$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/B1rsPChfUGE7JOuHTqQN7kWZe8E.roa File: B1rsPChfUGE7JOuHTqQN7kWZe8E.roa (raw, json) Hash identifier: qDeULjOSJteUX7ck9zeW7Gn6m5Hm/wX+Eeq7Ye5R5Vs= Subject key identifier: 07:5A:EC:3C:28:5F:50:61:3B:24:EB:87:4E:A4:0D:EE:45:99:7B:C1 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3B2B Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/B1rsPChfUGE7JOuHTqQN7kWZe8E.roa Signing time: Fri 22 Aug 2025 08:48:08 +0000 ROA not before: Fri 22 Aug 2025 08:48:08 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 118.233.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15147 (0x3b2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:48:08 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=075AEC3C285F50613B24EB874EA40DEE45997BC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:06:a5:a5:c0:bf:b7:6a:0d:32:4d:2a:9b:65: 73:95:84:ba:13:8c:4e:17:95:14:b1:98:87:41:4f: b9:6b:22:1b:21:df:34:0b:7a:e3:c0:63:ee:51:b9: a1:f7:2d:4c:11:93:08:10:24:5e:1a:fb:c5:2b:53: bd:26:8c:60:4b:a3:b3:51:bc:21:ce:e7:ce:a4:66: 89:18:32:4d:6f:d2:7c:e4:09:57:da:7f:06:c6:f2: 76:66:64:ba:d2:72:44:da:0a:e4:0d:dd:af:b8:ea: 2e:99:30:9c:8a:37:a0:1e:59:37:9f:37:5d:03:b0: 3c:72:16:6d:0c:b3:1b:da:25:74:4f:64:99:7f:1b: ae:d0:32:86:bc:73:c3:6e:a9:21:92:dc:a3:15:3c: 31:2b:eb:65:a5:96:67:82:70:b0:6b:61:d3:f9:6f: 7e:1b:60:47:4f:ee:93:a7:cf:07:99:8f:b3:3c:43: 0d:bf:09:a5:48:87:6b:26:08:a1:72:e0:22:ea:60: ee:3b:bf:09:56:af:56:a7:d7:d7:7a:77:47:14:d4: 91:ad:11:97:87:35:23:e2:04:89:6d:4d:43:ab:a7: b2:c4:de:ee:ec:60:66:dc:8d:75:4b:df:eb:e6:90: 3a:e1:2e:22:03:48:a4:3f:29:61:88:9f:bb:6c:70: 51:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:5A:EC:3C:28:5F:50:61:3B:24:EB:87:4E:A4:0D:EE:45:99:7B:C1 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/B1rsPChfUGE7JOuHTqQN7kWZe8E.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.252.0/23 Signature Algorithm: sha256WithRSAEncryption 10:e8:3b:b3:78:5c:75:81:64:0b:78:9f:b4:ef:34:ac:f0:d4: b6:03:5e:86:97:70:e2:40:eb:ff:34:df:00:37:c4:97:e4:e8: 3e:04:9d:3e:72:0e:c9:59:fa:ca:45:4f:42:55:ea:51:ca:4c: ce:d5:58:75:2c:7e:ca:92:5d:ba:ba:8e:0e:59:d8:f7:48:f7: c6:c4:30:41:74:55:f1:72:14:04:db:f7:00:09:dd:8d:b2:16: cd:4b:52:e4:5d:6b:d4:46:04:27:92:38:4b:dc:db:ea:f3:30: 3f:40:3a:42:d4:da:6b:7a:5c:12:cc:df:68:c4:f2:62:b7:a1: d6:67:09:cf:b1:a7:87:69:c6:78:04:0a:85:00:fe:65:13:5c: 6b:cd:c9:e5:27:d1:12:b5:52:93:e7:bd:2a:44:8c:75:a9:3e: 7d:5c:67:2f:2e:d6:ac:c8:05:16:4a:3e:70:e5:57:6f:70:37: 97:42:c7:00:64:5f:f5:6f:77:3b:4e:36:42:ad:c1:88:04:31: 9f:46:81:42:72:96:e6:c1:e9:2f:70:93:2a:3b:8a:a7:34:ea: 47:a7:d8:91:6a:0f:62:dd:a1:ef:91:a6:67:44:f3:4f:c1:07: e6:f0:6d:ce:3c:78:ac:a7:91:37:f8:79:3f:c0:d2:b5:57:28: e7:58:a5:e2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOyswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ4MDhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDA3NUFFQzNDMjg1RjUw NjEzQjI0RUI4NzRFQTQwREVFNDU5OTdCQzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFBqWlwL+3ag0yTSqbZXOVhLoTjE4XlRSxmIdBT7lrIhsh3zQL euPAY+5RuaH3LUwRkwgQJF4a+8UrU70mjGBLo7NRvCHO586kZokYMk1v0nzkCVfa fwbG8nZmZLrSckTaCuQN3a+46i6ZMJyKN6AeWTefN10DsDxyFm0MsxvaJXRPZJl/ G67QMoa8c8NuqSGS3KMVPDEr62WllmeCcLBrYdP5b34bYEdP7pOnzweZj7M8Qw2/ CaVIh2smCKFy4CLqYO47vwlWr1an19d6d0cU1JGtEZeHNSPiBIltTUOrp7LE3u7s YGbcjXVL3+vmkDrhLiIDSKQ/KWGIn7tscFHRAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUB1rsPChfUGE7JOuHTqQN7kWZe8EwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0IxcnNQQ2hmVUdFN0pPdUhU cVFON2tXWmU4RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF2 6fwwDQYJKoZIhvcNAQELBQADggEBABDoO7N4XHWBZAt4n7TvNKzw1LYDXoaXcOJA 6/803wA3xJfk6D4EnT5yDslZ+spFT0JV6lHKTM7VWHUsfsqSXbq6jg5Z2PdI98bE MEF0VfFyFATb9wAJ3Y2yFs1LUuRda9RGBCeSOEvc2+rzMD9AOkLU2mt6XBLM32jE 8mK3odZnCc+xp4dpxngECoUA/mUTXGvNyeUn0RK1UpPnvSpEjHWpPn1cZy8u1qzI BRZKPnDlV29wN5dCxwBkX/VvdztONkKtwYgEMZ9GgUJylubB6S9wkyo7iqc06ken 2JFqD2Ldoe+RpmdE80/BB+bwbc48eKynkTf4eT/A0rVXKOdYpeI= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:15 2025 by rpki-client