$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JKr6Srka7xPhOw-9bG3o3NRcJj0.roa File: JKr6Srka7xPhOw-9bG3o3NRcJj0.roa (raw, json) Hash identifier: 3ahnN86Dmih8qakB9LTve/Bxd+niI9k8RpXGR2JsxSA= Subject key identifier: 24:AA:FA:4A:B9:1A:EF:13:E1:3B:0F:BD:6C:6D:E8:DC:D4:5C:26:3D Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3937 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JKr6Srka7xPhOw-9bG3o3NRcJj0.roa Signing time: Fri 22 Aug 2025 08:46:05 +0000 ROA not before: Fri 22 Aug 2025 08:46:05 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 106.1.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14647 (0x3937) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:05 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=24AAFA4AB91AEF13E13B0FBD6C6DE8DCD45C263D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:67:1a:f6:e8:5e:cb:e5:79:0f:3d:a2:8e:7e: a7:45:bb:83:2e:17:3f:9d:a2:18:ca:2b:c7:fb:98: bd:68:82:c6:f6:90:6f:a5:53:c8:09:0b:e9:84:0f: 86:64:09:e5:bc:ad:2e:fc:22:d2:84:78:e1:91:43: 9c:28:52:6f:2f:46:f1:a4:11:b7:c4:0c:af:3c:39: cf:7d:26:57:ca:8d:c8:5e:92:93:26:cb:b8:cb:60: 26:af:8b:36:68:d8:24:aa:78:ea:9f:31:5c:80:cb: b0:2d:5a:7f:20:a6:d8:a7:1e:2b:b2:8a:08:4a:56: 12:25:1d:11:58:70:6d:93:0e:3b:f2:d6:12:60:f7: 46:14:2a:78:43:6c:41:d7:b7:eb:82:0d:87:94:0f: fb:29:e4:5a:02:47:6d:d3:91:c3:67:79:8c:2b:a5: 60:82:e5:e7:a8:64:b8:d9:40:0b:68:cf:15:b5:70: 15:b6:e8:26:bf:44:20:02:42:c7:da:c9:ff:fe:87: 18:5c:6d:0c:9c:aa:ab:80:9d:72:b6:4b:69:3a:e6: f8:7c:2a:ac:16:8a:7d:43:d3:e9:8c:60:c8:5e:56: ef:dc:cb:8e:61:55:a1:11:91:0a:dc:67:cd:0d:e1: 10:9b:7c:f3:70:0b:45:f7:2d:fd:3a:63:1c:d2:ac: 82:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:AA:FA:4A:B9:1A:EF:13:E1:3B:0F:BD:6C:6D:E8:DC:D4:5C:26:3D X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JKr6Srka7xPhOw-9bG3o3NRcJj0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.98.0/24 Signature Algorithm: sha256WithRSAEncryption 07:f5:e8:bc:4e:80:b5:f9:04:ca:c6:81:bc:a9:37:e5:49:54: 01:c6:dc:28:c1:fc:2c:22:7c:52:72:ff:61:e3:e1:b1:f6:90: 8f:28:30:35:22:89:01:55:9f:df:5e:a8:2b:21:85:09:57:9c: 2d:26:71:b7:e2:c0:89:2d:3c:2d:e7:0f:41:50:1a:fa:7b:42: ed:c3:92:41:a7:1b:d9:50:6c:06:93:a8:f1:23:d7:d5:91:3e: 67:e5:84:6e:4e:dc:bc:bc:02:84:4e:28:7f:b1:30:cd:83:40: b0:42:09:d3:8a:b2:f0:61:e9:de:7a:f3:d3:9d:4f:c7:fc:3e: 11:8f:7a:fb:75:3a:a5:b9:95:80:bd:57:ff:81:70:23:e7:6a: 20:2b:d8:6f:f3:d2:33:2e:17:d7:ab:4e:88:bf:d9:38:77:a9: ff:79:f3:d2:5c:4e:4f:5f:11:99:03:6c:c9:a3:66:0d:8b:d1: 2e:72:05:c8:ae:6e:fc:e0:fd:2d:3a:fa:05:64:5d:b2:cc:6e: 0b:34:07:3a:57:91:ec:24:f2:8b:e4:58:df:4f:ab:ec:4f:f7: 0a:0b:27:0c:9e:fa:df:6b:ac:2d:2d:3c:bf:7b:70:c7:31:ea: 0e:22:ea:bf:d9:5b:7a:f4:0a:71:56:6a:b2:86:49:2a:11:63: ba:7b:d0:4d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOTcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2MDVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDI0QUFGQTRBQjkxQUVG MTNFMTNCMEZCRDZDNkRFOERDRDQ1QzI2M0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGZxr26F7L5XkPPaKOfqdFu4MuFz+dohjKK8f7mL1ogsb2kG+l U8gJC+mED4ZkCeW8rS78ItKEeOGRQ5woUm8vRvGkEbfEDK88Oc99JlfKjchekpMm y7jLYCavizZo2CSqeOqfMVyAy7AtWn8gptinHiuyighKVhIlHRFYcG2TDjvy1hJg 90YUKnhDbEHXt+uCDYeUD/sp5FoCR23TkcNneYwrpWCC5eeoZLjZQAtozxW1cBW2 6Ca/RCACQsfayf/+hxhcbQycqquAnXK2S2k65vh8KqwWin1D0+mMYMheVu/cy45h VaERkQrcZ80N4RCbfPNwC0X3Lf06YxzSrIIfAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUJKr6Srka7xPhOw+9bG3o3NRcJj0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0pLcjZTcmthN3hQaE93LTli RzNvM05SY0pqMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq AWIwDQYJKoZIhvcNAQELBQADggEBAAf16LxOgLX5BMrGgbypN+VJVAHG3CjB/Cwi fFJy/2Hj4bH2kI8oMDUiiQFVn99eqCshhQlXnC0mcbfiwIktPC3nD0FQGvp7Qu3D kkGnG9lQbAaTqPEj19WRPmflhG5O3Ly8AoROKH+xMM2DQLBCCdOKsvBh6d5689Od T8f8PhGPevt1OqW5lYC9V/+BcCPnaiAr2G/z0jMuF9erToi/2Th3qf9589JcTk9f EZkDbMmjZg2L0S5yBciubvzg/S06+gVkXbLMbgs0BzpXkewk8ovkWN9Pq+xP9woL Jwye+t9rrC0tPL97cMcx6g4i6r/ZW3r0CnFWarKGSSoRY7p70E0= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:36 2025 by rpki-client