$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AAFM7KUDjreg-vRwafzAbnVvzYU.roa File: AAFM7KUDjreg-vRwafzAbnVvzYU.roa (raw, json) Hash identifier: O144cCQeK3yjOyKWtenbG1WJHPUc2YU1Wnsq+q6fpcQ= Subject key identifier: 00:01:4C:EC:A5:03:8E:B7:A0:FA:F4:70:69:FC:C0:6E:75:6F:CD:85 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3AE3 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AAFM7KUDjreg-vRwafzAbnVvzYU.roa Signing time: Fri 22 Aug 2025 08:47:51 +0000 ROA not before: Fri 22 Aug 2025 08:47:51 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.194.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15075 (0x3ae3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:51 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=00014CECA5038EB7A0FAF47069FCC06E756FCD85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5a:77:94:77:45:08:69:bc:19:92:b0:ac:fc: b7:b1:bb:b2:53:77:7d:e2:14:57:71:a0:42:ff:9d: b3:25:1b:47:24:e7:f4:07:4c:68:c4:94:dc:bb:3c: bf:d3:e0:dd:77:8f:2a:72:9d:8e:19:a1:9f:2e:b3: 5f:c2:52:49:42:b5:16:67:ee:0e:46:7f:43:3c:99: cf:8b:4b:78:0a:59:2c:3d:c8:9c:de:fc:e9:d5:09: d6:89:5c:6c:dc:28:e4:c2:82:53:6d:80:7b:36:d7: 08:a7:80:40:42:f8:6f:8c:7a:08:57:74:45:c1:61: 93:ba:7d:0e:a4:22:53:04:b8:8a:44:2f:af:d8:94: 23:e8:e8:08:79:74:f8:f2:68:ca:7c:a7:b8:97:ac: b0:24:0c:0e:42:83:a3:f7:72:4b:ff:94:a2:07:39: fd:4f:4e:d0:eb:fe:ef:fc:be:e9:d4:92:b1:33:2c: 51:2b:d6:95:3d:02:be:1f:5c:28:b7:30:c1:d9:c3: 11:f7:44:b9:fe:61:85:a2:89:35:37:ab:11:d5:bf: c3:a9:39:83:38:7b:85:81:83:de:27:9c:cc:54:e9: ba:f9:51:99:49:84:53:3a:f0:0b:fe:55:54:88:b9: f3:2a:7b:e4:36:23:3c:07:ef:b9:cd:23:c8:04:ea: b9:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:01:4C:EC:A5:03:8E:B7:A0:FA:F4:70:69:FC:C0:6E:75:6F:CD:85 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AAFM7KUDjreg-vRwafzAbnVvzYU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.88.0/22 Signature Algorithm: sha256WithRSAEncryption 73:ac:6c:b3:58:6b:52:27:9b:13:53:dc:a9:48:8d:83:c1:ce: ac:41:83:82:13:0a:28:e3:f6:68:a8:13:88:e5:dd:29:6c:81: 00:d9:06:ff:8b:2e:4f:98:9e:d4:45:db:1b:53:46:8e:f2:30: c8:53:09:61:19:61:46:83:80:9a:28:96:b2:df:27:ff:83:01: 3d:50:03:4b:f9:3b:94:dc:e7:63:8e:5c:69:73:0a:c7:15:2a: d0:9f:1b:a6:fd:2d:9a:16:29:d5:c3:39:93:53:50:8c:c3:f3: 26:f8:ca:fd:18:9c:d7:01:2c:6a:40:31:af:a3:14:7a:51:62: c7:5a:71:68:6b:44:fe:19:12:ff:ff:0e:59:4c:5b:68:47:ac: 1f:e8:6c:ca:36:7e:25:4b:56:8c:8e:64:83:79:e3:6f:16:5a: 7b:80:c7:ed:08:fd:aa:42:15:2a:40:d3:19:90:a5:55:cc:77: d5:66:70:f7:ca:75:17:bd:42:83:11:92:13:42:2a:df:c5:ae: ef:1f:b2:b7:28:60:bf:4a:aa:54:9b:3d:03:0d:74:84:fd:04: 9c:dc:a2:91:1d:cd:5b:75:b4:d9:ec:1a:5a:ce:fe:5d:b0:45: 0f:96:a0:a6:04:09:c1:9a:ca:92:f0:db:45:cc:b7:39:cc:be: 34:9b:8c:7b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOuMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3NTFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDAwMDE0Q0VDQTUwMzhF QjdBMEZBRjQ3MDY5RkNDMDZFNzU2RkNEODUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCeWneUd0UIabwZkrCs/Lexu7JTd33iFFdxoEL/nbMlG0ck5/QH TGjElNy7PL/T4N13jypynY4ZoZ8us1/CUklCtRZn7g5Gf0M8mc+LS3gKWSw9yJze /OnVCdaJXGzcKOTCglNtgHs21wingEBC+G+MeghXdEXBYZO6fQ6kIlMEuIpEL6/Y lCPo6Ah5dPjyaMp8p7iXrLAkDA5Cg6P3ckv/lKIHOf1PTtDr/u/8vunUkrEzLFEr 1pU9Ar4fXCi3MMHZwxH3RLn+YYWiiTU3qxHVv8OpOYM4e4WBg94nnMxU6br5UZlJ hFM68Av+VVSIufMqe+Q2IzwH77nNI8gE6rklAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUAAFM7KUDjreg+vRwafzAbnVvzYUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0FBRk03S1VEanJlZy12Undh ZnpBYm5WdnpZVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wlgwDQYJKoZIhvcNAQELBQADggEBAHOsbLNYa1InmxNT3KlIjYPBzqxBg4ITCijj 9mioE4jl3SlsgQDZBv+LLk+YntRF2xtTRo7yMMhTCWEZYUaDgJoolrLfJ/+DAT1Q A0v5O5Tc52OOXGlzCscVKtCfG6b9LZoWKdXDOZNTUIzD8yb4yv0YnNcBLGpAMa+j FHpRYsdacWhrRP4ZEv//DllMW2hHrB/obMo2fiVLVoyOZIN5428WWnuAx+0I/apC FSpA0xmQpVXMd9VmcPfKdRe9QoMRkhNCKt/Fru8fsrcoYL9KqlSbPQMNdIT9BJzc opEdzVt1tNnsGlrO/l2wRQ+WoKYECcGaypLw20XMtznMvjSbjHs= -----END CERTIFICATE-----Generated at Sun Aug 24 07:24:08 2025 by rpki-client