$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EcLDXOIzFUVKRB9dp6eqsUAqbOw.roa File: EcLDXOIzFUVKRB9dp6eqsUAqbOw.roa (raw, json) Hash identifier: eDm5xEFEBmzM4BO//pgglivT+54FQ2umly0jlrPCROg= Subject key identifier: 11:C2:C3:5C:E2:33:15:45:4A:44:1F:5D:A7:A7:AA:B1:40:2A:6C:EC Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 38DC Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EcLDXOIzFUVKRB9dp6eqsUAqbOw.roa Signing time: Fri 22 Aug 2025 08:45:43 +0000 ROA not before: Fri 22 Aug 2025 08:45:43 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.193.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14556 (0x38dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:43 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=11C2C35CE23315454A441F5DA7A7AAB1402A6CEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:97:09:e0:2a:ec:7e:dc:aa:a1:be:69:16:0f: 49:37:82:92:4d:15:7c:04:89:8c:c1:9b:a5:15:90: 15:c2:a2:ba:47:3b:a2:91:a8:4a:2b:28:3d:dc:07: e3:2b:06:ff:5c:35:8d:6f:f1:9e:60:9d:7a:60:ca: ad:7a:67:34:b5:5e:d9:80:43:1c:40:8b:75:76:15: 55:22:a9:34:58:94:4f:84:90:d6:82:de:29:97:26: 18:31:f9:61:4d:84:3b:c0:72:86:2d:02:8d:0b:01: 35:80:13:a6:91:06:78:3f:5a:7b:fc:99:47:65:74: 18:ca:4c:aa:b3:c3:3a:db:27:49:43:5d:0c:e5:fa: 63:ff:a3:45:86:0a:75:26:5e:f4:af:65:55:4f:1a: 5f:f8:b1:71:9b:be:1e:a3:29:dd:54:50:b5:d0:c0: 13:da:a0:3a:0a:a7:68:1b:f1:fa:c3:e8:a0:6b:f7: dd:00:75:e6:fb:8d:31:be:a4:93:2b:39:92:7e:f3: 1f:23:47:0f:70:6b:40:dd:a8:9d:ff:12:3d:07:14: 9a:37:6b:b1:e3:06:e0:43:52:b3:61:8e:24:a7:27: 31:ce:8a:fc:9b:5b:18:99:30:df:56:37:84:33:5c: a7:0e:99:e4:ce:fb:bb:73:06:7d:85:ca:6e:68:f7: e1:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:C2:C3:5C:E2:33:15:45:4A:44:1F:5D:A7:A7:AA:B1:40:2A:6C:EC X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EcLDXOIzFUVKRB9dp6eqsUAqbOw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.152.0/22 Signature Algorithm: sha256WithRSAEncryption 0d:72:49:94:d5:42:f2:40:d0:af:b3:51:36:d2:68:5a:1f:67: fe:75:79:89:9c:64:2e:86:82:a3:f5:ac:76:44:9d:c4:6e:0b: 15:5b:87:b5:3d:b6:b7:d0:8a:4a:35:3f:22:3b:6b:02:d4:80: 19:51:94:d8:ee:1a:62:80:2a:ac:c2:e7:80:6b:15:58:5e:a1: 7e:c4:1f:08:63:66:7f:e2:1a:5a:81:f9:0c:89:8e:e3:05:41: 8e:fd:4f:2a:2a:b3:ed:3c:56:3e:e6:a3:c6:11:26:ab:92:90: 35:d3:49:13:46:84:2b:6b:36:23:cc:09:55:22:7b:df:59:6d: ca:e3:00:4b:3f:7d:2d:05:06:db:5c:1e:a2:3c:78:20:b2:10: d1:a6:9b:69:5a:6d:d1:13:fb:c3:2a:78:10:b5:d9:bd:33:3a: 5a:dd:39:75:3a:8f:a9:80:bf:31:87:1d:83:a3:30:5d:db:c5: 44:51:2f:16:b9:3d:55:36:00:71:18:fa:95:f2:b3:1a:73:57: 7c:45:a6:98:ba:05:a3:59:02:ce:97:aa:79:d2:46:8d:f8:1d: 06:65:f9:10:4d:53:91:2a:56:42:91:bc:9d:01:19:0b:3f:36: 0c:48:8d:57:cb:67:67:e2:74:a2:1c:75:dd:49:75:12:e0:72: b8:d6:fd:55 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICONwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1NDNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDExQzJDMzVDRTIzMzE1 NDU0QTQ0MUY1REE3QTdBQUIxNDAyQTZDRUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDplwngKux+3KqhvmkWD0k3gpJNFXwEiYzBm6UVkBXCorpHO6KR qEorKD3cB+MrBv9cNY1v8Z5gnXpgyq16ZzS1XtmAQxxAi3V2FVUiqTRYlE+EkNaC 3imXJhgx+WFNhDvAcoYtAo0LATWAE6aRBng/Wnv8mUdldBjKTKqzwzrbJ0lDXQzl +mP/o0WGCnUmXvSvZVVPGl/4sXGbvh6jKd1UULXQwBPaoDoKp2gb8frD6KBr990A deb7jTG+pJMrOZJ+8x8jRw9wa0DdqJ3/Ej0HFJo3a7HjBuBDUrNhjiSnJzHOivyb WxiZMN9WN4QzXKcOmeTO+7tzBn2Fym5o9+EpAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUEcLDXOIzFUVKRB9dp6eqsUAqbOwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0VjTERYT0l6RlVWS1JCOWRw NmVxc1VBcWJPdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wZgwDQYJKoZIhvcNAQELBQADggEBAA1ySZTVQvJA0K+zUTbSaFofZ/51eYmcZC6G gqP1rHZEncRuCxVbh7U9trfQiko1PyI7awLUgBlRlNjuGmKAKqzC54BrFVheoX7E HwhjZn/iGlqB+QyJjuMFQY79Tyoqs+08Vj7mo8YRJquSkDXTSRNGhCtrNiPMCVUi e99ZbcrjAEs/fS0FBttcHqI8eCCyENGmm2labdET+8MqeBC12b0zOlrdOXU6j6mA vzGHHYOjMF3bxURRLxa5PVU2AHEY+pXysxpzV3xFppi6BaNZAs6XqnnSRo34HQZl +RBNU5EqVkKRvJ0BGQs/NgxIjVfLZ2fidKIcdd1JdRLgcrjW/VU= -----END CERTIFICATE-----Generated at Sun Aug 24 07:23:15 2025 by rpki-client