$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2ZFDXyHKsc2oDuWFf5X9Sk1oG4I.roa File: 2ZFDXyHKsc2oDuWFf5X9Sk1oG4I.roa (raw, json) Hash identifier: MjIKYgyZQjNRPVsGUsQxp8HducMHIdLoEUoSrCT+QTA= Subject key identifier: D9:91:43:5F:21:CA:B1:CD:A8:0E:E5:85:7F:95:FD:4A:4D:68:1B:82 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 393A Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2ZFDXyHKsc2oDuWFf5X9Sk1oG4I.roa Signing time: Fri 22 Aug 2025 08:46:05 +0000 ROA not before: Fri 22 Aug 2025 08:46:05 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.192.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14650 (0x393a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:05 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=D991435F21CAB1CDA80EE5857F95FD4A4D681B82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c1:95:3f:d8:2c:3f:c5:ec:d3:57:3d:5a:80: 43:01:7a:db:b4:f0:77:96:bf:8d:ab:1d:fc:8e:53: 62:ac:bb:33:27:59:a8:f3:63:fc:c7:73:50:28:7a: 06:7e:43:8a:a0:ad:6c:31:40:dc:d3:6b:5e:ee:6a: 6a:42:d0:34:f3:00:42:16:34:cd:ac:99:ee:33:01: 06:88:64:8b:52:b3:18:10:10:e4:63:d7:af:29:f5: 6b:c7:f9:79:ba:07:04:b4:2e:ce:c5:6e:49:d3:4b: 6b:1f:9e:e4:36:09:09:22:ae:54:96:1d:fe:33:09: ac:ba:67:a7:10:dc:18:c2:8b:9a:84:17:d2:0c:08: 4c:e2:82:18:44:09:68:c8:35:70:d4:bb:7a:e1:df: d2:64:51:ec:71:95:a6:20:8c:9d:e8:9f:f3:b8:f6: ab:00:13:e1:62:55:a7:aa:66:e6:3a:2b:9d:70:fb: c6:fc:e3:d5:57:37:05:db:bc:80:94:75:b7:89:ae: 45:dc:1e:f0:e7:1e:14:f5:2c:79:15:6e:eb:a7:31: 7d:90:76:a2:f5:18:06:53:36:85:33:4e:ae:5e:3e: 0d:31:b1:f2:a2:bd:9f:c5:b0:76:72:31:e8:ba:0f: 93:e7:e6:ef:4d:16:39:e3:a4:c2:98:54:b7:00:2a: b7:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:91:43:5F:21:CA:B1:CD:A8:0E:E5:85:7F:95:FD:4A:4D:68:1B:82 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2ZFDXyHKsc2oDuWFf5X9Sk1oG4I.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.252.0/22 Signature Algorithm: sha256WithRSAEncryption 40:15:ba:95:8d:c7:18:68:78:8e:4f:db:87:42:d6:a7:c2:5e: c7:cb:80:e8:b1:a5:63:d8:ba:28:35:74:8c:41:20:8f:0a:32: eb:be:f1:cb:c8:1a:e6:bb:d0:7d:4f:a1:d6:b5:38:bb:c3:d7: 6a:23:93:3f:ca:43:3f:65:19:2d:42:c7:00:d1:11:18:ad:cc: e8:7b:8c:75:f6:ae:69:34:29:2a:94:f8:ee:12:49:af:83:a4: ea:34:72:7b:f0:2a:94:a0:1f:93:8a:76:4e:99:95:24:dd:a2: a9:29:de:bd:5c:3a:ce:55:e7:fa:8d:df:9d:15:27:42:90:ec: 5d:b8:23:5f:63:ce:bd:d7:65:80:dd:b9:43:02:71:dd:b3:47: 2f:4c:dc:0e:27:84:57:5e:a7:42:ca:63:3e:c0:13:12:bb:52: dc:03:9a:8c:6f:8c:40:0b:88:79:14:06:a2:f5:00:2e:43:be: 1a:f9:6d:8a:84:52:99:5f:3f:a1:e9:c2:e7:1a:11:15:07:42: 8e:35:3d:ce:c0:c7:26:19:f8:d1:05:37:81:02:a1:ac:91:3d: 1f:3f:ff:b9:6d:17:65:ab:b7:c2:ae:ec:a3:49:85:d6:3a:1d: f4:19:91:c9:77:71:52:cc:2c:46:c4:19:06:88:cd:d4:86:68: b9:fb:32:35 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOTowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2MDVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEQ5OTE0MzVGMjFDQUIx Q0RBODBFRTU4NTdGOTVGRDRBNEQ2ODFCODIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtwZU/2Cw/xezTVz1agEMBetu08HeWv42rHfyOU2KsuzMnWajz Y/zHc1AoegZ+Q4qgrWwxQNzTa17uampC0DTzAEIWNM2sme4zAQaIZItSsxgQEORj 168p9WvH+Xm6BwS0Ls7FbknTS2sfnuQ2CQkirlSWHf4zCay6Z6cQ3BjCi5qEF9IM CEzighhECWjINXDUu3rh39JkUexxlaYgjJ3on/O49qsAE+FiVaeqZuY6K51w+8b8 49VXNwXbvICUdbeJrkXcHvDnHhT1LHkVbuunMX2QdqL1GAZTNoUzTq5ePg0xsfKi vZ/FsHZyMei6D5Pn5u9NFjnjpMKYVLcAKrftAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU2ZFDXyHKsc2oDuWFf5X9Sk1oG4IwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzJaRkRYeUhLc2Myb0R1V0Zm NVg5U2sxb0c0SS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wPwwDQYJKoZIhvcNAQELBQADggEBAEAVupWNxxhoeI5P24dC1qfCXsfLgOixpWPY uig1dIxBII8KMuu+8cvIGua70H1Poda1OLvD12ojkz/KQz9lGS1CxwDRERitzOh7 jHX2rmk0KSqU+O4SSa+DpOo0cnvwKpSgH5OKdk6ZlSTdoqkp3r1cOs5V5/qN350V J0KQ7F24I19jzr3XZYDduUMCcd2zRy9M3A4nhFdep0LKYz7AExK7UtwDmoxvjEAL iHkUBqL1AC5Dvhr5bYqEUplfP6HpwucaERUHQo41Pc7AxyYZ+NEFN4ECoayRPR8/ /7ltF2Wrt8Ku7KNJhdY6HfQZkcl3cVLMLEbEGQaIzdSGaLn7MjU= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:54 2025 by rpki-client