$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KPnfgZFaijkr5hbNC1omoMk-T8Y.roa File: KPnfgZFaijkr5hbNC1omoMk-T8Y.roa (raw, json) Hash identifier: OMb8jbwAz8JbST4a0BQ2N1r/i2fWP2NHFc8QHZ4aM3Q= Subject key identifier: 28:F9:DF:81:91:5A:8A:39:2B:E6:16:CD:0B:5A:26:A0:C9:3E:4F:C6 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3A53 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KPnfgZFaijkr5hbNC1omoMk-T8Y.roa Signing time: Fri 22 Aug 2025 08:47:13 +0000 ROA not before: Fri 22 Aug 2025 08:47:13 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.194.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14931 (0x3a53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:13 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=28F9DF81915A8A392BE616CD0B5A26A0C93E4FC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:81:3b:da:29:21:5a:13:bf:cf:10:74:70:93: 3f:51:e3:cd:e3:56:6f:ad:73:3e:d2:25:6f:34:82: 4e:ed:d1:ac:97:6e:2e:52:79:98:c4:9e:fc:6b:81: d4:74:5b:11:d1:f6:ae:82:b4:28:de:5e:cc:fb:b1: dc:7e:6b:6b:a0:50:4d:3a:20:bf:48:75:e5:54:2d: 3d:28:0a:44:cb:0a:90:8f:8a:22:c1:c0:11:1e:f0: 18:cc:8f:63:1a:b7:4a:0b:e6:99:0f:cd:b6:7b:12: 1a:12:fc:71:50:d1:42:c2:d4:67:af:6c:db:41:42: b4:34:cf:e8:b0:b3:de:a2:26:17:c2:0c:00:ce:ef: ef:11:66:14:2b:ce:32:af:af:7f:b0:8e:4f:62:5f: ff:20:96:d6:02:84:51:e0:a8:d2:dd:84:4d:9d:be: 10:d0:3d:ad:cd:2d:81:85:34:7d:1a:99:c8:d9:e6: 7d:b8:97:da:d9:cc:79:a2:29:bf:40:3e:84:21:c2: d8:c1:f7:95:e5:b6:7e:f3:9a:04:9b:b3:f2:81:41: dd:21:82:1c:c3:e0:3c:83:cc:07:89:c3:45:a1:ea: 1b:50:2d:39:4a:de:3d:cc:3c:b4:c5:1c:a8:0a:64: 04:00:ae:96:88:cc:b5:aa:8d:14:c4:a5:fa:01:82: 7d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:F9:DF:81:91:5A:8A:39:2B:E6:16:CD:0B:5A:26:A0:C9:3E:4F:C6 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KPnfgZFaijkr5hbNC1omoMk-T8Y.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.180.0/22 Signature Algorithm: sha256WithRSAEncryption 40:0a:d6:96:89:01:18:dc:9f:de:f9:bf:34:b3:b5:0e:6e:97: e4:5b:c0:82:f0:e1:dd:23:65:8c:ad:e7:ad:d3:11:d8:fd:e2: b7:6c:1e:39:32:97:d0:75:57:85:36:4a:95:57:b4:7c:69:a9: d9:ab:2c:7d:89:c6:1c:3d:cc:49:83:a3:4e:97:84:a1:03:d4: e0:c1:7c:12:c9:64:7e:7d:1d:cd:a1:b1:07:5f:b9:01:77:0d: 90:ab:6f:2a:9a:11:0d:f8:0b:d1:93:f3:37:a9:d5:d1:89:be: fe:fa:2d:23:87:5a:d9:fe:fc:6d:ce:4a:77:ff:4c:f0:a7:25: 50:5d:58:aa:35:a8:6e:40:e2:96:b2:05:6d:20:37:50:5a:eb: 25:e3:ab:48:95:e4:80:5b:0b:bf:c8:00:03:4b:1f:d4:68:9d: 2e:8f:7e:f9:a7:b6:b0:da:74:85:a3:7d:e5:38:13:7c:21:2b: 87:d6:76:29:2c:c6:31:96:cd:60:7c:90:e4:d3:54:2e:6c:26: e1:06:c3:04:9d:05:dd:6e:5f:94:92:8b:4d:7c:9e:59:59:34: ed:ee:47:c9:14:d4:6f:aa:c3:62:c7:a0:50:aa:ec:d5:6a:34: f1:39:2d:84:dd:03:c6:af:05:5b:9a:f6:92:b5:85:6b:35:e1: 17:c1:23:a6 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOlMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3MTNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDI4RjlERjgxOTE1QThB MzkyQkU2MTZDRDBCNUEyNkEwQzkzRTRGQzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDlgTvaKSFaE7/PEHRwkz9R483jVm+tcz7SJW80gk7t0ayXbi5S eZjEnvxrgdR0WxHR9q6CtCjeXsz7sdx+a2ugUE06IL9IdeVULT0oCkTLCpCPiiLB wBEe8BjMj2Mat0oL5pkPzbZ7EhoS/HFQ0ULC1GevbNtBQrQ0z+iws96iJhfCDADO 7+8RZhQrzjKvr3+wjk9iX/8gltYChFHgqNLdhE2dvhDQPa3NLYGFNH0amcjZ5n24 l9rZzHmiKb9APoQhwtjB95Xltn7zmgSbs/KBQd0hghzD4DyDzAeJw0Wh6htQLTlK 3j3MPLTFHKgKZAQArpaIzLWqjRTEpfoBgn1dAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUKPnfgZFaijkr5hbNC1omoMk+T8YwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0tQbmZnWkZhaWprcjVoYk5D MW9tb01rLVQ4WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wrQwDQYJKoZIhvcNAQELBQADggEBAEAK1paJARjcn975vzSztQ5ul+RbwILw4d0j ZYyt563TEdj94rdsHjkyl9B1V4U2SpVXtHxpqdmrLH2Jxhw9zEmDo06XhKED1ODB fBLJZH59Hc2hsQdfuQF3DZCrbyqaEQ34C9GT8zep1dGJvv76LSOHWtn+/G3OSnf/ TPCnJVBdWKo1qG5A4payBW0gN1Ba6yXjq0iV5IBbC7/IAANLH9RonS6PfvmntrDa dIWjfeU4E3whK4fWdiksxjGWzWB8kOTTVC5sJuEGwwSdBd1uX5SSi018nllZNO3u R8kU1G+qw2LHoFCq7NVqNPE5LYTdA8avBVua9pK1hWs14RfBI6Y= -----END CERTIFICATE-----Generated at Sun Aug 24 07:29:35 2025 by rpki-client