$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0beg2JtzpgUX91j5JpTTN3pG5FU.roa File: 0beg2JtzpgUX91j5JpTTN3pG5FU.roa (raw, json) Hash identifier: OmJN/vorsbR2CKmhK34V02iP5lzZ05uUQhPJ1GsZKRg= Subject key identifier: D1:B7:A0:D8:9B:73:A6:05:17:F7:58:F9:26:94:D3:37:7A:46:E4:55 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3AC0 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0beg2JtzpgUX91j5JpTTN3pG5FU.roa Signing time: Fri 22 Aug 2025 08:47:43 +0000 ROA not before: Fri 22 Aug 2025 08:47:43 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 106.1.54.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15040 (0x3ac0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:43 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=D1B7A0D89B73A60517F758F92694D3377A46E455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7b:69:4c:55:b8:34:31:7c:ce:fa:60:91:5a: 91:c6:df:e3:71:0f:6a:82:20:c1:f4:a9:43:3a:14: 47:5a:93:48:48:ef:47:c4:ff:06:29:b2:8a:4e:5e: ac:34:52:6a:3b:5d:c8:df:74:7b:1a:8c:0d:31:f6: 75:88:0a:c3:94:7c:2b:04:c7:3d:2f:f2:62:48:7e: 18:09:44:cb:d5:17:f4:87:a3:f2:ed:01:41:a8:f9: 2a:05:08:6d:fa:a2:55:07:c4:5f:6b:4c:c4:9a:3b: cf:13:b6:5f:5a:15:c6:2b:18:de:fd:4f:99:cc:fe: 8c:e6:82:84:57:af:fc:f9:a8:e1:ca:86:35:14:9c: e0:35:b7:94:12:3e:c9:78:91:75:5c:f6:15:45:b5: d1:5b:a8:9a:83:db:8f:bb:1a:44:f9:e4:06:ca:44: 84:98:36:c7:b3:9c:f8:a6:c3:75:17:df:bb:7a:64: 9e:59:76:97:ab:0e:87:9d:70:51:fe:54:9e:d7:e0: f0:eb:32:69:25:08:eb:47:57:48:e1:e2:6f:25:eb: 88:3a:cd:5f:98:47:1f:91:29:df:e1:6c:54:31:e2: 8a:18:bd:2b:02:fb:10:ba:d5:e4:58:a0:f8:97:6e: aa:ae:7b:03:39:27:3f:b4:cc:e4:5d:00:ba:3c:91: ce:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:B7:A0:D8:9B:73:A6:05:17:F7:58:F9:26:94:D3:37:7A:46:E4:55 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0beg2JtzpgUX91j5JpTTN3pG5FU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.54.0/23 Signature Algorithm: sha256WithRSAEncryption 8f:bc:71:dc:d5:de:80:e6:e9:09:b8:e3:4a:8a:0c:4b:28:5b: d0:98:c2:81:d6:07:37:ee:67:a0:96:28:32:59:57:a0:b2:f5: 0c:28:3a:aa:7b:7e:41:58:c8:9d:31:0b:b8:e3:a7:f7:4b:fe: 07:db:72:bd:40:66:da:c3:7c:35:76:a8:f5:05:13:18:ec:67: 1c:74:13:71:94:95:b9:58:9a:0c:c5:c0:53:c8:be:e2:77:1f: a4:4b:11:34:ec:92:50:a1:7e:3e:c4:94:27:2e:de:cc:8e:d1: 71:fc:93:b7:7b:15:57:74:b9:f2:9b:55:54:45:3f:67:85:ef: 86:79:e6:6b:51:2f:b9:97:5d:84:6e:d6:e5:51:cf:3a:b1:76: ab:3c:af:28:70:18:f0:b9:2f:42:a2:ff:74:c6:59:5e:78:1e: 27:73:b5:41:5c:82:df:f2:73:8f:0c:bf:36:74:09:c7:70:b5: 98:d5:fa:3e:74:63:bf:1a:1d:ca:2d:eb:38:c7:ca:85:68:7e: 98:41:67:d9:ee:d9:43:fc:71:45:41:f1:e9:2a:cc:8c:14:a4: 04:7a:26:8a:c6:17:37:96:f5:b2:7c:ea:df:96:63:5a:f7:a2: e9:36:c2:1f:c7:f1:b6:09:e5:ff:d9:69:1f:4e:23:a4:df:ed: 45:7d:01:90 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOsAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3NDNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEQxQjdBMEQ4OUI3M0E2 MDUxN0Y3NThGOTI2OTREMzM3N0E0NkU0NTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCve2lMVbg0MXzO+mCRWpHG3+NxD2qCIMH0qUM6FEdak0hI70fE /wYpsopOXqw0Umo7XcjfdHsajA0x9nWICsOUfCsExz0v8mJIfhgJRMvVF/SHo/Lt AUGo+SoFCG36olUHxF9rTMSaO88Ttl9aFcYrGN79T5nM/ozmgoRXr/z5qOHKhjUU nOA1t5QSPsl4kXVc9hVFtdFbqJqD24+7GkT55AbKRISYNseznPimw3UX37t6ZJ5Z dperDoedcFH+VJ7X4PDrMmklCOtHV0jh4m8l64g6zV+YRx+RKd/hbFQx4ooYvSsC +xC61eRYoPiXbqquewM5Jz+0zORdALo8kc7jAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU0beg2JtzpgUX91j5JpTTN3pG5FUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzBiZWcySnR6cGdVWDkxajVK cFRUTjNwRzVGVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFq ATYwDQYJKoZIhvcNAQELBQADggEBAI+8cdzV3oDm6Qm440qKDEsoW9CYwoHWBzfu Z6CWKDJZV6Cy9QwoOqp7fkFYyJ0xC7jjp/dL/gfbcr1AZtrDfDV2qPUFExjsZxx0 E3GUlblYmgzFwFPIvuJ3H6RLETTsklChfj7ElCcu3syO0XH8k7d7FVd0ufKbVVRF P2eF74Z55mtRL7mXXYRu1uVRzzqxdqs8ryhwGPC5L0Ki/3TGWV54HidztUFcgt/y c48MvzZ0CcdwtZjV+j50Y78aHcot6zjHyoVofphBZ9nu2UP8cUVB8ekqzIwUpAR6 JorGFzeW9bJ86t+WY1r3ouk2wh/H8bYJ5f/ZaR9OI6Tf7UV9AZA= -----END CERTIFICATE-----Generated at Sun Aug 24 07:24:08 2025 by rpki-client