$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0KfTRCa_LkQ8yGXAZn7orB0oVcU.roa File: 0KfTRCa_LkQ8yGXAZn7orB0oVcU.roa (raw, json) Hash identifier: Tw77uFVL9YBrCMzkKYlBb8/1AfgrWVV0eR38PV1q7tA= Subject key identifier: D0:A7:D3:44:26:BF:2E:44:3C:C8:65:C0:66:7E:E8:AC:1D:28:55:C5 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 37ED Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0KfTRCa_LkQ8yGXAZn7orB0oVcU.roa Signing time: Fri 22 Aug 2025 08:44:47 +0000 ROA not before: Fri 22 Aug 2025 08:44:47 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 118.233.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14317 (0x37ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:44:47 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=D0A7D34426BF2E443CC865C0667EE8AC1D2855C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:59:43:0b:6f:4f:14:56:e9:57:14:4f:da:00: 84:b0:6f:ed:be:9d:6d:3c:4c:3c:b7:da:03:7e:10: a8:61:20:04:31:42:5e:7c:1e:18:04:40:4e:46:d5: af:c7:0a:59:68:79:e7:44:01:ff:78:cf:19:8e:36: 04:9a:7c:9f:7a:7b:5a:45:f5:f4:6f:09:75:5b:1d: 90:98:1c:29:e3:eb:b5:46:ac:3d:54:c0:3f:3f:45: 19:34:b3:8d:e4:7b:01:ed:df:9a:3d:2d:fe:3b:56: f0:d8:80:35:80:d0:23:7b:4b:9c:f4:76:42:83:3a: fd:6a:39:e8:5b:fc:23:df:a2:89:97:dd:d6:59:bc: d9:b3:07:16:19:c8:c4:8d:b1:ee:20:b8:73:54:5a: 62:f5:6f:7a:aa:73:14:de:1b:a3:fe:21:c7:1c:2c: 6a:99:36:d1:b5:f0:65:c4:d3:73:1c:08:aa:bb:bc: df:4f:c5:de:6c:b5:8e:a6:11:3a:4b:69:d2:52:be: 44:09:f9:75:b4:bb:5d:1e:f9:a8:08:34:dd:8f:5f: 54:eb:7d:64:b3:f0:59:fa:3a:c6:ee:56:80:4a:8b: 5b:ae:2c:93:dd:20:b1:54:fd:2f:cd:dc:0d:eb:41: 45:36:2f:b9:96:ff:c4:0b:95:9b:68:96:4a:64:ba: a3:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:A7:D3:44:26:BF:2E:44:3C:C8:65:C0:66:7E:E8:AC:1D:28:55:C5 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0KfTRCa_LkQ8yGXAZn7orB0oVcU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.164.0/22 Signature Algorithm: sha256WithRSAEncryption 2d:e2:1b:b0:60:30:48:fb:27:4a:a1:1c:9c:6c:2f:37:9d:75: 93:73:13:14:a2:5e:48:8a:98:28:3c:42:2e:20:be:d0:23:c6: dc:3b:fc:04:be:a9:25:8e:ac:1f:b0:78:4a:78:a6:d1:ed:29: 1a:85:89:59:20:31:b6:6b:7b:08:78:fe:4c:3a:ce:97:08:08: c8:13:79:7b:45:38:24:3a:25:14:de:02:d4:df:94:36:28:c2: cb:0b:64:23:95:95:35:bc:a1:fa:5a:43:8a:7d:0e:57:4b:38: b3:fc:ba:20:99:85:5f:e1:2f:67:02:6c:b1:9d:2f:8d:ac:96: 98:ad:55:06:13:3f:16:56:d2:89:52:29:b2:8d:24:8e:2c:5f: 25:e4:e6:ee:ec:5d:e3:b9:c4:86:1d:83:19:b4:77:88:3b:2f: 84:4d:b6:f7:46:11:45:2d:9e:a8:41:39:01:cb:8d:31:1e:ce: 97:d6:30:6c:17:71:85:5f:d9:5d:51:dd:63:0e:63:56:34:e1: 7d:f7:6c:a2:36:bf:4b:e4:0c:d4:6b:05:82:b8:5b:38:50:57: 51:c1:1b:4a:b2:1f:f5:ce:ef:97:ed:f3:9e:e4:a3:0b:0f:25: 60:a5:64:0b:48:2c:98:96:4d:ec:ef:85:ec:21:91:53:0e:5b: 9f:62:7f:e3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICN+0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ0NDdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEQwQTdEMzQ0MjZCRjJF NDQzQ0M4NjVDMDY2N0VFOEFDMUQyODU1QzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCoWUMLb08UVulXFE/aAISwb+2+nW08TDy32gN+EKhhIAQxQl58 HhgEQE5G1a/HClloeedEAf94zxmONgSafJ96e1pF9fRvCXVbHZCYHCnj67VGrD1U wD8/RRk0s43kewHt35o9Lf47VvDYgDWA0CN7S5z0dkKDOv1qOehb/CPfoomX3dZZ vNmzBxYZyMSNse4guHNUWmL1b3qqcxTeG6P+IcccLGqZNtG18GXE03McCKq7vN9P xd5stY6mETpLadJSvkQJ+XW0u10e+agINN2PX1TrfWSz8Fn6OsbuVoBKi1uuLJPd ILFU/S/N3A3rQUU2L7mW/8QLlZtolkpkuqN1AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU0KfTRCa/LkQ8yGXAZn7orB0oVcUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzBLZlRSQ2FfTGtROHlHWEFa bjdvckIwb1ZjVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6aQwDQYJKoZIhvcNAQELBQADggEBAC3iG7BgMEj7J0qhHJxsLzeddZNzExSiXkiK mCg8Qi4gvtAjxtw7/AS+qSWOrB+weEp4ptHtKRqFiVkgMbZrewh4/kw6zpcICMgT eXtFOCQ6JRTeAtTflDYowssLZCOVlTW8ofpaQ4p9DldLOLP8uiCZhV/hL2cCbLGd L42slpitVQYTPxZW0olSKbKNJI4sXyXk5u7sXeO5xIYdgxm0d4g7L4RNtvdGEUUt nqhBOQHLjTEezpfWMGwXcYVf2V1R3WMOY1Y04X33bKI2v0vkDNRrBYK4WzhQV1HB G0qyH/XO75ft857kowsPJWClZAtILJiWTezvhewhkVMOW59if+M= -----END CERTIFICATE-----Generated at Sun Aug 24 07:29:35 2025 by rpki-client