$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/J1ltSTjmkaa0j53LRFAkXafHdGE.roa File: J1ltSTjmkaa0j53LRFAkXafHdGE.roa (raw, json) Hash identifier: XOikVkHyz3rZTTb5lB6A6NcMz1H2+6RxRrKErOrMUtI= Subject key identifier: 27:59:6D:49:38:E6:91:A6:B4:8F:9D:CB:44:50:24:5D:A7:C7:74:61 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 39C1 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/J1ltSTjmkaa0j53LRFAkXafHdGE.roa Signing time: Fri 22 Aug 2025 08:46:37 +0000 ROA not before: Fri 22 Aug 2025 08:46:37 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 106.1.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14785 (0x39c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:37 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=27596D4938E691A6B48F9DCB4450245DA7C77461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:b7:65:a7:60:c7:91:64:4d:17:c3:1f:99:d5: e6:02:14:d0:96:5b:2e:eb:ba:76:96:99:ef:fe:77: 17:65:88:30:9e:49:95:bb:0a:46:ef:5d:8a:e1:dd: f7:eb:a8:7e:30:3d:bb:9d:68:8f:4b:b8:81:18:77: a4:d9:c5:83:f5:46:fa:85:5d:33:c1:0d:91:23:ba: 71:40:a1:83:35:5b:2c:1c:8b:37:5c:b0:b0:ad:57: 91:22:b1:c9:65:00:ef:25:9f:c1:99:67:01:7c:96: 51:64:0e:a5:d4:b2:4a:d6:f5:67:ab:b5:cd:20:07: 20:4d:80:41:66:5b:a9:c6:07:a3:36:06:15:d3:27: 66:42:27:ba:f7:d5:53:24:d8:0e:ea:ed:92:cd:cc: 65:1e:2a:1d:02:58:a8:49:d6:8c:15:64:5a:7e:84: c3:ce:04:b1:72:2a:07:d2:12:24:4d:de:85:ad:30: 3d:ba:33:26:d0:5d:e4:70:a0:25:e7:1f:e1:4e:08: c7:d7:9d:c4:25:f4:df:4f:1a:4e:34:6d:f8:ca:6f: 93:79:c4:86:7c:6c:e3:b1:82:89:2a:76:13:ca:04: 14:e0:c5:59:b2:8b:50:e7:7e:9f:35:26:ea:e7:ab: 44:67:52:12:16:0a:d8:ef:64:73:84:db:5d:51:aa: 2c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:59:6D:49:38:E6:91:A6:B4:8F:9D:CB:44:50:24:5D:A7:C7:74:61 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/J1ltSTjmkaa0j53LRFAkXafHdGE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.136.0/22 Signature Algorithm: sha256WithRSAEncryption 12:a2:cf:de:b8:74:28:2e:57:8f:a0:f6:d9:ba:27:cd:92:8e: 93:da:46:e7:b1:23:61:2e:b7:88:fd:5e:62:ae:91:d8:21:ac: 3d:21:29:28:1f:6a:65:43:ce:11:35:a5:94:0e:90:7f:cd:a8: 00:4a:8a:0a:c6:30:98:aa:52:89:f2:a1:c6:4a:26:9c:07:cd: 15:25:19:74:f3:b8:04:1f:7e:c9:69:9b:91:91:30:0e:e8:0b: 57:22:4c:5c:e9:de:2c:8f:31:49:f1:c7:3f:dd:70:63:02:10: 8b:70:0d:a5:06:af:ba:7f:98:10:58:1a:c7:8d:c5:64:fc:e8: a5:db:cf:cc:ce:4e:ba:88:ee:8b:ad:1b:e1:78:a0:a8:3c:0a: 97:7f:5f:97:88:af:66:38:f8:9d:99:39:0e:d6:05:d6:bd:6a: b3:fa:68:d3:1b:8a:fe:3d:f8:22:df:f6:9e:8d:e2:12:10:e5: a8:59:6e:9f:4f:c5:77:78:79:7f:a0:8d:dd:a4:f0:40:d5:f5: d0:d1:80:5d:d8:1b:09:9e:ac:b1:b4:1f:ee:c5:99:2e:76:99: 6a:cb:a5:11:fb:89:a8:82:dc:1a:74:48:ea:d7:d6:22:4d:c8: 42:58:ff:32:da:78:98:4f:36:aa:09:d1:ed:2a:27:cd:19:1f: 33:e3:25:53 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOcEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2MzdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDI3NTk2RDQ5MzhFNjkx QTZCNDhGOURDQjQ0NTAyNDVEQTdDNzc0NjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDzt2WnYMeRZE0Xwx+Z1eYCFNCWWy7runaWme/+dxdliDCeSZW7 CkbvXYrh3ffrqH4wPbudaI9LuIEYd6TZxYP1RvqFXTPBDZEjunFAoYM1Wywcizdc sLCtV5EiscllAO8ln8GZZwF8llFkDqXUskrW9Wertc0gByBNgEFmW6nGB6M2BhXT J2ZCJ7r31VMk2A7q7ZLNzGUeKh0CWKhJ1owVZFp+hMPOBLFyKgfSEiRN3oWtMD26 MybQXeRwoCXnH+FOCMfXncQl9N9PGk40bfjKb5N5xIZ8bOOxgokqdhPKBBTgxVmy i1Dnfp81Jurnq0RnUhIWCtjvZHOE211RqixRAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUJ1ltSTjmkaa0j53LRFAkXafHdGEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0oxbHRTVGpta2FhMGo1M0xS RkFrWGFmSGRHRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq AYgwDQYJKoZIhvcNAQELBQADggEBABKiz964dCguV4+g9tm6J82SjpPaRuexI2Eu t4j9XmKukdghrD0hKSgfamVDzhE1pZQOkH/NqABKigrGMJiqUonyocZKJpwHzRUl GXTzuAQffslpm5GRMA7oC1ciTFzp3iyPMUnxxz/dcGMCEItwDaUGr7p/mBBYGseN xWT86KXbz8zOTrqI7outG+F4oKg8Cpd/X5eIr2Y4+J2ZOQ7WBda9arP6aNMbiv49 +CLf9p6N4hIQ5ahZbp9PxXd4eX+gjd2k8EDV9dDRgF3YGwmerLG0H+7FmS52mWrL pRH7iaiC3Bp0SOrX1iJNyEJY/zLaeJhPNqoJ0e0qJ80ZHzPjJVM= -----END CERTIFICATE-----Generated at Sun Aug 24 07:25:23 2025 by rpki-client