$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/72KLkcFfeY3VoHF6KszCRDu7mdo.roa File: 72KLkcFfeY3VoHF6KszCRDu7mdo.roa (raw, json) Hash identifier: UKFtfFFb2Yvs7d+117OGAH0b6lNJ4nSUkoDre+q6NPs= Subject key identifier: EF:62:8B:91:C1:5F:79:8D:D5:A0:71:7A:2A:CC:C2:44:3B:BB:99:DA Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3AE7 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/72KLkcFfeY3VoHF6KszCRDu7mdo.roa Signing time: Fri 22 Aug 2025 08:47:52 +0000 ROA not before: Fri 22 Aug 2025 08:47:52 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 118.233.122.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15079 (0x3ae7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:52 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=EF628B91C15F798DD5A0717A2ACCC2443BBB99DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9c:7c:1f:42:2b:e8:60:02:54:24:d3:24:73: 18:34:a4:73:b4:78:28:8b:b5:35:c5:c1:cb:ab:78: 68:d8:67:fb:cb:41:fb:e6:89:4f:0b:2d:cb:9e:ea: 0a:dc:f0:d0:ed:5a:6e:cc:8e:3a:e6:48:2e:e3:8d: 63:b8:5a:06:4f:c1:8e:50:3b:c8:c9:04:b5:be:a6: 0d:67:06:3f:72:b8:89:04:dc:c0:0c:1b:2e:73:dc: 51:32:7e:04:c8:e4:02:06:98:9c:39:ed:26:27:76: 3f:22:1a:e9:4c:65:f4:be:55:50:d0:83:ce:36:4b: 13:90:47:7b:96:f0:99:bd:88:f3:06:77:9f:9c:6a: ef:aa:f2:19:02:45:c3:da:7e:96:9a:44:56:2f:e7: a1:66:4d:be:6d:f7:64:fa:1a:5e:cb:3d:a9:54:a7: d0:53:77:71:bb:95:cc:b6:d5:c2:a2:41:77:0c:73: 1c:c2:3e:2a:cd:25:63:0c:73:65:44:4f:87:c0:cd: 32:c8:b2:72:8a:df:ca:54:42:27:f5:93:8e:53:fd: 8f:0f:75:d0:bb:63:cd:7f:38:4a:64:f8:c8:05:0f: 65:bd:70:d8:69:ea:e1:e9:d6:bb:f9:d9:00:65:73: 20:55:a0:c0:70:ab:5c:8a:32:ed:bf:c4:1d:23:55: c9:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:62:8B:91:C1:5F:79:8D:D5:A0:71:7A:2A:CC:C2:44:3B:BB:99:DA X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/72KLkcFfeY3VoHF6KszCRDu7mdo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.122.0/23 Signature Algorithm: sha256WithRSAEncryption 36:ad:4c:20:cd:25:54:36:04:1c:e1:ce:9f:f7:e9:ae:98:c8: 6f:c5:e3:3d:b4:33:90:c7:5d:73:b6:f4:e9:2c:c5:ab:09:12: 85:25:6b:b3:e6:a4:4e:e3:b3:0d:26:d3:ce:e4:1a:22:df:dd: 3b:9e:9a:c3:08:4d:25:50:62:b3:ca:8c:e2:47:8b:63:33:c0: a8:36:0e:07:3a:ec:08:b3:8a:45:8a:f7:ef:f8:f3:27:62:7b: 97:dd:6c:3f:0e:6e:ac:d0:09:6e:49:e2:92:bf:e2:a9:c1:24: 57:2c:1a:1b:d4:77:9b:7e:cc:bf:d4:5e:7d:5c:5f:e7:7e:91: f8:a9:5b:d6:c3:e5:f7:ce:47:29:33:63:e7:fe:6b:52:d3:57: b8:70:76:07:b9:55:6c:68:60:b1:5a:72:18:44:aa:2c:5c:7b: cd:8f:55:51:3f:59:34:20:f2:df:c9:5c:59:1b:f3:21:31:f8: a1:84:60:4a:2d:41:da:30:9a:4d:a2:0d:9c:b4:2c:5b:2d:55: 15:1b:ba:21:5e:d6:24:1d:b2:f0:21:c5:46:d2:2d:b8:d5:7a: c9:a8:f2:fb:08:a2:91:c8:01:75:de:b2:ed:46:72:9f:e5:0c: 9b:38:a5:59:73:9b:83:94:79:5b:39:ed:e6:e5:4e:9c:51:2f: 9c:2a:65:14 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOucwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3NTJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEVGNjI4QjkxQzE1Rjc5 OERENUEwNzE3QTJBQ0NDMjQ0M0JCQjk5REEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1nHwfQivoYAJUJNMkcxg0pHO0eCiLtTXFwcureGjYZ/vLQfvm iU8LLcue6grc8NDtWm7MjjrmSC7jjWO4WgZPwY5QO8jJBLW+pg1nBj9yuIkE3MAM Gy5z3FEyfgTI5AIGmJw57SYndj8iGulMZfS+VVDQg842SxOQR3uW8Jm9iPMGd5+c au+q8hkCRcPafpaaRFYv56FmTb5t92T6Gl7LPalUp9BTd3G7lcy21cKiQXcMcxzC PirNJWMMc2VET4fAzTLIsnKK38pUQif1k45T/Y8PddC7Y81/OEpk+MgFD2W9cNhp 6uHp1rv52QBlcyBVoMBwq1yKMu2/xB0jVclNAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU72KLkcFfeY3VoHF6KszCRDu7mdowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzcyS0xrY0ZmZVkzVm9IRjZL c3pDUkR1N21kby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF2 6XowDQYJKoZIhvcNAQELBQADggEBADatTCDNJVQ2BBzhzp/36a6YyG/F4z20M5DH XXO29OksxasJEoUla7PmpE7jsw0m087kGiLf3TuemsMITSVQYrPKjOJHi2MzwKg2 Dgc67AizikWK9+/48ydie5fdbD8ObqzQCW5J4pK/4qnBJFcsGhvUd5t+zL/UXn1c X+d+kfipW9bD5ffORykzY+f+a1LTV7hwdge5VWxoYLFachhEqixce82PVVE/WTQg 8t/JXFkb8yEx+KGEYEotQdowmk2iDZy0LFstVRUbuiFe1iQdsvAhxUbSLbjVesmo 8vsIopHIAXXesu1Gcp/lDJs4pVlzm4OUeVs57eblTpxRL5wqZRQ= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:18 2025 by rpki-client