$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0weC9TEMFNXlNH-gzyq2ChF2GVs.roa File: 0weC9TEMFNXlNH-gzyq2ChF2GVs.roa (raw, json) Hash identifier: uwOli2Gt6OgtM/D+nEDwBOSklyIDc3fCi9k4JGN8NQ8= Subject key identifier: D3:07:82:F5:31:0C:14:D5:E5:34:7F:A0:CF:2A:B6:0A:11:76:19:5B Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3ADE Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0weC9TEMFNXlNH-gzyq2ChF2GVs.roa Signing time: Fri 22 Aug 2025 08:47:51 +0000 ROA not before: Fri 22 Aug 2025 08:47:51 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.195.224.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15070 (0x3ade) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:51 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=D30782F5310C14D5E5347FA0CF2AB60A1176195B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a6:99:c8:f9:74:a8:bf:e5:86:ca:9b:ce:9c: 79:4d:bf:bf:ab:a7:f9:0f:25:1a:bf:49:3c:a6:a5: 03:26:19:a1:c1:21:c3:09:b0:5d:68:25:94:1a:e7: d7:f9:50:b8:37:75:ba:2a:4d:e5:0c:0e:03:2e:91: fc:b9:57:d3:b5:b7:69:2d:cb:fa:df:65:56:b7:83: 32:de:79:7f:ff:3e:e8:07:0c:6a:b3:9e:4b:db:12: fb:6a:b2:37:c9:7e:ca:59:6e:33:b3:59:75:06:88: 82:b8:d7:9d:d1:06:10:7f:6c:31:9d:8d:86:fb:32: 70:61:8b:69:d3:69:d2:be:4b:20:71:04:c2:88:f8: 50:5c:84:aa:8f:8f:d1:0c:83:0b:d3:a3:22:98:fa: 61:f4:1c:0d:1f:dd:1d:4e:44:01:a0:fb:ee:0a:1f: 5a:6b:df:8e:82:11:51:43:f9:8b:b0:af:d7:06:9e: 09:da:d4:ce:80:dc:a4:c2:08:21:c4:ba:d2:b8:93: c3:b9:88:75:f5:e2:9d:c3:96:87:76:89:8d:40:11: fe:4a:85:ca:14:fe:1a:12:db:1a:02:f7:d1:bd:14: de:b1:86:7f:c6:d4:2a:df:50:80:a0:1e:6c:1b:6b: 1f:20:6f:af:4f:22:28:d5:ec:48:89:55:15:a4:b2: 32:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:07:82:F5:31:0C:14:D5:E5:34:7F:A0:CF:2A:B6:0A:11:76:19:5B X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0weC9TEMFNXlNH-gzyq2ChF2GVs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.224.0/21 Signature Algorithm: sha256WithRSAEncryption 95:d9:50:fd:7e:5e:29:41:5a:00:92:fc:46:2d:3d:c1:b5:67: 7c:36:2a:8c:fc:27:6e:98:02:e7:f2:5e:12:7e:93:a9:ce:be: c9:99:aa:af:86:6b:46:1b:f3:67:70:09:01:ac:aa:35:fb:63: 84:5c:62:9e:0b:fa:0b:6e:be:6b:3e:8a:2d:b1:d4:80:e4:86: 6f:98:4e:09:ee:8e:93:dd:fc:83:af:1a:1d:8f:0a:6e:7e:c3: 3b:ca:a2:7c:2c:80:58:67:52:4b:ff:25:13:26:97:7b:20:8e: 0e:60:ac:5f:9e:20:7c:64:f0:33:a1:9a:c0:69:bb:68:c2:0f: 0c:34:03:6b:f3:67:db:48:b0:69:1e:a5:f3:62:3c:e2:fa:f9: ef:9c:15:86:89:22:df:99:d7:79:c3:c7:8a:ef:36:e4:9d:42: ce:af:26:52:88:e9:a4:55:b6:8b:f7:55:01:47:a5:7f:84:d4: c1:0e:d1:b9:79:6d:10:9d:60:45:07:e7:f6:84:04:b6:ed:95: 09:6d:6a:be:e4:02:c0:e7:43:89:fd:ce:32:41:8e:e5:fa:a8: 09:49:4d:5a:41:5d:29:66:6c:9c:03:8e:e1:44:ef:63:f4:85: 08:b7:80:06:e2:62:5d:37:8e:b9:5a:39:12:91:06:90:20:db: f6:ac:87:da -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOt4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3NTFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEQzMDc4MkY1MzEwQzE0 RDVFNTM0N0ZBMENGMkFCNjBBMTE3NjE5NUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrppnI+XSov+WGypvOnHlNv7+rp/kPJRq/STympQMmGaHBIcMJ sF1oJZQa59f5ULg3dboqTeUMDgMukfy5V9O1t2kty/rfZVa3gzLeeX//PugHDGqz nkvbEvtqsjfJfspZbjOzWXUGiIK4153RBhB/bDGdjYb7MnBhi2nTadK+SyBxBMKI +FBchKqPj9EMgwvToyKY+mH0HA0f3R1ORAGg++4KH1pr346CEVFD+Yuwr9cGngna 1M6A3KTCCCHEutK4k8O5iHX14p3Dlod2iY1AEf5KhcoU/hoS2xoC99G9FN6xhn/G 1CrfUICgHmwbax8gb69PIijV7EiJVRWksjJZAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU0weC9TEMFNXlNH+gzyq2ChF2GVswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzB3ZUM5VEVNRk5YbE5ILWd6 eXEyQ2hGMkdWcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 w+AwDQYJKoZIhvcNAQELBQADggEBAJXZUP1+XilBWgCS/EYtPcG1Z3w2Koz8J26Y AufyXhJ+k6nOvsmZqq+Ga0Yb82dwCQGsqjX7Y4RcYp4L+gtuvms+ii2x1IDkhm+Y TgnujpPd/IOvGh2PCm5+wzvKonwsgFhnUkv/JRMml3sgjg5grF+eIHxk8DOhmsBp u2jCDww0A2vzZ9tIsGkepfNiPOL6+e+cFYaJIt+Z13nDx4rvNuSdQs6vJlKI6aRV tov3VQFHpX+E1MEO0bl5bRCdYEUH5/aEBLbtlQltar7kAsDnQ4n9zjJBjuX6qAlJ TVpBXSlmbJwDjuFE72P0hQi3gAbiYl03jrlaORKRBpAg2/ash9o= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:16 2025 by rpki-client