$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3QSarfce0XPEwJNfeU5lrnTH1OE.roa File: 3QSarfce0XPEwJNfeU5lrnTH1OE.roa (raw, json) Hash identifier: i7qxOM0N84rSEMSD5O6q/vQbt+MaIVqI/yP6gXSIjAE= Subject key identifier: DD:04:9A:AD:F7:1E:D1:73:C4:C0:93:5F:79:4E:65:AE:74:C7:D4:E1 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3AC8 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3QSarfce0XPEwJNfeU5lrnTH1OE.roa Signing time: Fri 22 Aug 2025 08:47:46 +0000 ROA not before: Fri 22 Aug 2025 08:47:46 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.195.8.64/26 maxlen: 26 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15048 (0x3ac8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:46 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=DD049AADF71ED173C4C0935F794E65AE74C7D4E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0d:6d:af:35:26:4a:fd:29:20:b0:76:54:dd: ba:a0:78:0c:6c:e1:db:a0:5c:14:b9:1d:27:6a:15: ec:ac:04:11:2e:73:91:f2:74:cf:db:81:89:5a:2e: ff:2e:10:09:3a:de:5c:85:a2:b6:20:db:2f:fc:d5: bf:0b:b7:00:2d:a7:82:7f:3a:a8:52:e0:3f:97:1f: f3:19:09:90:18:0a:aa:4b:86:b8:65:31:df:68:fc: c3:ff:27:04:ed:67:22:2c:c5:14:eb:8c:da:81:e9: b1:44:bb:25:30:ea:cb:ef:50:99:fc:ce:4f:4a:b6: 23:fa:58:a9:38:ed:d3:d3:ca:ba:5b:66:68:57:94: c4:5f:0f:e6:1a:82:d8:69:fd:ad:d5:7a:7e:82:d8: e4:52:d4:bc:36:a3:02:68:23:f7:0c:a8:bb:b8:e1: 9f:c7:5a:17:8d:3f:cb:3f:b7:ab:67:10:50:f3:c3: a2:ce:23:37:5e:f2:0c:73:b2:e4:1d:6b:37:87:b0: 21:75:67:c8:d9:1f:fb:59:b6:df:e3:25:b4:8b:6e: c6:7e:93:d4:57:97:ef:46:5c:58:27:ed:19:b0:5f: 9d:c7:4a:29:e2:ce:66:84:d7:16:b6:9e:bb:24:f1: 28:f2:35:f6:19:68:a3:75:41:93:46:2c:0b:4a:a1: 69:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:04:9A:AD:F7:1E:D1:73:C4:C0:93:5F:79:4E:65:AE:74:C7:D4:E1 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3QSarfce0XPEwJNfeU5lrnTH1OE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.8.64/26 Signature Algorithm: sha256WithRSAEncryption 1e:39:27:ea:ed:e6:fa:a3:a4:a8:12:32:f8:74:7c:ac:d8:d9: ab:f0:ed:49:64:56:79:6f:ba:e5:ca:35:84:01:2b:65:23:cc: 76:94:0d:20:bb:c1:05:dc:ad:34:52:f5:b0:b2:64:4d:34:28: 13:5d:86:0b:5d:d8:b3:1c:81:6b:59:1f:bd:bc:69:57:64:46: 71:c5:74:93:7d:4e:3a:c5:7c:3a:fe:9a:13:f0:e4:c1:b7:e5: 10:a2:4e:4f:cf:6b:e6:08:70:ba:17:43:91:df:6d:e2:7a:70: fd:0f:9f:2d:54:a2:73:6e:46:eb:f4:fb:22:10:6a:40:03:75: 66:05:75:59:0b:8a:35:0d:6f:45:e3:b6:34:02:82:43:f3:5c: 40:94:ba:42:00:2e:3e:d4:87:e6:29:2d:60:73:91:f8:40:1e: d5:75:74:05:eb:bb:5f:9c:cc:74:46:e1:10:97:f4:6b:0b:93: 39:f0:00:d2:4a:0e:c4:02:09:fd:06:11:11:0a:b4:39:0d:35: 47:26:f2:63:26:c1:6a:49:75:6c:fb:ff:14:1e:60:d1:6d:49: 7a:99:a5:7f:56:ea:f7:bd:a9:d6:2f:9a:85:9d:2d:ac:83:90: e6:9e:85:04:1c:c9:56:6c:be:9d:99:58:0e:19:52:57:e1:f8: 72:83:80:2c -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICOsgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3NDZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEREMDQ5QUFERjcxRUQx NzNDNEMwOTM1Rjc5NEU2NUFFNzRDN0Q0RTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLDW2vNSZK/SkgsHZU3bqgeAxs4dugXBS5HSdqFeysBBEuc5Hy dM/bgYlaLv8uEAk63lyForYg2y/81b8LtwAtp4J/OqhS4D+XH/MZCZAYCqpLhrhl Md9o/MP/JwTtZyIsxRTrjNqB6bFEuyUw6svvUJn8zk9KtiP6WKk47dPTyrpbZmhX lMRfD+Yagthp/a3Ven6C2ORS1Lw2owJoI/cMqLu44Z/HWheNP8s/t6tnEFDzw6LO Izde8gxzsuQdazeHsCF1Z8jZH/tZtt/jJbSLbsZ+k9RXl+9GXFgn7RmwX53HSini zmaE1xa2nrsk8SjyNfYZaKN1QZNGLAtKoWnPAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQU3QSarfce0XPEwJNfeU5lrnTH1OEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzNRU2FyZmNlMFhQRXdKTmZl VTVscm5USDFPRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQZ7 wwhAMA0GCSqGSIb3DQEBCwUAA4IBAQAeOSfq7eb6o6SoEjL4dHys2Nmr8O1JZFZ5 b7rlyjWEAStlI8x2lA0gu8EF3K00UvWwsmRNNCgTXYYLXdizHIFrWR+9vGlXZEZx xXSTfU46xXw6/poT8OTBt+UQok5Pz2vmCHC6F0OR323ienD9D58tVKJzbkbr9Psi EGpAA3VmBXVZC4o1DW9F47Y0AoJD81xAlLpCAC4+1IfmKS1gc5H4QB7VdXQF67tf nMx0RuEQl/RrC5M58ADSSg7EAgn9BhERCrQ5DTVHJvJjJsFqSXVs+/8UHmDRbUl6 maV/Vur3vanWL5qFnS2sg5DmnoUEHMlWbL6dmVgOGVJX4fhyg4As -----END CERTIFICATE-----Generated at Sun Aug 24 07:28:21 2025 by rpki-client