$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5K5oS5Izmh00pnK0Ttaw4--dAhM.roa File: 5K5oS5Izmh00pnK0Ttaw4--dAhM.roa (raw, json) Hash identifier: 8urN1UeJf1VQ48+xzFWMFrm1fG8G7SEIPid5JIYm0og= Subject key identifier: E4:AE:68:4B:92:33:9A:1D:34:A6:72:B4:4E:D6:B0:E3:EF:9D:02:13 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3B35 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5K5oS5Izmh00pnK0Ttaw4--dAhM.roa Signing time: Fri 22 Aug 2025 08:48:10 +0000 ROA not before: Fri 22 Aug 2025 08:48:10 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.194.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15157 (0x3b35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:48:10 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=E4AE684B92339A1D34A672B44ED6B0E3EF9D0213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a6:d9:df:2b:58:0f:d7:49:e6:a0:fe:80:7d: ea:24:ee:1f:fd:ae:c7:a0:01:c5:0e:c6:24:15:22: 33:d5:b5:41:29:e5:cd:78:1b:6e:53:f8:ab:99:19: 0d:72:5c:90:c7:48:16:bb:3c:e6:d8:c4:ec:45:48: dc:ff:ed:d7:d0:30:1a:d9:05:0b:04:e8:9f:7a:8e: 45:bf:ef:4d:b9:5b:8b:ad:6f:65:bb:41:c3:a9:3d: d9:43:4c:fb:2e:3a:8e:ef:1d:1e:9b:fe:2d:f7:df: 21:3c:21:6a:77:7d:37:13:df:e2:ec:95:e4:0f:71: 8b:d4:91:29:e2:d9:90:b6:38:fc:6c:fd:25:c5:f9: 39:51:a9:6f:0d:88:f9:d3:60:bc:25:06:16:af:60: 43:93:2b:07:4b:6d:a4:b6:91:15:ed:9a:0b:02:b5: b1:88:11:44:bf:d6:6a:ae:93:6b:3e:de:f2:86:cb: 68:cc:2d:31:4a:68:c6:12:13:ea:8c:b6:f7:f1:82: df:c9:36:6c:6f:ea:63:ed:ec:13:5a:dc:1d:2e:f7: c2:32:a6:31:c0:54:36:89:10:9d:15:25:69:45:9c: 48:70:fb:ae:e4:5b:84:fe:de:f1:57:ac:3f:fe:46: 06:3a:de:a2:82:5b:aa:9e:60:a5:a4:7a:27:10:83: 68:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:AE:68:4B:92:33:9A:1D:34:A6:72:B4:4E:D6:B0:E3:EF:9D:02:13 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5K5oS5Izmh00pnK0Ttaw4--dAhM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.72.0/22 Signature Algorithm: sha256WithRSAEncryption 3e:10:2e:c4:90:11:7d:02:25:1f:12:e3:f2:97:b4:fa:20:cd: 96:21:fd:ab:d8:e0:e9:31:32:a9:6d:12:17:01:fb:7c:6b:b3: 8b:ce:94:80:ef:8c:4e:ff:d6:92:19:42:7e:f4:ce:6b:50:08: ea:52:31:26:78:cf:0a:f1:be:0d:28:82:e9:af:88:70:7d:28: a6:15:bc:63:24:b1:42:2b:b0:83:6d:50:4f:52:e1:a6:e9:6b: 9d:cf:b6:2b:28:16:48:0d:f4:29:fd:cc:d7:59:39:24:55:23: cc:a1:fe:65:88:f5:3f:0f:91:24:5f:cb:21:e7:11:f6:10:6b: c4:12:ae:ac:68:fc:54:02:26:8a:b9:4a:5a:5d:7b:80:6e:a3: e2:50:51:73:1c:39:29:cc:5e:3a:1c:a8:37:37:9d:7f:5d:25: 57:18:8d:1c:64:d2:2d:ca:d3:e2:3a:60:dc:80:c2:fe:df:08: 86:3f:3c:22:2c:a3:fa:a1:73:4a:34:c5:19:52:af:09:2c:2d: 6b:c2:ff:e8:e7:44:49:6b:2d:6a:7b:cc:0f:82:9f:45:5c:55: c4:5e:43:e9:00:99:8b:5f:de:fe:18:53:b5:22:57:55:90:d0: f1:d8:8b:fb:5a:9f:7a:13:97:92:ec:98:65:88:0a:91:c8:9f: d2:b3:31:78 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOzUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ4MTBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEU0QUU2ODRCOTIzMzlB MUQzNEE2NzJCNDRFRDZCMEUzRUY5RDAyMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTptnfK1gP10nmoP6Afeok7h/9rsegAcUOxiQVIjPVtUEp5c14 G25T+KuZGQ1yXJDHSBa7PObYxOxFSNz/7dfQMBrZBQsE6J96jkW/7025W4utb2W7 QcOpPdlDTPsuOo7vHR6b/i333yE8IWp3fTcT3+LsleQPcYvUkSni2ZC2OPxs/SXF +TlRqW8NiPnTYLwlBhavYEOTKwdLbaS2kRXtmgsCtbGIEUS/1mquk2s+3vKGy2jM LTFKaMYSE+qMtvfxgt/JNmxv6mPt7BNa3B0u98IypjHAVDaJEJ0VJWlFnEhw+67k W4T+3vFXrD/+RgY63qKCW6qeYKWkeicQg2g3AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU5K5oS5Izmh00pnK0Ttaw4++dAhMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzVLNW9TNUl6bWgwMHBuSzBU dGF3NC0tZEFoTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wkgwDQYJKoZIhvcNAQELBQADggEBAD4QLsSQEX0CJR8S4/KXtPogzZYh/avY4Okx MqltEhcB+3xrs4vOlIDvjE7/1pIZQn70zmtQCOpSMSZ4zwrxvg0ogumviHB9KKYV vGMksUIrsINtUE9S4abpa53PtisoFkgN9Cn9zNdZOSRVI8yh/mWI9T8PkSRfyyHn EfYQa8QSrqxo/FQCJoq5Slpde4Buo+JQUXMcOSnMXjocqDc3nX9dJVcYjRxk0i3K 0+I6YNyAwv7fCIY/PCIso/qhc0o0xRlSrwksLWvC/+jnRElrLWp7zA+Cn0VcVcRe Q+kAmYtf3v4YU7UiV1WQ0PHYi/tan3oTl5LsmGWICpHIn9KzMXg= -----END CERTIFICATE-----Generated at Sun Aug 24 07:25:26 2025 by rpki-client