$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BW_91Pmz6D0QP6rLbkCG3SZAtBA.roa File: BW_91Pmz6D0QP6rLbkCG3SZAtBA.roa (raw, json) Hash identifier: LserhJUyYoP180Jid100vjlr+T66aP+XrzRuvbdOynQ= Subject key identifier: 05:6F:FD:D4:F9:B3:E8:3D:10:3F:AA:CB:6E:40:86:DD:26:40:B4:10 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 39D2 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BW_91Pmz6D0QP6rLbkCG3SZAtBA.roa Signing time: Fri 22 Aug 2025 08:46:42 +0000 ROA not before: Fri 22 Aug 2025 08:46:42 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.195.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14802 (0x39d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:42 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=056FFDD4F9B3E83D103FAACB6E4086DD2640B410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:eb:75:fa:24:8a:14:9c:66:db:66:05:2c:a2: df:2a:da:b0:e6:6e:98:9e:5e:ab:b3:ec:f8:95:f6: d4:bb:d2:19:57:bc:8c:23:cb:95:5a:18:40:8a:40: 3e:3b:09:71:41:ba:f9:29:d9:50:27:93:dd:b0:f2: c5:1d:35:e8:96:5e:56:64:4f:7e:8c:16:21:4e:bf: ac:bd:1b:7b:d6:4e:d2:81:6f:33:81:5b:d6:e3:2f: 3f:3c:22:bf:3d:cd:ee:0c:24:c1:1a:bf:33:03:73: 7d:aa:0a:e8:b6:8d:66:c6:5f:c7:9a:8e:cf:17:7d: d1:ce:40:95:57:5c:b1:6c:a9:5d:33:5e:6a:81:f8: 87:34:ca:05:70:54:73:d2:62:a5:bd:cd:73:13:31: 02:0e:ba:82:2e:c0:4d:dc:7f:2c:43:30:9e:04:4e: 03:f5:85:6a:79:ce:84:c7:3e:49:55:8f:7f:1b:1c: 32:2b:cb:7f:a8:fb:eb:bf:1b:17:cd:b0:79:a1:7e: 3a:6d:54:a6:f6:25:c2:b4:9d:f7:16:53:5e:88:29: 47:2c:42:4e:1a:13:11:34:97:7c:67:57:88:68:fa: 4c:ae:89:d9:d3:3e:a9:59:e5:38:b5:dd:f0:2f:53: de:98:bc:e1:0f:9b:38:5c:34:c8:f3:38:f6:30:e1: 16:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:6F:FD:D4:F9:B3:E8:3D:10:3F:AA:CB:6E:40:86:DD:26:40:B4:10 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BW_91Pmz6D0QP6rLbkCG3SZAtBA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.32.0/22 Signature Algorithm: sha256WithRSAEncryption 2a:cf:48:e5:10:e9:09:93:d7:f7:81:fc:d2:48:7a:fd:27:9b: c6:a5:3d:53:33:59:da:e3:52:88:9e:94:fa:d7:b5:25:aa:78: 9c:3c:75:be:71:2a:d3:70:d5:e6:d1:68:a1:37:08:be:64:3f: 57:e0:7d:05:92:68:17:31:f0:b3:be:94:3a:2f:7e:06:66:bd: a5:9d:00:a5:b1:e4:53:ec:23:b6:28:a3:ad:36:c0:66:17:df: e7:b3:c3:4f:75:89:d9:91:b9:da:9f:2b:7c:91:88:47:1a:6d: f7:06:44:80:1f:bb:5c:4f:48:18:ec:aa:6c:f1:7a:45:ab:a2: 36:96:91:74:81:aa:a3:0a:60:7d:6e:22:a4:b3:4c:ff:cb:7c: e9:14:fe:50:60:2d:78:43:17:ec:dc:c9:6e:e9:1a:60:ad:ef: 15:60:a2:b5:d1:1e:e1:08:06:1d:60:f0:8e:04:2b:7e:70:d4: 70:0e:82:a0:6c:91:0a:64:fb:56:8d:c2:0b:59:10:f1:5a:09: c1:6a:31:f4:fe:4c:5e:5d:a2:fc:66:0b:5d:4a:e4:58:a2:57: f5:b3:df:56:88:0f:be:e5:22:71:43:d5:7c:56:cc:21:6f:c6: 1e:12:7a:b5:8a:55:73:04:40:f7:45:f4:98:19:01:37:90:b3: cf:7b:1e:7d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOdIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2NDJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDA1NkZGREQ0RjlCM0U4 M0QxMDNGQUFDQjZFNDA4NkREMjY0MEI0MTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDR63X6JIoUnGbbZgUsot8q2rDmbpieXquz7PiV9tS70hlXvIwj y5VaGECKQD47CXFBuvkp2VAnk92w8sUdNeiWXlZkT36MFiFOv6y9G3vWTtKBbzOB W9bjLz88Ir89ze4MJMEavzMDc32qCui2jWbGX8eajs8XfdHOQJVXXLFsqV0zXmqB +Ic0ygVwVHPSYqW9zXMTMQIOuoIuwE3cfyxDMJ4ETgP1hWp5zoTHPklVj38bHDIr y3+o++u/GxfNsHmhfjptVKb2JcK0nfcWU16IKUcsQk4aExE0l3xnV4ho+kyuidnT PqlZ5Ti13fAvU96YvOEPmzhcNMjzOPYw4RYjAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUBW/91Pmz6D0QP6rLbkCG3SZAtBAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0JXXzkxUG16NkQwUVA2ckxi a0NHM1NaQXRCQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wyAwDQYJKoZIhvcNAQELBQADggEBACrPSOUQ6QmT1/eB/NJIev0nm8alPVMzWdrj UoielPrXtSWqeJw8db5xKtNw1ebRaKE3CL5kP1fgfQWSaBcx8LO+lDovfgZmvaWd AKWx5FPsI7Yoo602wGYX3+ezw091idmRudqfK3yRiEcabfcGRIAfu1xPSBjsqmzx ekWrojaWkXSBqqMKYH1uIqSzTP/LfOkU/lBgLXhDF+zcyW7pGmCt7xVgorXRHuEI Bh1g8I4EK35w1HAOgqBskQpk+1aNwgtZEPFaCcFqMfT+TF5dovxmC11K5FiiV/Wz 31aID77lInFD1XxWzCFvxh4SerWKVXMEQPdF9JgZATeQs897Hn0= -----END CERTIFICATE-----Generated at Sun Aug 24 07:26:37 2025 by rpki-client