$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7S_czCWQPrnPtbOLMr3pddSPfxY.roa File: 7S_czCWQPrnPtbOLMr3pddSPfxY.roa (raw, json) Hash identifier: vXVgZnqZoGZn32QruYTUL8/XDzV4wrRzyhyZwbHPuQE= Subject key identifier: ED:2F:DC:CC:25:90:3E:B9:CF:B5:B3:8B:32:BD:E9:75:D4:8F:7F:16 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3816 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7S_czCWQPrnPtbOLMr3pddSPfxY.roa Signing time: Fri 22 Aug 2025 08:44:56 +0000 ROA not before: Fri 22 Aug 2025 08:44:56 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 211.76.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14358 (0x3816) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:44:56 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=ED2FDCCC25903EB9CFB5B38B32BDE975D48F7F16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:78:3b:65:cb:54:1d:40:84:9a:9d:af:d6:2b: 2e:02:de:c1:6a:46:73:49:d1:09:54:24:4f:90:04: be:1b:f3:64:61:8e:bd:c7:57:30:5d:ad:81:5a:3e: 7c:8a:a7:a5:be:87:15:ca:e3:06:f7:3f:bd:ea:a5: be:0d:f1:6c:98:15:b7:19:ad:b2:d5:41:4a:a1:de: c4:ed:ea:6b:a0:93:b2:18:29:17:61:5e:38:11:d7: a9:dc:fe:d3:8d:72:a1:7c:e4:fb:01:b1:bb:6b:0a: 21:cf:27:47:ff:5f:42:1e:2d:19:cd:18:a9:e3:d5: 08:c0:b5:ea:b5:6c:05:92:4c:69:3a:ca:6e:fa:c5: 2d:b1:3b:10:d9:03:c4:d7:e6:42:8d:7c:b8:dc:6b: c4:89:75:a7:ae:bc:18:e6:e8:ee:2f:79:ee:35:e5: a7:f7:a4:f8:43:35:64:32:74:1f:c6:1c:a5:5f:60: 1e:ec:c6:cd:18:ae:8d:98:4e:36:c4:3b:7e:cb:f7: a8:b2:3f:a5:c1:e9:f5:71:01:0e:cc:ce:49:8d:a2: 62:db:cf:1d:16:db:3c:09:c4:55:ac:43:ed:27:17: ab:56:fb:4c:c5:d7:ba:7e:4f:cb:68:bb:90:0a:5c: 64:72:68:bc:35:b9:10:24:30:f9:a0:f3:53:69:ff: c1:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:2F:DC:CC:25:90:3E:B9:CF:B5:B3:8B:32:BD:E9:75:D4:8F:7F:16 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7S_czCWQPrnPtbOLMr3pddSPfxY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.112.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:ec:b3:c6:c6:45:91:0d:b8:3b:f4:8a:c1:8e:5f:90:d7:39: c4:04:ee:78:7e:99:c8:b5:10:f2:fc:07:f2:6e:f0:f4:65:8b: 5a:a7:8d:ac:52:a4:88:89:97:33:36:d6:06:06:81:4c:a9:4c: c7:9c:40:f3:03:f3:af:2c:ed:b9:12:08:54:f9:e0:12:fe:53: 7a:9a:46:dd:10:46:bb:16:62:0d:17:b9:92:63:c3:8b:83:c3: 7d:91:10:07:da:88:f7:90:e8:9a:dd:e8:0f:78:ec:86:20:93: 6b:c6:e3:d2:e5:41:44:e9:e8:d2:fc:21:64:42:0f:7b:3d:b5: 22:18:d0:21:c5:85:f5:e1:fc:2c:f1:5b:b7:81:78:2b:1c:0c: 05:6e:81:4c:3b:7e:7e:12:24:37:ac:5d:11:77:25:86:55:18: bd:b8:43:4a:35:e4:00:e2:6d:1c:42:55:41:66:f1:a6:a1:22: c5:40:91:00:a8:fb:07:fc:50:68:c1:d9:66:6c:d1:90:ed:8b: dd:ee:5b:52:ec:10:a1:14:a1:a1:cf:08:92:53:c5:fc:51:0e: 8e:16:9d:c6:a7:c0:85:fa:1b:a0:d4:f5:19:5c:dd:d6:9a:6c: 01:e0:18:82:a0:1d:ea:e5:6f:1d:e7:f8:87:27:33:17:12:f9: bd:ea:21:10 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOBYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ0NTZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEVEMkZEQ0NDMjU5MDNF QjlDRkI1QjM4QjMyQkRFOTc1RDQ4RjdGMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+eDtly1QdQISana/WKy4C3sFqRnNJ0QlUJE+QBL4b82Rhjr3H VzBdrYFaPnyKp6W+hxXK4wb3P73qpb4N8WyYFbcZrbLVQUqh3sTt6mugk7IYKRdh XjgR16nc/tONcqF85PsBsbtrCiHPJ0f/X0IeLRnNGKnj1QjAteq1bAWSTGk6ym76 xS2xOxDZA8TX5kKNfLjca8SJdaeuvBjm6O4vee415af3pPhDNWQydB/GHKVfYB7s xs0Yro2YTjbEO37L96iyP6XB6fVxAQ7MzkmNomLbzx0W2zwJxFWsQ+0nF6tW+0zF 17p+T8tou5AKXGRyaLw1uRAkMPmg81Np/8HJAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU7S/czCWQPrnPtbOLMr3pddSPfxYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzdTX2N6Q1dRUHJuUHRiT0xN cjNwZGRTUGZ4WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADT THAwDQYJKoZIhvcNAQELBQADggEBAFvss8bGRZENuDv0isGOX5DXOcQE7nh+mci1 EPL8B/Ju8PRli1qnjaxSpIiJlzM21gYGgUypTMecQPMD868s7bkSCFT54BL+U3qa Rt0QRrsWYg0XuZJjw4uDw32REAfaiPeQ6Jrd6A947IYgk2vG49LlQUTp6NL8IWRC D3s9tSIY0CHFhfXh/CzxW7eBeCscDAVugUw7fn4SJDesXRF3JYZVGL24Q0o15ADi bRxCVUFm8aahIsVAkQCo+wf8UGjB2WZs0ZDti93uW1LsEKEUoaHPCJJTxfxRDo4W ncanwIX6G6DU9Rlc3daabAHgGIKgHerlbx3n+IcnMxcS+b3qIRA= -----END CERTIFICATE-----Generated at Sun Aug 24 07:26:36 2025 by rpki-client