$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4YtUDgy_6Kf_U_0h6RYr-LZy6dg.roa File: 4YtUDgy_6Kf_U_0h6RYr-LZy6dg.roa (raw, json) Hash identifier: VOB9s/3xAInjryWm6dzpCdMmkFTn6v+0QMx7mYXMUhE= Subject key identifier: E1:8B:54:0E:0C:BF:E8:A7:FF:53:FD:21:E9:16:2B:F8:B6:72:E9:D8 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3A2B Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4YtUDgy_6Kf_U_0h6RYr-LZy6dg.roa Signing time: Fri 22 Aug 2025 08:47:05 +0000 ROA not before: Fri 22 Aug 2025 08:47:05 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9924 IP address blocks: 118.232.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14891 (0x3a2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:05 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=E18B540E0CBFE8A7FF53FD21E9162BF8B672E9D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:70:18:96:56:45:dd:a6:6b:e3:f5:c2:b8:4f: 96:1c:2a:22:fe:fb:df:6f:6d:c6:af:eb:c4:2f:99: 34:c8:4d:67:00:1c:38:81:5b:0c:88:f1:a2:c9:15: 66:f0:8d:7f:02:26:3f:a4:49:44:45:aa:8b:ee:fe: 02:bf:42:41:ce:6f:39:87:a4:6d:37:dc:50:98:a1: 89:84:45:1d:88:e8:14:8a:b2:18:11:46:3b:92:0f: 09:eb:b1:85:e0:b5:59:6f:b1:f6:e8:a8:34:9e:c4: 7f:f4:9a:b9:62:f0:5e:74:60:7b:c9:c9:23:af:23: 19:91:32:c4:1d:96:ce:12:80:b1:04:31:fc:7b:de: 4f:9d:a2:32:ce:c8:7c:26:3b:7b:ad:2f:b6:aa:fc: 14:b7:37:44:da:93:d6:f7:c7:3f:22:82:71:a4:38: 43:5c:bb:39:ab:24:12:89:0b:3a:e5:70:7f:5b:33: ce:67:1f:3a:d4:7d:86:e4:5e:59:0a:fd:a5:99:ca: 8d:8b:18:1c:56:c2:b2:65:86:73:e4:25:ba:61:a8: c4:7a:db:6a:b1:28:a4:f9:e1:d4:09:ab:bb:52:9f: 58:3a:01:2e:f6:33:fc:03:6b:de:91:21:c0:55:47: 9a:55:3d:df:cb:cf:b0:06:c5:1d:bf:90:65:9e:7b: 0e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:8B:54:0E:0C:BF:E8:A7:FF:53:FD:21:E9:16:2B:F8:B6:72:E9:D8 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4YtUDgy_6Kf_U_0h6RYr-LZy6dg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.192.0/18 Signature Algorithm: sha256WithRSAEncryption 72:64:64:a5:3a:f0:25:5f:44:29:3d:58:d9:8b:de:9e:60:23: b5:aa:4d:f6:1e:09:08:07:0c:9c:77:6f:13:58:f1:fb:b7:0c: d8:73:be:82:02:a3:37:ff:9b:4c:52:9a:26:25:50:bb:85:fb: 9f:65:e5:e4:75:53:a3:f1:55:86:f5:92:e1:1b:bf:0c:6d:4d: 44:f9:8c:4e:ba:c3:c1:9c:e8:fb:5c:52:57:22:10:68:ef:83: c2:18:67:c5:f7:52:ca:b6:23:4e:c1:ba:19:59:c9:31:50:cb: 3f:9c:d8:59:5d:28:ee:6b:83:d5:9d:ba:ff:65:a3:d9:20:79: db:dc:bb:a2:37:83:0f:b3:43:0f:56:bf:bd:39:ba:9e:bd:d9: fe:ba:54:ba:c2:fc:a1:2f:38:8c:94:76:66:ed:26:f5:45:a4: 73:f2:df:1a:bf:20:e3:e4:ab:fb:6b:f1:dd:6d:73:24:56:0e: c5:cb:a0:0d:63:1c:5a:80:7b:a7:2b:54:f8:cc:14:0c:4c:f4: bf:f5:87:5a:73:2d:8a:0a:74:a9:2c:6e:45:0d:b7:f7:8b:4c: fc:3b:c4:dc:63:8e:29:36:d5:73:d6:2b:72:3a:5f:79:b4:fd: ec:30:c0:fc:45:66:08:92:c2:a3:56:68:fd:fe:fa:a5:0e:67: 32:94:1d:a8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOiswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3MDVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEUxOEI1NDBFMENCRkU4 QTdGRjUzRkQyMUU5MTYyQkY4QjY3MkU5RDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDjcBiWVkXdpmvj9cK4T5YcKiL++99vbcav68QvmTTITWcAHDiB WwyI8aLJFWbwjX8CJj+kSURFqovu/gK/QkHObzmHpG033FCYoYmERR2I6BSKshgR RjuSDwnrsYXgtVlvsfboqDSexH/0mrli8F50YHvJySOvIxmRMsQdls4SgLEEMfx7 3k+dojLOyHwmO3utL7aq/BS3N0Tak9b3xz8ignGkOENcuzmrJBKJCzrlcH9bM85n HzrUfYbkXlkK/aWZyo2LGBxWwrJlhnPkJbphqMR622qxKKT54dQJq7tSn1g6AS72 M/wDa96RIcBVR5pVPd/Lz7AGxR2/kGWeew67AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU4YtUDgy/6Kf/U/0h6RYr+LZy6dgwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzRZdFVEZ3lfNktmX1VfMGg2 UllyLUxaeTZkZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZ2 6MAwDQYJKoZIhvcNAQELBQADggEBAHJkZKU68CVfRCk9WNmL3p5gI7WqTfYeCQgH DJx3bxNY8fu3DNhzvoICozf/m0xSmiYlULuF+59l5eR1U6PxVYb1kuEbvwxtTUT5 jE66w8Gc6PtcUlciEGjvg8IYZ8X3Usq2I07BuhlZyTFQyz+c2FldKO5rg9Wduv9l o9kgedvcu6I3gw+zQw9Wv705up692f66VLrC/KEvOIyUdmbtJvVFpHPy3xq/IOPk q/tr8d1tcyRWDsXLoA1jHFqAe6crVPjMFAxM9L/1h1pzLYoKdKksbkUNt/eLTPw7 xNxjjik21XPWK3I6X3m0/ewwwPxFZgiSwqNWaP3++qUOZzKUHag= -----END CERTIFICATE-----Generated at Sun Aug 24 07:31:01 2025 by rpki-client