$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/F2sUmLbK-6KkRo9zzxxof2w8giA.roa File: F2sUmLbK-6KkRo9zzxxof2w8giA.roa (raw, json) Hash identifier: tCbjhUi2O7UCaytrWVgaEYhTPI54ujo/GwXgJgaA0CM= Subject key identifier: 17:6B:14:98:B6:CA:FB:A2:A4:46:8F:73:CF:1C:68:7F:6C:3C:82:20 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3AC6 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/F2sUmLbK-6KkRo9zzxxof2w8giA.roa Signing time: Fri 22 Aug 2025 08:47:45 +0000 ROA not before: Fri 22 Aug 2025 08:47:45 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 118.232.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15046 (0x3ac6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:45 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=176B1498B6CAFBA2A4468F73CF1C687F6C3C8220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:6e:99:3a:0c:5a:0e:1e:3a:78:84:3e:a2:7b: ae:7f:03:3e:21:94:d2:da:62:8a:31:59:9a:6d:a5: 57:7f:66:c1:60:59:fe:08:68:d6:4a:d7:c6:b8:a4: 21:56:11:4b:2d:f3:64:12:15:7c:4b:5f:17:a0:ca: b2:92:21:0f:d7:c4:32:bb:b0:a7:88:12:91:05:3a: 09:23:17:70:84:39:20:66:07:ea:e8:e4:da:39:57: a4:71:82:c5:2f:53:82:29:43:04:8d:22:18:d0:e5: 4b:84:00:e1:49:db:10:24:5a:68:30:7e:61:c2:a4: bf:fe:78:0f:e8:40:bc:06:3a:c7:b7:e4:4c:13:52: 71:b2:fd:f1:dd:a2:d9:34:5d:a7:82:74:e2:b1:6e: ab:dc:b3:de:50:49:a3:1a:37:e0:af:b0:3e:e1:47: f4:58:69:d7:6d:c8:52:60:c5:97:a7:e5:b5:6f:a9: ea:aa:31:82:0c:94:7e:e5:ba:b1:0c:d3:02:ed:93: 5d:85:94:28:48:f0:33:51:b5:07:75:22:74:f6:57: 30:3a:c0:a7:fd:ea:49:59:94:74:85:0c:99:dd:62: 93:66:49:6d:8a:b1:6d:41:3f:6c:39:28:5b:11:bd: 12:55:5d:1d:0e:bb:1f:22:3d:a1:35:d0:f4:19:ca: 41:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:6B:14:98:B6:CA:FB:A2:A4:46:8F:73:CF:1C:68:7F:6C:3C:82:20 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/F2sUmLbK-6KkRo9zzxxof2w8giA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.200.0/21 Signature Algorithm: sha256WithRSAEncryption a9:3e:d6:52:5a:3c:bd:98:f5:1d:7b:64:ad:e9:5c:57:c8:f8: 46:dd:6c:45:d7:fe:81:dd:30:a8:d5:34:84:25:c0:0c:81:60: d3:f7:24:47:b6:df:2a:58:b7:84:b1:ea:78:7a:e1:eb:c3:38: ea:66:dc:c7:e2:4c:12:ef:4a:05:0f:07:71:02:56:b9:be:2a: f7:09:e3:b9:cd:b8:4e:02:e4:ce:74:be:51:75:f5:09:e8:14: 09:cd:32:5c:17:18:f4:5a:3e:91:c1:2d:e5:c4:a5:29:59:fe: 0d:34:e6:bc:7a:9c:d2:45:80:fd:12:25:51:d1:44:a6:df:79: e4:e2:91:8f:ae:91:36:be:16:28:36:c8:95:4d:e4:7a:d5:d2: 04:08:19:e2:43:ac:3a:aa:b7:2c:c4:ce:39:d1:f1:65:58:38: 99:46:a4:80:64:20:50:74:b9:9d:a2:c7:93:e7:30:67:05:a7: 90:48:ff:9a:2a:a8:48:3b:d2:be:f8:2a:17:94:ef:c8:8a:56: fe:28:67:2d:1f:08:63:d0:0f:55:a4:87:fe:b5:46:f9:09:2a: 15:35:65:12:2b:44:f1:b9:ee:71:85:44:82:eb:19:0f:30:35: 77:50:7b:68:a5:df:0f:8b:02:f1:f8:60:6e:79:8a:2e:40:23: a0:f8:94:d6 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOsYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3NDVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDE3NkIxNDk4QjZDQUZC QTJBNDQ2OEY3M0NGMUM2ODdGNkMzQzgyMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDObpk6DFoOHjp4hD6ie65/Az4hlNLaYooxWZptpVd/ZsFgWf4I aNZK18a4pCFWEUst82QSFXxLXxegyrKSIQ/XxDK7sKeIEpEFOgkjF3CEOSBmB+ro 5No5V6RxgsUvU4IpQwSNIhjQ5UuEAOFJ2xAkWmgwfmHCpL/+eA/oQLwGOse35EwT UnGy/fHdotk0XaeCdOKxbqvcs95QSaMaN+CvsD7hR/RYaddtyFJgxZen5bVvqeqq MYIMlH7lurEM0wLtk12FlChI8DNRtQd1InT2VzA6wKf96klZlHSFDJndYpNmSW2K sW1BP2w5KFsRvRJVXR0Oux8iPaE10PQZykEJAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUF2sUmLbK+6KkRo9zzxxof2w8giAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0Yyc1VtTGJLLTZLa1JvOXp6 eHhvZjJ3OGdpQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2 6MgwDQYJKoZIhvcNAQELBQADggEBAKk+1lJaPL2Y9R17ZK3pXFfI+EbdbEXX/oHd MKjVNIQlwAyBYNP3JEe23ypYt4Sx6nh64evDOOpm3MfiTBLvSgUPB3ECVrm+KvcJ 47nNuE4C5M50vlF19QnoFAnNMlwXGPRaPpHBLeXEpSlZ/g005rx6nNJFgP0SJVHR RKbfeeTikY+ukTa+Fig2yJVN5HrV0gQIGeJDrDqqtyzEzjnR8WVYOJlGpIBkIFB0 uZ2ix5PnMGcFp5BI/5oqqEg70r74KheU78iKVv4oZy0fCGPQD1Wkh/61RvkJKhU1 ZRIrRPG57nGFRILrGQ8wNXdQe2il3w+LAvH4YG55ii5AI6D4lNY= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:41 2025 by rpki-client