$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5JZOImSvAe3e6D-fO_JUhFTSJ2o.roa File: 5JZOImSvAe3e6D-fO_JUhFTSJ2o.roa (raw, json) Hash identifier: emYUfVQ6p94in6EYqAX1nUBIuoWZYBAfmKvuLLa0t14= Subject key identifier: E4:96:4E:22:64:AF:01:ED:DE:E8:3F:9F:3B:F2:54:84:54:D2:27:6A Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3806 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5JZOImSvAe3e6D-fO_JUhFTSJ2o.roa Signing time: Fri 22 Aug 2025 08:44:53 +0000 ROA not before: Fri 22 Aug 2025 08:44:53 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 103.224.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14342 (0x3806) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:44:53 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=E4964E2264AF01EDDEE83F9F3BF2548454D2276A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:42:c2:27:e8:27:61:b7:04:bc:9c:d6:f5:1b: 87:9d:bc:5d:9d:5b:d4:99:18:0d:9e:83:2f:bc:d2: a3:f5:af:20:ed:35:27:ac:a7:c0:b7:7e:dd:48:f2: 83:02:64:9e:32:5a:d1:13:89:37:75:2d:44:d1:c8: 82:43:53:78:03:90:87:06:21:79:a2:38:22:af:00: da:6a:54:1f:05:75:b8:32:5e:3e:fb:51:3a:74:e5: 48:84:4c:e8:61:48:47:ab:d8:b5:36:e0:8c:cd:e3: f0:77:44:42:74:c9:fd:81:23:02:8d:2c:28:68:15: a7:67:a8:9f:aa:a9:91:b3:d4:a1:ed:c2:d9:9f:c5: 94:ca:cf:fd:bc:77:71:29:e9:e0:dc:ba:a0:00:73: 1a:51:5f:82:bf:70:ca:63:50:f0:33:5c:6c:db:c5: 4f:1f:d5:01:9b:40:86:f7:e1:a2:16:64:33:26:bd: e0:c6:ca:a3:65:81:6c:72:0e:1c:63:d6:ed:c4:7b: 6c:f6:69:0a:2f:a0:8b:aa:80:8b:26:a9:4e:fc:a9: 73:a5:a9:91:c3:2c:1b:93:84:99:ee:7b:ed:37:ab: 1a:a9:51:6e:12:61:72:33:22:68:73:b8:97:f2:53: d9:fa:8e:fa:22:83:de:5b:6c:fb:0e:09:60:c3:89: d4:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:96:4E:22:64:AF:01:ED:DE:E8:3F:9F:3B:F2:54:84:54:D2:27:6A X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5JZOImSvAe3e6D-fO_JUhFTSJ2o.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.224.195.0/24 Signature Algorithm: sha256WithRSAEncryption b9:e3:b1:ac:c7:09:9c:90:5b:3a:5e:58:ae:9c:e3:4f:98:07: c5:ea:4d:ad:89:47:ee:41:1a:8d:9a:88:a4:bb:54:f7:b4:a9: bf:95:91:86:7e:dc:32:c0:97:91:2e:94:f7:c8:63:49:88:81: dd:0e:77:56:2a:d4:ee:63:fc:a6:17:3f:40:83:f1:5b:83:4a: 50:f7:fa:c7:02:4d:38:15:f7:19:72:5e:1d:b9:7e:6f:3f:45: 0e:8d:54:fb:71:2c:b4:2b:20:7b:c0:73:b3:1c:8b:e8:ba:d4: ec:fe:73:70:5a:b4:ab:51:72:f4:a6:4c:9d:cc:5d:0d:34:16: ea:ce:63:3b:1e:a7:be:dd:d5:cd:9f:71:65:c9:eb:4b:1a:ba: 8c:db:59:47:ba:56:a1:b5:ca:14:40:38:fc:12:d1:5a:fd:79: 29:c9:9c:6b:5d:8b:6f:dd:0a:2b:d9:50:c1:7d:3b:2c:d2:e7: f6:75:9f:16:88:cd:33:16:66:68:6f:db:ba:d9:b6:70:94:16: 9c:bd:01:63:78:eb:d8:5f:b7:c9:50:1e:eb:d9:44:b2:94:21: 40:33:03:8b:79:df:b6:f4:96:db:94:21:bf:b9:65:60:ba:0c: 94:da:ab:c4:59:d1:61:45:5e:8a:5a:17:2d:de:16:65:92:76: 78:6b:d4:4f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOAYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ0NTNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEU0OTY0RTIyNjRBRjAx RURERUU4M0Y5RjNCRjI1NDg0NTREMjI3NkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDeQsIn6CdhtwS8nNb1G4edvF2dW9SZGA2egy+80qP1ryDtNSes p8C3ft1I8oMCZJ4yWtETiTd1LUTRyIJDU3gDkIcGIXmiOCKvANpqVB8FdbgyXj77 UTp05UiETOhhSEer2LU24IzN4/B3REJ0yf2BIwKNLChoFadnqJ+qqZGz1KHtwtmf xZTKz/28d3Ep6eDcuqAAcxpRX4K/cMpjUPAzXGzbxU8f1QGbQIb34aIWZDMmveDG yqNlgWxyDhxj1u3Ee2z2aQovoIuqgIsmqU78qXOlqZHDLBuThJnue+03qxqpUW4S YXIzImhzuJfyU9n6jvoig95bbPsOCWDDidSXAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU5JZOImSvAe3e6D+fO/JUhFTSJ2owHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzVKWk9JbVN2QWUzZTZELWZP X0pVaEZUU0oyby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn 4MMwDQYJKoZIhvcNAQELBQADggEBALnjsazHCZyQWzpeWK6c40+YB8XqTa2JR+5B Go2aiKS7VPe0qb+VkYZ+3DLAl5EulPfIY0mIgd0Od1Yq1O5j/KYXP0CD8VuDSlD3 +scCTTgV9xlyXh25fm8/RQ6NVPtxLLQrIHvAc7Mci+i61Oz+c3BatKtRcvSmTJ3M XQ00FurOYzsep77d1c2fcWXJ60sauozbWUe6VqG1yhRAOPwS0Vr9eSnJnGtdi2/d CivZUMF9OyzS5/Z1nxaIzTMWZmhv27rZtnCUFpy9AWN469hft8lQHuvZRLKUIUAz A4t537b0ltuUIb+5ZWC6DJTaq8RZ0WFFXopaFy3eFmWSdnhr1E8= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:39 2025 by rpki-client