$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4bKOUkenns9PbknQ_A9IGCKg5rg.roa File: 4bKOUkenns9PbknQ_A9IGCKg5rg.roa (raw, json) Hash identifier: zTYzKnNjzoe9shL5K/ttLPhPy3uAKnLVzIiYatRM+ik= Subject key identifier: E1:B2:8E:52:47:A7:9E:CF:4F:6E:49:D0:FC:0F:48:18:22:A0:E6:B8 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 39B4 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4bKOUkenns9PbknQ_A9IGCKg5rg.roa Signing time: Fri 22 Aug 2025 08:46:34 +0000 ROA not before: Fri 22 Aug 2025 08:46:34 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.193.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14772 (0x39b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:34 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=E1B28E5247A79ECF4F6E49D0FC0F481822A0E6B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9d:2d:b8:48:fe:a8:90:f7:8b:65:b5:21:96: 4f:df:e8:d7:ee:1c:2d:5c:01:b2:bd:71:0b:0d:a5: 25:3b:30:5d:f7:96:32:c6:fb:71:77:6f:6d:ba:06: 37:f5:b4:e3:32:8b:53:22:1c:d6:2e:fd:e5:0b:27: 50:ba:2e:a7:ef:39:7d:b7:1f:61:fa:4a:d3:a3:34: df:f7:b6:18:69:70:d1:a9:f0:bf:5b:3a:9e:f2:cd: 10:3d:88:9f:62:ac:4a:89:cb:f5:b8:af:72:6f:e8: 65:af:73:a9:26:c5:95:c2:f3:88:94:99:27:31:5b: 60:6b:89:3c:bf:c0:79:60:eb:b0:6a:81:14:3c:62: 92:ae:42:98:37:e3:d5:2a:0b:cd:f1:a4:90:e5:5c: 5c:5b:24:ee:f3:ae:a1:e1:fa:33:69:d5:75:f9:a8: 30:b1:00:d0:77:21:bf:25:b3:82:47:82:90:a6:41: 72:14:50:e7:08:ee:69:76:28:f2:55:4f:cc:6d:fa: 11:45:ec:ca:02:3f:ac:1d:66:8a:a2:91:3d:89:84: 25:ac:ea:9e:14:0d:fe:ac:9c:ca:28:9d:02:bb:38: fb:fd:a0:83:22:74:1a:08:6a:0f:8a:aa:a9:85:69: 30:cf:0d:b3:bd:cd:c0:68:8a:7e:1c:0a:4d:ec:76: f9:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:B2:8E:52:47:A7:9E:CF:4F:6E:49:D0:FC:0F:48:18:22:A0:E6:B8 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4bKOUkenns9PbknQ_A9IGCKg5rg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.240.0/21 Signature Algorithm: sha256WithRSAEncryption 2c:db:8f:ab:7b:e8:4e:23:a1:60:c4:b4:ed:2d:84:82:50:7a: 49:58:fd:80:e1:e5:2e:f8:0c:d6:b1:c6:7c:ad:be:bc:b5:3e: c6:d8:e3:7f:12:3b:63:d9:57:0d:06:f4:7e:3a:9e:e0:88:b8: f2:0e:87:d1:6a:0f:55:19:4b:81:be:3a:14:a8:6b:55:0c:df: 44:03:4f:90:4f:2e:a2:6c:d2:8d:0b:80:67:9a:ae:06:ef:66: a7:8d:d8:1c:23:2c:ce:bc:d7:73:2b:63:41:c1:9b:74:e9:22: f8:11:59:03:a2:47:8b:c7:9e:5b:30:05:c7:cd:68:09:b0:04: ca:ec:36:56:37:78:4c:b5:3b:ec:d1:d6:8d:4d:e9:8e:ab:42: fe:2a:89:ab:41:b5:b3:e9:e5:7d:35:c1:23:74:d1:c8:cf:df: 6a:79:c7:8b:be:0e:01:54:2a:be:ae:7b:01:ec:c5:9a:7c:7b: 3b:ae:a2:66:56:8c:d5:e9:ac:d2:02:8d:6d:01:2a:0a:53:5d: 4d:03:ff:c5:98:78:77:9e:f9:c3:12:0c:b4:b5:a5:e8:da:22: d9:9e:2b:71:f7:10:05:09:9c:d4:77:0f:ac:e9:e1:65:8d:29: 0f:76:f2:8e:2b:8b:ff:47:7e:4e:69:1f:d6:b1:dc:7c:dc:04: 6a:92:a9:bb -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICObQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2MzRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEUxQjI4RTUyNDdBNzlF Q0Y0RjZFNDlEMEZDMEY0ODE4MjJBMEU2QjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpnS24SP6okPeLZbUhlk/f6NfuHC1cAbK9cQsNpSU7MF33ljLG +3F3b226Bjf1tOMyi1MiHNYu/eULJ1C6LqfvOX23H2H6StOjNN/3thhpcNGp8L9b Op7yzRA9iJ9irEqJy/W4r3Jv6GWvc6kmxZXC84iUmScxW2BriTy/wHlg67BqgRQ8 YpKuQpg349UqC83xpJDlXFxbJO7zrqHh+jNp1XX5qDCxANB3Ib8ls4JHgpCmQXIU UOcI7ml2KPJVT8xt+hFF7MoCP6wdZoqikT2JhCWs6p4UDf6snMoonQK7OPv9oIMi dBoIag+KqqmFaTDPDbO9zcBoin4cCk3sdvmlAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU4bKOUkenns9PbknQ/A9IGCKg5rgwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzRiS09Va2VubnM5UGJrblFf QTlJR0NLZzVyZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wfAwDQYJKoZIhvcNAQELBQADggEBACzbj6t76E4joWDEtO0thIJQeklY/YDh5S74 DNaxxnytvry1PsbY438SO2PZVw0G9H46nuCIuPIOh9FqD1UZS4G+OhSoa1UM30QD T5BPLqJs0o0LgGeargbvZqeN2BwjLM6813MrY0HBm3TpIvgRWQOiR4vHnlswBcfN aAmwBMrsNlY3eEy1O+zR1o1N6Y6rQv4qiatBtbPp5X01wSN00cjP32p5x4u+DgFU Kr6uewHsxZp8ezuuomZWjNXprNICjW0BKgpTXU0D/8WYeHee+cMSDLS1pejaItme K3H3EAUJnNR3D6zp4WWNKQ928o4ri/9Hfk5pH9ax3HzcBGqSqbs= -----END CERTIFICATE-----Generated at Sun Aug 24 07:33:20 2025 by rpki-client