$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGJAY/L5tWNOwyB_FZgTJ2q6HEU8ovaZc.roa File: L5tWNOwyB_FZgTJ2q6HEU8ovaZc.roa (raw, json) Hash identifier: FUSdY8Nf3zEJ9dDfGNVTgOnCk70T/yp2RcZlwklBLFI= Subject key identifier: 2F:9B:56:34:EC:32:07:F1:59:81:32:76:AB:A1:C4:53:CA:2F:69:97 Certificate issuer: /CN=324A7E6EBF678F98B87228EC8466C3690A43DDB6 Certificate serial: 0D70 Authority key identifier: 32:4A:7E:6E:BF:67:8F:98:B8:72:28:EC:84:66:C3:69:0A:43:DD:B6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Mkp-br9nj5i4cijshGbDaQpD3bY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGJAY/L5tWNOwyB_FZgTJ2q6HEU8ovaZc.roa Signing time: Fri 22 Aug 2025 08:44:26 +0000 ROA not before: Fri 22 Aug 2025 08:44:26 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18046 IP address blocks: 103.197.172.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGJAY/Mkp-br9nj5i4cijshGbDaQpD3bY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGJAY/Mkp-br9nj5i4cijshGbDaQpD3bY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Mkp-br9nj5i4cijshGbDaQpD3bY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 06:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3440 (0xd70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324A7E6EBF678F98B87228EC8466C3690A43DDB6 Validity Not Before: Aug 22 08:44:26 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=2F9B5634EC3207F159813276ABA1C453CA2F6997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3e:08:5d:98:0a:74:70:37:b4:ad:7f:d0:f9: f4:cb:55:98:33:32:b9:4e:68:e4:e4:a9:09:47:94: 90:95:2b:53:56:51:8a:b6:ca:c2:37:80:76:bc:17: 7c:8c:07:de:95:32:ef:86:72:af:e6:54:31:d9:7f: 4d:59:af:56:9d:d1:d4:74:51:3b:63:6c:18:89:5c: 14:06:04:47:86:a6:2b:5e:ee:6e:f0:18:8f:fe:f3: 13:cc:f5:42:0e:e4:12:9a:75:0a:a2:20:ba:d6:ed: cb:f1:a7:da:cb:66:3c:71:f9:e3:e9:56:1d:28:e0: 46:7f:97:b5:d0:6c:78:51:6f:35:89:fa:0b:bb:49: 9b:7d:b5:b6:a6:1f:57:8d:91:64:bc:c4:30:59:a7: b9:c9:88:70:44:5a:d5:51:33:ff:3f:48:90:af:bf: 7c:59:32:4e:7f:47:ec:86:92:0d:f7:ee:3a:0b:1b: 24:4e:5f:6d:83:c4:ab:36:37:06:e6:2d:60:98:cb: 7e:25:97:e1:f1:4e:19:9d:b8:80:3b:17:ad:29:e8: 3d:cc:45:55:c2:88:c5:78:28:0e:ce:af:5a:6f:13: 6c:ec:60:3d:6f:29:0e:44:12:25:ee:b8:96:01:58: b6:fa:5f:6d:17:eb:72:44:8e:09:0d:46:03:c5:33: 82:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:9B:56:34:EC:32:07:F1:59:81:32:76:AB:A1:C4:53:CA:2F:69:97 X509v3 Authority Key Identifier: keyid:32:4A:7E:6E:BF:67:8F:98:B8:72:28:EC:84:66:C3:69:0A:43:DD:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGJAY/Mkp-br9nj5i4cijshGbDaQpD3bY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Mkp-br9nj5i4cijshGbDaQpD3bY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGJAY/L5tWNOwyB_FZgTJ2q6HEU8ovaZc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.197.172.0/23 Signature Algorithm: sha256WithRSAEncryption 0c:a3:66:b1:2a:a6:57:da:07:d8:75:c2:9c:72:01:31:d6:05: 9a:e9:65:00:0a:70:e8:4b:8e:4b:3e:64:8a:57:ff:79:ce:e0: 0a:93:50:ff:77:48:84:22:3c:da:7b:8e:35:ec:cf:8f:b9:55: e2:95:3c:17:05:90:85:7e:45:54:14:75:db:7e:ff:c6:10:15: 14:8c:4b:98:c2:71:79:97:e5:ba:0e:1e:bb:70:02:56:98:b4: fe:42:f0:11:4b:20:6b:af:ba:3c:7b:d9:d3:53:35:e8:fa:52: 67:4f:23:1a:c5:98:5d:d2:b6:2e:16:3a:ee:9c:55:e9:1e:7f: 41:e3:da:dc:bc:2f:55:9d:40:68:77:bf:ae:15:e9:5a:1b:79: 43:53:82:81:b7:c6:ec:64:fa:92:2f:45:1a:40:fd:2a:8c:73: 41:f8:bb:f3:bf:51:65:b4:58:d2:ab:36:6a:4d:59:ac:cf:cf: ae:2e:ce:e5:9a:ce:47:61:20:9c:33:3d:6e:8c:4d:7c:75:e9: 27:d6:64:e4:0d:e0:a4:15:f7:4c:2c:12:68:44:4c:2f:d1:25: 11:3e:65:9a:cc:e1:9e:78:e6:fb:44:4a:16:cd:fc:a6:8e:b6: 56:6a:9f:46:27:89:22:2d:bb:42:11:e6:b1:c3:a4:91:49:65: d1:fe:a2:08 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICDXAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzI0 QTdFNkVCRjY3OEY5OEI4NzIyOEVDODQ2NkMzNjkwQTQzRERCNjAeFw0yNTA4MjIw ODQ0MjZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDJGOUI1NjM0RUMzMjA3 RjE1OTgxMzI3NkFCQTFDNDUzQ0EyRjY5OTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAPghdmAp0cDe0rX/Q+fTLVZgzMrlOaOTkqQlHlJCVK1NWUYq2 ysI3gHa8F3yMB96VMu+Gcq/mVDHZf01Zr1ad0dR0UTtjbBiJXBQGBEeGpite7m7w GI/+8xPM9UIO5BKadQqiILrW7cvxp9rLZjxx+ePpVh0o4EZ/l7XQbHhRbzWJ+gu7 SZt9tbamH1eNkWS8xDBZp7nJiHBEWtVRM/8/SJCvv3xZMk5/R+yGkg337joLGyRO X22DxKs2NwbmLWCYy34ll+HxThmduIA7F60p6D3MRVXCiMV4KA7Or1pvE2zsYD1v KQ5EEiXuuJYBWLb6X20X63JEjgkNRgPFM4IDAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUL5tWNOwyB/FZgTJ2q6HEU8ovaZcwHwYDVR0jBBgwFoAUMkp+br9nj5i4cijs hGbDaQpD3bYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0pB WS9Na3AtYnI5bmo1aTRjaWpzaEdiRGFRcEQzYlkuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL01rcC1icjluajVpNGNpanNoR2JEYVFwRDNiWS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0hPTkdKQVkvTDV0V05Pd3lCX0ZaZ1RK MnE2SEVVOG92YVpjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AWfFrDANBgkqhkiG9w0BAQsFAAOCAQEADKNmsSqmV9oH2HXCnHIBMdYFmullAApw 6EuOSz5kilf/ec7gCpNQ/3dIhCI82nuONezPj7lV4pU8FwWQhX5FVBR1237/xhAV FIxLmMJxeZflug4eu3ACVpi0/kLwEUsga6+6PHvZ01M16PpSZ08jGsWYXdK2LhY6 7pxV6R5/QePa3LwvVZ1AaHe/rhXpWht5Q1OCgbfG7GT6ki9FGkD9KoxzQfi7879R ZbRY0qs2ak1ZrM/Pri7O5ZrOR2EgnDM9boxNfHXpJ9Zk5A3gpBX3TCwSaERML9El ET5lmszhnnjm+0RKFs38po62VmqfRieJIi27QhHmscOkkUll0f6iCA== -----END CERTIFICATE-----Generated at Wed Nov 5 04:41:04 2025 by rpki-client