$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DtFY-d_68z03YnZB6FPgVwdJ9DQ.roa File: DtFY-d_68z03YnZB6FPgVwdJ9DQ.roa (raw, json) Hash identifier: THMHNWq8V9yHIvlrDuUclc+VS0P6/VfY+n/Cq/qDvk8= Subject key identifier: 0E:D1:58:F9:DF:FA:F3:3D:37:62:76:41:E8:53:E0:57:07:49:F4:34 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 398D Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DtFY-d_68z03YnZB6FPgVwdJ9DQ.roa Signing time: Fri 22 Aug 2025 08:46:25 +0000 ROA not before: Fri 22 Aug 2025 08:46:25 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.193.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14733 (0x398d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:25 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=0ED158F9DFFAF33D37627641E853E0570749F434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a6:db:9d:4a:34:16:2d:66:c0:9b:50:df:81: a0:12:67:c0:ca:87:cf:3d:9e:7e:2b:be:cd:e8:9d: a3:51:52:1c:40:f6:3a:e4:9c:fd:c0:c6:39:b1:2a: 96:ff:36:0b:97:fd:70:13:95:af:d0:a7:ba:4c:e8: e5:fd:0e:3c:68:fa:b9:c4:39:d2:30:2d:a3:33:22: 9d:ca:42:af:c7:24:4a:c1:99:a0:f2:44:0e:8b:4a: 29:26:b6:41:14:08:66:25:53:63:c4:d2:c9:a5:f7: 54:02:01:01:36:d3:92:79:4a:55:4b:fa:a3:2e:7b: 2b:45:33:f5:cb:c9:3a:4a:b1:23:07:d9:fa:32:00: b6:71:08:6e:2b:2b:ee:45:48:da:28:c5:a3:4a:e8: 46:43:5c:5e:64:68:8c:38:ad:9c:f6:a8:d0:e3:23: 84:70:3b:c4:fe:86:f0:05:39:54:51:57:af:b1:fd: c3:f0:25:6d:de:cc:0a:2d:ab:ff:68:7d:c5:da:2b: 60:39:59:8d:c9:39:8e:6b:3e:69:a0:04:51:23:97: 5f:3d:79:1f:dc:da:58:ca:7b:1d:04:9c:e6:78:ee: 17:a5:2e:c1:6d:79:90:ff:d3:48:68:3b:81:9a:f1: e9:26:f2:c6:cf:1e:fb:15:17:06:dd:d3:fc:e7:e0: 5c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:D1:58:F9:DF:FA:F3:3D:37:62:76:41:E8:53:E0:57:07:49:F4:34 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DtFY-d_68z03YnZB6FPgVwdJ9DQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.110.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:f5:ec:4c:b7:14:b8:7b:b3:d3:cd:0e:7f:90:05:e1:66:57: a1:2c:68:71:96:92:de:d2:d2:e4:c4:6f:2d:4e:ad:65:86:28: 63:6f:39:52:75:e5:85:0f:bb:cd:00:86:ec:ed:df:22:b8:c6: 9a:b4:01:b1:7b:74:a1:79:c9:29:70:51:70:9b:c3:f2:03:0d: 65:8b:c7:8c:88:23:64:d6:50:5a:50:45:b8:11:cb:dc:05:41: ec:c7:48:04:16:8a:9c:6d:7c:3a:cd:a7:9b:60:89:ef:7f:52: 20:57:0a:4a:e0:a5:24:8d:cb:99:14:3f:d1:5b:b8:b9:86:6d: 66:a4:06:e1:7f:e1:e5:97:dc:01:33:63:74:f6:88:4f:31:42: 16:cf:cd:f6:32:c1:c0:7e:b0:52:7d:f9:32:0d:46:19:1c:ee: 02:d7:86:45:94:4b:8b:b9:7e:d5:2e:e3:1e:7e:44:80:c7:31: 43:51:18:5f:d2:40:b2:48:3a:1b:b9:33:e2:1e:65:da:ca:57: 6d:c6:85:dd:2b:82:5b:90:35:05:f2:bf:c7:5c:f1:2f:d8:3f: bd:1d:b2:f4:64:70:5f:c0:4c:90:3d:2f:95:d0:27:55:bc:3c: f2:73:a6:f9:2e:80:1a:3a:0f:85:2a:c4:93:19:93:48:f4:0b: d4:a0:c9:f3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOY0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2MjVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDBFRDE1OEY5REZGQUYz M0QzNzYyNzY0MUU4NTNFMDU3MDc0OUY0MzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDeptudSjQWLWbAm1DfgaASZ8DKh889nn4rvs3onaNRUhxA9jrk nP3AxjmxKpb/NguX/XATla/Qp7pM6OX9Djxo+rnEOdIwLaMzIp3KQq/HJErBmaDy RA6LSikmtkEUCGYlU2PE0sml91QCAQE205J5SlVL+qMueytFM/XLyTpKsSMH2foy ALZxCG4rK+5FSNooxaNK6EZDXF5kaIw4rZz2qNDjI4RwO8T+hvAFOVRRV6+x/cPw JW3ezAotq/9ofcXaK2A5WY3JOY5rPmmgBFEjl189eR/c2ljKex0EnOZ47helLsFt eZD/00hoO4Ga8ekm8sbPHvsVFwbd0/zn4FzPAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUDtFY+d/68z03YnZB6FPgVwdJ9DQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0R0RlktZF82OHowM1luWkI2 RlBnVndkSjlEUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7 wW4wDQYJKoZIhvcNAQELBQADggEBADr17Ey3FLh7s9PNDn+QBeFmV6EsaHGWkt7S 0uTEby1OrWWGKGNvOVJ15YUPu80Ahuzt3yK4xpq0AbF7dKF5ySlwUXCbw/IDDWWL x4yII2TWUFpQRbgRy9wFQezHSAQWipxtfDrNp5tgie9/UiBXCkrgpSSNy5kUP9Fb uLmGbWakBuF/4eWX3AEzY3T2iE8xQhbPzfYywcB+sFJ9+TINRhkc7gLXhkWUS4u5 ftUu4x5+RIDHMUNRGF/SQLJIOhu5M+IeZdrKV23Ghd0rgluQNQXyv8dc8S/YP70d svRkcF/ATJA9L5XQJ1W8PPJzpvkugBo6D4UqxJMZk0j0C9SgyfM= -----END CERTIFICATE-----Generated at Sun Aug 24 07:31:58 2025 by rpki-client