$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2SLNYWJNvO3wbCtZjYbUs1hLB44.roa File: 2SLNYWJNvO3wbCtZjYbUs1hLB44.roa (raw, json) Hash identifier: dfw/4kqDSDWi2HskJ1xuv2sSOo9f+x0B1PzPJQl/plg= Subject key identifier: D9:22:CD:61:62:4D:BC:ED:F0:6C:2B:59:8D:86:D4:B3:58:4B:07:8E Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3804 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2SLNYWJNvO3wbCtZjYbUs1hLB44.roa Signing time: Fri 22 Aug 2025 08:44:53 +0000 ROA not before: Fri 22 Aug 2025 08:44:53 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 106.1.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14340 (0x3804) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:44:53 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=D922CD61624DBCEDF06C2B598D86D4B3584B078E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:65:ad:0d:49:8e:e0:0b:03:4d:4a:f5:c0:fa: 65:d6:83:cf:60:d8:4d:ec:f6:12:b7:b4:f9:99:f9: cd:91:82:20:b8:4e:52:23:74:04:db:1b:f5:26:11: 04:1b:60:0e:6a:8c:6e:40:a1:e9:2a:61:ae:e6:69: b5:70:74:93:ae:0d:47:ac:e7:99:76:26:e6:85:12: 4a:ca:07:f7:78:81:15:bd:89:d8:ab:04:83:98:ed: 3f:09:3e:6c:c4:f7:9b:30:c3:ad:b0:d1:5f:3a:f0: 69:23:e8:a8:2a:c4:e6:8b:29:a5:24:5f:00:7c:ec: 26:78:68:4a:87:d4:bd:3d:68:b2:21:79:fd:6c:2c: 0b:3e:81:3a:90:8f:16:9f:13:7b:3d:33:31:83:96: 4b:d2:b9:2c:5b:92:d1:ec:e8:11:8d:a7:88:64:9e: 7a:5a:54:28:57:1c:86:1b:38:04:ef:56:f6:c4:71: 1d:c1:41:f6:54:6b:00:3c:e8:88:70:c0:d3:41:7e: c1:7d:55:e0:9f:39:cf:03:91:ad:e4:d0:77:86:46: c1:b5:4e:5f:50:d1:90:0b:9a:b1:75:b3:dc:d7:31: 78:d2:24:55:75:84:1c:02:f6:d9:ac:8e:62:94:f7: fb:66:23:95:d1:7d:eb:f8:4d:91:53:06:0d:d7:53: 06:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:22:CD:61:62:4D:BC:ED:F0:6C:2B:59:8D:86:D4:B3:58:4B:07:8E X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2SLNYWJNvO3wbCtZjYbUs1hLB44.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.47.0/24 Signature Algorithm: sha256WithRSAEncryption 12:6f:82:e6:cd:f8:26:83:ba:d9:44:ac:6d:b3:22:1f:8a:68: 74:d4:fe:c2:2b:1c:95:b0:2d:4f:36:1c:e1:de:35:73:e7:8a: 4a:b8:c5:17:75:77:b0:b7:77:c7:c1:2f:93:7a:66:3d:7f:5b: 75:27:9e:fd:56:83:0a:e9:d7:59:92:0a:a1:9e:99:9d:65:d9: 74:e9:6a:a8:28:fc:ed:16:b6:fa:37:8c:07:e6:86:45:15:a6: 13:b2:c5:ae:4b:19:4b:83:11:0c:cd:11:55:25:28:65:5d:6e: 16:38:50:bc:e9:f7:5b:02:8c:43:28:8c:76:ab:04:71:d8:24: 57:86:4f:6e:49:62:f5:5d:a2:8c:fb:a4:ba:11:aa:8a:aa:28: 28:68:81:4d:26:c0:75:95:ef:f0:7a:a3:21:b3:02:d1:2d:9b: 82:02:71:be:6a:54:61:00:9f:7e:d1:73:0e:4e:f4:a5:d0:cb: be:51:e7:67:a0:96:02:be:da:95:b0:e6:b1:85:e1:93:f5:eb: 1d:54:29:3f:27:20:78:e8:f9:d8:c1:ca:7d:7e:82:2f:53:ce: e9:9d:6c:d6:df:00:52:ab:e2:83:1b:51:98:01:f0:64:7f:0c: 37:4d:16:2d:2f:e9:25:e6:0f:46:24:fd:c7:ef:7a:af:3a:1f: 5f:e9:8c:32 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOAQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ0NTNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEQ5MjJDRDYxNjI0REJD RURGMDZDMkI1OThEODZENEIzNTg0QjA3OEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFZa0NSY7gCwNNSvXA+mXWg89g2E3s9hK3tPmZ+c2RgiC4TlIj dATbG/UmEQQbYA5qjG5AoekqYa7mabVwdJOuDUes55l2JuaFEkrKB/d4gRW9idir BIOY7T8JPmzE95sww62w0V868Gkj6KgqxOaLKaUkXwB87CZ4aEqH1L09aLIhef1s LAs+gTqQjxafE3s9MzGDlkvSuSxbktHs6BGNp4hknnpaVChXHIYbOATvVvbEcR3B QfZUawA86IhwwNNBfsF9VeCfOc8Dka3k0HeGRsG1Tl9Q0ZALmrF1s9zXMXjSJFV1 hBwC9tmsjmKU9/tmI5XRfev4TZFTBg3XUwZ1AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU2SLNYWJNvO3wbCtZjYbUs1hLB44wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzJTTE5ZV0pOdk8zd2JDdFpq WWJVczFoTEI0NC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq AS8wDQYJKoZIhvcNAQELBQADggEBABJvgubN+CaDutlErG2zIh+KaHTU/sIrHJWw LU82HOHeNXPnikq4xRd1d7C3d8fBL5N6Zj1/W3Unnv1Wgwrp11mSCqGemZ1l2XTp aqgo/O0Wtvo3jAfmhkUVphOyxa5LGUuDEQzNEVUlKGVdbhY4ULzp91sCjEMojHar BHHYJFeGT25JYvVdooz7pLoRqoqqKChogU0mwHWV7/B6oyGzAtEtm4ICcb5qVGEA n37Rcw5O9KXQy75R52eglgK+2pWw5rGF4ZP16x1UKT8nIHjo+djByn1+gi9Tzumd bNbfAFKr4oMbUZgB8GR/DDdNFi0v6SXmD0Yk/cfveq86H1/pjDI= -----END CERTIFICATE-----Generated at Sun Aug 24 07:28:25 2025 by rpki-client