$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3zH84elAOZ7TVAiMW_5IWLP2zPw.roa File: 3zH84elAOZ7TVAiMW_5IWLP2zPw.roa (raw, json) Hash identifier: UYQTpS+7SKtu5L1RZMtOI7y/0wL/ZYHLh+EiuQdgqAY= Subject key identifier: DF:31:FC:E1:E9:40:39:9E:D3:54:08:8C:5B:FE:48:58:B3:F6:CC:FC Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 381D Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3zH84elAOZ7TVAiMW_5IWLP2zPw.roa Signing time: Fri 22 Aug 2025 08:44:58 +0000 ROA not before: Fri 22 Aug 2025 08:44:58 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 106.1.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14365 (0x381d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:44:58 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=DF31FCE1E940399ED354088C5BFE4858B3F6CCFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d2:44:9a:27:cc:de:05:55:9f:51:35:19:05: d9:a1:7f:0c:ab:ee:9b:3e:e7:39:d3:d0:51:0e:f3: 54:9d:62:d6:db:14:93:2e:6e:19:fe:d0:4c:5e:43: f3:b2:56:34:78:45:7f:d2:7b:f9:c3:fc:00:77:2b: de:3e:6d:81:0d:81:0b:54:62:9b:07:4e:88:0f:ba: 36:35:9a:76:0a:1a:17:6f:0c:f0:56:26:47:28:75: f5:00:73:d5:5e:96:46:fc:f9:16:5e:c3:d3:f9:e5: 5f:ce:67:4c:46:0d:bd:59:ca:9a:60:e7:7a:0e:fb: 97:d3:f4:b3:cb:81:63:52:b2:21:60:52:f9:30:7c: 22:29:c9:32:00:17:04:dc:97:d8:b5:5b:8f:cf:e5: 90:08:d9:00:47:6b:80:ea:1d:79:f7:6a:c2:96:9e: e4:a0:a7:18:9b:ee:d6:1b:b3:76:f7:78:cf:65:58: 92:89:36:3d:d6:91:e6:5c:8c:2a:a9:27:42:39:c2: 40:af:71:d5:86:96:96:34:0f:64:5b:df:23:e9:58: 9f:dc:1e:01:67:3a:5b:e4:d3:06:ae:d8:8b:dd:a2: 0b:c0:87:5c:ba:cb:42:1f:13:72:67:78:d1:8f:f7: 89:b5:e9:12:7a:5a:8a:c1:14:c2:45:7d:35:57:8d: b0:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:31:FC:E1:E9:40:39:9E:D3:54:08:8C:5B:FE:48:58:B3:F6:CC:FC X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3zH84elAOZ7TVAiMW_5IWLP2zPw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.4.0/22 Signature Algorithm: sha256WithRSAEncryption 8b:a9:00:cd:20:cf:59:41:f4:9e:1b:6f:ae:f4:93:75:ae:43: ab:ba:ca:df:d9:c4:85:0f:32:f8:53:1c:a9:cf:38:4d:bb:14: 53:58:ce:13:1c:e7:77:81:ac:07:b5:87:7c:ef:8e:9b:12:4e: 5b:ac:76:0f:94:0b:80:c3:4a:49:7d:da:96:a1:d6:8d:c0:cd: 70:d4:a0:f3:9e:7e:f4:6d:c1:7d:b6:87:43:e4:aa:b2:d1:77: 1d:74:98:b4:cf:a6:bd:6a:43:b7:64:e9:95:38:2d:88:01:44: ac:82:b0:ae:f7:db:3c:a2:d9:e1:33:90:32:66:8b:62:bd:d6: ed:ea:33:d6:72:97:47:ee:e8:ff:55:ef:36:90:89:1b:0e:17: 76:a1:f3:7b:1e:d0:33:aa:e4:cd:72:61:1f:56:ab:ac:63:a0: 58:b0:50:a6:3d:af:2f:7d:55:4a:e3:f7:f0:dd:6c:cd:1a:ad: a3:09:c0:f4:d1:1e:bc:26:51:f8:6b:e3:6e:5a:2a:60:46:39: ee:a9:27:56:62:f6:e1:b9:ff:6d:55:86:8a:ee:aa:40:a3:ef: 6b:ab:ad:89:48:2f:19:04:47:d5:0f:93:aa:63:4a:a4:27:2d: 01:ce:57:d9:9f:27:de:9b:91:83:4b:9e:28:03:ad:6f:60:c9: e4:fd:36:bd -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOB0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ0NThaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKERGMzFGQ0UxRTk0MDM5 OUVEMzU0MDg4QzVCRkU0ODU4QjNGNkNDRkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDL0kSaJ8zeBVWfUTUZBdmhfwyr7ps+5znT0FEO81SdYtbbFJMu bhn+0ExeQ/OyVjR4RX/Se/nD/AB3K94+bYENgQtUYpsHTogPujY1mnYKGhdvDPBW JkcodfUAc9Velkb8+RZew9P55V/OZ0xGDb1Zyppg53oO+5fT9LPLgWNSsiFgUvkw fCIpyTIAFwTcl9i1W4/P5ZAI2QBHa4DqHXn3asKWnuSgpxib7tYbs3b3eM9lWJKJ Nj3WkeZcjCqpJ0I5wkCvcdWGlpY0D2Rb3yPpWJ/cHgFnOlvk0wau2IvdogvAh1y6 y0IfE3JneNGP94m16RJ6WorBFMJFfTVXjbDJAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU3zH84elAOZ7TVAiMW/5IWLP2zPwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzN6SDg0ZWxBT1o3VFZBaU1X XzVJV0xQMnpQdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq AQQwDQYJKoZIhvcNAQELBQADggEBAIupAM0gz1lB9J4bb670k3WuQ6u6yt/ZxIUP MvhTHKnPOE27FFNYzhMc53eBrAe1h3zvjpsSTlusdg+UC4DDSkl92pah1o3AzXDU oPOefvRtwX22h0PkqrLRdx10mLTPpr1qQ7dk6ZU4LYgBRKyCsK732zyi2eEzkDJm i2K91u3qM9Zyl0fu6P9V7zaQiRsOF3ah83se0DOq5M1yYR9Wq6xjoFiwUKY9ry99 VUrj9/DdbM0araMJwPTRHrwmUfhr425aKmBGOe6pJ1Zi9uG5/21VhoruqkCj72ur rYlILxkER9UPk6pjSqQnLQHOV9mfJ96bkYNLnigDrW9gyeT9Nr0= -----END CERTIFICATE-----Generated at Sun Aug 24 07:25:27 2025 by rpki-client