$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/B25H8Q2pAX_GxhNmFu6yXuAmViI.roa File: B25H8Q2pAX_GxhNmFu6yXuAmViI.roa (raw, json) Hash identifier: 1sfkSaz9vMZlhmIssG+sFV20QddxzazIc/lti13d9EU= Subject key identifier: 07:6E:47:F1:0D:A9:01:7F:C6:C6:13:66:16:EE:B2:5E:E0:26:56:22 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 37D2 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/B25H8Q2pAX_GxhNmFu6yXuAmViI.roa Signing time: Fri 22 Aug 2025 08:44:41 +0000 ROA not before: Fri 22 Aug 2025 08:44:41 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 118.233.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14290 (0x37d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:44:41 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=076E47F10DA9017FC6C6136616EEB25EE0265622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d0:56:22:c4:c4:ce:4a:d6:5a:2c:d2:a4:ef: 58:04:ea:78:c6:83:9d:ec:ee:3a:c6:ca:fb:75:ba: 75:ea:99:45:d4:32:79:61:fd:8b:4b:52:e2:2f:74: 74:1d:60:ca:75:1c:da:db:a7:bc:e7:bb:53:10:7c: ae:1c:01:ed:b3:ea:51:12:ec:70:6f:1f:51:85:b7: 57:ad:60:af:78:92:36:b9:63:9e:cf:a1:ba:b3:1d: 88:39:ba:7f:e9:a0:f5:4f:2f:15:94:8d:6e:36:30: 4f:4f:48:45:ff:3e:53:2a:ec:95:68:9b:1e:0a:3e: 2f:95:40:37:e1:8d:77:65:25:5d:e9:e1:a0:4a:fa: 2e:e3:58:cb:22:ab:c9:fc:41:68:67:c4:e8:bd:68: 03:98:60:30:9d:e4:61:28:5a:53:1d:41:f7:ac:d2: a2:bf:15:5b:6f:46:18:ed:d0:9f:cf:6d:52:32:10: 68:22:d1:ca:7a:73:72:ed:cd:7c:1b:c7:62:76:c4: 8e:9d:fe:56:de:ba:af:38:07:26:fb:f3:cf:7f:ed: 7a:a2:62:00:e8:b5:db:ba:63:b3:9a:f8:3e:9f:21: b3:32:ce:74:08:eb:2c:93:10:02:88:f7:1c:0e:10: 27:0e:89:87:c6:9c:17:1a:97:71:2c:91:dc:91:9b: 96:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:6E:47:F1:0D:A9:01:7F:C6:C6:13:66:16:EE:B2:5E:E0:26:56:22 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/B25H8Q2pAX_GxhNmFu6yXuAmViI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.210.0/24 Signature Algorithm: sha256WithRSAEncryption 46:3b:33:32:62:7b:2c:82:79:b7:0f:2b:2e:a3:11:e1:ce:3e: ef:32:11:c0:25:41:69:40:c9:db:80:90:37:1f:bf:6b:dc:8c: 9d:a1:15:56:b8:cf:a7:09:01:db:ea:b0:10:4f:b7:4f:63:2a: af:51:d8:74:89:92:9c:e7:12:dc:9f:20:c1:df:6b:25:84:fe: de:aa:e0:48:65:bf:64:24:27:8e:d8:36:66:9a:97:82:ad:0b: 6c:76:fc:b7:c3:6a:b4:46:3e:9a:55:5c:c3:04:76:c2:eb:c9: 38:41:3a:c0:89:37:29:91:e5:10:bf:bd:be:64:a5:cd:59:36: 0a:45:83:63:48:24:93:74:0c:c5:2f:b4:64:8b:86:c0:d3:4e: 38:67:19:6a:a1:5f:1a:1c:29:fa:2b:0a:f5:9d:2d:29:f3:49: 00:ee:a7:c9:f2:40:91:cb:23:fc:6a:97:6f:4e:0d:c5:bc:91: a8:ed:45:e7:63:1a:82:eb:1f:b3:53:07:02:71:fc:22:d9:a1: 48:1e:27:33:c3:e4:03:ad:90:6c:84:57:47:ec:dd:4d:90:87: 2b:66:07:75:df:aa:40:b3:21:3c:49:d2:c2:d9:e7:a4:fc:86: 5d:af:bd:4c:4c:14:dd:f5:3b:b8:4e:b4:d2:36:40:24:31:de: 56:e1:a3:dc -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICN9IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ0NDFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDA3NkU0N0YxMERBOTAx N0ZDNkM2MTM2NjE2RUVCMjVFRTAyNjU2MjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCy0FYixMTOStZaLNKk71gE6njGg53s7jrGyvt1unXqmUXUMnlh /YtLUuIvdHQdYMp1HNrbp7znu1MQfK4cAe2z6lES7HBvH1GFt1etYK94kja5Y57P obqzHYg5un/poPVPLxWUjW42ME9PSEX/PlMq7JVomx4KPi+VQDfhjXdlJV3p4aBK +i7jWMsiq8n8QWhnxOi9aAOYYDCd5GEoWlMdQfes0qK/FVtvRhjt0J/PbVIyEGgi 0cp6c3LtzXwbx2J2xI6d/lbeuq84Byb7889/7XqiYgDotdu6Y7Oa+D6fIbMyznQI 6yyTEAKI9xwOECcOiYfGnBcal3EskdyRm5ZzAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUB25H8Q2pAX/GxhNmFu6yXuAmViIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0IyNUg4UTJwQVhfR3hoTm1G dTZ5WHVBbVZpSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB2 6dIwDQYJKoZIhvcNAQELBQADggEBAEY7MzJieyyCebcPKy6jEeHOPu8yEcAlQWlA yduAkDcfv2vcjJ2hFVa4z6cJAdvqsBBPt09jKq9R2HSJkpznEtyfIMHfayWE/t6q 4Ehlv2QkJ47YNmaal4KtC2x2/LfDarRGPppVXMMEdsLryThBOsCJNymR5RC/vb5k pc1ZNgpFg2NIJJN0DMUvtGSLhsDTTjhnGWqhXxocKforCvWdLSnzSQDup8nyQJHL I/xql29ODcW8kajtRedjGoLrH7NTBwJx/CLZoUgeJzPD5AOtkGyEV0fs3U2Qhytm B3XfqkCzITxJ0sLZ56T8hl2vvUxMFN31O7hOtNI2QCQx3lbho9w= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:16 2025 by rpki-client