$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Be5DRCr7FjHhNWRXaRqImzBno2g.roa File: Be5DRCr7FjHhNWRXaRqImzBno2g.roa (raw, json) Hash identifier: GIPRBo+4JHUb8UcRC7xCOq2y8d+f9v0XhFZKtam6pr4= Subject key identifier: 05:EE:43:44:2A:FB:16:31:E1:35:64:57:69:1A:88:9B:30:67:A3:68 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3ACE Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Be5DRCr7FjHhNWRXaRqImzBno2g.roa Signing time: Fri 22 Aug 2025 08:47:48 +0000 ROA not before: Fri 22 Aug 2025 08:47:48 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.192.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15054 (0x3ace) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:48 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=05EE43442AFB1631E1356457691A889B3067A368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f7:23:8a:53:37:30:85:9b:dc:7c:f3:50:9a: e8:4a:8c:3c:84:54:a7:ae:de:ea:28:fe:02:29:bf: ef:3a:c7:56:a7:a5:cf:e5:5b:76:3e:e5:83:a9:29: 5e:35:91:93:d0:57:b4:4b:cf:8f:8b:74:71:8c:1d: ea:f6:02:2c:9a:b3:21:c9:56:3c:cb:fd:dd:4a:f5: 32:d6:9e:fa:e6:e1:f8:84:d4:69:8c:e8:69:7d:cb: f8:3a:12:b1:3d:b6:85:2f:38:7b:5f:ef:7c:1c:d2: 92:75:54:5c:ce:b1:c1:96:de:a0:a5:50:42:43:5f: 86:d9:f6:65:e2:7b:de:b9:21:07:69:d9:91:ed:90: 1e:e3:4b:e4:fd:6e:ce:34:eb:7c:52:48:93:8a:9a: d3:2a:ba:6c:59:f8:c8:21:12:44:0e:1a:ff:02:9e: 8e:18:1e:cf:e7:bd:07:48:c0:3e:5f:6e:04:6b:1a: 0d:ab:68:80:4f:75:b2:da:9f:ba:72:aa:27:75:9f: ec:2b:16:bb:6f:7c:0b:4f:01:c5:66:f7:99:74:d6: dc:15:7c:b6:75:f2:e7:27:0b:d4:80:39:20:c5:fc: db:f9:f7:95:e0:d6:69:70:a8:66:db:21:e7:80:a8: 4f:d8:fe:dd:c1:b3:44:6c:d7:bf:08:3b:d3:f6:f6: ee:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:EE:43:44:2A:FB:16:31:E1:35:64:57:69:1A:88:9B:30:67:A3:68 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Be5DRCr7FjHhNWRXaRqImzBno2g.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.56.0/21 Signature Algorithm: sha256WithRSAEncryption a1:fd:f4:39:f9:91:be:a6:e7:76:0c:ef:ba:7d:e1:c4:ba:c8: 98:3a:da:3e:b6:b3:d2:72:a4:23:90:60:fd:3e:97:ee:51:ff: 06:89:5d:df:0e:5b:eb:ca:78:c9:ea:6c:cf:64:e9:b9:9a:e3: 0d:c2:f0:46:c6:58:0b:4f:d7:49:4b:48:d9:c0:3e:8f:a0:69: aa:25:23:00:c5:a0:b1:47:fd:6b:35:d6:2d:64:12:41:9a:10: c7:54:11:da:77:5a:af:f9:4b:bc:33:a0:b4:ac:ba:d3:d5:b8: f3:47:4d:8f:97:96:75:3f:44:05:1a:3b:6e:fb:3f:fc:6f:b9: cc:ac:a1:e2:81:94:01:99:07:dc:45:9e:76:9d:4a:74:4d:6e: e7:f4:bd:a6:c1:90:b9:48:27:7e:df:1a:a6:a6:d7:fd:af:6f: c6:b3:45:6d:3f:d8:cb:b3:49:a8:18:31:e5:60:57:86:56:73: c5:d0:61:58:ca:c3:40:ae:59:9f:ef:dc:97:5b:bb:bf:31:d6: f5:73:ef:24:69:6f:1a:45:e9:29:84:e7:c9:b9:58:c0:05:0e: ee:33:ff:13:85:75:fc:6a:1f:ab:27:45:b5:7f:82:1c:5c:cc: 12:b8:bf:c1:21:98:74:6b:83:d5:26:9d:ed:d8:fa:97:1f:cf: e0:24:32:79 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOs4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3NDhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDA1RUU0MzQ0MkFGQjE2 MzFFMTM1NjQ1NzY5MUE4ODlCMzA2N0EzNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDa9yOKUzcwhZvcfPNQmuhKjDyEVKeu3uoo/gIpv+86x1anpc/l W3Y+5YOpKV41kZPQV7RLz4+LdHGMHer2AiyasyHJVjzL/d1K9TLWnvrm4fiE1GmM 6Gl9y/g6ErE9toUvOHtf73wc0pJ1VFzOscGW3qClUEJDX4bZ9mXie965IQdp2ZHt kB7jS+T9bs4063xSSJOKmtMqumxZ+MghEkQOGv8Cno4YHs/nvQdIwD5fbgRrGg2r aIBPdbLan7pyqid1n+wrFrtvfAtPAcVm95l01twVfLZ18ucnC9SAOSDF/Nv595Xg 1mlwqGbbIeeAqE/Y/t3Bs0Rs178IO9P29u7zAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUBe5DRCr7FjHhNWRXaRqImzBno2gwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0JlNURSQ3I3RmpIaE5XUlhh UnFJbXpCbm8yZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wDgwDQYJKoZIhvcNAQELBQADggEBAKH99Dn5kb6m53YM77p94cS6yJg62j62s9Jy pCOQYP0+l+5R/waJXd8OW+vKeMnqbM9k6bma4w3C8EbGWAtP10lLSNnAPo+gaaol IwDFoLFH/Ws11i1kEkGaEMdUEdp3Wq/5S7wzoLSsutPVuPNHTY+XlnU/RAUaO277 P/xvucysoeKBlAGZB9xFnnadSnRNbuf0vabBkLlIJ37fGqam1/2vb8azRW0/2Muz SagYMeVgV4ZWc8XQYVjKw0CuWZ/v3Jdbu78x1vVz7yRpbxpF6SmE58m5WMAFDu4z /xOFdfxqH6snRbV/ghxczBK4v8EhmHRrg9Umne3Y+pcfz+AkMnk= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:54 2025 by rpki-client