$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DSnJCKZFkLgXkxM8_mwcX3aXsdg.roa File: DSnJCKZFkLgXkxM8_mwcX3aXsdg.roa (raw, json) Hash identifier: IR6wxW8L1e5uZsKJW+G6QfHaeeiE7XCyedJ/WLJCnww= Subject key identifier: 0D:29:C9:08:A6:45:90:B8:17:93:13:3C:FE:6C:1C:5F:76:97:B1:D8 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 39AB Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DSnJCKZFkLgXkxM8_mwcX3aXsdg.roa Signing time: Fri 22 Aug 2025 08:46:32 +0000 ROA not before: Fri 22 Aug 2025 08:46:32 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 118.233.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14763 (0x39ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:32 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=0D29C908A64590B81793133CFE6C1C5F7697B1D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:15:0d:92:ae:9f:61:7f:bf:e9:c2:d6:1f:b5: 5d:7e:ab:e3:7c:25:cb:28:ca:7f:4e:b2:3e:35:05: c3:fe:64:d3:ec:0e:c1:d8:a7:f6:95:bb:9d:7d:d3: 3e:55:24:7d:71:3b:f7:e9:9c:24:b5:be:a5:fd:dc: ce:2d:1e:25:e2:13:bb:7c:30:64:1b:0e:f3:e5:01: 44:83:1f:7d:97:0f:ef:42:f1:39:c8:51:ed:97:4a: f6:bf:69:fd:1c:1a:1b:d3:b4:c5:e3:53:12:3a:32: 1b:4b:59:05:86:b1:64:2a:84:6f:18:a8:40:5c:fa: 42:e2:bd:5b:7e:da:f2:e3:6c:ba:26:24:c1:89:eb: 59:ca:76:32:fe:81:17:e8:06:1f:2d:3c:f8:13:59: c9:af:c6:b4:d7:5b:8a:ec:84:0c:6f:48:31:03:0c: 8e:1e:b3:6c:03:e1:1c:08:21:7c:cc:75:53:ca:54: d3:5b:6b:3f:51:bf:e0:b5:48:28:40:4b:20:f3:8b: d0:c3:fa:b5:2f:ae:06:1e:49:5a:21:5e:2c:d1:cb: a7:64:3a:7b:86:bf:11:da:db:97:26:ad:81:2e:4c: 16:d8:3e:dc:48:99:60:32:5f:a4:eb:b9:05:dc:28: e2:b4:0a:e0:59:5c:c7:2d:c1:a8:5e:d4:9f:84:81: eb:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:29:C9:08:A6:45:90:B8:17:93:13:3C:FE:6C:1C:5F:76:97:B1:D8 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DSnJCKZFkLgXkxM8_mwcX3aXsdg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.103.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:70:8e:f2:f1:1b:65:e9:8a:16:ce:44:a7:fc:13:8a:c9:e6: fe:8a:54:6a:9f:6c:53:7a:9f:47:b9:b0:39:71:e0:71:45:26: 69:f1:1b:31:75:46:4a:57:f3:da:44:98:55:dc:bf:8e:81:6b: d7:aa:d9:95:8a:19:cc:03:7e:95:d4:7f:fc:e0:ce:82:bb:1d: 40:9b:d1:59:51:6c:76:45:90:1c:bf:b2:eb:e4:94:d1:9b:51: d3:b0:1c:39:11:13:4d:0b:65:2a:21:3c:8c:58:1a:9a:9b:12: 5b:1e:a0:04:84:67:93:04:7a:41:ee:14:2f:31:ab:59:6a:81: 6b:99:66:b2:da:59:45:f1:64:dc:3e:43:11:d7:ad:bc:28:db: dc:a8:b6:43:0a:ef:0f:ca:e6:68:81:10:92:ae:bd:32:b3:bf: 6b:32:6b:b3:f6:97:db:c4:59:34:06:39:f8:40:e6:a2:59:f0: e8:d6:5c:cf:11:df:9a:41:fc:d7:22:be:47:c6:8f:15:05:88: 89:79:90:ac:b6:c5:6d:64:aa:3e:ae:fa:86:31:05:0c:9a:6d: 61:10:bf:68:49:cc:c5:59:ee:64:07:be:79:e9:32:90:dd:ee: 42:7e:2d:31:4e:00:fc:a5:36:e7:19:89:90:25:8e:2c:4d:a9: bf:43:12:96 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOaswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2MzJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDBEMjlDOTA4QTY0NTkw QjgxNzkzMTMzQ0ZFNkMxQzVGNzY5N0IxRDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4FQ2Srp9hf7/pwtYftV1+q+N8Jcsoyn9Osj41BcP+ZNPsDsHY p/aVu5190z5VJH1xO/fpnCS1vqX93M4tHiXiE7t8MGQbDvPlAUSDH32XD+9C8TnI Ue2XSva/af0cGhvTtMXjUxI6MhtLWQWGsWQqhG8YqEBc+kLivVt+2vLjbLomJMGJ 61nKdjL+gRfoBh8tPPgTWcmvxrTXW4rshAxvSDEDDI4es2wD4RwIIXzMdVPKVNNb az9Rv+C1SChASyDzi9DD+rUvrgYeSVohXizRy6dkOnuGvxHa25cmrYEuTBbYPtxI mWAyX6TruQXcKOK0CuBZXMctwahe1J+EgetZAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUDSnJCKZFkLgXkxM8/mwcX3aXsdgwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0RTbkpDS1pGa0xnWGt4TThf bXdjWDNhWHNkZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB2 6WcwDQYJKoZIhvcNAQELBQADggEBAC5wjvLxG2XpihbORKf8E4rJ5v6KVGqfbFN6 n0e5sDlx4HFFJmnxGzF1RkpX89pEmFXcv46Ba9eq2ZWKGcwDfpXUf/zgzoK7HUCb 0VlRbHZFkBy/suvklNGbUdOwHDkRE00LZSohPIxYGpqbElseoASEZ5MEekHuFC8x q1lqgWuZZrLaWUXxZNw+QxHXrbwo29yotkMK7w/K5miBEJKuvTKzv2sya7P2l9vE WTQGOfhA5qJZ8OjWXM8R35pB/NcivkfGjxUFiIl5kKy2xW1kqj6u+oYxBQyabWEQ v2hJzMVZ7mQHvnnpMpDd7kJ+LTFOAPylNucZiZAljixNqb9DEpY= -----END CERTIFICATE-----Generated at Sun Aug 24 05:34:00 2025 by rpki-client