$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/Smzr0oI9Mt0W4OD3NV_GfCeHH48.roa File: Smzr0oI9Mt0W4OD3NV_GfCeHH48.roa (raw, json) Hash identifier: Q5QWELqviUcbXJMCcbEgLw1YNwi9oA39cGEAIV89pYE= Subject key identifier: 4A:6C:EB:D2:82:3D:32:DD:16:E0:E0:F7:35:5F:C6:7C:27:87:1F:8F Certificate issuer: /CN=257DB7B9919975697366B7014F8CFE28EF364E73 Certificate serial: 07B1 Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/Smzr0oI9Mt0W4OD3NV_GfCeHH48.roa Signing time: Mon 10 Feb 2025 13:44:40 +0000 ROA not before: Mon 10 Feb 2025 13:44:40 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131657 IP address blocks: 103.122.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1969 (0x7b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73 Validity Not Before: Feb 10 13:44:40 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=4A6CEBD2823D32DD16E0E0F7355FC67C27871F8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8f:ad:66:55:df:93:60:51:a4:af:b8:8d:61: d8:30:f6:60:63:03:2d:a7:56:ff:49:81:5e:eb:3e: 7a:ce:37:16:eb:16:af:4c:52:e9:96:a0:fb:b9:82: 8c:e9:48:03:61:35:7b:22:d5:3a:58:ce:9d:44:1c: aa:31:d0:ac:98:53:e0:b1:de:27:84:08:d5:af:8f: df:03:a2:7c:30:0a:ff:f8:50:b2:2a:84:a3:f7:24: cf:cb:9a:25:ed:f9:c2:b7:f4:68:6e:82:79:8d:1d: ff:ab:75:7a:0d:63:3b:25:a3:c1:02:ee:c5:45:3e: 6c:f8:49:2d:4b:16:d6:55:f9:49:fe:04:49:33:79: 1c:97:bc:dc:e5:75:43:ae:58:77:67:8f:40:23:f0: 84:a6:11:10:77:73:d9:58:2b:79:f6:32:ca:2e:53: 7b:c3:e3:4d:5f:c1:74:d8:3c:07:cd:ce:d3:bd:6e: 5d:97:c0:b0:79:90:a9:4f:a1:af:d0:46:67:11:4c: c1:a0:e1:70:a3:09:3b:80:ad:7e:38:3f:90:3a:b4: aa:3c:bb:23:ce:f0:da:10:fc:8e:4d:c2:c8:1e:2d: 99:bb:22:03:a2:59:14:ba:c5:e7:4a:71:e5:d1:7b: 6e:4d:89:bb:d0:6f:c9:ab:49:ec:8b:13:91:81:4f: 15:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:6C:EB:D2:82:3D:32:DD:16:E0:E0:F7:35:5F:C6:7C:27:87:1F:8F X509v3 Authority Key Identifier: keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/Smzr0oI9Mt0W4OD3NV_GfCeHH48.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.122.188.0/24 Signature Algorithm: sha256WithRSAEncryption 69:4a:67:7d:64:27:67:46:d3:3d:7c:b2:9b:de:32:a0:b0:fc: ad:46:6c:b9:a8:2f:dd:10:84:13:b6:9f:f5:9c:9b:1a:50:3c: 6e:d4:bd:9b:03:f4:59:b3:d1:fc:8e:da:2c:5c:10:2d:8e:54: 4e:bf:eb:cc:52:7f:ff:81:ff:fa:c1:5d:42:6e:9d:06:91:06: e5:16:c7:b5:73:56:56:17:37:ce:dc:b6:5c:95:2d:bd:8f:2c: 80:f0:a3:11:01:5d:48:87:d2:74:8c:40:53:7c:da:e9:b1:19: bc:28:4d:a8:56:87:f1:06:4f:c6:75:bc:42:f5:0a:b2:67:b5: 11:a8:a8:93:20:81:1d:d7:75:be:4a:6d:4e:07:35:92:fe:92: 12:28:c3:0b:bf:cd:e8:1f:bc:5e:2c:72:b5:10:c6:5b:b4:83: 57:ee:8f:d9:80:34:d5:41:21:91:86:f3:7f:1e:90:15:50:ec: 32:4b:de:f2:e3:18:34:00:31:04:01:55:4f:9d:9c:47:cc:ab: c5:08:68:c3:6b:5b:c3:0f:45:6e:1c:b6:61:eb:d5:51:68:4d: dd:88:b6:42:d2:86:81:af:f6:9c:fe:88:29:93:c5:4c:c0:e6: 2e:ea:1e:e8:a7:5a:5d:8b:bc:b9:6e:77:3c:39:cd:32:f8:0e: 71:e3:d4:83 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICB7EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjU3 REI3Qjk5MTk5NzU2OTczNjZCNzAxNEY4Q0ZFMjhFRjM2NEU3MzAeFw0yNTAyMTAx MzQ0NDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDRBNkNFQkQyODIzRDMy REQxNkUwRTBGNzM1NUZDNjdDMjc4NzFGOEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFj61mVd+TYFGkr7iNYdgw9mBjAy2nVv9JgV7rPnrONxbrFq9M UumWoPu5gozpSANhNXsi1TpYzp1EHKox0KyYU+Cx3ieECNWvj98DonwwCv/4ULIq hKP3JM/LmiXt+cK39GhugnmNHf+rdXoNYzslo8EC7sVFPmz4SS1LFtZV+Un+BEkz eRyXvNzldUOuWHdnj0Aj8ISmERB3c9lYK3n2MsouU3vD401fwXTYPAfNztO9bl2X wLB5kKlPoa/QRmcRTMGg4XCjCTuArX44P5A6tKo8uyPO8NoQ/I5NwsgeLZm7IgOi WRS6xedKceXRe25NibvQb8mrSeyLE5GBTxXHAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUSmzr0oI9Mt0W4OD3NV/GfCeHH48wHwYDVR0jBBgwFoAUJX23uZGZdWlzZrcB T4z+KO82TnMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RB L0pYMjN1WkdaZFdselpyY0JUNHotS084MlRuTS5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvSlgyM3VaR1pkV2x6WnJjQlQ0ei1LTzgyVG5NLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RBL1NtenIwb0k5TXQwVzRPRDNO Vl9HZkNlSEg0OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn erwwDQYJKoZIhvcNAQELBQADggEBAGlKZ31kJ2dG0z18spveMqCw/K1GbLmoL90Q hBO2n/WcmxpQPG7UvZsD9Fmz0fyO2ixcEC2OVE6/68xSf/+B//rBXUJunQaRBuUW x7VzVlYXN87ctlyVLb2PLIDwoxEBXUiH0nSMQFN82umxGbwoTahWh/EGT8Z1vEL1 CrJntRGoqJMggR3Xdb5KbU4HNZL+khIowwu/zegfvF4scrUQxlu0g1fuj9mANNVB IZGG838ekBVQ7DJL3vLjGDQAMQQBVU+dnEfMq8UIaMNrW8MPRW4ctmHr1VFoTd2I tkLShoGv9pz+iCmTxUzA5i7qHuinWl2LvLludzw5zTL4DnHj1IM= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:39 2025 by rpki-client on console.sobornost.net