$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AqyGelJQ3dK2txuPzyzpJpe8zTM.roa File: AqyGelJQ3dK2txuPzyzpJpe8zTM.roa (raw, json) Hash identifier: vzBkchBB9WWjFVtIl4+0S4QTxVAutlUHS2WqiNg6QXY= Subject key identifier: 02:AC:86:7A:52:50:DD:D2:B6:B7:1B:8F:CF:2C:E9:26:97:BC:CD:33 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 39F7 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AqyGelJQ3dK2txuPzyzpJpe8zTM.roa Signing time: Fri 22 Aug 2025 08:46:52 +0000 ROA not before: Fri 22 Aug 2025 08:46:52 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9924 IP address blocks: 123.195.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14839 (0x39f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:52 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=02AC867A5250DDD2B6B71B8FCF2CE92697BCCD33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a3:a0:51:d3:f1:2b:f8:ec:d0:4f:f6:a6:e8: 1c:e8:a7:0a:8f:06:67:f1:2f:9d:25:6f:41:06:9d: e0:2d:20:d9:da:2c:1c:8c:c0:59:b5:d5:8d:e1:4e: ab:7f:aa:c7:ff:37:c5:3f:ab:20:6e:04:bd:be:44: 05:93:6e:25:55:62:bb:58:83:23:67:84:ff:6b:b7: 49:6d:4e:65:82:dd:75:e5:b1:14:de:0f:05:38:c3: c2:db:ae:f6:ce:34:c2:c1:af:8a:cd:9e:3b:e9:92: 48:e3:5f:6b:57:b5:9c:2b:77:79:cf:28:d0:8e:1f: 18:a3:2c:9d:cf:67:c9:e9:02:71:89:1b:fd:63:6c: 2b:3f:83:a9:3a:60:0e:04:2f:db:c2:1d:f2:9e:65: a0:89:f2:6f:d4:d7:f4:50:02:6e:76:55:b2:14:ad: 81:48:c6:77:21:d5:af:b4:b3:99:bc:09:b8:fc:53: 1d:25:b9:fd:eb:85:ab:da:12:8b:e2:79:0b:32:d3: a3:d3:bd:66:ea:7a:d7:07:ed:d5:f3:c7:64:e9:05: 67:fc:96:27:d6:e8:ec:b9:7e:18:80:a5:ee:03:54: 28:28:05:b9:49:26:f6:dd:a3:1b:78:c7:10:ff:52: 10:9f:ae:8e:60:66:28:d6:9d:a7:7c:0b:b2:50:e8: ed:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:AC:86:7A:52:50:DD:D2:B6:B7:1B:8F:CF:2C:E9:26:97:BC:CD:33 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AqyGelJQ3dK2txuPzyzpJpe8zTM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.238.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:c8:f5:48:bc:79:de:66:27:7c:68:d6:7b:c2:1a:8e:93:38: 23:98:68:58:ac:53:4f:08:55:64:49:39:68:ac:e7:e5:9d:ac: 61:c5:b7:65:e4:79:e1:71:2d:42:3f:8a:26:a0:b6:2e:7e:b9: 64:19:f7:13:0d:50:e9:32:5c:b9:45:c8:2c:bc:75:f3:df:a9: de:a3:09:0a:f2:5d:83:c8:25:66:d9:82:b9:41:48:41:86:04: 8c:9a:fa:40:15:0f:77:20:c8:3e:fc:90:71:12:02:3e:71:1f: 0f:fc:6f:a5:ad:a9:e5:15:32:1b:9f:4c:52:fe:76:49:56:6d: 4a:4d:db:19:bc:25:c7:11:05:7c:51:cf:87:2e:c3:e2:6a:0f: b8:89:5e:a6:5b:f1:81:24:f6:a5:a6:67:82:b2:98:c3:2d:49: 3e:76:f8:4c:14:76:9b:83:51:e5:d6:dd:fc:6c:1d:22:f4:99: 19:04:66:53:47:8d:ff:85:fe:76:74:e1:28:b9:9e:a4:4f:12: 23:e8:19:c4:40:b5:86:7a:00:1c:ea:7b:c0:17:8c:35:3c:f1: ac:c0:06:fa:27:fd:17:b2:e6:ad:7c:e7:ab:a4:95:b7:75:ad: d9:ea:5c:d8:86:74:10:71:83:d5:31:78:f1:4e:9e:fe:b7:47: 8c:d7:13:b0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOfcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2NTJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDAyQUM4NjdBNTI1MERE RDJCNkI3MUI4RkNGMkNFOTI2OTdCQ0NEMzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCko6BR0/Er+OzQT/am6BzopwqPBmfxL50lb0EGneAtINnaLByM wFm11Y3hTqt/qsf/N8U/qyBuBL2+RAWTbiVVYrtYgyNnhP9rt0ltTmWC3XXlsRTe DwU4w8LbrvbONMLBr4rNnjvpkkjjX2tXtZwrd3nPKNCOHxijLJ3PZ8npAnGJG/1j bCs/g6k6YA4EL9vCHfKeZaCJ8m/U1/RQAm52VbIUrYFIxnch1a+0s5m8Cbj8Ux0l uf3rhavaEovieQsy06PTvWbqetcH7dXzx2TpBWf8lifW6Oy5fhiApe4DVCgoBblJ Jvbdoxt4xxD/UhCfro5gZijWnad8C7JQ6O2xAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUAqyGelJQ3dK2txuPzyzpJpe8zTMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0FxeUdlbEpRM2RLMnR4dVB6 eXpwSnBlOHpUTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7 w+4wDQYJKoZIhvcNAQELBQADggEBAF7I9Ui8ed5mJ3xo1nvCGo6TOCOYaFisU08I VWRJOWis5+WdrGHFt2XkeeFxLUI/iiagti5+uWQZ9xMNUOkyXLlFyCy8dfPfqd6j CQryXYPIJWbZgrlBSEGGBIya+kAVD3cgyD78kHESAj5xHw/8b6WtqeUVMhufTFL+ dklWbUpN2xm8JccRBXxRz4cuw+JqD7iJXqZb8YEk9qWmZ4KymMMtST52+EwUdpuD UeXW3fxsHSL0mRkEZlNHjf+F/nZ04Si5nqRPEiPoGcRAtYZ6ABzqe8AXjDU88azA Bvon/Rey5q1856uklbd1rdnqXNiGdBBxg9UxePFOnv63R4zXE7A= -----END CERTIFICATE-----Generated at Sun Aug 24 07:29:35 2025 by rpki-client