$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/570exME8Ah6UBtt2f55r09iVdnM.roa File: 570exME8Ah6UBtt2f55r09iVdnM.roa (raw, json) Hash identifier: Hpbm6DMTNtaKD6x45sKNPut3vWCfA4R+tkxyDl6pAxM= Subject key identifier: E7:BD:1E:C4:C1:3C:02:1E:94:06:DB:76:7F:9E:6B:D3:D8:95:76:73 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 394F Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/570exME8Ah6UBtt2f55r09iVdnM.roa Signing time: Fri 22 Aug 2025 08:46:10 +0000 ROA not before: Fri 22 Aug 2025 08:46:10 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9924 IP address blocks: 123.192.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14671 (0x394f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:10 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=E7BD1EC4C13C021E9406DB767F9E6BD3D8957673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:44:ca:65:eb:5c:f6:9b:e4:e4:c0:98:ac:4f: b7:d4:d6:25:92:e7:e9:32:03:d4:db:e0:56:fe:9b: 1b:6e:9e:84:72:2f:ce:be:25:78:d3:3c:7e:a8:13: 9a:e2:57:d0:98:e2:de:ed:aa:73:5d:b4:d9:cc:29: 50:41:2c:43:5f:6b:0e:0e:6c:c3:e8:c6:6b:c6:2e: 4a:c5:1c:b4:2d:71:85:78:b2:e1:fd:20:11:35:18: a7:03:87:52:14:d6:a4:24:83:af:3e:d0:9f:30:b5: e2:bf:4f:12:04:a6:66:13:e2:dd:16:c1:18:6d:01: 4c:fd:72:65:be:c9:04:69:b2:90:72:fe:2f:74:0a: dd:79:e6:0f:83:e9:11:92:d1:dd:82:ec:eb:70:c6: 62:d2:4a:25:94:4e:2f:2a:8b:04:b9:22:73:2e:10: a7:d5:cc:8c:d0:4e:5f:44:62:b2:18:91:22:2e:63: 22:9b:10:3b:23:2a:6d:a0:52:fe:dc:78:57:03:70: 81:74:e0:da:cd:bc:d1:2e:97:28:4c:33:eb:a5:b5: 85:65:db:71:d7:aa:91:ad:1c:39:97:a1:07:3d:29: 64:d5:15:2c:bf:a3:76:59:c5:b3:a3:63:aa:2b:00: 35:b1:b6:ae:b6:9d:c3:2b:31:b2:32:05:5d:55:c5: 0d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:BD:1E:C4:C1:3C:02:1E:94:06:DB:76:7F:9E:6B:D3:D8:95:76:73 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/570exME8Ah6UBtt2f55r09iVdnM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.144.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:c5:51:a3:70:d3:c5:aa:3f:af:f8:79:91:5b:0c:af:08:f7: 26:7c:0a:b4:e1:29:cc:f4:95:ab:d0:0a:98:6d:3f:c7:10:b7: 7e:a7:b1:7d:c8:1d:5d:c3:7e:83:a8:07:08:19:72:55:40:0d: fa:22:5c:b1:90:90:8d:8f:9b:92:d0:18:53:28:e6:18:55:e6: c2:77:45:27:c3:f0:58:8a:6f:92:45:8f:2b:99:41:38:51:7a: 6f:c0:4f:1a:b9:56:a5:8c:69:51:c9:ed:74:6c:d8:f2:ad:7a: 0f:32:05:d7:1f:f3:dc:25:43:ae:9a:2e:10:1f:dd:18:e0:53: 58:fe:ce:f7:63:51:ea:8f:02:1c:69:17:48:8c:0f:8e:2b:cc: 72:f7:70:c2:68:d1:c0:5c:8e:39:e5:c6:9b:54:eb:20:7c:f2: 04:92:47:1b:9f:1a:a6:ec:41:1c:1a:a6:15:e5:eb:ea:2b:db: 10:d5:18:7d:48:55:ee:d9:c0:74:75:26:8e:ba:8e:da:2c:cc: 6d:64:53:cb:8e:6d:49:dd:63:e3:b6:6c:e3:a7:87:9d:f9:ef: 0b:02:62:61:e9:43:90:da:40:4c:51:48:9e:2b:81:74:f0:15: 7f:95:19:0d:df:40:ea:d3:de:1f:f6:ea:55:4e:2a:c6:a7:36: 4d:91:86:a3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOU8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2MTBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEU3QkQxRUM0QzEzQzAy MUU5NDA2REI3NjdGOUU2QkQzRDg5NTc2NzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPRMpl61z2m+TkwJisT7fU1iWS5+kyA9Tb4Fb+mxtunoRyL86+ JXjTPH6oE5riV9CY4t7tqnNdtNnMKVBBLENfaw4ObMPoxmvGLkrFHLQtcYV4suH9 IBE1GKcDh1IU1qQkg68+0J8wteK/TxIEpmYT4t0WwRhtAUz9cmW+yQRpspBy/i90 Ct155g+D6RGS0d2C7OtwxmLSSiWUTi8qiwS5InMuEKfVzIzQTl9EYrIYkSIuYyKb EDsjKm2gUv7ceFcDcIF04NrNvNEulyhMM+ultYVl23HXqpGtHDmXoQc9KWTVFSy/ o3ZZxbOjY6orADWxtq62ncMrMbIyBV1VxQ15AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU570exME8Ah6UBtt2f55r09iVdnMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzU3MGV4TUU4QWg2VUJ0dDJm NTVyMDlpVmRuTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7 wJAwDQYJKoZIhvcNAQELBQADggEBAFvFUaNw08WqP6/4eZFbDK8I9yZ8CrThKcz0 lavQCphtP8cQt36nsX3IHV3DfoOoBwgZclVADfoiXLGQkI2Pm5LQGFMo5hhV5sJ3 RSfD8FiKb5JFjyuZQThRem/ATxq5VqWMaVHJ7XRs2PKteg8yBdcf89wlQ66aLhAf 3RjgU1j+zvdjUeqPAhxpF0iMD44rzHL3cMJo0cBcjjnlxptU6yB88gSSRxufGqbs QRwaphXl6+or2xDVGH1IVe7ZwHR1Jo66jtoszG1kU8uObUndY+O2bOOnh5357wsC YmHpQ5DaQExRSJ4rgXTwFX+VGQ3fQOrT3h/26lVOKsanNk2RhqM= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:31 2025 by rpki-client