$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/98ZJZtuNAWmA0Y79CaKoqHJaTnI.roa File: 98ZJZtuNAWmA0Y79CaKoqHJaTnI.roa (raw, json) Hash identifier: 2HU1XGOteqE6dr9MtiufEKzreFvyu0aAQbmZyCIrsuQ= Subject key identifier: F7:C6:49:66:DB:8D:01:69:80:D1:8E:FD:09:A2:A8:A8:72:5A:4E:72 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3A29 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/98ZJZtuNAWmA0Y79CaKoqHJaTnI.roa Signing time: Fri 22 Aug 2025 08:47:05 +0000 ROA not before: Fri 22 Aug 2025 08:47:05 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 106.1.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14889 (0x3a29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:05 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=F7C64966DB8D016980D18EFD09A2A8A8725A4E72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b2:42:17:68:c0:c3:67:04:eb:02:e8:94:f6: 95:c2:4e:bc:a5:c8:cd:00:6a:b7:46:a7:59:64:f1: 8d:3f:42:04:d5:46:f0:35:e8:03:44:6b:dd:b1:85: 97:e2:b1:69:ad:28:37:70:e8:1a:16:8f:96:0e:40: 2d:6c:c5:8a:92:f1:42:6f:e7:ec:91:26:c8:39:ef: 9a:99:0e:74:e0:6e:c7:7a:8d:bd:d8:a6:d8:8f:b2: d1:78:d9:51:e6:44:6c:52:84:30:04:57:af:b8:5b: 9e:12:2f:85:d8:c5:cd:64:cb:3b:7b:6b:0a:4b:77: 26:6c:eb:58:1d:28:50:63:14:c2:70:5f:36:7a:05: 39:66:1a:da:fb:87:78:e4:95:8f:7a:c8:e8:48:2c: a3:3b:0c:ca:c7:d8:f1:c5:d1:c7:9a:b6:77:83:4b: f0:d2:28:a9:f7:c3:9d:c9:db:2d:19:a1:0e:98:40: bb:ff:db:12:9d:fa:e0:1e:05:15:f6:6b:d5:be:ab: cc:42:8a:e3:39:93:ef:34:39:5c:32:dc:a8:4f:de: 13:59:20:ba:5a:2f:1a:49:65:93:4f:21:5e:09:de: 47:0b:bb:31:9b:64:6d:a7:c3:cc:b7:4c:f5:13:00: 71:96:5b:e2:b8:c7:94:bf:d5:22:5d:41:7e:9c:5e: d6:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:C6:49:66:DB:8D:01:69:80:D1:8E:FD:09:A2:A8:A8:72:5A:4E:72 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/98ZJZtuNAWmA0Y79CaKoqHJaTnI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.100.0/22 Signature Algorithm: sha256WithRSAEncryption 35:38:bf:fc:c9:9a:7d:7e:c1:58:f4:ac:97:55:d9:84:23:8c: 92:a6:76:fb:95:40:9b:71:a0:ab:24:7b:d1:03:42:17:1f:e3: d3:84:8c:26:f7:1f:ed:2a:03:78:49:f5:7a:cc:58:6f:28:b7: 7f:b5:26:87:43:4b:45:92:86:c4:6c:b0:5a:58:1d:43:33:3b: 7d:6f:fa:e8:5c:f3:df:de:dd:00:29:9a:fb:e6:7b:52:6c:af: c3:b6:f7:e6:12:e2:ef:b9:a8:45:3e:e2:32:14:52:f1:9f:d9: ee:74:be:ca:2e:c2:38:16:17:96:d2:11:3b:d1:5e:87:a0:5f: 8f:8e:dd:44:e4:0b:99:56:5d:02:81:33:fc:bc:af:6e:e5:34: 2d:cb:13:1f:d3:ec:2f:2a:a4:43:2d:81:bb:d7:2e:39:bb:e3: 37:9e:57:72:c3:2b:7c:88:9e:34:db:05:23:51:e8:91:cc:54: 22:bd:4c:ff:bb:4e:52:1c:40:ae:4f:74:3f:70:67:ae:1b:c1: 5a:c9:4b:8a:6e:ca:92:62:4d:89:c6:37:e0:d6:1e:42:06:6a: eb:ef:2d:68:9c:2f:3d:e0:a5:32:1a:d3:f7:ef:30:d2:71:7f: 48:7a:92:86:ab:23:73:73:67:72:a0:fe:0c:8a:ca:67:ae:b9: 3d:58:b6:a9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOikwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3MDVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEY3QzY0OTY2REI4RDAx Njk4MEQxOEVGRDA5QTJBOEE4NzI1QTRFNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYskIXaMDDZwTrAuiU9pXCTrylyM0AardGp1lk8Y0/QgTVRvA1 6ANEa92xhZfisWmtKDdw6BoWj5YOQC1sxYqS8UJv5+yRJsg575qZDnTgbsd6jb3Y ptiPstF42VHmRGxShDAEV6+4W54SL4XYxc1kyzt7awpLdyZs61gdKFBjFMJwXzZ6 BTlmGtr7h3jklY96yOhILKM7DMrH2PHF0ceatneDS/DSKKn3w53J2y0ZoQ6YQLv/ 2xKd+uAeBRX2a9W+q8xCiuM5k+80OVwy3KhP3hNZILpaLxpJZZNPIV4J3kcLuzGb ZG2nw8y3TPUTAHGWW+K4x5S/1SJdQX6cXtb9AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU98ZJZtuNAWmA0Y79CaKoqHJaTnIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzk4WkpadHVOQVdtQTBZNzlD YUtvcUhKYVRuSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq AWQwDQYJKoZIhvcNAQELBQADggEBADU4v/zJmn1+wVj0rJdV2YQjjJKmdvuVQJtx oKske9EDQhcf49OEjCb3H+0qA3hJ9XrMWG8ot3+1JodDS0WShsRssFpYHUMzO31v +uhc89/e3QApmvvme1Jsr8O29+YS4u+5qEU+4jIUUvGf2e50vsouwjgWF5bSETvR XoegX4+O3UTkC5lWXQKBM/y8r27lNC3LEx/T7C8qpEMtgbvXLjm74zeeV3LDK3yI njTbBSNR6JHMVCK9TP+7TlIcQK5PdD9wZ64bwVrJS4puypJiTYnGN+DWHkIGauvv LWicLz3gpTIa0/fvMNJxf0h6koarI3NzZ3Kg/gyKymeuuT1Ytqk= -----END CERTIFICATE-----Generated at Sun Aug 24 07:28:24 2025 by rpki-client