$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1MfbfnJRr6zF9ukLvCWtOUnWUk8.roa File: 1MfbfnJRr6zF9ukLvCWtOUnWUk8.roa (raw, json) Hash identifier: LAozNl+nIawAMX3FxyH2atZo2MLflW7X0PPTIc4cgSU= Subject key identifier: D4:C7:DB:7E:72:51:AF:AC:C5:F6:E9:0B:BC:25:AD:39:49:D6:52:4F Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3915 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1MfbfnJRr6zF9ukLvCWtOUnWUk8.roa Signing time: Fri 22 Aug 2025 08:45:56 +0000 ROA not before: Fri 22 Aug 2025 08:45:56 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.194.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14613 (0x3915) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:56 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=D4C7DB7E7251AFACC5F6E90BBC25AD3949D6524F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5b:44:b5:79:2d:17:20:f1:a0:de:36:53:76: 7a:a7:1d:9d:d3:19:50:a2:61:a4:8b:f6:ae:9f:db: ef:b3:aa:56:fb:57:b4:f6:bf:c6:41:45:53:3f:1a: a6:96:90:9b:ef:6c:20:b8:c5:c6:82:bd:a5:b1:2f: 1f:bc:95:05:bc:83:e7:96:69:27:60:ed:0c:df:95: 1f:16:09:64:f5:21:9e:83:c3:ae:2c:1b:24:dd:45: 4e:7c:33:31:c1:82:36:7d:87:43:49:ab:f1:18:c6: 68:0b:9c:29:d0:74:44:5c:02:7a:72:ed:e4:ec:da: f3:0b:6b:ca:21:a2:f3:8c:8f:66:c0:1b:be:bc:f0: f3:df:4b:20:8c:56:71:dd:f1:8a:fa:c7:a2:32:d8: 89:55:d9:d8:6a:b2:8e:41:f5:39:2a:7e:8f:56:f7: 64:3a:ae:ec:9d:9c:50:68:2c:77:a6:cb:33:4a:b6: d3:69:ed:0b:99:c4:a8:5e:41:38:07:fd:13:69:00: 0d:f9:ed:d4:c4:95:ba:2e:8f:ae:13:dc:08:e7:43: ad:36:e0:71:f2:e5:ae:ae:f0:be:8c:45:14:7c:f8: 9e:e0:32:58:32:de:fa:a1:d4:34:7c:00:00:95:70: e2:47:06:30:4d:ef:0d:ef:75:44:45:0d:d0:48:48: 3a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:C7:DB:7E:72:51:AF:AC:C5:F6:E9:0B:BC:25:AD:39:49:D6:52:4F X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1MfbfnJRr6zF9ukLvCWtOUnWUk8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.4.0/22 Signature Algorithm: sha256WithRSAEncryption 67:9a:8b:a0:91:40:92:f2:78:8b:c9:90:db:cf:3a:0e:ed:8b: ba:33:79:d8:32:3f:64:64:fc:e9:21:64:dc:71:41:a1:7c:4d: f3:81:0c:0f:04:74:da:a9:7e:85:0f:e8:72:f1:65:23:b5:b8: bd:92:3b:63:bc:bf:47:6b:ef:fb:1e:3f:97:e5:da:75:33:6d: 5e:3f:96:11:91:05:7f:8a:ae:07:c2:c6:74:bb:cb:6b:85:63: 29:ee:43:f1:37:79:da:ed:9a:7f:4e:6c:e3:92:44:8e:fe:08: 8f:64:f6:ee:63:b4:b6:ac:90:67:5d:38:ce:69:04:9b:87:4e: a4:6c:9b:76:91:32:b4:a1:de:f6:7e:da:14:36:97:cf:b6:dd: cb:94:35:96:fc:be:b2:8c:46:9d:32:a4:16:af:6d:d8:ac:8e: 48:4a:d8:e2:2e:d6:e3:28:9f:d8:1c:f7:7d:da:28:51:7a:92: 22:a3:db:fe:69:dc:c1:73:65:9b:4b:b4:5a:dd:2f:1b:c4:79: f1:8b:ae:17:8a:35:c6:90:9f:86:cd:21:2d:9a:b1:93:2e:f6: 93:33:cf:f4:7c:3d:f0:65:ae:04:6e:55:d2:21:d7:58:c6:3c: 9f:fd:cd:8a:f6:40:10:96:c3:c6:4f:8f:91:bc:0b:fd:4b:c0: ae:03:e2:96 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICORUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1NTZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEQ0QzdEQjdFNzI1MUFG QUNDNUY2RTkwQkJDMjVBRDM5NDlENjUyNEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqW0S1eS0XIPGg3jZTdnqnHZ3TGVCiYaSL9q6f2++zqlb7V7T2 v8ZBRVM/GqaWkJvvbCC4xcaCvaWxLx+8lQW8g+eWaSdg7QzflR8WCWT1IZ6Dw64s GyTdRU58MzHBgjZ9h0NJq/EYxmgLnCnQdERcAnpy7eTs2vMLa8ohovOMj2bAG768 8PPfSyCMVnHd8Yr6x6Iy2IlV2dhqso5B9Tkqfo9W92Q6ruydnFBoLHemyzNKttNp 7QuZxKheQTgH/RNpAA357dTElbouj64T3AjnQ6024HHy5a6u8L6MRRR8+J7gMlgy 3vqh1DR8AACVcOJHBjBN7w3vdURFDdBISDpTAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU1MfbfnJRr6zF9ukLvCWtOUnWUk8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzFNZmJmbkpScjZ6Rjl1a0x2 Q1d0T1VuV1VrOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wgQwDQYJKoZIhvcNAQELBQADggEBAGeai6CRQJLyeIvJkNvPOg7ti7ozedgyP2Rk /OkhZNxxQaF8TfOBDA8EdNqpfoUP6HLxZSO1uL2SO2O8v0dr7/seP5fl2nUzbV4/ lhGRBX+KrgfCxnS7y2uFYynuQ/E3edrtmn9ObOOSRI7+CI9k9u5jtLaskGddOM5p BJuHTqRsm3aRMrSh3vZ+2hQ2l8+23cuUNZb8vrKMRp0ypBavbdisjkhK2OIu1uMo n9gc933aKFF6kiKj2/5p3MFzZZtLtFrdLxvEefGLrheKNcaQn4bNIS2asZMu9pMz z/R8PfBlrgRuVdIh11jGPJ/9zYr2QBCWw8ZPj5G8C/1LwK4D4pY= -----END CERTIFICATE-----Generated at Sun Aug 24 07:25:23 2025 by rpki-client