$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/E0aUnC7Lun1jX-RMoTDKzGnZh5g.roa File: E0aUnC7Lun1jX-RMoTDKzGnZh5g.roa (raw, json) Hash identifier: x306FPFHo2d5XsoYUT6QZHUdB1ydMmqfP8SL0vz921s= Subject key identifier: 13:46:94:9C:2E:CB:BA:7D:63:5F:E4:4C:A1:30:CA:CC:69:D9:87:98 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 391A Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/E0aUnC7Lun1jX-RMoTDKzGnZh5g.roa Signing time: Fri 22 Aug 2025 08:45:58 +0000 ROA not before: Fri 22 Aug 2025 08:45:58 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 118.233.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14618 (0x391a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:58 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=1346949C2ECBBA7D635FE44CA130CACC69D98798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:30:b2:92:e1:b9:2b:02:9c:37:ee:a1:45:c3: f2:17:58:39:95:eb:b0:58:4a:af:81:7e:76:5f:d5: f8:41:9b:a1:64:13:af:94:25:75:60:7c:b1:d3:0a: ce:e1:e2:92:f9:5e:80:30:6d:9f:62:d3:ac:56:ac: 0f:60:28:14:04:2b:94:7f:e0:46:a9:4b:d1:e5:12: ea:c4:9e:0e:f4:53:fb:c6:39:24:d8:d8:aa:96:b1: d5:81:cd:44:50:d3:bb:93:7e:72:9a:ec:3c:eb:20: 00:d7:e0:1a:75:5d:71:93:89:0d:0f:a2:19:bf:c4: a0:d0:c9:dc:02:d6:8e:39:f6:73:24:a3:e1:79:60: e3:d7:a0:49:df:bd:d8:44:c8:0d:df:b5:b3:9c:18: 02:0d:e7:4f:b5:b5:fe:6a:53:d7:39:79:64:d0:69: b3:3c:53:7a:5b:b4:e6:a3:61:51:85:e1:4b:10:d6: 90:2e:81:eb:3f:fa:f4:58:bb:d6:34:5c:c6:e5:bc: 3a:4e:cc:b8:b2:5f:2c:7e:c4:70:55:d7:83:09:d8: ac:e8:43:4b:31:4d:5c:70:a1:fa:47:51:75:21:92: 16:3e:2f:c7:01:7e:bd:81:a1:cc:a8:e8:3c:34:34: 89:6c:2c:ac:58:7c:29:37:06:9c:87:a7:47:94:d3: e7:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:46:94:9C:2E:CB:BA:7D:63:5F:E4:4C:A1:30:CA:CC:69:D9:87:98 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/E0aUnC7Lun1jX-RMoTDKzGnZh5g.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.8.0/21 Signature Algorithm: sha256WithRSAEncryption 45:4a:11:dd:c9:de:d6:af:bb:bf:1b:c2:67:c8:a1:53:b2:45: 83:5f:0e:ca:9b:d8:bd:46:42:a7:6b:dd:3d:4e:55:91:e8:25: 39:33:08:06:ee:9a:21:e7:a1:46:c5:50:f9:72:75:a1:8f:01: 72:a9:cb:af:57:1d:68:79:2c:36:01:88:98:9b:63:d7:43:54: 8d:65:c3:95:b2:86:b8:4d:95:33:a5:f8:5d:2c:a2:d1:96:d6: a3:70:51:1c:57:a6:83:1e:a9:5b:fa:bb:dc:e9:72:a0:ad:48: 0e:f4:a6:7a:72:78:13:99:13:98:a5:06:ec:62:f9:b4:c0:b6: 46:cf:6b:0d:63:9a:90:1b:88:e1:c0:07:20:bc:fa:07:54:67: f8:03:47:38:c5:0c:0e:64:24:e2:9a:79:77:e0:de:46:58:bf: 97:f4:0f:b6:91:db:ad:bf:e7:43:29:6c:18:e5:27:a6:1d:58: 12:fe:84:29:26:a8:ff:2c:5b:ea:bd:b5:56:a8:fd:d1:16:1d: 6b:f7:bc:3f:e0:1e:8a:c9:6b:08:4f:7d:64:7c:c0:29:e6:f4: 08:b6:c5:73:10:92:ea:8b:5c:0e:a0:87:69:bb:9c:a6:82:a2: 93:8b:0d:48:43:04:40:cc:4b:e5:6f:c5:1e:67:c5:92:7b:1c: eb:ff:a5:93 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICORowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1NThaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDEzNDY5NDlDMkVDQkJB N0Q2MzVGRTQ0Q0ExMzBDQUNDNjlEOTg3OTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqMLKS4bkrApw37qFFw/IXWDmV67BYSq+BfnZf1fhBm6FkE6+U JXVgfLHTCs7h4pL5XoAwbZ9i06xWrA9gKBQEK5R/4EapS9HlEurEng70U/vGOSTY 2KqWsdWBzURQ07uTfnKa7DzrIADX4Bp1XXGTiQ0Pohm/xKDQydwC1o459nMko+F5 YOPXoEnfvdhEyA3ftbOcGAIN50+1tf5qU9c5eWTQabM8U3pbtOajYVGF4UsQ1pAu ges/+vRYu9Y0XMblvDpOzLiyXyx+xHBV14MJ2KzoQ0sxTVxwofpHUXUhkhY+L8cB fr2Bocyo6Dw0NIlsLKxYfCk3BpyHp0eU0+chAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUE0aUnC7Lun1jX+RMoTDKzGnZh5gwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0UwYVVuQzdMdW4xalgtUk1v VERLekduWmg1Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2 6QgwDQYJKoZIhvcNAQELBQADggEBAEVKEd3J3tavu78bwmfIoVOyRYNfDsqb2L1G Qqdr3T1OVZHoJTkzCAbumiHnoUbFUPlydaGPAXKpy69XHWh5LDYBiJibY9dDVI1l w5WyhrhNlTOl+F0sotGW1qNwURxXpoMeqVv6u9zpcqCtSA70pnpyeBOZE5ilBuxi +bTAtkbPaw1jmpAbiOHAByC8+gdUZ/gDRzjFDA5kJOKaeXfg3kZYv5f0D7aR262/ 50MpbBjlJ6YdWBL+hCkmqP8sW+q9tVao/dEWHWv3vD/gHorJawhPfWR8wCnm9Ai2 xXMQkuqLXA6gh2m7nKaCopOLDUhDBEDMS+VvxR5nxZJ7HOv/pZM= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:42 2025 by rpki-client