$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9HJKld_FAL1fa8BiX_RsDn3hV60.roa File: 9HJKld_FAL1fa8BiX_RsDn3hV60.roa (raw, json) Hash identifier: c0X0DCRY0bCwwBKHlz8Fgh+S87d5spMA98U/TGDqT/g= Subject key identifier: F4:72:4A:95:DF:C5:00:BD:5F:6B:C0:62:5F:F4:6C:0E:7D:E1:57:AD Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 387F Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9HJKld_FAL1fa8BiX_RsDn3hV60.roa Signing time: Fri 22 Aug 2025 08:45:21 +0000 ROA not before: Fri 22 Aug 2025 08:45:21 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 106.1.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14463 (0x387f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:21 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=F4724A95DFC500BD5F6BC0625FF46C0E7DE157AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:cc:32:59:b4:a5:5c:dd:38:c7:e4:31:86:ec: d7:80:88:70:5e:d8:77:e0:91:50:3c:5d:d1:16:a4: 42:e7:12:ec:2f:f6:78:ce:7f:f7:76:a2:10:f7:da: 2f:b3:8f:83:77:48:22:d6:e9:a0:46:a7:41:36:d1: 71:6a:69:ff:4f:4e:f2:fa:93:9c:94:15:ea:63:40: 4f:25:9b:cd:0e:03:04:c3:4b:6d:d4:a0:53:b1:7d: f4:fa:10:d8:8b:b4:f1:0f:a6:d6:b6:65:00:0b:20: 55:95:8f:e2:98:23:2a:4c:bb:cb:b5:0a:d3:d2:ac: 4d:2a:8a:a8:ac:f8:d3:8c:99:4e:28:bb:b2:50:42: 21:6e:2b:b7:f9:36:fb:b7:8c:9c:f1:3d:dd:c0:c9: 46:97:00:78:6d:dc:eb:c5:69:bd:8a:b2:d7:32:ea: 33:96:57:d8:99:77:72:71:33:f6:14:46:7d:78:da: 78:3d:9c:cc:cc:77:f3:17:f8:c6:df:c6:83:b4:0f: 9f:7c:57:15:5d:fe:58:50:cf:12:c2:3c:8e:59:98: c7:b9:d3:35:e3:d3:2f:c3:72:68:92:11:fe:02:66: 18:4f:07:a4:c9:f8:b2:3c:59:a2:81:a3:83:90:2b: fd:c2:d3:93:dd:61:6a:9f:ff:61:80:41:2c:7b:a7: 51:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:72:4A:95:DF:C5:00:BD:5F:6B:C0:62:5F:F4:6C:0E:7D:E1:57:AD X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9HJKld_FAL1fa8BiX_RsDn3hV60.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.244.0/22 Signature Algorithm: sha256WithRSAEncryption 3f:08:c6:45:4b:92:a4:2c:00:ae:2b:61:b6:cf:0a:e8:77:1d: af:b2:18:cb:cc:d4:01:3b:ed:3c:4c:fa:e8:b6:1f:3b:e7:32: e4:0c:52:2d:24:76:d7:5d:44:82:71:e9:2a:90:19:5d:ef:1e: c0:a7:4e:23:88:84:be:33:76:b6:c7:33:92:33:81:94:68:b2: ae:d3:2e:a3:33:95:d1:5e:01:48:f1:b2:e9:35:12:c9:02:c0: 94:77:c7:be:51:f2:0d:c1:1f:ec:16:78:ac:5c:e5:c7:18:b3: 14:fa:5b:4d:1a:bb:8a:e4:fe:ab:cf:a7:a3:08:87:80:bf:d6: df:00:61:aa:7e:b6:7a:ab:6b:0c:02:18:a0:8b:f2:f5:c9:8e: 47:c8:22:27:78:43:9e:9d:18:fa:a0:48:c4:53:65:f5:2c:24: 2b:ac:a5:f3:a7:97:66:d7:57:a9:9f:e3:20:81:06:97:4a:bb: 5b:ed:aa:51:18:a5:19:f5:63:5f:37:6e:fd:38:cf:37:9d:09: 58:ae:6f:5a:b4:cf:b2:54:ed:0c:40:4c:90:57:ee:97:b3:7f: f3:41:16:20:22:b0:bd:3c:15:a0:c9:c7:70:1e:3b:9c:3e:f3: 86:8b:1e:08:df:bb:6f:1c:52:89:36:33:1a:5f:92:90:0a:e8: 0c:d9:25:4f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOH8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1MjFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEY0NzI0QTk1REZDNTAw QkQ1RjZCQzA2MjVGRjQ2QzBFN0RFMTU3QUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMzDJZtKVc3TjH5DGG7NeAiHBe2HfgkVA8XdEWpELnEuwv9njO f/d2ohD32i+zj4N3SCLW6aBGp0E20XFqaf9PTvL6k5yUFepjQE8lm80OAwTDS23U oFOxffT6ENiLtPEPpta2ZQALIFWVj+KYIypMu8u1CtPSrE0qiqis+NOMmU4ou7JQ QiFuK7f5Nvu3jJzxPd3AyUaXAHht3OvFab2Kstcy6jOWV9iZd3JxM/YURn142ng9 nMzMd/MX+MbfxoO0D598VxVd/lhQzxLCPI5ZmMe50zXj0y/DcmiSEf4CZhhPB6TJ +LI8WaKBo4OQK/3C05PdYWqf/2GAQSx7p1HfAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU9HJKld/FAL1fa8BiX/RsDn3hV60wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzlISktsZF9GQUwxZmE4QmlY X1JzRG4zaFY2MC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq AfQwDQYJKoZIhvcNAQELBQADggEBAD8IxkVLkqQsAK4rYbbPCuh3Ha+yGMvM1AE7 7TxM+ui2HzvnMuQMUi0kdtddRIJx6SqQGV3vHsCnTiOIhL4zdrbHM5IzgZRosq7T LqMzldFeAUjxsuk1EskCwJR3x75R8g3BH+wWeKxc5ccYsxT6W00au4rk/qvPp6MI h4C/1t8AYap+tnqrawwCGKCL8vXJjkfIIid4Q56dGPqgSMRTZfUsJCuspfOnl2bX V6mf4yCBBpdKu1vtqlEYpRn1Y183bv04zzedCViub1q0z7JU7QxATJBX7pezf/NB FiAisL08FaDJx3AeO5w+84aLHgjfu28cUok2MxpfkpAK6AzZJU8= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:58 2025 by rpki-client