$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IhXw4jEbvdr8lEVcY207-XWo20s.roa File: IhXw4jEbvdr8lEVcY207-XWo20s.roa (raw, json) Hash identifier: WIyGeoxS5ElX9no4mDy84jiGot5KQx9K7NsClNeRUlk= Subject key identifier: 22:15:F0:E2:31:1B:BD:DA:FC:94:45:5C:63:6D:3B:F9:75:A8:DB:4B Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 392E Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IhXw4jEbvdr8lEVcY207-XWo20s.roa Signing time: Fri 22 Aug 2025 08:46:03 +0000 ROA not before: Fri 22 Aug 2025 08:46:03 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 2407:4d00:ff05::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14638 (0x392e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:03 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=2215F0E2311BBDDAFC94455C636D3BF975A8DB4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:98:17:04:85:77:2d:a5:2f:e0:87:d9:94:6b: ff:f7:7d:cc:18:bd:7a:90:1c:a6:45:dc:77:2e:1f: 37:08:62:1a:5b:5d:72:bc:70:f2:1f:01:99:15:91: 36:3a:4b:aa:c9:6e:82:08:58:23:99:70:c9:a4:4d: 8d:1f:56:5c:de:45:6c:4e:f7:b5:bf:7a:de:fe:50: 53:78:c4:1a:96:a4:44:e7:26:ae:39:6e:12:2e:d1: de:b1:bf:29:05:25:d3:3d:72:3e:41:2c:a5:56:08: b9:31:10:45:d5:a2:8e:ab:5b:11:6b:5f:b8:3a:b6: 31:11:e9:33:fe:26:61:86:30:68:1f:22:d6:56:0f: 2f:fc:0f:3e:0a:44:47:09:90:9a:4c:8f:b6:9a:46: 98:53:ea:44:ef:f9:ad:d3:89:ce:07:a4:a2:89:ae: 90:b6:6e:06:9e:a6:8a:5d:86:7c:8b:11:2d:e3:09: 03:70:2b:51:9c:1e:35:66:d7:7c:42:f8:9f:46:cd: 54:56:59:5a:a2:91:c2:84:5a:ad:da:76:66:ae:7f: 19:ad:74:ef:4c:d5:f0:53:89:c9:3e:41:3b:06:28: cd:34:f6:b9:b7:e3:cb:b3:49:b9:07:55:31:d5:3f: 83:c6:e4:e3:32:c7:df:3d:6f:cf:c7:ce:be:f2:b4: 05:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:15:F0:E2:31:1B:BD:DA:FC:94:45:5C:63:6D:3B:F9:75:A8:DB:4B X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IhXw4jEbvdr8lEVcY207-XWo20s.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:4d00:ff05::/48 Signature Algorithm: sha256WithRSAEncryption 8e:aa:1d:7f:3e:ec:ff:18:40:9a:3d:77:8e:b6:78:70:43:63: 0e:8f:1a:f6:48:05:37:a6:b1:f7:59:31:89:56:9b:5f:86:19: 41:1d:76:97:2c:f9:aa:ec:86:93:8f:1d:aa:21:08:30:bc:9d: e6:b5:40:97:86:7c:ab:f2:af:80:ef:e6:13:09:02:91:d2:91: db:1d:9c:63:0f:88:a9:c4:58:76:f6:6b:13:9d:af:58:f3:09: b2:cc:d3:fe:78:5d:c9:98:0d:a5:64:56:f2:b3:1a:df:e8:c3: c7:41:52:4f:60:1b:1b:5b:82:75:93:1e:40:38:e6:9a:9b:03: d5:8a:9f:2f:f2:9b:f7:75:e6:49:22:0d:d5:74:f6:99:fa:bf: f1:13:6b:fd:d9:b2:81:dd:aa:be:e7:4c:6d:43:ee:64:a1:05: 03:ef:88:1d:01:82:0d:c9:4a:64:45:d3:99:43:16:1a:87:90: 01:1c:82:91:c9:2f:b0:b4:57:68:d1:f0:2d:a9:63:2f:6f:31: a6:1f:a6:4c:4e:fb:6b:67:1a:70:a9:1a:1a:14:99:c8:49:82: 7a:9d:d7:a5:89:e8:b3:45:e0:99:c4:0f:96:3c:4d:20:f1:11: 5e:a8:02:df:74:d6:c2:3d:b1:55:af:8c:90:c7:2b:c9:dd:8d: f0:00:20:7c -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICOS4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2MDNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDIyMTVGMEUyMzExQkJE REFGQzk0NDU1QzYzNkQzQkY5NzVBOERCNEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0mBcEhXctpS/gh9mUa//3fcwYvXqQHKZF3HcuHzcIYhpbXXK8 cPIfAZkVkTY6S6rJboIIWCOZcMmkTY0fVlzeRWxO97W/et7+UFN4xBqWpETnJq45 bhIu0d6xvykFJdM9cj5BLKVWCLkxEEXVoo6rWxFrX7g6tjER6TP+JmGGMGgfItZW Dy/8Dz4KREcJkJpMj7aaRphT6kTv+a3Tic4HpKKJrpC2bgaepopdhnyLES3jCQNw K1GcHjVm13xC+J9GzVRWWVqikcKEWq3admaufxmtdO9M1fBTick+QTsGKM009rm3 48uzSbkHVTHVP4PG5OMyx989b8/Hzr7ytAVJAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUIhXw4jEbvdr8lEVcY207+XWo20swHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0loWHc0akVidmRyOGxFVmNZ MjA3LVhXbzIwcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk B00A/wUwDQYJKoZIhvcNAQELBQADggEBAI6qHX8+7P8YQJo9d462eHBDYw6PGvZI BTemsfdZMYlWm1+GGUEddpcs+arshpOPHaohCDC8nea1QJeGfKvyr4Dv5hMJApHS kdsdnGMPiKnEWHb2axOdr1jzCbLM0/54XcmYDaVkVvKzGt/ow8dBUk9gGxtbgnWT HkA45pqbA9WKny/ym/d15kkiDdV09pn6v/ETa/3ZsoHdqr7nTG1D7mShBQPviB0B gg3JSmRF05lDFhqHkAEcgpHJL7C0V2jR8C2pYy9vMaYfpkxO+2tnGnCpGhoUmchJ gnqd16WJ6LNF4JnED5Y8TSDxEV6oAt901sI9sVWvjJDHK8ndjfAAIHw= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:16 2025 by rpki-client