$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/C21tTLeujlGnveoCPPVEIGdixyU.roa File: C21tTLeujlGnveoCPPVEIGdixyU.roa (raw, json) Hash identifier: PSCLyxT4HLC9ntvmLPsEElbMmyDrF39aoNDBwFTcbxM= Subject key identifier: 0B:6D:6D:4C:B7:AE:8E:51:A7:BD:EA:02:3C:F5:44:20:67:62:C7:25 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3ACA Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/C21tTLeujlGnveoCPPVEIGdixyU.roa Signing time: Fri 22 Aug 2025 08:47:46 +0000 ROA not before: Fri 22 Aug 2025 08:47:46 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 106.1.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15050 (0x3aca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:46 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=0B6D6D4CB7AE8E51A7BDEA023CF544206762C725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:62:0a:1f:20:bb:18:09:1c:67:1c:22:05:c6: a6:57:9b:91:9a:b2:de:47:c6:f7:89:ab:57:56:e5: 66:72:c0:cf:c6:d7:b5:af:3c:29:43:50:8e:0c:ee: f6:63:bb:9a:37:e8:2c:11:81:e7:27:e2:46:ea:96: 72:d3:3f:d2:4d:76:08:35:d8:9a:6a:3a:12:7f:15: ff:a1:ca:5f:e2:03:cd:34:7c:21:4c:e6:38:02:9a: b9:52:d1:69:75:06:91:fa:0f:aa:17:ae:b4:21:4b: e7:1d:22:80:d3:a5:a6:6c:d4:78:ab:97:da:bb:a9: de:6a:c3:42:88:7e:a1:12:11:05:c5:3f:53:5f:6e: 1b:e0:3f:e3:d3:e0:3c:30:c7:fc:cd:03:21:54:11: 6c:27:44:26:60:1b:8c:8b:9b:23:ef:b1:0c:77:ac: 81:b5:27:76:e4:b3:bb:96:63:7b:9c:79:a4:7f:8e: be:ef:a5:2b:58:93:59:6a:c5:85:2c:cc:65:7a:97: ef:8f:2c:38:9e:5e:9a:ab:61:23:85:bf:55:1c:23: 76:42:43:6b:ed:bc:b1:ca:60:8f:15:6c:f4:c0:64: f6:8c:f2:dd:ac:08:29:dc:0d:4f:bd:70:ed:0b:53: 02:77:9d:01:11:1a:0d:fe:3f:51:0f:0e:22:af:d8: df:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:6D:6D:4C:B7:AE:8E:51:A7:BD:EA:02:3C:F5:44:20:67:62:C7:25 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/C21tTLeujlGnveoCPPVEIGdixyU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.208.0/22 Signature Algorithm: sha256WithRSAEncryption 09:28:71:e1:2a:41:04:38:2c:82:a7:ae:3d:5e:c9:9e:dc:2e: ca:34:31:35:5b:1a:bf:6e:b0:30:90:2c:92:7f:2b:4e:21:7c: 0a:0e:25:60:92:38:7e:11:71:91:2b:47:19:63:25:ab:fb:ca: 5f:e2:62:cd:36:73:50:2e:6c:75:49:57:3b:31:36:1e:e4:a7: 46:09:cf:2a:80:be:84:3c:2e:e4:7b:c5:4f:cb:48:65:12:7e: 26:0b:83:27:39:53:00:c9:eb:f9:46:8c:42:84:f3:1e:1c:95: 91:98:09:a3:c3:09:10:9a:1e:ec:81:08:5f:4e:43:42:21:6d: 61:1c:05:53:e9:6e:0c:8e:38:51:35:38:0c:80:81:3a:ce:21: e4:e8:98:aa:52:f5:f8:98:01:b6:d9:e2:4a:3e:2d:69:36:f3: 8b:22:39:8e:88:26:02:ed:10:8a:83:23:98:e8:ae:5c:d2:e2: 52:2f:a3:a3:78:44:1e:17:dd:af:bf:f6:c4:dd:fe:6b:88:4a: 31:cd:55:f8:6a:cb:24:93:28:83:d5:e1:26:c8:aa:83:22:e2: 4e:9e:9f:9f:e9:40:58:2d:e2:50:df:b5:0b:1b:e7:82:0e:66: f5:9d:35:fb:46:41:f4:cb:df:39:07:30:9b:37:36:f5:1f:16: 51:96:fa:eb -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOsowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3NDZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDBCNkQ2RDRDQjdBRThF NTFBN0JERUEwMjNDRjU0NDIwNjc2MkM3MjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9YgofILsYCRxnHCIFxqZXm5Gast5HxveJq1dW5WZywM/G17Wv PClDUI4M7vZju5o36CwRgecn4kbqlnLTP9JNdgg12JpqOhJ/Ff+hyl/iA800fCFM 5jgCmrlS0Wl1BpH6D6oXrrQhS+cdIoDTpaZs1Hirl9q7qd5qw0KIfqESEQXFP1Nf bhvgP+PT4Dwwx/zNAyFUEWwnRCZgG4yLmyPvsQx3rIG1J3bks7uWY3uceaR/jr7v pStYk1lqxYUszGV6l++PLDieXpqrYSOFv1UcI3ZCQ2vtvLHKYI8VbPTAZPaM8t2s CCncDU+9cO0LUwJ3nQERGg3+P1EPDiKv2N+7AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUC21tTLeujlGnveoCPPVEIGdixyUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0MyMXRUTGV1amxHbnZlb0NQ UFZFSUdkaXh5VS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq AdAwDQYJKoZIhvcNAQELBQADggEBAAkoceEqQQQ4LIKnrj1eyZ7cLso0MTVbGr9u sDCQLJJ/K04hfAoOJWCSOH4RcZErRxljJav7yl/iYs02c1AubHVJVzsxNh7kp0YJ zyqAvoQ8LuR7xU/LSGUSfiYLgyc5UwDJ6/lGjEKE8x4clZGYCaPDCRCaHuyBCF9O Q0IhbWEcBVPpbgyOOFE1OAyAgTrOIeTomKpS9fiYAbbZ4ko+LWk284siOY6IJgLt EIqDI5jorlzS4lIvo6N4RB4X3a+/9sTd/muISjHNVfhqyySTKIPV4SbIqoMi4k6e n5/pQFgt4lDftQsb54IOZvWdNftGQfTL3zkHMJs3NvUfFlGW+us= -----END CERTIFICATE-----Generated at Sun Aug 24 05:32:14 2025 by rpki-client