$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BVY9pm9G9P17Vl5-5fpMaQNsuGk.roa File: BVY9pm9G9P17Vl5-5fpMaQNsuGk.roa (raw, json) Hash identifier: Pq3zF7bnn7n5fNloIPXRWc52HLti4VwlRc1PUDgmric= Subject key identifier: 05:56:3D:A6:6F:46:F4:FD:7B:56:5E:7E:E5:FA:4C:69:03:6C:B8:69 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3A1C Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BVY9pm9G9P17Vl5-5fpMaQNsuGk.roa Signing time: Fri 22 Aug 2025 08:47:01 +0000 ROA not before: Fri 22 Aug 2025 08:47:01 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 103.224.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14876 (0x3a1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:01 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=05563DA66F46F4FD7B565E7EE5FA4C69036CB869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:32:d4:10:d9:e9:c5:13:37:99:7c:d4:1a:58: 4a:63:c0:8a:50:85:b5:32:65:0e:dc:6e:80:5f:63: f4:71:93:a3:a4:81:ef:f6:ce:79:96:62:03:62:25: 19:28:b5:d5:14:b5:78:79:58:f4:b3:66:f5:82:62: c9:cc:9d:6c:28:4a:9c:86:a9:fb:48:11:19:cc:c4: 94:8d:52:f0:2d:f6:d4:0b:1c:1c:e2:17:f6:e1:e8: 48:42:66:90:e6:d8:b0:95:65:90:89:e9:74:d1:a9: 22:dd:84:16:a1:2a:f4:89:56:f0:3e:4b:2a:8c:5c: 95:b6:27:e8:f7:5c:8d:e5:db:7b:c0:95:76:52:0c: bf:db:fb:83:20:f8:6c:fd:79:1c:82:44:12:b5:ab: c6:89:4e:bf:b5:1a:88:32:29:33:e8:14:a7:0e:ef: 3a:69:51:cf:7b:d5:7d:19:d9:32:bc:1f:b4:2a:19: 72:1e:16:8e:31:89:da:bc:76:4e:26:d7:38:41:a4: b0:d8:a1:10:6e:d6:5c:85:47:4e:a3:54:d4:a0:6d: b6:de:57:a7:ca:97:b1:4b:cb:9b:20:4b:d2:bc:f3: 24:65:2f:04:14:e3:7d:30:be:9a:b1:9d:c9:b5:c1: c3:23:0a:56:b5:9f:35:57:1f:10:95:b2:99:77:0e: 0a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:56:3D:A6:6F:46:F4:FD:7B:56:5E:7E:E5:FA:4C:69:03:6C:B8:69 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BVY9pm9G9P17Vl5-5fpMaQNsuGk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.224.194.0/24 Signature Algorithm: sha256WithRSAEncryption 45:a9:8e:dd:b9:9d:a2:41:04:28:af:e2:53:de:95:c7:ed:c1: ce:8f:3c:e7:50:f4:dc:d9:c5:99:41:8c:ef:fc:0c:89:cf:6b: ee:1d:b7:6a:01:ee:87:e9:3b:ad:83:c4:fb:7a:89:f0:d3:90: 36:e8:45:31:2d:2e:a3:c4:31:37:a5:da:a6:e1:fa:dc:02:bb: f2:21:8f:94:c5:15:eb:24:3e:3f:31:de:ea:4a:6a:54:c3:21: 09:c0:cb:57:31:b6:cf:d5:24:db:41:e1:ac:05:7e:42:6f:88: 3f:ae:bc:5d:ac:07:83:5a:6f:52:ee:97:1d:36:a3:b7:55:80: b3:b4:b7:90:27:1f:33:61:06:63:9a:ea:71:b8:65:f4:35:bb: 58:3e:cc:b0:81:90:7c:27:1c:50:f2:08:5a:81:62:49:07:04: 54:b6:dc:e2:02:7b:56:10:5b:91:c7:9b:eb:2a:33:97:ef:d8: b0:94:6e:5a:4b:03:65:2b:8a:50:2f:de:16:17:5f:4b:c2:99: 83:2b:2e:b4:1c:4a:5b:ce:5a:c2:93:42:36:d8:99:ca:5f:68: b7:56:d6:b7:ee:13:b5:21:08:f5:10:45:c7:0d:30:01:4f:c1: b8:d0:20:c3:3c:8e:9f:b6:f4:a9:b2:89:8f:f5:71:1b:0b:84: 8a:95:97:4d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOhwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3MDFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDA1NTYzREE2NkY0NkY0 RkQ3QjU2NUU3RUU1RkE0QzY5MDM2Q0I4NjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwMtQQ2enFEzeZfNQaWEpjwIpQhbUyZQ7cboBfY/Rxk6Okge/2 znmWYgNiJRkotdUUtXh5WPSzZvWCYsnMnWwoSpyGqftIERnMxJSNUvAt9tQLHBzi F/bh6EhCZpDm2LCVZZCJ6XTRqSLdhBahKvSJVvA+SyqMXJW2J+j3XI3l23vAlXZS DL/b+4Mg+Gz9eRyCRBK1q8aJTr+1GogyKTPoFKcO7zppUc971X0Z2TK8H7QqGXIe Fo4xidq8dk4m1zhBpLDYoRBu1lyFR06jVNSgbbbeV6fKl7FLy5sgS9K88yRlLwQU 430wvpqxncm1wcMjCla1nzVXHxCVspl3DgodAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUBVY9pm9G9P17Vl5+5fpMaQNsuGkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0JWWTlwbTlHOVAxN1ZsNS01 ZnBNYVFOc3VHay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn 4MIwDQYJKoZIhvcNAQELBQADggEBAEWpjt25naJBBCiv4lPelcftwc6PPOdQ9NzZ xZlBjO/8DInPa+4dt2oB7ofpO62DxPt6ifDTkDboRTEtLqPEMTel2qbh+twCu/Ih j5TFFeskPj8x3upKalTDIQnAy1cxts/VJNtB4awFfkJviD+uvF2sB4Nab1Lulx02 o7dVgLO0t5AnHzNhBmOa6nG4ZfQ1u1g+zLCBkHwnHFDyCFqBYkkHBFS23OICe1YQ W5HHm+sqM5fv2LCUblpLA2UrilAv3hYXX0vCmYMrLrQcSlvOWsKTQjbYmcpfaLdW 1rfuE7UhCPUQRccNMAFPwbjQIMM8jp+29KmyiY/1cRsLhIqVl00= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:56 2025 by rpki-client