$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AvB1VpFw8_Bhxj8qyagkZLW3ZDQ.roa File: AvB1VpFw8_Bhxj8qyagkZLW3ZDQ.roa (raw, json) Hash identifier: ece+DKkKyAdsy9nBB6+wJ66FzFn1O7W0wreOzQjzIQM= Subject key identifier: 02:F0:75:56:91:70:F3:F0:61:C6:3F:2A:C9:A8:24:64:B5:B7:64:34 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 380E Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AvB1VpFw8_Bhxj8qyagkZLW3ZDQ.roa Signing time: Fri 22 Aug 2025 08:44:55 +0000 ROA not before: Fri 22 Aug 2025 08:44:55 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.195.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14350 (0x380e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:44:55 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=02F075569170F3F061C63F2AC9A82464B5B76434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:6d:ff:70:4c:3a:6d:58:e3:4e:3a:50:f9:b0: 03:fa:b9:f0:be:04:78:61:85:40:1c:9a:cb:e3:64: b9:6b:29:8f:88:f3:f7:d1:7c:e0:62:8d:58:98:1a: a7:75:6f:ab:e3:74:05:02:a3:d8:4d:e2:e8:f1:85: 5c:5c:17:b9:62:f5:34:5f:de:9a:03:06:81:c2:d1: 7b:14:73:60:a0:dc:b9:b8:c3:dc:51:0a:88:54:55: 99:7c:34:d3:18:2c:cc:21:a8:77:f1:11:dd:ce:64: f1:ce:44:37:b9:2c:2d:b5:15:06:5e:8a:7d:c6:8b: a9:23:01:9e:26:ff:c9:ff:10:01:02:36:c3:81:9d: 9b:7f:71:25:1e:c0:c5:e0:95:0b:6e:1e:9d:1d:41: 4d:7e:63:8a:7d:19:87:62:49:07:53:0e:d0:2b:9e: fa:18:d2:84:15:3d:33:aa:0a:a4:2d:3d:53:cb:31: 25:e0:ff:f1:35:e6:f1:83:b6:be:cb:57:03:c0:73: 68:d5:d1:07:9c:f4:28:3f:bb:2c:be:f2:06:46:0f: 07:d0:a3:50:b9:4f:e7:d4:79:e0:3b:58:2e:ac:92: 12:6b:cc:75:b9:24:8b:03:4f:69:cc:eb:a0:77:b6: 23:df:76:da:df:df:7e:32:52:8d:f4:8b:fb:c8:8e: ab:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:F0:75:56:91:70:F3:F0:61:C6:3F:2A:C9:A8:24:64:B5:B7:64:34 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AvB1VpFw8_Bhxj8qyagkZLW3ZDQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.128.0/22 Signature Algorithm: sha256WithRSAEncryption a6:58:35:3e:81:c4:37:10:23:f3:69:fc:0a:d2:a3:9a:92:fd: c1:5a:a4:44:59:9e:c5:15:c2:17:01:d4:09:8d:12:75:95:f8: 12:c7:db:34:fe:78:84:3b:88:0c:3c:0a:20:ed:a4:71:92:91: 9c:f8:b3:a7:3b:2b:16:d8:58:31:82:14:89:d5:54:62:43:b4: 99:eb:35:12:3b:7d:1e:04:2a:46:aa:e5:c6:2f:85:87:a9:44: 52:17:74:a4:17:f6:7f:f4:c5:f3:54:62:71:f8:18:5f:43:45: 3f:65:8d:c3:3e:5f:31:0a:7e:2b:aa:dd:a8:7b:70:38:13:b1: 5b:ae:33:33:fe:6c:f7:73:34:6e:b0:3d:d2:d2:e3:5d:b6:b1: 18:e5:5f:23:98:95:bb:67:c9:d8:ac:1c:dc:c4:6d:2b:12:33: a7:b7:0b:55:fe:93:3f:cb:5c:39:f8:8a:4f:9f:b7:19:37:5f: a2:af:f7:04:ab:72:54:e3:3d:88:ad:64:87:51:13:ba:30:26: 3c:fc:0a:cd:ad:38:30:46:2a:b6:10:75:98:1a:10:5f:8a:13: fe:bb:0b:c8:bc:c1:49:d7:00:2f:59:f6:b0:ec:e5:8e:b3:f2: 1c:d3:41:11:12:27:a7:be:94:7a:75:86:ae:65:cd:12:10:75: 81:37:84:9e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOA4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ0NTVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDAyRjA3NTU2OTE3MEYz RjA2MUM2M0YyQUM5QTgyNDY0QjVCNzY0MzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDpbf9wTDptWONOOlD5sAP6ufC+BHhhhUAcmsvjZLlrKY+I8/fR fOBijViYGqd1b6vjdAUCo9hN4ujxhVxcF7li9TRf3poDBoHC0XsUc2Cg3Lm4w9xR CohUVZl8NNMYLMwhqHfxEd3OZPHORDe5LC21FQZein3Gi6kjAZ4m/8n/EAECNsOB nZt/cSUewMXglQtuHp0dQU1+Y4p9GYdiSQdTDtArnvoY0oQVPTOqCqQtPVPLMSXg //E15vGDtr7LVwPAc2jV0Qec9Cg/uyy+8gZGDwfQo1C5T+fUeeA7WC6skhJrzHW5 JIsDT2nM66B3tiPfdtrf334yUo30i/vIjqtVAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUAvB1VpFw8/Bhxj8qyagkZLW3ZDQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0F2QjFWcEZ3OF9CaHhqOHF5 YWdrWkxXM1pEUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 w4AwDQYJKoZIhvcNAQELBQADggEBAKZYNT6BxDcQI/Np/ArSo5qS/cFapERZnsUV whcB1AmNEnWV+BLH2zT+eIQ7iAw8CiDtpHGSkZz4s6c7KxbYWDGCFInVVGJDtJnr NRI7fR4EKkaq5cYvhYepRFIXdKQX9n/0xfNUYnH4GF9DRT9ljcM+XzEKfiuq3ah7 cDgTsVuuMzP+bPdzNG6wPdLS4122sRjlXyOYlbtnydisHNzEbSsSM6e3C1X+kz/L XDn4ik+ftxk3X6Kv9wSrclTjPYitZIdRE7owJjz8Cs2tODBGKrYQdZgaEF+KE/67 C8i8wUnXAC9Z9rDs5Y6z8hzTQRESJ6e+lHp1hq5lzRIQdYE3hJ4= -----END CERTIFICATE-----Generated at Sun Aug 24 07:29:30 2025 by rpki-client