$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JIhec1XMTAa6Mfm1JgCX3YiCWhc.roa File: JIhec1XMTAa6Mfm1JgCX3YiCWhc.roa (raw, json) Hash identifier: B6pinaW2YiQesWfJM9SZ/c/paC7RHSTh4KkMpRCz/Nc= Subject key identifier: 24:88:5E:73:55:CC:4C:06:BA:31:F9:B5:26:00:97:DD:88:82:5A:17 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 387A Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JIhec1XMTAa6Mfm1JgCX3YiCWhc.roa Signing time: Fri 22 Aug 2025 08:45:20 +0000 ROA not before: Fri 22 Aug 2025 08:45:20 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 106.1.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14458 (0x387a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:20 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=24885E7355CC4C06BA31F9B5260097DD88825A17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9b:34:25:ca:aa:86:79:12:e4:a0:6f:e6:5c: b0:17:14:3d:aa:89:84:9c:e7:ac:9f:34:69:fe:cc: 03:37:03:17:46:2e:d9:3f:da:fd:47:87:a5:75:f2: 22:9d:94:9d:86:5e:ed:af:1d:90:5e:1c:ea:83:16: 90:d1:67:9a:ee:2b:53:8d:00:19:d1:3e:65:53:21: 2d:61:94:b9:05:47:9f:c0:17:f5:4d:5f:98:82:57: 8d:9a:46:a9:c0:8d:84:06:e4:73:9b:b2:69:f1:96: 72:4b:dd:d6:f9:a7:83:94:14:b0:d0:65:a7:82:fe: 85:0d:12:5d:40:ee:77:19:4f:06:6c:fc:12:e5:2d: d6:5f:9d:52:ba:2a:31:b2:2c:3d:52:69:fc:f0:03: e7:17:4a:83:59:26:63:e4:38:08:90:80:3b:90:b9: e7:e9:89:c1:2c:de:08:d0:91:8b:6c:48:00:cc:f8: ed:de:ea:99:87:56:8f:25:90:e8:54:1b:73:28:bc: c8:82:2d:df:1f:13:4e:69:d2:1d:22:36:c3:70:dd: 78:b1:9d:35:7c:8d:5c:c6:f1:d0:0b:f4:16:8b:bf: 69:af:91:85:de:53:90:05:1b:1c:ce:bf:4c:12:34: 7d:67:f5:12:1c:68:af:b6:e5:87:b4:5c:4f:45:6c: 3d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:88:5E:73:55:CC:4C:06:BA:31:F9:B5:26:00:97:DD:88:82:5A:17 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JIhec1XMTAa6Mfm1JgCX3YiCWhc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.207.0/24 Signature Algorithm: sha256WithRSAEncryption 30:db:5f:65:ad:70:d1:32:56:4d:c4:2a:3b:94:83:68:54:2e: 69:a8:0b:29:82:34:c7:c7:5f:80:76:ec:60:0f:89:f3:07:a7: 80:d9:07:fc:40:49:15:e3:7d:3d:dd:33:36:14:a4:c2:3d:67: 5b:e2:fc:48:84:4c:55:18:c7:d6:4f:ef:16:a2:fd:33:e4:9e: d8:82:f8:c8:83:f5:92:37:85:2c:d0:5f:4c:f9:47:1a:3d:4a: 4f:d1:7d:ee:de:fb:89:b0:a4:23:c9:5a:f8:38:3a:b8:6a:84: 2d:90:e7:ce:1f:b6:40:30:53:14:d7:e7:11:8b:9a:6f:ba:e1: a7:e7:42:70:4b:dc:d6:3c:47:38:e3:cc:cc:06:32:02:da:b8: 31:e0:a4:08:66:5c:54:59:e3:eb:0d:a9:73:51:68:ad:ba:80: 0b:54:6e:92:17:29:85:0e:6c:f3:83:e4:b2:46:22:f1:0b:ef: 10:53:b4:5d:e3:10:76:c3:43:dd:25:d3:dc:b4:bb:78:1c:c4: aa:bc:8a:ed:40:d8:59:d8:dc:c2:6a:f7:cb:63:c7:3d:b6:9a: 7e:0d:82:e8:51:c3:53:dc:2d:d2:fa:36:a6:e2:b2:95:b3:63: 4e:3b:d7:ad:54:7a:28:a0:12:65:e4:ce:6f:62:e6:7b:6a:48: 52:1e:aa:59 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOHowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1MjBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDI0ODg1RTczNTVDQzRD MDZCQTMxRjlCNTI2MDA5N0REODg4MjVBMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPmzQlyqqGeRLkoG/mXLAXFD2qiYSc56yfNGn+zAM3AxdGLtk/ 2v1Hh6V18iKdlJ2GXu2vHZBeHOqDFpDRZ5ruK1ONABnRPmVTIS1hlLkFR5/AF/VN X5iCV42aRqnAjYQG5HObsmnxlnJL3db5p4OUFLDQZaeC/oUNEl1A7ncZTwZs/BLl LdZfnVK6KjGyLD1SafzwA+cXSoNZJmPkOAiQgDuQuefpicEs3gjQkYtsSADM+O3e 6pmHVo8lkOhUG3MovMiCLd8fE05p0h0iNsNw3XixnTV8jVzG8dAL9BaLv2mvkYXe U5AFGxzOv0wSNH1n9RIcaK+25Ye0XE9FbD3lAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUJIhec1XMTAa6Mfm1JgCX3YiCWhcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0pJaGVjMVhNVEFhNk1mbTFK Z0NYM1lpQ1doYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq Ac8wDQYJKoZIhvcNAQELBQADggEBADDbX2WtcNEyVk3EKjuUg2hULmmoCymCNMfH X4B27GAPifMHp4DZB/xASRXjfT3dMzYUpMI9Z1vi/EiETFUYx9ZP7xai/TPkntiC +MiD9ZI3hSzQX0z5Rxo9Sk/Rfe7e+4mwpCPJWvg4OrhqhC2Q584ftkAwUxTX5xGL mm+64afnQnBL3NY8RzjjzMwGMgLauDHgpAhmXFRZ4+sNqXNRaK26gAtUbpIXKYUO bPOD5LJGIvEL7xBTtF3jEHbDQ90l09y0u3gcxKq8iu1A2FnY3MJq98tjxz22mn4N guhRw1PcLdL6NqbispWzY047161UeiigEmXkzm9i5ntqSFIeqlk= -----END CERTIFICATE-----Generated at Sun Aug 24 07:23:15 2025 by rpki-client