$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Mx8SE_qRG_miTS01y7M1ttuGpCA.roa File: Mx8SE_qRG_miTS01y7M1ttuGpCA.roa (raw, json) Hash identifier: rrZ/uJFBKjchYp+bus7qr7rpBizgYh7EEllLyzN19GE= Subject key identifier: 33:1F:12:13:FA:91:1B:F9:A2:4D:2D:35:CB:B3:35:B6:DB:86:A4:20 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3A31 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Mx8SE_qRG_miTS01y7M1ttuGpCA.roa Signing time: Fri 22 Aug 2025 08:47:06 +0000 ROA not before: Fri 22 Aug 2025 08:47:06 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 106.1.52.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14897 (0x3a31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:06 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=331F1213FA911BF9A24D2D35CBB335B6DB86A420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:87:57:60:eb:49:77:57:5f:4b:90:40:6a:5a: 32:07:0a:2a:53:f6:98:eb:0e:a9:71:3c:8b:4d:02: 27:f1:21:f2:93:50:6a:ef:aa:73:05:8b:0f:3f:e9: 58:84:da:06:62:91:d7:e4:94:66:79:7d:4f:79:e7: af:6c:4f:05:ba:d1:07:ac:c2:e6:a7:5e:16:5e:ac: 9c:9c:1c:f5:73:e2:91:9f:35:9e:d0:25:c7:d9:b3: 00:1b:a2:f4:ff:a4:d1:9f:7e:09:12:20:ce:1a:01: 52:6e:bd:dc:d6:c0:8f:81:87:55:5e:4a:3d:09:1d: 61:b4:29:a3:db:c0:7f:66:43:1c:b3:b5:7a:f7:a6: 1a:60:9b:cc:71:ce:a3:49:aa:b7:64:e1:14:8f:52: e7:e8:c3:07:9a:d9:c5:48:8b:6a:29:29:4b:f3:c0: 2a:13:97:42:c3:34:ae:a2:4b:6f:34:98:3e:5f:a7: aa:e1:a1:a5:f1:94:b0:1f:fd:b5:ca:f0:d6:b2:64: b6:cd:e2:43:ef:bf:ec:8e:b2:0c:a7:d1:8d:ac:b3: d8:18:cd:27:9b:4e:31:09:d5:78:64:a9:60:68:32: 95:98:50:6e:e6:b2:da:19:27:2b:f9:c8:39:06:ec: d3:31:56:d5:ab:4c:87:51:42:41:f8:2b:d7:49:18: 70:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:1F:12:13:FA:91:1B:F9:A2:4D:2D:35:CB:B3:35:B6:DB:86:A4:20 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Mx8SE_qRG_miTS01y7M1ttuGpCA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.52.0/23 Signature Algorithm: sha256WithRSAEncryption 14:a2:ad:48:8a:46:ea:43:2a:60:80:79:d7:0c:6f:7b:35:16: 61:a4:e2:cf:f7:16:4c:71:06:96:c1:e2:d5:f2:4b:9c:0b:a7: c6:c4:fb:de:71:81:e3:fd:8b:42:d5:bb:3c:0b:ae:69:cb:fa: d0:5e:2b:9f:36:5f:64:84:47:ed:38:31:f4:d6:ab:d6:9d:68: f0:a9:fc:e9:78:da:07:36:47:35:6e:e9:42:5e:6e:19:17:76: 16:ee:83:d2:d9:ae:aa:15:fc:98:36:08:60:6d:46:db:fb:65: 2b:f8:db:e9:61:6a:79:51:e2:35:4d:fe:27:76:15:e6:ba:2a: 37:d3:ca:f5:ac:39:0e:a0:24:f8:f8:45:79:06:3b:44:00:a7: 28:8b:32:e9:b1:79:c5:5c:67:d4:d3:02:f2:91:47:33:0f:07: 45:8b:a7:b2:94:63:d6:3c:6a:2c:23:65:d8:1c:c4:0d:fa:8b: b1:ea:9a:03:7b:e0:69:17:d9:92:68:3c:88:80:3a:10:85:bf: 13:75:05:cc:0e:7f:f4:9e:52:dc:ea:6c:22:9d:c0:ab:1c:3a: 51:2e:e7:85:43:e7:87:10:ae:f9:1e:dc:bb:b4:7e:6d:51:17: 53:4e:6f:ef:ab:5e:66:c2:bb:70:a5:9d:67:52:6a:3a:ea:2d: 99:ed:4e:ee -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOjEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3MDZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDMzMUYxMjEzRkE5MTFC RjlBMjREMkQzNUNCQjMzNUI2REI4NkE0MjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYh1dg60l3V19LkEBqWjIHCipT9pjrDqlxPItNAifxIfKTUGrv qnMFiw8/6ViE2gZikdfklGZ5fU95569sTwW60QeswuanXhZerJycHPVz4pGfNZ7Q JcfZswAbovT/pNGffgkSIM4aAVJuvdzWwI+Bh1VeSj0JHWG0KaPbwH9mQxyztXr3 phpgm8xxzqNJqrdk4RSPUufowwea2cVIi2opKUvzwCoTl0LDNK6iS280mD5fp6rh oaXxlLAf/bXK8NayZLbN4kPvv+yOsgyn0Y2ss9gYzSebTjEJ1XhkqWBoMpWYUG7m stoZJyv5yDkG7NMxVtWrTIdRQkH4K9dJGHDFAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUMx8SE/qRG/miTS01y7M1ttuGpCAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL014OFNFX3FSR19taVRTMDF5 N00xdHR1R3BDQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFq ATQwDQYJKoZIhvcNAQELBQADggEBABSirUiKRupDKmCAedcMb3s1FmGk4s/3Fkxx BpbB4tXyS5wLp8bE+95xgeP9i0LVuzwLrmnL+tBeK582X2SER+04MfTWq9adaPCp /Ol42gc2RzVu6UJebhkXdhbug9LZrqoV/Jg2CGBtRtv7ZSv42+lhanlR4jVN/id2 Fea6KjfTyvWsOQ6gJPj4RXkGO0QApyiLMumxecVcZ9TTAvKRRzMPB0WLp7KUY9Y8 aiwjZdgcxA36i7HqmgN74GkX2ZJoPIiAOhCFvxN1BcwOf/SeUtzqbCKdwKscOlEu 54VD54cQrvke3Lu0fm1RF1NOb++rXmbCu3ClnWdSajrqLZntTu4= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:44 2025 by rpki-client