$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6kVu9UmjQ_JqhgjS9tv3I5I6Lus.roa File: 6kVu9UmjQ_JqhgjS9tv3I5I6Lus.roa (raw, json) Hash identifier: jomYfAsK51z0tojX6IO8c+m6H8xYcbZhgfWkVdQihXQ= Subject key identifier: EA:45:6E:F5:49:A3:43:F2:6A:86:08:D2:F6:DB:F7:23:92:3A:2E:EB Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 395D Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6kVu9UmjQ_JqhgjS9tv3I5I6Lus.roa Signing time: Fri 22 Aug 2025 08:46:13 +0000 ROA not before: Fri 22 Aug 2025 08:46:13 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9924 IP address blocks: 123.195.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14685 (0x395d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:13 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=EA456EF549A343F26A8608D2F6DBF723923A2EEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:96:16:58:0b:98:09:f4:07:78:63:10:26:21: 2f:95:34:48:9e:3b:04:1f:73:32:9f:f0:19:bb:93: 42:89:1c:a2:b6:fa:4f:54:40:00:d8:be:4d:bd:3a: 45:bb:a3:6a:97:95:ba:7b:eb:31:9b:0f:b7:57:08: 29:a7:e1:6e:65:1d:6a:9c:46:19:39:23:09:65:f2: 69:19:48:76:4e:d1:df:ae:8b:00:fc:5b:3a:38:99: 74:91:1c:72:b8:40:ac:83:1b:f6:e7:5b:95:1e:99: 24:a4:26:37:90:c6:5b:f0:e3:50:4d:08:62:c6:0f: ff:17:ea:bb:ec:f2:b8:01:a8:91:9d:b5:b2:21:d4: 16:38:ef:01:b0:67:38:f4:22:4a:62:70:01:21:7a: 2c:8a:e4:2d:ea:38:c4:04:cf:98:a9:46:21:c9:59: 2e:ca:f2:e1:77:bf:af:c6:26:9d:dc:6d:38:ac:92: 8f:3a:47:9e:12:8d:fe:24:77:e5:cf:c7:32:23:a4: f6:32:f5:84:4b:ac:63:f6:9b:29:03:d3:b3:43:40: 82:77:9b:24:c2:28:d0:86:6c:10:59:be:20:57:e6: f2:4e:eb:e0:dd:25:ae:06:4c:65:b1:c2:c3:12:41: 35:9b:b2:c3:a4:b2:6b:1c:66:5e:99:ac:bd:37:d0: 44:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:45:6E:F5:49:A3:43:F2:6A:86:08:D2:F6:DB:F7:23:92:3A:2E:EB X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6kVu9UmjQ_JqhgjS9tv3I5I6Lus.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.128.0/18 Signature Algorithm: sha256WithRSAEncryption 5b:57:dc:a7:af:fa:f3:07:4d:fa:97:53:06:e4:a6:2f:1a:d7: 28:c2:aa:20:1f:27:e6:06:27:40:cd:60:45:53:4f:bb:27:c4: 4d:f5:73:f5:d9:08:aa:4c:af:3e:45:5a:c3:57:9a:55:3e:aa: 63:85:8a:e3:ed:78:d0:77:86:84:77:ad:b9:6d:35:fd:9f:1c: 29:e4:99:6f:93:d0:d0:8f:fc:56:b3:f0:39:7b:b1:30:01:a6: f4:4a:d7:34:39:f3:44:8b:36:7a:f8:3e:1d:b5:7f:3a:d9:c3: 43:85:84:14:63:9f:cf:b0:88:0a:6b:b0:c0:12:fb:0d:17:44: 16:1b:c3:86:49:ef:e0:9a:91:a7:93:71:7a:c4:57:98:df:70: b2:13:03:b5:aa:18:e0:29:eb:0d:c3:36:d3:d3:79:c1:7f:56: cd:78:36:cd:84:c6:59:85:18:2b:44:4f:59:7c:8e:9a:cb:b9: 03:65:7e:3e:3c:e8:3b:dd:c5:5b:cf:14:65:c8:0d:97:b8:e1: 64:25:17:a4:53:2c:bb:12:58:84:56:5e:d9:d2:3f:5d:5c:39: a1:30:b4:2d:ce:07:cc:16:2a:3d:8b:5c:1c:bd:4a:e9:26:74: fc:d8:dd:22:0c:27:8a:29:93:7d:8c:58:f4:17:a9:c5:25:8d: 49:63:3a:5b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOV0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2MTNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEVBNDU2RUY1NDlBMzQz RjI2QTg2MDhEMkY2REJGNzIzOTIzQTJFRUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIlhZYC5gJ9Ad4YxAmIS+VNEieOwQfczKf8Bm7k0KJHKK2+k9U QADYvk29OkW7o2qXlbp76zGbD7dXCCmn4W5lHWqcRhk5Iwll8mkZSHZO0d+uiwD8 Wzo4mXSRHHK4QKyDG/bnW5UemSSkJjeQxlvw41BNCGLGD/8X6rvs8rgBqJGdtbIh 1BY47wGwZzj0IkpicAEheiyK5C3qOMQEz5ipRiHJWS7K8uF3v6/GJp3cbTisko86 R54Sjf4kd+XPxzIjpPYy9YRLrGP2mykD07NDQIJ3myTCKNCGbBBZviBX5vJO6+Dd Ja4GTGWxwsMSQTWbssOksmscZl6ZrL030EQ9AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU6kVu9UmjQ/JqhgjS9tv3I5I6LuswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzZrVnU5VW1qUV9KcWhnalM5 dHYzSTVJNkx1cy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZ7 w4AwDQYJKoZIhvcNAQELBQADggEBAFtX3Kev+vMHTfqXUwbkpi8a1yjCqiAfJ+YG J0DNYEVTT7snxE31c/XZCKpMrz5FWsNXmlU+qmOFiuPteNB3hoR3rbltNf2fHCnk mW+T0NCP/Faz8Dl7sTABpvRK1zQ580SLNnr4Ph21fzrZw0OFhBRjn8+wiAprsMAS +w0XRBYbw4ZJ7+CakaeTcXrEV5jfcLITA7WqGOAp6w3DNtPTecF/Vs14Ns2ExlmF GCtET1l8jprLuQNlfj486DvdxVvPFGXIDZe44WQlF6RTLLsSWIRWXtnSP11cOaEw tC3OB8wWKj2LXBy9SukmdPzY3SIMJ4opk32MWPQXqcUljUljOls= -----END CERTIFICATE-----Generated at Sun Aug 24 07:29:31 2025 by rpki-client