$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2lKOMMGH_DChUPn1bmMEapkct5E.roa File: 2lKOMMGH_DChUPn1bmMEapkct5E.roa (raw, json) Hash identifier: 9i6ikPIwryzy5MISpqOUJnM8eq7VlsNTraHZ5AJGcMk= Subject key identifier: DA:52:8E:30:C1:87:FC:30:A1:50:F9:F5:6E:63:04:6A:99:1C:B7:91 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3A5D Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2lKOMMGH_DChUPn1bmMEapkct5E.roa Signing time: Fri 22 Aug 2025 08:47:16 +0000 ROA not before: Fri 22 Aug 2025 08:47:16 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.192.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14941 (0x3a5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:16 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=DA528E30C187FC30A150F9F56E63046A991CB791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:62:7b:60:63:e9:84:ac:29:da:36:b9:b3:66: 30:9f:69:97:34:fe:76:3f:46:75:73:f5:22:77:89: fb:50:38:56:8e:ca:29:f1:35:c3:2d:57:32:58:ca: e6:39:1e:57:24:30:c7:24:1a:72:aa:75:a1:f9:11: a6:04:16:f3:08:1e:d9:4e:ad:2c:c7:76:fe:77:de: 4d:b0:59:24:cf:40:c0:cf:9e:fd:b5:8d:3d:02:8b: 78:0a:2d:7b:6b:af:3e:43:8c:d8:25:ad:66:5c:6e: 9e:b9:dd:dc:bf:ce:ae:f1:68:4f:d2:cc:d4:3d:ea: 49:26:11:e7:53:41:0d:02:93:98:a6:2c:7d:d9:ae: 1d:da:be:4f:88:d0:31:84:a6:d4:c9:2c:78:22:41: ac:06:3c:d9:1f:0b:5c:8d:41:b5:c0:c4:d2:b0:68: 40:5e:9d:27:13:25:f0:b4:96:80:d4:dc:0f:f4:70: b5:7a:a6:3c:54:b2:fc:97:27:3d:6a:87:a4:da:23: f9:c6:83:d7:fd:47:eb:11:b2:f7:c1:9f:44:53:c1: 0b:aa:16:3c:d9:6f:59:75:73:95:a1:57:7d:02:2b: 86:a6:b9:4e:ea:1b:99:57:42:fe:e3:7d:7f:69:96: f2:42:3d:90:70:12:3b:51:ec:1a:9f:83:fc:6c:4a: 67:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:52:8E:30:C1:87:FC:30:A1:50:F9:F5:6E:63:04:6A:99:1C:B7:91 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2lKOMMGH_DChUPn1bmMEapkct5E.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.96.0/22 Signature Algorithm: sha256WithRSAEncryption 4f:f7:43:e6:75:ad:4c:4a:93:03:20:a8:1c:ad:22:46:ab:9a: 67:28:4e:d8:55:c1:a5:42:ac:d8:23:e1:d7:32:71:d3:48:7e: dd:1c:84:10:e9:58:51:1c:29:50:60:cf:a2:fe:55:14:48:df: 75:d1:53:bc:76:d9:4c:0e:6c:8a:85:ed:30:f6:dd:3b:41:a7: 29:f9:2f:47:c0:b4:3d:b6:d0:33:44:df:8b:0a:a3:c4:d9:34: 3c:61:ce:ad:1f:95:61:c6:ac:8f:e7:56:57:b9:41:bf:d8:d9: 4c:75:06:1c:bf:17:7f:96:0b:9f:d8:6d:ff:4b:b2:a1:b3:42: ca:26:df:f7:5d:93:f8:4d:82:62:c5:7d:73:ad:57:87:75:c8: e5:87:03:b8:93:4d:b5:d7:cd:26:d6:8e:a9:43:a7:2c:a0:70: de:b6:fd:0e:7f:92:6d:5a:26:e8:5d:ec:6a:18:c8:d0:8c:1c: fe:4b:61:25:7b:a4:df:97:3d:fd:6e:63:b5:38:23:21:60:4a: ed:14:db:15:43:12:13:e5:99:88:c3:6d:47:af:c6:7a:4b:4b: d6:c8:50:3a:3e:75:07:18:02:05:fc:7d:3a:b9:c9:c4:15:a5: 6e:02:9b:d9:59:f1:7e:4e:7c:b8:02:0f:df:b0:11:f5:ac:25: ba:4a:e4:26 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOl0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3MTZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKERBNTI4RTMwQzE4N0ZD MzBBMTUwRjlGNTZFNjMwNDZBOTkxQ0I3OTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzYntgY+mErCnaNrmzZjCfaZc0/nY/RnVz9SJ3iftQOFaOyinx NcMtVzJYyuY5HlckMMckGnKqdaH5EaYEFvMIHtlOrSzHdv533k2wWSTPQMDPnv21 jT0Ci3gKLXtrrz5DjNglrWZcbp653dy/zq7xaE/SzNQ96kkmEedTQQ0Ck5imLH3Z rh3avk+I0DGEptTJLHgiQawGPNkfC1yNQbXAxNKwaEBenScTJfC0loDU3A/0cLV6 pjxUsvyXJz1qh6TaI/nGg9f9R+sRsvfBn0RTwQuqFjzZb1l1c5WhV30CK4amuU7q G5lXQv7jfX9plvJCPZBwEjtR7Bqfg/xsSmeBAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU2lKOMMGH/DChUPn1bmMEapkct5EwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzJsS09NTUdIX0RDaFVQbjFi bU1FYXBrY3Q1RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wGAwDQYJKoZIhvcNAQELBQADggEBAE/3Q+Z1rUxKkwMgqBytIkarmmcoTthVwaVC rNgj4dcycdNIft0chBDpWFEcKVBgz6L+VRRI33XRU7x22UwObIqF7TD23TtBpyn5 L0fAtD220DNE34sKo8TZNDxhzq0flWHGrI/nVle5Qb/Y2Ux1Bhy/F3+WC5/Ybf9L sqGzQsom3/ddk/hNgmLFfXOtV4d1yOWHA7iTTbXXzSbWjqlDpyygcN62/Q5/km1a Juhd7GoYyNCMHP5LYSV7pN+XPf1uY7U4IyFgSu0U2xVDEhPlmYjDbUevxnpLS9bI UDo+dQcYAgX8fTq5ycQVpW4Cm9lZ8X5OfLgCD9+wEfWsJbpK5CY= -----END CERTIFICATE-----Generated at Sun Aug 24 07:29:32 2025 by rpki-client