$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8r7OX4PJ2HRTEUnUWaT1Tr9v30Y.roa File: 8r7OX4PJ2HRTEUnUWaT1Tr9v30Y.roa (raw, json) Hash identifier: tmHkWMgsnOklDHWuqPFL20eXXDjlRHJoS4TVTQyzcuU= Subject key identifier: F2:BE:CE:5F:83:C9:D8:74:53:11:49:D4:59:A4:F5:4E:BF:6F:DF:46 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 37F1 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8r7OX4PJ2HRTEUnUWaT1Tr9v30Y.roa Signing time: Fri 22 Aug 2025 08:44:49 +0000 ROA not before: Fri 22 Aug 2025 08:44:49 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 106.1.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14321 (0x37f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:44:49 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=F2BECE5F83C9D874531149D459A4F54EBF6FDF46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:58:34:f1:31:28:99:3f:ef:46:c5:c3:c0:7d: bc:79:e9:ae:bf:35:4b:87:6e:8c:33:cc:c7:2f:41: dd:bb:16:40:fd:ab:4d:0c:0f:93:52:8b:be:1c:2f: 93:22:87:26:30:f4:e4:b4:10:c6:48:f0:7e:96:e6: 49:df:f8:e5:c4:74:12:25:3c:dc:57:d9:83:6e:59: 1d:32:4a:b7:e2:33:08:3a:41:28:2d:32:97:df:5e: 0a:7b:cf:d9:1c:0a:71:4e:71:04:a6:f8:aa:36:8e: f0:e6:61:41:76:44:a5:b1:79:60:90:f8:82:4a:e4: d8:f3:58:3e:5f:93:b7:b9:39:16:a6:c2:86:a3:30: ad:97:fe:00:3f:08:36:70:19:9e:3b:50:cc:9a:16: e1:01:0b:a9:ae:fa:7e:0a:22:ff:7b:6b:be:ef:14: 4a:30:6e:67:dd:43:00:e5:bb:f9:52:2e:9b:24:c2: a2:54:4b:96:1c:b0:df:bd:41:7d:cd:cb:1a:e2:f2: d7:6b:03:5b:fb:1c:51:34:f0:a7:3a:7d:05:0b:50: 5e:ea:99:42:da:43:81:3e:b4:54:88:1c:ee:b5:6c: 0b:c1:70:dc:00:de:7a:dc:19:54:d2:ba:74:cd:e8: 67:cd:37:66:a3:db:8e:de:43:da:8b:1f:5d:78:42: 2c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:BE:CE:5F:83:C9:D8:74:53:11:49:D4:59:A4:F5:4E:BF:6F:DF:46 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8r7OX4PJ2HRTEUnUWaT1Tr9v30Y.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.224.0/22 Signature Algorithm: sha256WithRSAEncryption 35:52:16:41:3d:37:6a:3b:66:b3:ba:e4:a5:16:e8:3e:c2:4a: 5f:82:a8:80:12:f7:fc:0f:4e:4a:65:5c:28:66:52:bc:f4:1a: 04:48:0b:8b:28:34:15:5a:b1:6a:5e:5f:8a:b6:f7:cc:1c:12: fb:cb:b6:72:4e:ae:ae:8f:52:e2:4f:18:b7:41:f8:d4:a6:a4: a9:7a:11:92:90:a6:65:5a:59:7e:f7:39:c0:ba:0d:35:ca:07: b4:5a:ca:70:57:31:3f:64:d8:bd:76:2d:98:97:9a:24:38:47: 76:4a:44:fe:c0:6b:90:c0:ef:9c:f3:a9:0d:e1:9a:5d:7a:91: 75:54:26:d8:34:84:77:04:f9:be:f2:bd:9f:e8:05:f4:2c:02: 5a:9b:db:ca:c8:07:9d:36:10:1a:29:2d:5f:a8:14:4b:8b:6b: 2e:4d:30:74:99:c9:2d:11:32:7f:c3:08:23:9c:22:76:49:5c: a5:33:45:78:33:0a:64:b0:97:78:9f:83:72:57:ee:88:ed:85: 4e:a4:ef:ee:68:b0:e2:a2:fd:79:91:12:44:74:01:e6:8a:94: f8:6d:65:3c:31:1b:f3:bd:f5:9b:cf:64:d4:b7:f8:66:06:40: 7a:85:79:04:cf:5c:bb:eb:8e:5f:74:f9:c8:51:1b:50:4b:28: 7b:4a:aa:36 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICN/EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ0NDlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEYyQkVDRTVGODNDOUQ4 NzQ1MzExNDlENDU5QTRGNTRFQkY2RkRGNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMWDTxMSiZP+9GxcPAfbx56a6/NUuHbowzzMcvQd27FkD9q00M D5NSi74cL5MihyYw9OS0EMZI8H6W5knf+OXEdBIlPNxX2YNuWR0ySrfiMwg6QSgt MpffXgp7z9kcCnFOcQSm+Ko2jvDmYUF2RKWxeWCQ+IJK5NjzWD5fk7e5ORamwoaj MK2X/gA/CDZwGZ47UMyaFuEBC6mu+n4KIv97a77vFEowbmfdQwDlu/lSLpskwqJU S5YcsN+9QX3Nyxri8tdrA1v7HFE08Kc6fQULUF7qmULaQ4E+tFSIHO61bAvBcNwA 3nrcGVTSunTN6GfNN2aj247eQ9qLH114QiwVAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU8r7OX4PJ2HRTEUnUWaT1Tr9v30YwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzhyN09YNFBKMkhSVEVVblVX YVQxVHI5djMwWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq AeAwDQYJKoZIhvcNAQELBQADggEBADVSFkE9N2o7ZrO65KUW6D7CSl+CqIAS9/wP TkplXChmUrz0GgRIC4soNBVasWpeX4q298wcEvvLtnJOrq6PUuJPGLdB+NSmpKl6 EZKQpmVaWX73OcC6DTXKB7RaynBXMT9k2L12LZiXmiQ4R3ZKRP7Aa5DA75zzqQ3h ml16kXVUJtg0hHcE+b7yvZ/oBfQsAlqb28rIB502EBopLV+oFEuLay5NMHSZyS0R Mn/DCCOcInZJXKUzRXgzCmSwl3ifg3JX7ojthU6k7+5osOKi/XmREkR0AeaKlPht ZTwxG/O99ZvPZNS3+GYGQHqFeQTPXLvrjl90+chRG1BLKHtKqjY= -----END CERTIFICATE-----Generated at Sun Aug 24 07:24:11 2025 by rpki-client