$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CgUiKGVTu7XjonDc6Yath9BP-wA.roa File: CgUiKGVTu7XjonDc6Yath9BP-wA.roa (raw, json) Hash identifier: bFX97LLZULQ3g34EZphyJu12qC+1kjvTLq5xO1VUUvs= Subject key identifier: 0A:05:22:28:65:53:BB:B5:E3:A2:70:DC:E9:86:AD:87:D0:4F:FB:00 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3892 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CgUiKGVTu7XjonDc6Yath9BP-wA.roa Signing time: Fri 22 Aug 2025 08:45:25 +0000 ROA not before: Fri 22 Aug 2025 08:45:25 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 118.232.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14482 (0x3892) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:25 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=0A0522286553BBB5E3A270DCE986AD87D04FFB00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fe:42:27:34:4d:ea:6c:e1:7e:f0:44:d6:51: 9f:e7:7c:41:09:06:06:d5:7b:24:c6:7a:c7:d9:5d: 7f:b2:65:d4:26:de:f4:c0:46:96:5e:bd:f2:04:dc: 5f:f4:f4:b6:03:93:24:13:8f:6b:64:cf:f8:87:3d: c6:9f:97:29:bc:b8:f3:94:b7:c5:ad:ab:04:10:97: 87:19:20:be:9c:a8:80:22:79:b4:fd:76:17:ab:8a: 49:33:b3:f3:38:6e:e6:a6:01:63:0a:39:17:4a:46: 6d:41:9b:6a:b0:b8:00:a5:67:b9:e0:03:8d:5b:b9: fb:d8:42:91:61:60:7c:ed:3c:90:b3:1c:68:f8:62: 76:a0:6f:17:a7:b8:f9:38:d2:9f:e0:75:af:0c:93: 99:ba:ba:9c:46:a7:a0:81:40:ad:23:2a:8f:9e:df: 04:98:d1:ad:b6:80:29:9c:be:22:c2:81:46:c7:bb: 37:22:13:42:2d:12:7d:2a:7d:e8:26:89:ff:e6:16: 8a:31:b8:17:92:8e:d9:56:7e:a0:98:2f:65:cc:0b: 7d:b2:85:e8:2b:7b:9f:d8:db:23:b4:2a:4b:b0:dc: cb:89:b7:f5:70:0d:38:5e:f4:79:a5:b9:cd:43:bb: c8:7c:d0:dc:ae:22:ca:ad:bf:76:f6:9c:ab:d0:f5: 4c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:05:22:28:65:53:BB:B5:E3:A2:70:DC:E9:86:AD:87:D0:4F:FB:00 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CgUiKGVTu7XjonDc6Yath9BP-wA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.24.0/21 Signature Algorithm: sha256WithRSAEncryption 49:29:24:84:3e:a1:c9:ed:2d:a6:3d:08:a0:51:4f:f3:15:40: 8d:05:b6:55:e2:fc:cc:9a:76:c4:6e:5b:e7:01:78:53:5f:92: 82:bd:7b:96:de:4f:71:a0:c7:a8:3f:57:b6:1d:a2:70:e1:37: cd:e2:9d:75:7e:9f:bd:4f:26:3d:3e:cd:e0:1d:ce:69:c1:36: f6:46:28:12:7e:26:51:5d:68:33:ab:eb:93:e4:de:47:f2:26: 3c:79:4f:cc:71:7a:c2:ab:9f:aa:d5:5f:aa:90:ae:a0:0d:70: ba:d5:8c:93:1a:97:92:fa:60:cb:4c:e4:40:33:e9:d5:65:d7: 08:a3:e9:58:5b:5c:8a:ef:e7:b9:27:34:16:04:e6:62:92:49: 35:37:cc:f1:7f:ce:bf:5d:a7:fa:ff:74:4e:2e:07:8c:a0:e8: a3:ee:26:b1:b7:73:97:ac:68:a0:69:1b:f2:33:8b:69:c0:83: 4b:d2:82:d3:0f:08:1d:f1:c7:70:44:95:31:c1:cb:5d:6d:70: 28:a5:03:da:c3:c9:c3:5a:a6:35:cc:02:9a:bf:d6:33:85:ad: d2:d6:d6:cf:bd:96:16:7d:af:f0:80:14:82:8c:a1:5d:e5:f0: 89:7c:e3:ca:19:e8:a6:61:85:73:33:b0:a1:46:ab:33:45:45: 27:e1:4f:7b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOJIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1MjVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDBBMDUyMjI4NjU1M0JC QjVFM0EyNzBEQ0U5ODZBRDg3RDA0RkZCMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCi/kInNE3qbOF+8ETWUZ/nfEEJBgbVeyTGesfZXX+yZdQm3vTA RpZevfIE3F/09LYDkyQTj2tkz/iHPcaflym8uPOUt8WtqwQQl4cZIL6cqIAiebT9 dherikkzs/M4buamAWMKORdKRm1Bm2qwuAClZ7ngA41bufvYQpFhYHztPJCzHGj4 YnagbxenuPk40p/gda8Mk5m6upxGp6CBQK0jKo+e3wSY0a22gCmcviLCgUbHuzci E0ItEn0qfegmif/mFooxuBeSjtlWfqCYL2XMC32yhegre5/Y2yO0Kkuw3MuJt/Vw DThe9Hmluc1Du8h80NyuIsqtv3b2nKvQ9UztAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUCgUiKGVTu7XjonDc6Yath9BP+wAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0NnVWlLR1ZUdTdYam9uRGM2 WWF0aDlCUC13QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2 6BgwDQYJKoZIhvcNAQELBQADggEBAEkpJIQ+ocntLaY9CKBRT/MVQI0FtlXi/Mya dsRuW+cBeFNfkoK9e5beT3Ggx6g/V7YdonDhN83inXV+n71PJj0+zeAdzmnBNvZG KBJ+JlFdaDOr65Pk3kfyJjx5T8xxesKrn6rVX6qQrqANcLrVjJMal5L6YMtM5EAz 6dVl1wij6VhbXIrv57knNBYE5mKSSTU3zPF/zr9dp/r/dE4uB4yg6KPuJrG3c5es aKBpG/Izi2nAg0vSgtMPCB3xx3BElTHBy11tcCilA9rDycNapjXMApq/1jOFrdLW 1s+9lhZ9r/CAFIKMoV3l8Il848oZ6KZhhXMzsKFGqzNFRSfhT3s= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:58 2025 by rpki-client