$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MQnv5tKKKkVbQ5pXEIWZzFZ-TqA.roa File: MQnv5tKKKkVbQ5pXEIWZzFZ-TqA.roa (raw, json) Hash identifier: 5WIcG8hFkJLgxNMeLbMDR09fQP6IBnGsy3l26b1Obuw= Subject key identifier: 31:09:EF:E6:D2:8A:2A:45:5B:43:9A:57:10:85:99:CC:56:7E:4E:A0 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3A1F Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MQnv5tKKKkVbQ5pXEIWZzFZ-TqA.roa Signing time: Fri 22 Aug 2025 08:47:02 +0000 ROA not before: Fri 22 Aug 2025 08:47:02 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.194.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14879 (0x3a1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:02 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=3109EFE6D28A2A455B439A57108599CC567E4EA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:0b:d4:51:b2:b5:3e:df:8d:2f:54:8d:1b:e3: b7:02:80:68:a0:de:88:21:9b:aa:66:b7:b8:53:0c: 22:ae:e8:d2:d8:38:78:ad:bf:ca:b4:e8:91:e3:54: fe:28:98:29:21:2d:ba:01:ec:ad:e9:4a:3c:d0:11: a7:6b:7c:5c:86:6c:c8:6e:41:df:8d:b6:60:78:87: 38:ee:b2:f5:20:c9:a5:09:17:06:3b:69:26:62:0c: d2:3b:b0:a5:1c:a8:1e:5b:03:61:7b:0b:47:1e:6a: 3e:40:c9:c5:63:23:d7:ca:52:e0:43:f9:9e:b1:34: ac:db:6d:86:d6:e8:52:98:0d:03:5b:8c:e8:f7:21: a5:12:e7:e2:52:49:2b:58:24:0e:27:d7:35:af:f0: 53:47:17:ee:8e:7f:64:e2:82:11:a0:7d:85:b2:6a: 9a:67:4f:00:99:54:4e:8f:5a:87:e5:23:0b:28:46: 1d:3b:c4:59:d2:3f:fd:03:39:87:18:db:79:75:58: d0:de:41:7c:f6:ea:01:90:6c:61:fd:39:53:83:36: aa:79:2e:c1:7e:27:b8:2b:c8:22:9a:4a:db:92:ad: 94:c5:03:d6:f0:da:06:e4:3f:e2:ee:0b:5b:2d:c7: 64:12:d4:63:84:69:aa:39:b4:37:2d:3f:81:eb:d6: eb:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:09:EF:E6:D2:8A:2A:45:5B:43:9A:57:10:85:99:CC:56:7E:4E:A0 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MQnv5tKKKkVbQ5pXEIWZzFZ-TqA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.44.0/22 Signature Algorithm: sha256WithRSAEncryption 9d:59:df:3f:44:b9:65:5c:f4:b8:1c:7c:d1:91:db:a6:e0:fd: 77:67:ec:53:00:4a:54:17:6f:7e:8d:b8:a2:91:59:60:49:bb: f6:a6:c0:96:e4:41:a8:cd:31:a4:3f:56:e8:f9:e8:19:9a:72: b3:af:97:ef:fc:9b:89:20:e2:1a:c6:98:ba:43:9a:0f:ba:e7: b9:c9:1e:c2:47:09:d0:c2:4d:b5:43:30:4b:ac:a4:9d:d4:a8: 14:ba:9f:87:9e:28:ec:36:e0:cf:ab:b5:7b:71:9d:e2:3a:05: f9:3f:30:e9:22:dc:d6:c2:36:58:77:2b:82:3a:18:46:3b:51: 9a:a8:4a:f5:58:5d:45:f0:56:b9:e6:6e:17:51:a9:7a:03:cd: 90:77:fa:18:9b:3a:de:14:53:58:a0:be:ab:65:88:16:f2:39: a5:6c:a5:96:33:a1:e1:e9:53:ad:c7:2c:c8:4b:7a:34:99:e4: a8:d9:bc:a1:99:4a:e2:72:c3:d9:a1:84:94:f0:d6:57:a0:b1: 42:fd:0f:50:8d:c0:28:b6:d5:57:20:47:cc:1e:8a:9a:69:3d: 83:c6:f6:a6:1f:55:4c:28:46:e3:30:38:a7:65:30:99:07:47: 44:f9:03:9f:a8:fc:47:a6:f5:d3:82:ca:f3:85:25:94:13:84: e7:fe:95:43 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOh8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3MDJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDMxMDlFRkU2RDI4QTJB NDU1QjQzOUE1NzEwODU5OUNDNTY3RTRFQTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDuC9RRsrU+340vVI0b47cCgGig3oghm6pmt7hTDCKu6NLYOHit v8q06JHjVP4omCkhLboB7K3pSjzQEadrfFyGbMhuQd+NtmB4hzjusvUgyaUJFwY7 aSZiDNI7sKUcqB5bA2F7C0ceaj5AycVjI9fKUuBD+Z6xNKzbbYbW6FKYDQNbjOj3 IaUS5+JSSStYJA4n1zWv8FNHF+6Of2TighGgfYWyappnTwCZVE6PWoflIwsoRh07 xFnSP/0DOYcY23l1WNDeQXz26gGQbGH9OVODNqp5LsF+J7gryCKaStuSrZTFA9bw 2gbkP+LuC1stx2QS1GOEaao5tDctP4Hr1uuDAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUMQnv5tKKKkVbQ5pXEIWZzFZ+TqAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL01RbnY1dEtLS2tWYlE1cFhF SVdaekZaLVRxQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wiwwDQYJKoZIhvcNAQELBQADggEBAJ1Z3z9EuWVc9LgcfNGR26bg/Xdn7FMASlQX b36NuKKRWWBJu/amwJbkQajNMaQ/Vuj56BmacrOvl+/8m4kg4hrGmLpDmg+657nJ HsJHCdDCTbVDMEuspJ3UqBS6n4eeKOw24M+rtXtxneI6Bfk/MOki3NbCNlh3K4I6 GEY7UZqoSvVYXUXwVrnmbhdRqXoDzZB3+hibOt4UU1igvqtliBbyOaVspZYzoeHp U63HLMhLejSZ5KjZvKGZSuJyw9mhhJTw1legsUL9D1CNwCi21VcgR8weipppPYPG 9qYfVUwoRuMwOKdlMJkHR0T5A5+o/Eem9dOCyvOFJZQThOf+lUM= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:17 2025 by rpki-client