$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7yjZEUJ3JDYCZs_ryBf4xMV09IY.roa File: 7yjZEUJ3JDYCZs_ryBf4xMV09IY.roa (raw, json) Hash identifier: nN2J4zAE8u0e+TLo9J8NFIJlqdjrq4C6PIpOHyUtLAY= Subject key identifier: EF:28:D9:11:42:77:24:36:02:66:CF:EB:C8:17:F8:C4:C5:74:F4:86 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 39F0 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7yjZEUJ3JDYCZs_ryBf4xMV09IY.roa Signing time: Fri 22 Aug 2025 08:46:49 +0000 ROA not before: Fri 22 Aug 2025 08:46:49 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.194.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14832 (0x39f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:49 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=EF28D911427724360266CFEBC817F8C4C574F486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d1:3f:ec:61:f8:78:39:fd:c7:c0:c4:ab:eb: 15:6c:a4:14:4b:bc:b2:81:7f:e2:84:3a:6d:ef:4d: 9f:00:a3:16:59:85:01:0d:df:54:66:70:c2:f9:43: 1b:64:38:87:02:d4:06:73:42:80:ca:00:ae:a3:a3: fd:66:c7:4f:f8:24:2f:e6:62:79:74:f4:cc:e5:c9: f9:fc:2b:a8:c6:9e:30:ad:db:71:14:02:87:5e:be: 58:ac:a9:45:57:b7:5a:7c:66:e2:9f:1e:ee:d6:d4: 75:bb:d3:09:a5:5a:83:a6:b9:ec:f5:bd:b0:8e:36: d9:61:eb:b2:98:45:6e:40:9d:32:6c:f7:36:98:8c: bf:f9:e7:37:7d:08:88:6c:5e:a3:50:7c:5d:c0:29: ec:ff:97:eb:fa:49:7c:c8:6a:5d:18:cf:fb:94:60: 88:25:16:ea:22:06:48:65:52:91:13:45:2d:7d:87: 06:46:0a:2b:f3:c3:ed:dd:00:d1:24:df:f5:7d:74: 9a:9e:c9:9c:e2:a5:ea:75:54:4a:cc:54:39:58:90: 1e:c9:a7:a8:49:7c:10:6b:d5:2c:28:18:53:a4:67: fb:cd:4c:36:74:1e:c0:5f:6e:51:09:4c:1d:55:25: 33:64:df:ea:1d:22:83:ec:ea:3f:77:b6:f5:41:0b: 2c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:28:D9:11:42:77:24:36:02:66:CF:EB:C8:17:F8:C4:C5:74:F4:86 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7yjZEUJ3JDYCZs_ryBf4xMV09IY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.168.0/22 Signature Algorithm: sha256WithRSAEncryption 6e:98:7f:05:5f:02:71:08:b2:54:b1:df:01:a1:69:02:a2:60: ac:6f:24:ef:ff:cd:21:41:4b:f2:2f:4a:84:78:7f:77:bf:a9: 50:a2:e7:45:b0:96:cd:09:f2:1c:b6:68:b2:23:ce:c2:bd:b9: ec:63:01:ef:f8:e9:d1:b0:08:f2:68:61:d7:2b:ee:60:6a:ad: dd:c1:cd:a0:97:70:e8:20:2b:18:0e:f6:b2:a8:91:74:31:c9: 39:32:f4:f7:5a:ef:96:49:b1:31:19:f0:08:3b:b0:3d:a1:c9: e3:b2:af:67:e7:28:0a:df:5a:14:0d:66:96:84:43:b5:f9:db: 39:26:e1:e9:5a:d1:9a:08:42:12:2a:d9:75:36:92:9c:aa:77: cc:64:9d:52:14:af:c4:01:30:af:f1:99:7f:49:f3:7f:1a:8d: 3f:4d:6a:40:9c:0a:ed:00:f7:0e:c6:38:96:02:bc:8e:9f:0b: 0f:25:e0:a8:99:37:1f:52:24:e5:da:40:2b:80:13:db:2d:4c: 9a:d5:6c:b8:d6:18:9b:74:42:dc:1d:6d:39:6c:e3:41:ac:46: 1b:6a:16:be:9c:4f:3d:96:6e:3d:fb:15:c6:8a:60:07:25:3d: cc:44:78:29:d3:06:69:9e:71:65:4b:e3:b9:ba:de:dc:5a:ee: a0:08:38:32 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOfAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2NDlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEVGMjhEOTExNDI3NzI0 MzYwMjY2Q0ZFQkM4MTdGOEM0QzU3NEY0ODYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC80T/sYfh4Of3HwMSr6xVspBRLvLKBf+KEOm3vTZ8AoxZZhQEN 31RmcML5QxtkOIcC1AZzQoDKAK6jo/1mx0/4JC/mYnl09Mzlyfn8K6jGnjCt23EU AodevlisqUVXt1p8ZuKfHu7W1HW70wmlWoOmuez1vbCONtlh67KYRW5AnTJs9zaY jL/55zd9CIhsXqNQfF3AKez/l+v6SXzIal0Yz/uUYIglFuoiBkhlUpETRS19hwZG Civzw+3dANEk3/V9dJqeyZzipep1VErMVDlYkB7Jp6hJfBBr1SwoGFOkZ/vNTDZ0 HsBfblEJTB1VJTNk3+odIoPs6j93tvVBCyyJAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU7yjZEUJ3JDYCZs/ryBf4xMV09IYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzd5alpFVUozSkRZQ1pzX3J5 QmY0eE1WMDlJWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wqgwDQYJKoZIhvcNAQELBQADggEBAG6YfwVfAnEIslSx3wGhaQKiYKxvJO//zSFB S/IvSoR4f3e/qVCi50Wwls0J8hy2aLIjzsK9uexjAe/46dGwCPJoYdcr7mBqrd3B zaCXcOggKxgO9rKokXQxyTky9Pda75ZJsTEZ8Ag7sD2hyeOyr2fnKArfWhQNZpaE Q7X52zkm4ela0ZoIQhIq2XU2kpyqd8xknVIUr8QBMK/xmX9J838ajT9NakCcCu0A 9w7GOJYCvI6fCw8l4KiZNx9SJOXaQCuAE9stTJrVbLjWGJt0QtwdbTls40GsRhtq Fr6cTz2Wbj37FcaKYAclPcxEeCnTBmmecWVL47m63txa7qAIODI= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:44 2025 by rpki-client