$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7sOLUY7gEbl8_dUo0yr7OazeQXA.roa File: 7sOLUY7gEbl8_dUo0yr7OazeQXA.roa (raw, json) Hash identifier: AV+UneUO3jBTz9V5OAkF8pnvtK2zV9x+pBYnXpo/b+Y= Subject key identifier: EE:C3:8B:51:8E:E0:11:B9:7C:FD:D5:28:D3:2A:FB:39:AC:DE:41:70 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 38D7 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7sOLUY7gEbl8_dUo0yr7OazeQXA.roa Signing time: Fri 22 Aug 2025 08:45:41 +0000 ROA not before: Fri 22 Aug 2025 08:45:41 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.195.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14551 (0x38d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:41 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=EEC38B518EE011B97CFDD528D32AFB39ACDE4170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f3:0a:8b:99:30:79:97:1b:2d:62:47:5f:93: 03:2a:52:72:be:29:75:ed:4c:7d:73:9a:f6:76:41: 22:38:93:5a:41:8a:79:e4:18:79:8d:ba:96:f1:70: e8:ef:0f:22:d0:35:f7:0d:20:b8:b2:a3:1d:23:f0: f8:31:cc:1e:9b:f2:44:a3:e7:87:3e:74:c1:95:18: 0f:f4:e7:80:e3:37:ca:e6:f9:8e:b3:d2:1f:1b:07: 24:0f:34:54:44:35:97:ae:b8:d8:a0:e0:36:ab:00: ed:f5:aa:76:02:f4:9d:a8:14:14:ed:2a:fc:d7:77: 28:ae:77:f4:23:74:45:fa:ea:6c:e4:4c:52:f4:9a: a4:5f:bd:51:43:31:49:72:88:ed:d1:26:91:c5:b8: 91:61:68:7c:2a:80:e5:cd:2d:6b:73:e9:ec:58:27: c0:4b:f8:43:75:86:bf:ec:8b:c3:82:1b:5a:20:20: eb:3d:74:87:89:17:03:22:9a:b1:9a:d9:5d:01:09: 4d:65:44:1a:75:11:d0:de:ff:54:3d:bd:b4:b9:75: 84:eb:08:18:3f:7b:79:b5:3d:bf:3e:ba:23:98:48: 32:ff:ad:da:18:f9:1c:17:bb:6d:5b:ee:b5:4e:1a: d4:4a:78:f9:b7:1d:e4:27:b9:55:15:01:2d:47:bf: 74:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:C3:8B:51:8E:E0:11:B9:7C:FD:D5:28:D3:2A:FB:39:AC:DE:41:70 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7sOLUY7gEbl8_dUo0yr7OazeQXA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.204.0/22 Signature Algorithm: sha256WithRSAEncryption 60:32:4d:70:56:9a:af:79:c5:c6:ef:90:cd:df:40:14:19:ce: 99:cc:86:03:93:2d:13:43:d3:a9:39:a1:ae:f2:dd:9e:bd:65: 73:ae:97:18:22:6e:2a:d0:3f:fc:42:aa:e6:1f:5a:e3:80:1c: cb:ef:fb:28:00:05:8e:be:c1:2c:88:9d:95:da:bb:7e:1b:c5: 42:8e:56:9e:7b:c8:39:82:e2:42:85:3a:92:37:5a:7b:79:cd: 29:b0:18:68:bd:25:7c:e5:e3:cc:90:d5:f5:eb:11:72:a6:e4: 6f:20:37:8f:b3:75:31:4c:75:7d:f9:88:5c:26:c5:0a:20:e1: 40:e6:ea:e4:ef:e9:7a:c6:d3:19:7a:d5:78:9e:fc:6c:b4:60: ba:9f:3f:67:8a:cf:cf:15:02:2e:f2:5e:98:81:f9:95:e3:21: 81:af:ee:13:cb:95:4f:18:02:48:30:b3:5e:06:7f:7f:e6:47: d9:a6:96:be:72:a7:08:92:68:41:e3:6f:da:3e:1d:c2:66:97: c4:3f:74:ee:ec:99:82:a0:a5:78:86:6d:d7:c5:52:a4:83:36: 9c:66:c7:4f:9e:74:53:56:19:b0:c6:f7:48:28:20:50:aa:7e: ed:52:6e:69:08:8f:22:20:96:de:f6:9d:91:40:ee:1d:d8:ae: b8:ac:de:6b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICONcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1NDFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEVFQzM4QjUxOEVFMDEx Qjk3Q0ZERDUyOEQzMkFGQjM5QUNERTQxNzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDM8wqLmTB5lxstYkdfkwMqUnK+KXXtTH1zmvZ2QSI4k1pBinnk GHmNupbxcOjvDyLQNfcNILiyox0j8PgxzB6b8kSj54c+dMGVGA/054DjN8rm+Y6z 0h8bByQPNFRENZeuuNig4DarAO31qnYC9J2oFBTtKvzXdyiud/QjdEX66mzkTFL0 mqRfvVFDMUlyiO3RJpHFuJFhaHwqgOXNLWtz6exYJ8BL+EN1hr/si8OCG1ogIOs9 dIeJFwMimrGa2V0BCU1lRBp1EdDe/1Q9vbS5dYTrCBg/e3m1Pb8+uiOYSDL/rdoY +RwXu21b7rVOGtRKePm3HeQnuVUVAS1Hv3QPAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU7sOLUY7gEbl8/dUo0yr7OazeQXAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzdzT0xVWTdnRWJsOF9kVW8w eXI3T2F6ZVFYQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 w8wwDQYJKoZIhvcNAQELBQADggEBAGAyTXBWmq95xcbvkM3fQBQZzpnMhgOTLRND 06k5oa7y3Z69ZXOulxgibirQP/xCquYfWuOAHMvv+ygABY6+wSyInZXau34bxUKO Vp57yDmC4kKFOpI3Wnt5zSmwGGi9JXzl48yQ1fXrEXKm5G8gN4+zdTFMdX35iFwm xQog4UDm6uTv6XrG0xl61Xie/Gy0YLqfP2eKz88VAi7yXpiB+ZXjIYGv7hPLlU8Y Akgws14Gf3/mR9mmlr5ypwiSaEHjb9o+HcJml8Q/dO7smYKgpXiGbdfFUqSDNpxm x0+edFNWGbDG90goIFCqfu1SbmkIjyIglt72nZFA7h3Yrris3ms= -----END CERTIFICATE-----Generated at Sun Aug 24 07:31:56 2025 by rpki-client