrBgVI2SEY7A2atrBJzR mRX5vGdoye3qrlVuh/oJEUBgqfP9bW4Xu/EjhUYPpEPO3+qOOn+m679xvKLv4pV8 xZB0ppKw3XPg+ZhRNLAZJOJkjHgoueI4l3+aGUdfKQZ5EAO72apGTR+dc9aDJ0hq gTTnOfUF52+1bQChoTgcdNbvXWyeZeEJC2zz6KpA+6muQ45gbf8DEtZ/8ijpQ7mM JeBg6eaWTQP/caY3addpJkwNypfZfeJQ3MXRAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU5a10hckju7Nb5Kau56UJrSBWN5QwHwYDVR0jBBgwFoAUJX23uZGZdWlzZrcB T4z+KO82TnMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RB L0pYMjN1WkdaZFdselpyY0JUNHotS084MlRuTS5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvSlgyM3VaR1pkV2x6WnJjQlQ0ei1LTzgyVG5NLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RBLzVhMTBoY2tqdTdOYjVLYXU1 NlVKclNCV041US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn er8wDQYJKoZIhvcNAQELBQADggEBABxwod994w+TnKVqSMpVKbhix0f7WMe231PZ tXbaF9cJRMjfthfsP6PZILNQsG2gdwh+5+U2747zDoXa8D+1fzpVrMLwpxEfeXyy aSR0KrVENxEi84B9LSIVnOADN+RwhDTEEF1fLfNUIVyOa5JT9sz+Qxjgino7A7gl FhtykzaccukHNphiSjME+Z4UQryH2WOz6b77/WD2HirFuTKCv5R4IHr744Gb4Lzz +Xm7UcOMNmwGwcBrjXXG8QMqsT1Vm3j3G1YRfEn7TfARBtAJSq4B2P9rQNWiD/94 d6BqpB8v9T8LSwfRbx/w+KQdA/l77Z7ZxPnsuRfJYHEKi5H5gJE= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:38 2025 by rpki-client on console.sobornost.net