$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7Vc1ULSymeqLnCLi0O_gtk1iZik.roa File: 7Vc1ULSymeqLnCLi0O_gtk1iZik.roa (raw, json) Hash identifier: 89k5/ck5w8N7uo0Gmgy7bhWqRsgSR3TpPfeaI4Z/ROI= Subject key identifier: ED:57:35:50:B4:B2:99:EA:8B:9C:22:E2:D0:EF:E0:B6:4D:62:66:29 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3AE9 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7Vc1ULSymeqLnCLi0O_gtk1iZik.roa Signing time: Fri 22 Aug 2025 08:47:53 +0000 ROA not before: Fri 22 Aug 2025 08:47:53 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 211.76.115.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15081 (0x3ae9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:53 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=ED573550B4B299EA8B9C22E2D0EFE0B64D626629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ca:78:71:37:ee:3c:1d:d3:94:11:90:15:a2: f4:f3:0c:25:4a:a0:a2:78:e0:99:ff:64:18:23:ed: 45:64:79:ed:fc:41:e8:75:c1:bd:e1:e6:4f:8a:b8: 01:c3:f4:46:9f:61:f9:a1:29:bd:32:91:62:f8:0e: 90:30:85:c7:ae:8d:27:f7:ae:c6:ce:85:a5:20:39: 98:c9:ef:b5:b5:1b:44:4c:f1:ba:c9:69:6f:a0:49: f7:f4:14:19:8c:e1:67:28:01:42:76:5d:aa:04:10: d7:a7:be:fd:ac:3f:b5:50:58:0d:5e:77:e5:20:7e: 63:d5:7b:00:ed:49:9c:37:50:f8:b8:5d:96:c7:b4: 22:2b:64:e1:b8:a3:32:f6:8a:87:12:9a:a7:b1:d8: f2:d7:80:d4:ba:2c:91:fa:ad:58:e7:1e:28:af:0d: 76:7e:3d:60:4e:d4:cb:e7:94:59:f4:0e:01:ed:80: 63:88:ca:b7:ac:60:ec:48:5c:13:93:46:9d:fd:01: 28:da:86:f2:63:1e:b1:6d:de:18:6c:64:bf:13:c8: bf:63:5c:fa:be:2a:fb:a6:00:23:33:bf:d5:93:1f: 56:24:28:65:6c:1e:9d:b9:20:de:52:bc:83:42:b0: 93:81:86:39:7d:39:dd:a8:c5:19:ed:a4:f5:69:98: c8:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:57:35:50:B4:B2:99:EA:8B:9C:22:E2:D0:EF:E0:B6:4D:62:66:29 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7Vc1ULSymeqLnCLi0O_gtk1iZik.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.115.128/25 Signature Algorithm: sha256WithRSAEncryption 5d:be:1a:7b:7d:b6:b0:40:23:e3:45:39:c7:1c:7b:fa:81:86: 0c:10:2f:db:50:a4:5a:40:7c:b7:1b:7b:ad:91:0d:ab:dd:a2: 7e:ec:5f:f4:c7:ba:cb:db:08:90:84:24:7f:dc:33:a8:81:71: e5:18:b1:9c:f1:60:28:ae:b0:09:99:09:55:da:af:65:1e:e1: 7a:30:be:f3:51:bf:7d:84:e2:74:ca:9c:ad:24:e6:78:c1:ec: cb:c8:82:ab:f4:0c:71:b9:23:96:98:95:ac:94:80:d1:af:88: ca:74:44:7c:b5:eb:01:ee:f4:13:c2:25:bf:99:de:af:83:a3: e6:bd:0e:a1:9b:8e:29:c2:d7:67:b1:56:bb:77:c4:33:e2:11: 63:d8:c0:00:47:b8:36:5c:8a:67:03:d4:77:52:f1:86:0e:e0: b3:d4:aa:4d:62:15:27:3d:81:40:0c:24:25:21:2c:df:06:50: eb:69:97:17:07:2c:35:7c:eb:fb:70:cd:e5:96:56:ef:40:23: 9b:5e:e6:3f:47:27:e1:18:bd:df:1f:c6:97:d3:4d:f2:da:9e: 81:c6:6c:67:b9:58:93:5e:7d:37:ba:3d:44:0a:b6:ff:6a:24: 5c:36:8c:63:82:0b:04:bb:b5:82:08:7e:de:22:93:75:70:c8: ca:c5:35:38 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICOukwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3NTNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEVENTczNTUwQjRCMjk5 RUE4QjlDMjJFMkQwRUZFMEI2NEQ2MjY2MjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxynhxN+48HdOUEZAVovTzDCVKoKJ44Jn/ZBgj7UVkee38Qeh1 wb3h5k+KuAHD9EafYfmhKb0ykWL4DpAwhceujSf3rsbOhaUgOZjJ77W1G0RM8brJ aW+gSff0FBmM4WcoAUJ2XaoEENenvv2sP7VQWA1ed+UgfmPVewDtSZw3UPi4XZbH tCIrZOG4ozL2iocSmqex2PLXgNS6LJH6rVjnHiivDXZ+PWBO1MvnlFn0DgHtgGOI yresYOxIXBOTRp39ASjahvJjHrFt3hhsZL8TyL9jXPq+KvumACMzv9WTH1YkKGVs Hp25IN5SvINCsJOBhjl9Od2oxRntpPVpmMjbAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQU7Vc1ULSymeqLnCLi0O/gtk1iZikwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzdWYzFVTFN5bWVxTG5DTGkw T19ndGsxaVppay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQfT THOAMA0GCSqGSIb3DQEBCwUAA4IBAQBdvhp7fbawQCPjRTnHHHv6gYYMEC/bUKRa QHy3G3utkQ2r3aJ+7F/0x7rL2wiQhCR/3DOogXHlGLGc8WAorrAJmQlV2q9lHuF6 ML7zUb99hOJ0ypytJOZ4wezLyIKr9AxxuSOWmJWslIDRr4jKdER8tesB7vQTwiW/ md6vg6PmvQ6hm44pwtdnsVa7d8Qz4hFj2MAAR7g2XIpnA9R3UvGGDuCz1KpNYhUn PYFADCQlISzfBlDraZcXByw1fOv7cM3lllbvQCObXuY/RyfhGL3fH8aX003y2p6B xmxnuViTXn03uj1ECrb/aiRcNoxjggsEu7WCCH7eIpN1cMjKxTU4 -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:56 2025 by rpki-client