$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6U6nAg0hdX6Nb52NWC4ZVPvETtA.roa File: 6U6nAg0hdX6Nb52NWC4ZVPvETtA.roa (raw, json) Hash identifier: 0p0swMbNccfALQKv/kleTPSzl0Zz4A+dkBb9RKGHrs8= Subject key identifier: E9:4E:A7:02:0D:21:75:7E:8D:6F:9D:8D:58:2E:19:54:FB:C4:4E:D0 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3AC1 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6U6nAg0hdX6Nb52NWC4ZVPvETtA.roa Signing time: Fri 22 Aug 2025 08:47:43 +0000 ROA not before: Fri 22 Aug 2025 08:47:43 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9924 IP address blocks: 118.232.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15041 (0x3ac1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:43 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=E94EA7020D21757E8D6F9D8D582E1954FBC44ED0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:cc:38:a3:2b:7c:25:d9:13:3c:af:54:37:1e: 1d:3c:9c:19:36:17:81:05:6b:e3:c2:8c:ad:eb:43: 97:a1:25:64:45:88:07:52:aa:bf:64:47:5e:69:b4: 4e:b5:53:20:84:f0:de:fc:57:54:dd:2c:08:d6:f0: a0:85:b8:30:a1:01:49:35:07:20:dd:c0:81:09:30: 9b:bb:92:ff:c6:93:f2:cd:73:7d:7a:49:9f:e4:a7: 1d:f9:e6:2e:0b:a2:d3:67:32:82:88:7d:7b:62:3c: 9b:00:c1:a8:34:20:3d:b1:45:b3:ff:95:7d:7b:b6: 02:11:12:7d:a6:fb:c5:04:21:aa:42:69:66:6a:f4: 8b:0e:4c:0c:12:95:e0:81:d6:35:d5:6a:f1:f3:5d: 8c:60:0c:87:36:35:3f:95:f5:e1:1b:fb:ea:f4:4e: 4e:d0:24:c2:21:e4:32:9c:b4:0e:59:5a:b2:06:1f: 26:d1:ae:67:de:87:16:ad:27:1e:79:2c:57:71:09: 49:6c:f2:dd:97:b9:69:ff:3b:d7:6d:2b:dd:71:fc: 2b:75:44:1b:e3:ac:88:98:4c:44:87:68:91:a4:73: 2d:8c:58:be:e2:64:36:f6:7a:b0:e9:03:22:41:4d: aa:93:d9:fe:8e:4d:ae:2c:a4:05:14:08:25:c1:b6: 56:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:4E:A7:02:0D:21:75:7E:8D:6F:9D:8D:58:2E:19:54:FB:C4:4E:D0 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6U6nAg0hdX6Nb52NWC4ZVPvETtA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.192.0/22 Signature Algorithm: sha256WithRSAEncryption 38:39:07:2d:68:72:c3:79:fc:89:bc:88:58:18:bc:7f:12:23: 7b:da:40:ed:8c:c5:af:23:fa:f5:4e:23:62:68:b8:7d:2e:29: 55:de:4f:bb:ac:5c:42:44:30:e4:f4:7f:d2:b9:f6:e9:57:46: 35:61:1c:bb:7a:ed:cc:1e:c4:2c:87:5a:03:86:76:ac:b8:b1: 3c:f1:57:8b:cc:8f:3f:c4:fe:c7:80:5e:15:9b:29:43:de:36: e3:89:39:4b:35:79:1c:ec:55:a2:44:4a:ec:35:97:f9:ee:a6: fa:44:12:c9:85:e4:e3:fa:bd:c6:db:26:76:43:a7:76:e5:b6: 55:1c:e2:61:0c:a5:e8:48:e7:a2:fa:22:93:ed:f2:5a:a1:66: 63:a1:78:2e:77:81:cb:9f:38:f0:00:76:a3:da:78:f5:e6:19: f3:5a:e5:d1:28:51:ad:8e:00:a5:8c:f6:a4:fa:46:a7:a8:ed: 64:11:e9:d6:9f:e8:45:1a:88:d4:0c:20:6d:92:6a:d4:d1:7d: 00:f7:ad:d3:36:71:e8:48:71:45:b1:f0:79:bf:cb:b2:a9:6e: 61:fe:e2:90:f9:df:26:50:64:6b:b6:e2:e2:0e:5a:e2:b4:af: ee:df:78:3b:f5:f2:49:1e:c6:44:a4:88:8f:66:12:fa:ad:ed: 91:2e:64:67 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOsEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3NDNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEU5NEVBNzAyMEQyMTc1 N0U4RDZGOUQ4RDU4MkUxOTU0RkJDNDRFRDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKzDijK3wl2RM8r1Q3Hh08nBk2F4EFa+PCjK3rQ5ehJWRFiAdS qr9kR15ptE61UyCE8N78V1TdLAjW8KCFuDChAUk1ByDdwIEJMJu7kv/Gk/LNc316 SZ/kpx355i4LotNnMoKIfXtiPJsAwag0ID2xRbP/lX17tgIREn2m+8UEIapCaWZq 9IsOTAwSleCB1jXVavHzXYxgDIc2NT+V9eEb++r0Tk7QJMIh5DKctA5ZWrIGHybR rmfehxatJx55LFdxCUls8t2XuWn/O9dtK91x/Ct1RBvjrIiYTESHaJGkcy2MWL7i ZDb2erDpAyJBTaqT2f6OTa4spAUUCCXBtlbZAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU6U6nAg0hdX6Nb52NWC4ZVPvETtAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzZVNm5BZzBoZFg2TmI1Mk5X QzRaVlB2RVR0QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6MAwDQYJKoZIhvcNAQELBQADggEBADg5By1ocsN5/Im8iFgYvH8SI3vaQO2Mxa8j +vVOI2JouH0uKVXeT7usXEJEMOT0f9K59ulXRjVhHLt67cwexCyHWgOGdqy4sTzx V4vMjz/E/seAXhWbKUPeNuOJOUs1eRzsVaJESuw1l/nupvpEEsmF5OP6vcbbJnZD p3bltlUc4mEMpehI56L6IpPt8lqhZmOheC53gcufOPAAdqPaePXmGfNa5dEoUa2O AKWM9qT6Rqeo7WQR6daf6EUaiNQMIG2SatTRfQD3rdM2cehIcUWx8Hm/y7KpbmH+ 4pD53yZQZGu24uIOWuK0r+7feDv18kkexkSkiI9mEvqt7ZEuZGc= -----END CERTIFICATE-----Generated at Sun Aug 24 07:30:59 2025 by rpki-client