$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IkrF-oJVVdaYucQU3KOPXc0XugU.roa File: IkrF-oJVVdaYucQU3KOPXc0XugU.roa (raw, json) Hash identifier: 1XCp93hquFmAxY2t9ngXguZsxXnZY3fgGaUlni/Zq3Y= Subject key identifier: 22:4A:C5:FA:82:55:55:D6:98:B9:C4:14:DC:A3:8F:5D:CD:17:BA:05 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3A19 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IkrF-oJVVdaYucQU3KOPXc0XugU.roa Signing time: Fri 22 Aug 2025 08:47:00 +0000 ROA not before: Fri 22 Aug 2025 08:47:00 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9924 IP address blocks: 123.192.240.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14873 (0x3a19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:00 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=224AC5FA825555D698B9C414DCA38F5DCD17BA05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a3:9c:c2:67:0f:cf:39:db:f4:1e:ef:47:90: cd:98:62:a5:6e:5f:21:05:87:b8:4a:a9:b5:5e:62: 6c:b9:5a:84:fd:71:2d:17:ab:98:f1:50:c1:f7:99: ad:25:68:14:74:4f:22:99:06:87:62:39:bb:fb:ca: 56:fc:82:1b:37:ba:63:7e:37:21:c9:c7:da:aa:d0: 47:e0:e9:46:d5:2a:ee:d6:bf:31:f1:5e:05:f9:c3: ad:ed:c3:7c:cc:e2:c4:a8:ee:74:be:c6:d6:a0:fa: 39:d1:98:55:3f:24:a4:2e:9e:94:b4:f7:42:1e:a8: a5:68:cc:4e:6d:95:2d:a2:7f:0f:b4:c1:6b:49:76: f2:e3:5a:90:00:47:55:c6:08:fe:80:a7:2b:b1:73: 98:4f:0a:e3:88:a8:78:2d:80:80:7a:83:60:9c:1b: 4e:4f:7e:dd:97:43:c5:47:dd:a0:d9:54:e2:0f:74: ff:69:be:e2:77:b5:15:35:a2:7e:72:90:83:91:7f: f0:64:c7:2e:9e:a2:a3:c7:b9:13:01:f3:3e:7a:eb: ba:30:6c:80:84:18:87:02:66:01:79:28:1d:9a:93: b7:ac:03:39:52:60:06:2c:72:e1:60:a4:00:a4:8c: 8e:2e:f4:ed:3f:e0:1a:a0:a5:9d:cf:6c:8e:38:a0: 73:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:4A:C5:FA:82:55:55:D6:98:B9:C4:14:DC:A3:8F:5D:CD:17:BA:05 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IkrF-oJVVdaYucQU3KOPXc0XugU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.240.0/21 Signature Algorithm: sha256WithRSAEncryption 92:92:9b:c3:c2:ed:24:49:22:e8:09:8f:01:bc:53:3a:fc:65: c7:a0:9d:90:ab:94:b9:ca:36:57:62:c4:03:b6:05:3c:9f:47: e9:c4:c7:b8:88:fa:02:7d:16:bc:4e:db:9b:ed:42:77:0b:8e: 44:59:03:9d:a7:39:20:37:51:7e:f7:41:b0:a6:e4:c8:30:19: fd:cc:4d:ca:46:b2:0f:0a:dc:11:30:4d:21:c1:dc:e9:1e:a4: ff:73:f1:b0:c2:73:ee:09:1e:58:45:78:d8:7a:30:3b:00:d0: 49:b1:09:2b:96:11:15:96:e1:c4:ea:c5:e2:5d:b3:f1:28:aa: fc:84:e4:32:f7:ba:82:42:1a:69:4b:c6:be:52:ff:ad:87:47: d0:1a:48:c4:c8:12:e3:26:58:ea:45:5a:5b:7c:dd:02:89:f2: f8:fe:a6:6c:b8:1c:18:00:12:c6:12:0e:9a:1e:8a:83:c3:a5: 1b:a3:29:b8:be:8c:cc:a2:9a:72:c1:5c:b7:3f:a0:74:68:3f: d1:91:db:c6:8c:9e:2f:52:0e:b8:83:5d:7c:dd:db:fc:47:72: 27:00:46:36:68:1f:fe:76:dc:87:28:30:d1:ed:e3:47:4f:c0: c1:9a:91:2c:99:d4:0b:15:e5:b8:9a:9a:ee:55:a7:bb:f5:e1: bc:18:7f:12 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOhkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3MDBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDIyNEFDNUZBODI1NTU1 RDY5OEI5QzQxNERDQTM4RjVEQ0QxN0JBMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9o5zCZw/POdv0Hu9HkM2YYqVuXyEFh7hKqbVeYmy5WoT9cS0X q5jxUMH3ma0laBR0TyKZBodiObv7ylb8ghs3umN+NyHJx9qq0Efg6UbVKu7WvzHx XgX5w63tw3zM4sSo7nS+xtag+jnRmFU/JKQunpS090IeqKVozE5tlS2ifw+0wWtJ dvLjWpAAR1XGCP6Apyuxc5hPCuOIqHgtgIB6g2CcG05Pft2XQ8VH3aDZVOIPdP9p vuJ3tRU1on5ykIORf/Bkxy6eoqPHuRMB8z5667owbICEGIcCZgF5KB2ak7esAzlS YAYscuFgpACkjI4u9O0/4BqgpZ3PbI44oHMdAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUIkrF+oJVVdaYucQU3KOPXc0XugUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0lrckYtb0pWVmRhWXVjUVUz S09QWGMwWHVnVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wPAwDQYJKoZIhvcNAQELBQADggEBAJKSm8PC7SRJIugJjwG8Uzr8ZcegnZCrlLnK NldixAO2BTyfR+nEx7iI+gJ9FrxO25vtQncLjkRZA52nOSA3UX73QbCm5MgwGf3M TcpGsg8K3BEwTSHB3OkepP9z8bDCc+4JHlhFeNh6MDsA0EmxCSuWERWW4cTqxeJd s/EoqvyE5DL3uoJCGmlLxr5S/62HR9AaSMTIEuMmWOpFWlt83QKJ8vj+pmy4HBgA EsYSDpoeioPDpRujKbi+jMyimnLBXLc/oHRoP9GR28aMni9SDriDXXzd2/xHcicA RjZoH/523IcoMNHt40dPwMGakSyZ1AsV5biamu5Vp7v14bwYfxI= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:48 2025 by rpki-client