$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NPQkc1ZouDNq4U5YXpBrhwSOe7k.roa File: NPQkc1ZouDNq4U5YXpBrhwSOe7k.roa (raw, json) Hash identifier: tww40wQBLyMvwJyJUpOGlVlbD0AVFnYgpgTYFz5PifM= Subject key identifier: 34:F4:24:73:56:68:B8:33:6A:E1:4E:58:5E:90:6B:87:04:8E:7B:B9 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 38CE Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NPQkc1ZouDNq4U5YXpBrhwSOe7k.roa Signing time: Fri 22 Aug 2025 08:45:39 +0000 ROA not before: Fri 22 Aug 2025 08:45:39 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.194.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14542 (0x38ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:39 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=34F424735668B8336AE14E585E906B87048E7BB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e8:6e:be:a3:9d:0f:92:cc:cd:76:26:f1:5a: e7:a0:de:18:23:09:63:b9:73:90:c9:3d:73:e2:07: b0:10:68:4e:93:0f:88:1a:ad:67:2b:a6:fd:9b:53: 70:04:f2:ac:19:3d:f2:d7:34:d4:50:a8:2c:b2:d7: 03:4f:c5:16:36:0c:c7:be:3e:35:f6:79:2b:c2:ad: fb:a9:cc:0a:f0:c3:10:f2:65:b3:cc:39:b1:74:80: ed:f2:2d:7b:ed:64:4d:d1:f2:99:51:2d:b3:8e:29: d7:93:dc:90:c5:c9:d5:d0:85:85:26:92:c2:bc:44: e0:02:d3:f7:b2:01:01:79:80:2e:1a:6d:57:97:f7: dc:60:11:38:52:24:f3:ce:84:f9:c1:69:12:98:38: a4:fb:43:35:dd:71:26:e9:18:a6:7f:1e:43:1e:61: 18:ff:0f:ab:b1:ed:8a:05:13:8f:ff:d1:41:2e:18: 55:4c:a1:53:33:3e:74:7a:95:b5:27:47:10:df:97: 0b:84:c5:74:d1:e2:75:2b:ce:c9:15:9a:21:9c:09: d4:f8:89:8b:64:75:69:a7:24:a0:c9:19:04:87:38: 9f:d3:5f:96:d2:b8:61:90:d0:38:d0:ed:53:1c:19: fb:17:27:de:06:ee:32:44:73:b1:1a:64:af:73:82: 50:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:F4:24:73:56:68:B8:33:6A:E1:4E:58:5E:90:6B:87:04:8E:7B:B9 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NPQkc1ZouDNq4U5YXpBrhwSOe7k.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.136.0/21 Signature Algorithm: sha256WithRSAEncryption 4f:cf:4b:9d:bf:42:53:6c:12:9c:6c:b7:d2:3b:53:e1:b4:38: 59:cb:eb:d5:eb:14:68:a6:a9:dd:26:1c:38:ab:f7:26:d1:e9: 57:1c:f5:77:94:31:da:02:9d:2b:df:8f:0f:9c:e7:14:d8:0f: 29:fe:42:7f:fd:f2:0b:b6:47:af:01:80:38:2b:b8:93:b0:00: a0:20:81:dd:c2:b4:46:80:2f:9e:94:68:19:32:1e:70:71:20: af:80:72:c9:21:d3:d6:3c:f5:ae:11:0a:41:f1:fa:68:92:fb: 3c:88:5d:02:dd:64:97:f4:f0:d4:c0:f1:65:f6:9d:0c:4c:9f: 58:c7:2e:c4:4a:a1:4a:e5:9f:93:14:52:72:40:ca:ac:04:68: cb:af:af:7c:71:95:d1:1b:ff:dc:60:c2:b0:e1:0c:c4:e0:a4: d7:c1:a6:cc:b6:a4:8d:34:e5:3c:e0:4d:f0:cf:10:a4:f5:84: ec:b2:fc:4c:79:68:1c:ce:42:5c:42:e5:e6:6c:c1:72:33:b3: 29:c9:0a:6c:83:4a:89:19:fb:22:79:f9:0e:c0:46:aa:13:93: e9:97:e8:9c:7f:d7:54:52:21:26:39:27:5a:b8:39:3b:2e:6c: 25:bf:d6:cb:76:c4:c4:e4:8b:da:45:6f:c7:ff:86:35:ce:43: 42:43:87:eb -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOM4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1MzlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDM0RjQyNDczNTY2OEI4 MzM2QUUxNEU1ODVFOTA2Qjg3MDQ4RTdCQjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDP6G6+o50PkszNdibxWueg3hgjCWO5c5DJPXPiB7AQaE6TD4ga rWcrpv2bU3AE8qwZPfLXNNRQqCyy1wNPxRY2DMe+PjX2eSvCrfupzArwwxDyZbPM ObF0gO3yLXvtZE3R8plRLbOOKdeT3JDFydXQhYUmksK8ROAC0/eyAQF5gC4abVeX 99xgEThSJPPOhPnBaRKYOKT7QzXdcSbpGKZ/HkMeYRj/D6ux7YoFE4//0UEuGFVM oVMzPnR6lbUnRxDflwuExXTR4nUrzskVmiGcCdT4iYtkdWmnJKDJGQSHOJ/TX5bS uGGQ0DjQ7VMcGfsXJ94G7jJEc7EaZK9zglBJAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUNPQkc1ZouDNq4U5YXpBrhwSOe7kwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL05QUWtjMVpvdUROcTRVNVlY cEJyaHdTT2U3ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wogwDQYJKoZIhvcNAQELBQADggEBAE/PS52/QlNsEpxst9I7U+G0OFnL69XrFGim qd0mHDir9ybR6Vcc9XeUMdoCnSvfjw+c5xTYDyn+Qn/98gu2R68BgDgruJOwAKAg gd3CtEaAL56UaBkyHnBxIK+Acskh09Y89a4RCkHx+miS+zyIXQLdZJf08NTA8WX2 nQxMn1jHLsRKoUrln5MUUnJAyqwEaMuvr3xxldEb/9xgwrDhDMTgpNfBpsy2pI00 5TzgTfDPEKT1hOyy/Ex5aBzOQlxC5eZswXIzsynJCmyDSokZ+yJ5+Q7ARqoTk+mX 6Jx/11RSISY5J1q4OTsubCW/1st2xMTki9pFb8f/hjXOQ0JDh+s= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:38 2025 by rpki-client