$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EIATpKRq-INvgQ6awrX-SXk60bE.roa File: EIATpKRq-INvgQ6awrX-SXk60bE.roa (raw, json) Hash identifier: EN9D67BLdaCmVvG+Ow09MLK8Zt1y62mW3t7EvustzpU= Subject key identifier: 10:80:13:A4:A4:6A:F8:83:6F:81:0E:9A:C2:B5:FE:49:79:3A:D1:B1 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3AA8 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EIATpKRq-INvgQ6awrX-SXk60bE.roa Signing time: Fri 22 Aug 2025 08:47:36 +0000 ROA not before: Fri 22 Aug 2025 08:47:36 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.193.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15016 (0x3aa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:36 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=108013A4A46AF8836F810E9AC2B5FE49793AD1B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:98:02:86:01:f7:ef:c4:ea:c4:67:c3:1c:3d: 24:7b:80:b7:77:df:17:e3:d2:5c:9d:76:46:9e:2c: 21:cc:d9:b0:9e:dc:0b:f4:24:a6:06:f1:19:19:56: 59:68:c8:06:88:17:fd:5a:6b:7e:09:b4:93:fb:22: 34:3c:cd:34:13:bb:79:3e:f3:54:b1:35:ab:a0:f9: e5:9a:ec:43:b0:71:63:09:db:ea:c0:a2:cf:d1:c5: 33:d9:09:02:af:93:5a:99:76:91:cf:23:ae:b9:cc: ce:b3:f6:6f:f6:7b:e0:94:c4:ef:3d:07:75:15:55: d0:13:f7:45:e5:49:46:4a:93:69:38:e0:be:67:29: 8e:e9:60:2e:67:bb:8d:99:b9:20:e5:8a:be:0d:b2: c7:62:e8:5b:3c:19:c5:e5:8b:33:29:3a:0e:65:67: 08:4c:c0:6e:97:d6:ba:ea:ed:00:47:c4:97:04:92: a0:8e:6a:41:06:7d:bd:df:f6:40:a6:c7:4a:db:7a: 05:54:34:79:55:39:d1:cf:85:d2:df:a0:b4:a2:87: 17:5a:b2:5b:5c:17:05:f3:28:70:27:d3:7f:de:31: 08:dc:98:3e:08:a7:2f:42:ae:33:38:2f:07:96:1f: 31:b0:19:13:a5:47:5f:15:30:9b:59:b5:53:0a:a8: 8f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:80:13:A4:A4:6A:F8:83:6F:81:0E:9A:C2:B5:FE:49:79:3A:D1:B1 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EIATpKRq-INvgQ6awrX-SXk60bE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.240.0/22 Signature Algorithm: sha256WithRSAEncryption 6b:2e:31:64:33:85:9d:7b:24:a4:52:6e:90:b7:04:95:22:14: 0f:1d:fb:25:75:d0:41:52:bd:91:3a:9c:3b:5d:69:14:25:25: 2f:2b:f8:6b:7a:92:7f:7b:87:3f:49:44:55:95:de:8e:53:eb: 57:58:24:01:8e:8f:a2:ec:4b:23:a2:0e:ea:f1:e4:c3:d1:00: 17:03:81:2a:3b:5f:01:ca:9f:cb:24:31:b9:72:3c:38:2c:da: 3f:c5:a3:ba:c9:fe:fd:e3:65:36:cc:cb:1b:9b:1d:71:08:c4: 63:9d:16:19:21:5b:46:25:93:ea:24:51:6c:d6:21:b5:d8:0e: 53:5b:9b:16:4a:a3:84:51:9f:86:53:1c:51:93:99:f1:f3:ea: 06:0f:e1:ad:1a:58:ce:0c:89:cd:16:ec:5d:7d:7b:ce:a2:c9: 03:25:55:86:88:5a:9e:82:ce:3b:04:08:01:8b:93:a2:b5:5a: 8c:f2:b5:48:f7:f3:cc:37:a4:a7:93:02:9b:f9:76:93:a7:2a: c2:e0:7b:d5:9a:74:ad:f8:f3:be:d3:26:a2:70:b6:ec:f0:10: dc:e9:2f:10:5a:34:ec:8e:37:05:c9:8c:87:13:0a:5d:16:61: cc:ab:4d:8c:96:5e:51:b3:0f:5e:19:17:50:15:76:ad:60:47: 9b:ea:9d:02 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOqgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3MzZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDEwODAxM0E0QTQ2QUY4 ODM2RjgxMEU5QUMyQjVGRTQ5NzkzQUQxQjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrmAKGAffvxOrEZ8McPSR7gLd33xfj0lyddkaeLCHM2bCe3Av0 JKYG8RkZVlloyAaIF/1aa34JtJP7IjQ8zTQTu3k+81SxNaug+eWa7EOwcWMJ2+rA os/RxTPZCQKvk1qZdpHPI665zM6z9m/2e+CUxO89B3UVVdAT90XlSUZKk2k44L5n KY7pYC5nu42ZuSDlir4Nssdi6Fs8GcXlizMpOg5lZwhMwG6X1rrq7QBHxJcEkqCO akEGfb3f9kCmx0rbegVUNHlVOdHPhdLfoLSihxdasltcFwXzKHAn03/eMQjcmD4I py9CrjM4LweWHzGwGROlR18VMJtZtVMKqI9RAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUEIATpKRq+INvgQ6awrX+SXk60bEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0VJQVRwS1JxLUlOdmdRNmF3 clgtU1hrNjBiRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wfAwDQYJKoZIhvcNAQELBQADggEBAGsuMWQzhZ17JKRSbpC3BJUiFA8d+yV10EFS vZE6nDtdaRQlJS8r+Gt6kn97hz9JRFWV3o5T61dYJAGOj6LsSyOiDurx5MPRABcD gSo7XwHKn8skMblyPDgs2j/Fo7rJ/v3jZTbMyxubHXEIxGOdFhkhW0Ylk+okUWzW IbXYDlNbmxZKo4RRn4ZTHFGTmfHz6gYP4a0aWM4Mic0W7F19e86iyQMlVYaIWp6C zjsECAGLk6K1WozytUj388w3pKeTApv5dpOnKsLge9WadK34877TJqJwtuzwENzp LxBaNOyONwXJjIcTCl0WYcyrTYyWXlGzD14ZF1AVdq1gR5vqnQI= -----END CERTIFICATE-----Generated at Sun Aug 24 07:29:33 2025 by rpki-client