$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5Y8n8b-9iuyNqK6LxOIxnekEK4A.roa File: 5Y8n8b-9iuyNqK6LxOIxnekEK4A.roa (raw, json) Hash identifier: tmD0/DLcgIkLBIR3ZAOl3FxIzE2VCtZUGrueZd0SeKE= Subject key identifier: E5:8F:27:F1:BF:BD:8A:EC:8D:A8:AE:8B:C4:E2:31:9D:E9:04:2B:80 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 37F5 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5Y8n8b-9iuyNqK6LxOIxnekEK4A.roa Signing time: Fri 22 Aug 2025 08:44:50 +0000 ROA not before: Fri 22 Aug 2025 08:44:50 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.192.0.0/17 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14325 (0x37f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:44:50 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=E58F27F1BFBD8AEC8DA8AE8BC4E2319DE9042B80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:bd:9f:e2:02:43:fc:b0:ac:62:02:f0:9a:22: e2:0b:f1:90:2e:8d:22:28:5b:04:0b:c2:cd:63:39: 7c:67:d2:ba:9f:e8:5b:92:00:b4:c7:e2:0e:7e:b8: 3a:56:b8:2f:37:80:b3:b9:91:b4:3f:e2:61:2c:ae: f6:22:92:09:32:a4:03:9a:14:41:f9:a8:51:75:c0: 84:6b:ba:f1:df:6d:79:60:19:76:3e:a7:af:39:ba: 05:23:06:5d:b2:8f:fd:d2:03:6c:77:a5:14:88:e8: 55:31:cd:e3:47:d3:60:ce:65:77:c4:a6:7e:f7:97: c7:1e:f2:e3:09:0f:06:f4:9e:cf:22:3a:0e:92:d6: 9d:08:14:e3:6d:13:fb:61:a0:a7:ca:fa:5a:6c:80: 0b:37:32:80:f5:5a:0f:5e:bb:70:56:3c:03:d8:62: 16:79:7a:03:69:fe:16:47:f7:cc:b5:26:88:4e:09: c7:7e:25:54:71:43:43:5e:ed:e5:bf:20:92:ea:27: c9:cb:4f:e3:f8:de:1b:67:e8:ae:aa:65:70:1c:f1: 55:d9:64:c8:60:71:70:c3:b8:12:18:d4:dd:70:e7: b3:2c:8b:90:bc:60:95:6b:21:9d:6e:c9:4a:12:96: 93:ed:9a:55:7f:51:3f:a5:30:87:0c:43:3d:bc:7d: c9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:8F:27:F1:BF:BD:8A:EC:8D:A8:AE:8B:C4:E2:31:9D:E9:04:2B:80 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5Y8n8b-9iuyNqK6LxOIxnekEK4A.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.0.0/17 Signature Algorithm: sha256WithRSAEncryption 62:b7:07:e7:b8:45:c4:75:a3:4c:fd:ae:b0:8e:1d:61:77:cd: ec:5b:ac:fb:1b:fb:c1:80:5c:1a:ca:80:bf:2c:25:71:88:7c: 43:d4:6e:2d:e4:64:28:02:99:67:51:60:6c:d5:66:c6:1e:71: 24:ba:a5:d6:9b:c6:c0:70:04:ce:1c:71:30:ae:ea:dd:40:e1: 3d:e9:e2:2d:26:23:53:5c:d0:18:09:d4:58:c6:0c:1c:65:4f: f9:fe:42:a6:10:3a:33:3c:3d:e1:76:97:e5:53:a1:1b:5a:f7: 90:ad:a4:5f:90:94:25:27:07:02:1d:fe:9a:f7:12:ba:b2:6b: 3a:1a:a9:9b:fe:dc:f8:6b:91:5f:3a:16:21:0c:0e:5c:13:e9: 5b:1c:b8:e3:ab:fb:cf:b2:7f:35:b0:72:14:d7:c2:31:f8:2d: 67:41:04:6c:10:e6:db:0a:e2:79:b2:11:b0:57:73:02:d5:b3: d0:25:04:5a:79:78:d6:ac:10:be:66:57:92:ea:ba:96:d7:77: 64:3b:df:7e:55:a7:91:a3:45:65:ce:93:5a:47:0c:d5:90:41: 29:6e:7f:76:f3:68:0f:2a:16:0a:5b:cb:93:bd:32:78:59:59: 1d:a9:25:57:94:cb:51:13:6a:14:ec:75:12:33:96:7f:6b:e0: 8b:d6:ce:a9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICN/UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ0NTBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEU1OEYyN0YxQkZCRDhB RUM4REE4QUU4QkM0RTIzMTlERTkwNDJCODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDpvZ/iAkP8sKxiAvCaIuIL8ZAujSIoWwQLws1jOXxn0rqf6FuS ALTH4g5+uDpWuC83gLO5kbQ/4mEsrvYikgkypAOaFEH5qFF1wIRruvHfbXlgGXY+ p685ugUjBl2yj/3SA2x3pRSI6FUxzeNH02DOZXfEpn73l8ce8uMJDwb0ns8iOg6S 1p0IFONtE/thoKfK+lpsgAs3MoD1Wg9eu3BWPAPYYhZ5egNp/hZH98y1JohOCcd+ JVRxQ0Ne7eW/IJLqJ8nLT+P43htn6K6qZXAc8VXZZMhgcXDDuBIY1N1w57Msi5C8 YJVrIZ1uyUoSlpPtmlV/UT+lMIcMQz28fclxAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU5Y8n8b+9iuyNqK6LxOIxnekEK4AwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzVZOG44Yi05aXV5TnFLNkx4 T0l4bmVrRUs0QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAd7 wAAwDQYJKoZIhvcNAQELBQADggEBAGK3B+e4RcR1o0z9rrCOHWF3zexbrPsb+8GA XBrKgL8sJXGIfEPUbi3kZCgCmWdRYGzVZsYecSS6pdabxsBwBM4ccTCu6t1A4T3p 4i0mI1Nc0BgJ1FjGDBxlT/n+QqYQOjM8PeF2l+VToRta95CtpF+QlCUnBwId/pr3 ErqyazoaqZv+3PhrkV86FiEMDlwT6VscuOOr+8+yfzWwchTXwjH4LWdBBGwQ5tsK 4nmyEbBXcwLVs9AlBFp5eNasEL5mV5LqupbXd2Q7335Vp5GjRWXOk1pHDNWQQSlu f3bzaA8qFgpby5O9MnhZWR2pJVeUy1ETahTsdRIzln9r4IvWzqk= -----END CERTIFICATE-----Generated at Sun Aug 24 07:28:25 2025 by rpki-client