$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1Vh2ZERzAVUtNkEYlGxGC9vrYe8.roa File: 1Vh2ZERzAVUtNkEYlGxGC9vrYe8.roa (raw, json) Hash identifier: 53Z9IIedf1Ea3eK/+yMIT3V5/CKtD2HngsUuw/4zQSA= Subject key identifier: D5:58:76:64:44:73:01:55:2D:36:41:18:94:6C:46:0B:DB:EB:61:EF Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3A96 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1Vh2ZERzAVUtNkEYlGxGC9vrYe8.roa Signing time: Fri 22 Aug 2025 08:47:31 +0000 ROA not before: Fri 22 Aug 2025 08:47:31 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.194.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14998 (0x3a96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:31 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=D5587664447301552D364118946C460BDBEB61EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:71:8b:81:d3:27:a2:0c:ba:9c:45:33:1d:fd: 0b:a8:23:15:79:f5:78:13:03:69:51:3c:c0:c1:27: f5:8e:db:58:97:3b:17:91:e6:2a:82:d6:23:49:7f: 74:fd:10:75:46:fe:12:20:93:5c:ab:62:c9:fe:33: 85:11:77:5b:d3:31:22:8a:50:24:ce:2c:58:b2:ae: dc:5a:ba:3e:f1:9a:8d:f1:b7:81:1e:ec:bd:78:f3: 3c:f5:f5:b3:72:d7:ba:f0:98:68:54:dc:b5:38:b0: c2:c4:ce:1e:b0:2b:8d:d8:c7:6f:99:91:f4:25:ba: 96:59:c5:3b:3a:b5:58:27:d8:e6:54:50:49:cc:56: f0:44:91:50:21:08:37:64:5f:ae:d7:1f:e9:72:12: 70:01:15:52:5e:44:4d:37:c5:bb:cb:b2:86:39:d9: 5f:87:81:27:fe:06:94:e1:0f:2f:c2:fc:d1:91:a0: 93:ae:57:86:ff:94:d6:d6:ac:e3:2e:24:a2:c0:1c: f3:b5:46:1d:57:82:84:29:67:3d:a3:74:5a:af:a8: a9:8b:d5:29:5b:b4:37:e1:53:b3:99:a7:e4:64:44: 57:0e:e3:c1:15:c0:6a:08:91:65:f7:0a:54:27:7b: c8:cf:69:6b:40:76:f6:cc:5e:ca:d6:f4:ac:fe:90: bf:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:58:76:64:44:73:01:55:2D:36:41:18:94:6C:46:0B:DB:EB:61:EF X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1Vh2ZERzAVUtNkEYlGxGC9vrYe8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.80.0/22 Signature Algorithm: sha256WithRSAEncryption 19:cf:81:49:19:1a:1a:7b:77:48:3d:e7:1c:c3:bd:73:c2:6a: 97:49:49:75:85:c6:06:cb:4e:5e:07:a2:f4:59:f4:b4:45:0d: 28:05:cc:4c:5e:e7:d6:14:f6:a7:43:7c:80:87:0b:f8:02:c8: a1:0d:46:da:3b:b8:36:f9:2d:3d:f4:c5:f9:b8:e5:df:24:d1: 60:39:22:84:20:47:1e:79:4a:b3:82:c0:3f:2c:96:6c:7e:1d: 2c:31:fc:b9:27:7e:eb:be:e0:be:69:0f:3b:3a:24:69:70:9e: fb:ae:3f:b3:b3:f2:89:52:d1:6d:23:ad:1e:ea:12:db:9e:3b: 4c:3b:bc:36:05:62:ab:de:7e:49:8b:a1:d1:60:bf:66:8a:4d: c6:84:5a:aa:2b:a6:17:07:ea:46:4c:42:56:a7:ca:1b:9d:6c: a0:14:94:e6:d2:05:7c:72:08:f6:af:a7:4b:c5:d9:d5:a0:6e: ab:2b:30:15:2c:dd:8b:d1:02:7f:7c:bf:f1:97:1a:ee:15:13: da:41:20:9b:f6:c1:1d:a8:08:f7:1e:89:98:63:37:2b:4b:72: 44:1b:2c:c4:70:00:f3:a0:f5:81:6f:6e:8c:f0:1e:89:88:14: 27:99:80:68:b2:d1:c7:73:81:51:73:01:2c:f7:9d:8b:c0:da: 8b:1f:e3:16 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOpYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3MzFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEQ1NTg3NjY0NDQ3MzAx NTUyRDM2NDExODk0NkM0NjBCREJFQjYxRUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDkcYuB0yeiDLqcRTMd/QuoIxV59XgTA2lRPMDBJ/WO21iXOxeR 5iqC1iNJf3T9EHVG/hIgk1yrYsn+M4URd1vTMSKKUCTOLFiyrtxauj7xmo3xt4Ee 7L148zz19bNy17rwmGhU3LU4sMLEzh6wK43Yx2+ZkfQlupZZxTs6tVgn2OZUUEnM VvBEkVAhCDdkX67XH+lyEnABFVJeRE03xbvLsoY52V+HgSf+BpThDy/C/NGRoJOu V4b/lNbWrOMuJKLAHPO1Rh1XgoQpZz2jdFqvqKmL1SlbtDfhU7OZp+RkRFcO48EV wGoIkWX3ClQne8jPaWtAdvbMXsrW9Kz+kL9HAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU1Vh2ZERzAVUtNkEYlGxGC9vrYe8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzFWaDJaRVJ6QVZVdE5rRVls R3hHQzl2clllOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wlAwDQYJKoZIhvcNAQELBQADggEBABnPgUkZGhp7d0g95xzDvXPCapdJSXWFxgbL Tl4HovRZ9LRFDSgFzExe59YU9qdDfICHC/gCyKENRto7uDb5LT30xfm45d8k0WA5 IoQgRx55SrOCwD8slmx+HSwx/Lknfuu+4L5pDzs6JGlwnvuuP7Oz8olS0W0jrR7q EtueO0w7vDYFYqvefkmLodFgv2aKTcaEWqorphcH6kZMQlanyhudbKAUlObSBXxy CPavp0vF2dWgbqsrMBUs3YvRAn98v/GXGu4VE9pBIJv2wR2oCPceiZhjNytLckQb LMRwAPOg9YFvbozwHomIFCeZgGiy0cdzgVFzASz3nYvA2osf4xY= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:24 2025 by rpki-client