$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/Xsx9JVvgAZPb-IvejCLYA-BwxgE.roa File: Xsx9JVvgAZPb-IvejCLYA-BwxgE.roa (raw, json) Hash identifier: Dc+jgZV6FbEHEx+1c6V4rkSFYf0Dir0CqHxCngR7Gbg= Subject key identifier: 5E:CC:7D:25:5B:E0:01:93:DB:F8:8B:DE:8C:22:D8:03:E0:70:C6:01 Certificate issuer: /CN=257DB7B9919975697366B7014F8CFE28EF364E73 Certificate serial: 07B0 Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/Xsx9JVvgAZPb-IvejCLYA-BwxgE.roa Signing time: Mon 10 Feb 2025 13:44:39 +0000 ROA not before: Mon 10 Feb 2025 13:44:39 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17418 IP address blocks: 103.153.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1968 (0x7b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73 Validity Not Before: Feb 10 13:44:39 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5ECC7D255BE00193DBF88BDE8C22D803E070C601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ba:ad:1b:21:cd:b7:61:1b:db:c6:88:3b:6b: 71:6f:a6:8c:53:6d:d4:62:78:d8:b7:47:27:a9:bf: 0f:6a:d9:ec:36:71:fe:4b:a3:37:5e:74:78:49:33: 04:d3:4d:00:aa:73:cc:ff:57:f1:04:72:78:8e:43: d0:28:11:3f:86:a2:47:cd:f5:56:fe:b6:77:df:3e: 1c:bf:6e:49:43:52:93:da:33:28:8d:76:23:a3:07: cf:78:0d:bb:99:7b:fc:53:69:57:8e:7a:41:09:ce: ce:60:ea:3c:fe:3a:a8:17:e8:54:0b:44:87:c6:c6: 21:6e:94:39:f2:f8:25:c2:2a:48:66:39:c9:70:49: b5:ad:b5:40:1a:f7:0c:45:2b:70:2a:f2:57:e7:8d: cb:46:2a:ba:4f:3c:a8:5b:e8:c2:3b:99:68:72:58: 25:2c:a6:ae:25:a5:23:c9:ed:45:3a:25:25:3b:83: 1d:74:83:d0:a2:e2:8e:3d:cd:23:23:1e:cd:9b:47: 88:87:19:a1:99:60:1d:d3:90:84:ce:30:be:82:e2: 15:67:2f:58:ac:74:a7:37:6e:3b:0a:71:65:dc:5f: 25:58:4c:15:9b:54:dc:b4:7b:f9:f8:37:97:9d:ba: f8:5c:73:bd:af:a8:a2:ec:02:f7:42:9b:17:a4:f7: e0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:CC:7D:25:5B:E0:01:93:DB:F8:8B:DE:8C:22:D8:03:E0:70:C6:01 X509v3 Authority Key Identifier: keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/Xsx9JVvgAZPb-IvejCLYA-BwxgE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.153.176.0/24 Signature Algorithm: sha256WithRSAEncryption 04:e9:e1:a7:f0:fa:dd:ff:2e:b0:d6:f8:e3:82:05:13:fb:ef: f0:cf:38:89:74:70:5a:ad:fe:07:b8:9f:69:ab:06:ed:4f:c7: f8:cf:dc:92:21:d0:53:29:57:67:2b:ad:72:d4:27:73:05:ca: 2d:86:7d:3e:c9:3a:ad:17:ad:a2:b9:e8:5e:53:26:ca:be:fa: e8:ae:9f:e4:d8:3d:09:24:53:a2:1f:a5:f9:f9:89:e5:2e:08: 21:37:fc:28:84:da:38:c6:21:cc:32:c4:67:19:24:c3:5f:3b: 4d:c8:59:0a:a3:ed:b3:a1:fa:ca:d0:03:23:b8:09:d0:90:af: 12:22:6b:60:84:de:8e:c6:37:e8:b5:ad:c4:a8:08:e0:05:86: 4b:95:cb:1a:b9:c3:be:c8:c0:d8:5b:19:38:7b:ff:ab:11:ac: 9a:62:9c:66:46:06:04:cd:1c:68:ee:39:93:d2:c0:ce:2c:dc: 8f:41:68:ce:ac:82:7c:e7:64:4f:b5:06:ba:9f:b9:e6:da:81: 81:47:e6:33:a3:d2:e8:79:cb:b1:ed:56:33:22:fe:6b:ac:4e: 16:fe:35:fe:7b:f9:74:00:59:23:e6:5f:21:07:33:83:ee:1e: 29:eb:e9:6f:9f:35:3b:c4:d6:4a:71:b0:08:bd:e3:25:5a:81: 50:d4:f3:ca -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICB7AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjU3 REI3Qjk5MTk5NzU2OTczNjZCNzAxNEY4Q0ZFMjhFRjM2NEU3MzAeFw0yNTAyMTAx MzQ0MzlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDVFQ0M3RDI1NUJFMDAx OTNEQkY4OEJERThDMjJEODAzRTA3MEM2MDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMuq0bIc23YRvbxog7a3FvpoxTbdRieNi3Ryepvw9q2ew2cf5L ozdedHhJMwTTTQCqc8z/V/EEcniOQ9AoET+GokfN9Vb+tnffPhy/bklDUpPaMyiN diOjB894DbuZe/xTaVeOekEJzs5g6jz+OqgX6FQLRIfGxiFulDny+CXCKkhmOclw SbWttUAa9wxFK3Aq8lfnjctGKrpPPKhb6MI7mWhyWCUspq4lpSPJ7UU6JSU7gx10 g9Ci4o49zSMjHs2bR4iHGaGZYB3TkITOML6C4hVnL1isdKc3bjsKcWXcXyVYTBWb VNy0e/n4N5eduvhcc72vqKLsAvdCmxek9+BxAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUXsx9JVvgAZPb+IvejCLYA+BwxgEwHwYDVR0jBBgwFoAUJX23uZGZdWlzZrcB T4z+KO82TnMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RB L0pYMjN1WkdaZFdselpyY0JUNHotS084MlRuTS5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvSlgyM3VaR1pkV2x6WnJjQlQ0ei1LTzgyVG5NLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RBL1hzeDlKVnZnQVpQYi1JdmVq Q0xZQS1Cd3hnRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn mbAwDQYJKoZIhvcNAQELBQADggEBAATp4afw+t3/LrDW+OOCBRP77/DPOIl0cFqt /ge4n2mrBu1Px/jP3JIh0FMpV2crrXLUJ3MFyi2GfT7JOq0XraK56F5TJsq++uiu n+TYPQkkU6Ifpfn5ieUuCCE3/CiE2jjGIcwyxGcZJMNfO03IWQqj7bOh+srQAyO4 CdCQrxIia2CE3o7GN+i1rcSoCOAFhkuVyxq5w77IwNhbGTh7/6sRrJpinGZGBgTN HGjuOZPSwM4s3I9BaM6sgnznZE+1BrqfuebagYFH5jOj0uh5y7HtVjMi/musThb+ Nf57+XQAWSPmXyEHM4PuHinr6W+fNTvE1kpxsAi94yVagVDU88o= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:39 2025 by rpki-client on console.sobornost.net