$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LlnHNdYJQnGT0JZItiUkkWnpAkc.roa File: LlnHNdYJQnGT0JZItiUkkWnpAkc.roa (raw, json) Hash identifier: SylnEwLZ1+pQYhTTLFDZXDcdeYxKFX7faW23bZMpz+0= Subject key identifier: 2E:59:C7:35:D6:09:42:71:93:D0:96:48:B6:25:24:91:69:E9:02:47 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 38EB Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LlnHNdYJQnGT0JZItiUkkWnpAkc.roa Signing time: Fri 22 Aug 2025 08:45:45 +0000 ROA not before: Fri 22 Aug 2025 08:45:45 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.194.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14571 (0x38eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:45 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=2E59C735D609427193D09648B625249169E90247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:60:a5:68:96:58:22:f2:3f:84:9d:0a:02:d9: 39:81:ea:9b:e2:a1:93:52:60:61:25:55:56:bd:df: 46:19:0b:18:41:c8:51:58:dc:9d:e0:c2:c1:cb:3d: fd:b0:a3:b3:ca:44:99:53:af:1f:fe:b6:30:49:ed: f5:a7:81:7c:0f:22:2d:4a:1d:60:28:f6:2f:88:40: c0:b8:82:d9:c5:a9:49:12:1d:b9:aa:72:16:fa:6f: cb:a7:85:9e:f8:e7:8b:d2:b3:10:22:d0:bd:73:51: 68:b0:d6:b3:be:56:16:e8:82:66:c8:be:9d:f2:d6: 53:d3:37:6e:c4:55:d4:a5:e3:0b:37:65:72:ed:00: ca:91:4e:9e:02:ea:e2:d7:83:a6:72:9e:d6:d6:4c: c3:f9:05:01:7f:ca:74:af:d5:37:4d:b3:af:7e:bc: 25:8f:45:9a:50:98:fe:e4:58:bd:5d:66:4b:5e:27: e0:18:8d:fc:8a:26:29:8f:f3:19:bb:76:1e:0e:2b: b2:ba:b6:cd:bf:09:c6:ef:8b:db:2a:f8:ed:9e:54: 5f:db:b1:0d:49:a8:87:c7:ce:b5:c2:56:d7:98:e5: 6e:44:f5:cb:1c:6f:98:c0:92:78:3e:ac:c0:d8:67: e6:d0:ef:c9:eb:80:1e:4c:c3:6a:1b:a0:46:51:f2: aa:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:59:C7:35:D6:09:42:71:93:D0:96:48:B6:25:24:91:69:E9:02:47 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LlnHNdYJQnGT0JZItiUkkWnpAkc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.88.0/21 Signature Algorithm: sha256WithRSAEncryption 17:cc:3f:0e:74:e2:31:3a:86:9c:ee:2a:b1:91:93:ab:b1:ba: 80:f1:1d:42:a6:e5:ab:24:a2:13:c5:de:bf:92:6b:00:da:c9: 2f:6f:d8:bf:ce:a9:3e:82:be:c0:6e:8f:e6:f0:47:84:7d:c8: 8e:2c:e1:31:f9:f7:09:2b:65:13:43:d9:66:67:fe:30:13:5e: 1b:87:21:66:83:b5:20:96:84:ec:c9:6f:cc:36:99:b2:4c:6a: a4:52:0b:57:c0:6f:df:c2:f3:04:c2:e0:53:f4:92:b2:71:44: 7b:da:14:3c:89:df:6d:d4:7b:ce:14:5c:16:8b:f4:fb:14:13: 77:bb:ce:81:55:d4:c5:f7:49:3d:8e:88:9d:fb:0c:f6:35:e8: dd:79:0e:62:08:c0:e5:0d:1c:a7:c8:73:8b:a7:07:73:4d:bc: 0b:20:1a:2b:42:70:9a:0a:80:5a:6f:76:49:dd:b0:30:7d:b2: b0:e7:7e:95:47:ce:9e:35:ef:73:2f:f1:ca:dd:19:60:71:4d: 64:a7:af:49:cc:29:42:54:d8:8a:c2:38:78:a5:a0:7a:6f:82: 19:db:58:19:c7:81:e6:8f:a6:be:17:9a:11:96:09:46:81:03: 1e:23:41:b9:4e:d6:66:0b:d6:49:08:25:e6:74:66:a7:5d:10: 71:0a:e8:c3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOOswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1NDVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDJFNTlDNzM1RDYwOTQy NzE5M0QwOTY0OEI2MjUyNDkxNjlFOTAyNDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDpYKVollgi8j+EnQoC2TmB6pvioZNSYGElVVa930YZCxhByFFY 3J3gwsHLPf2wo7PKRJlTrx/+tjBJ7fWngXwPIi1KHWAo9i+IQMC4gtnFqUkSHbmq chb6b8unhZ7454vSsxAi0L1zUWiw1rO+VhbogmbIvp3y1lPTN27EVdSl4ws3ZXLt AMqRTp4C6uLXg6ZyntbWTMP5BQF/ynSv1TdNs69+vCWPRZpQmP7kWL1dZkteJ+AY jfyKJimP8xm7dh4OK7K6ts2/Ccbvi9sq+O2eVF/bsQ1JqIfHzrXCVteY5W5E9csc b5jAkng+rMDYZ+bQ78nrgB5Mw2oboEZR8qr3AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQULlnHNdYJQnGT0JZItiUkkWnpAkcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0xsbkhOZFlKUW5HVDBKWkl0 aVVra1ducEFrYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wlgwDQYJKoZIhvcNAQELBQADggEBABfMPw504jE6hpzuKrGRk6uxuoDxHUKm5ask ohPF3r+SawDayS9v2L/OqT6CvsBuj+bwR4R9yI4s4TH59wkrZRND2WZn/jATXhuH IWaDtSCWhOzJb8w2mbJMaqRSC1fAb9/C8wTC4FP0krJxRHvaFDyJ323Ue84UXBaL 9PsUE3e7zoFV1MX3ST2OiJ37DPY16N15DmIIwOUNHKfIc4unB3NNvAsgGitCcJoK gFpvdkndsDB9srDnfpVHzp4173Mv8crdGWBxTWSnr0nMKUJU2IrCOHiloHpvghnb WBnHgeaPpr4XmhGWCUaBAx4jQblO1mYL1kkIJeZ0ZqddEHEK6MM= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:30 2025 by rpki-client