$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/N2DvhQ8syLzwdx9d-8lt0hWzLIo.roa File: N2DvhQ8syLzwdx9d-8lt0hWzLIo.roa (raw, json) Hash identifier: N0MPfW4/Kf+64IssqJOKJSp67ZKtXuJ2YGe/Sw6l3fI= Subject key identifier: 37:60:EF:85:0F:2C:C8:BC:F0:77:1F:5D:FB:C9:6D:D2:15:B3:2C:8A Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 38BE Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/N2DvhQ8syLzwdx9d-8lt0hWzLIo.roa Signing time: Fri 22 Aug 2025 08:45:34 +0000 ROA not before: Fri 22 Aug 2025 08:45:34 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 106.1.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14526 (0x38be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:34 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=3760EF850F2CC8BCF0771F5DFBC96DD215B32C8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d4:8b:33:58:5c:60:6d:ec:87:70:d6:10:02: 6c:d4:3d:5d:85:8b:dd:c0:71:18:2f:08:1f:e8:a5: 5d:56:4d:0c:08:92:b7:4f:14:a0:1c:37:b5:10:1b: 8d:80:15:9b:4b:dc:40:b2:76:a3:be:7f:53:80:fa: 58:01:35:e5:97:77:03:26:af:b9:0e:2f:0d:f3:30: 2e:10:60:1e:1c:dd:50:51:d7:4d:2e:a4:f2:57:eb: a7:04:fe:51:21:b5:cd:63:84:33:97:ed:b3:4f:23: 35:de:c2:95:36:fc:0e:60:e3:5e:cb:61:9f:44:cb: d1:73:00:3f:bf:56:eb:fc:83:6c:a4:d5:9b:b6:03: 16:f3:c0:a1:56:55:f0:a3:16:36:ae:d2:85:53:ff: 24:55:79:24:88:88:74:74:de:1d:65:e2:a9:cc:c6: c1:df:18:7a:84:ae:b3:da:5c:8b:37:78:63:a6:e1: 93:08:d8:0d:d9:08:9f:00:20:90:bf:11:37:c6:75: 06:9d:a6:b4:2a:a6:52:7f:2e:99:eb:ea:77:6b:d1: b4:52:a8:77:69:8b:a3:f5:dc:f9:f1:50:3f:bb:82: 28:35:6c:87:b5:ed:60:6f:85:c0:5e:74:6d:1e:87: be:42:0e:40:e9:cd:22:35:6b:ef:25:8d:d4:38:b9: b7:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:60:EF:85:0F:2C:C8:BC:F0:77:1F:5D:FB:C9:6D:D2:15:B3:2C:8A X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/N2DvhQ8syLzwdx9d-8lt0hWzLIo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.248.0/22 Signature Algorithm: sha256WithRSAEncryption a5:14:04:bf:e3:1d:da:28:83:5c:2e:e6:58:46:38:e7:9a:b9: 6e:5a:5c:ce:a6:8a:52:13:44:0d:56:c7:4a:10:f9:8f:2d:bc: 17:d8:99:71:71:b0:f8:37:47:52:a1:57:72:eb:62:cd:18:c3: 33:73:05:ed:c1:07:2c:77:e4:33:59:5b:b1:2a:9b:22:35:db: 52:30:11:dd:a6:32:33:2b:6a:5a:af:a3:9a:88:9b:9d:2f:f0: 4d:f7:59:af:04:54:8d:55:bd:34:bb:c3:04:f4:68:ba:7f:f2: 72:65:32:7e:07:43:2d:68:8f:9d:e2:f0:3c:96:2c:1e:fa:2b: cb:5f:90:a7:b2:b9:7d:ad:83:75:f6:d2:1d:aa:e8:19:cf:67: 69:81:4e:18:a9:9e:ec:84:5e:0c:70:14:0c:0c:da:5b:c9:7b: d7:db:7e:7a:4c:f3:d6:89:32:e9:3d:68:f5:c5:c5:dc:4b:6d: 78:e6:7c:aa:11:70:cb:cd:98:bd:06:40:8c:5e:f1:f9:57:09: dd:55:14:ff:4a:91:61:a8:85:51:98:ff:84:f1:87:0b:6c:a0: 2b:a4:80:ef:18:c1:f4:14:1d:7e:ac:74:87:1e:eb:ac:56:5f: 14:f2:1f:ec:12:1b:51:ee:7e:36:8a:25:a8:dd:a5:6d:13:fb: b9:da:44:27 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOL4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1MzRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDM3NjBFRjg1MEYyQ0M4 QkNGMDc3MUY1REZCQzk2REQyMTVCMzJDOEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC21IszWFxgbeyHcNYQAmzUPV2Fi93AcRgvCB/opV1WTQwIkrdP FKAcN7UQG42AFZtL3ECydqO+f1OA+lgBNeWXdwMmr7kOLw3zMC4QYB4c3VBR100u pPJX66cE/lEhtc1jhDOX7bNPIzXewpU2/A5g417LYZ9Ey9FzAD+/Vuv8g2yk1Zu2 AxbzwKFWVfCjFjau0oVT/yRVeSSIiHR03h1l4qnMxsHfGHqErrPaXIs3eGOm4ZMI 2A3ZCJ8AIJC/ETfGdQadprQqplJ/Lpnr6ndr0bRSqHdpi6P13PnxUD+7gig1bIe1 7WBvhcBedG0eh75CDkDpzSI1a+8ljdQ4ubclAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUN2DvhQ8syLzwdx9d+8lt0hWzLIowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL04yRHZoUThzeUx6d2R4OWQt OGx0MGhXekxJby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq AfgwDQYJKoZIhvcNAQELBQADggEBAKUUBL/jHdoog1wu5lhGOOeauW5aXM6milIT RA1Wx0oQ+Y8tvBfYmXFxsPg3R1KhV3LrYs0YwzNzBe3BByx35DNZW7EqmyI121Iw Ed2mMjMralqvo5qIm50v8E33Wa8EVI1VvTS7wwT0aLp/8nJlMn4HQy1oj53i8DyW LB76K8tfkKeyuX2tg3X20h2q6BnPZ2mBThipnuyEXgxwFAwM2lvJe9fbfnpM89aJ Muk9aPXFxdxLbXjmfKoRcMvNmL0GQIxe8flXCd1VFP9KkWGohVGY/4TxhwtsoCuk gO8YwfQUHX6sdIce66xWXxTyH+wSG1HufjaKJajdpW0T+7naRCc= -----END CERTIFICATE-----Generated at Sun Aug 24 07:26:36 2025 by rpki-client