$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PJYuLBOyeMKgGToUwgmTqsS_cJM.roa File: PJYuLBOyeMKgGToUwgmTqsS_cJM.roa (raw, json) Hash identifier: YjMrdtfv7GQeWD9OEHrFVqyupCHh/5XU6FD8+5ZJDyM= Subject key identifier: 3C:96:2E:2C:13:B2:78:C2:A0:19:3A:14:C2:09:93:AA:C4:BF:70:93 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3A35 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PJYuLBOyeMKgGToUwgmTqsS_cJM.roa Signing time: Fri 22 Aug 2025 08:47:08 +0000 ROA not before: Fri 22 Aug 2025 08:47:08 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.194.0.0/20 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14901 (0x3a35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:08 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=3C962E2C13B278C2A0193A14C20993AAC4BF7093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a5:38:c8:ab:2b:be:f5:8f:db:a5:90:d1:d5: 06:8f:f2:02:3b:8d:05:ac:9c:b4:7f:ff:22:10:ea: 7f:2e:37:5f:c1:44:e0:82:2f:2c:2b:d6:c0:fa:5c: ce:c1:5d:e9:6d:30:97:4b:e0:36:a0:1a:6c:6d:ce: 04:64:28:45:f8:20:8c:c6:6b:88:a6:97:53:a5:b3: d2:6e:d0:1b:b2:53:93:ce:fe:bb:02:f7:88:64:79: 99:bb:29:fc:22:5d:d2:96:51:36:26:df:68:23:02: a3:d9:cd:f7:e0:33:1d:c8:2a:7f:61:2d:92:3c:37: d5:50:df:01:e8:53:a3:fd:58:86:c0:41:40:4a:47: 60:98:42:f4:a3:87:50:b6:5f:af:cc:63:4b:84:31: 0c:08:4d:d8:52:8a:d7:43:42:e8:cf:5b:19:12:01: 04:d2:6e:b1:fe:76:c0:33:99:42:87:b6:f7:2f:57: 35:24:19:18:8a:6b:38:94:de:0d:0b:41:51:c5:d1: d6:bb:06:d9:c0:c1:00:b3:78:d9:5f:7e:42:42:c7: e1:c6:3f:36:32:1e:42:55:41:0d:3b:b7:a1:91:f2: 25:01:a1:f3:cb:fa:99:ee:78:16:03:f3:db:2a:d3: 7a:d7:85:b7:d7:3b:01:4a:07:a8:3a:a8:84:f0:95: 31:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:96:2E:2C:13:B2:78:C2:A0:19:3A:14:C2:09:93:AA:C4:BF:70:93 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PJYuLBOyeMKgGToUwgmTqsS_cJM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.0.0/20 Signature Algorithm: sha256WithRSAEncryption 36:28:79:12:4a:35:22:ce:fa:88:2b:f9:63:84:e9:91:98:4e: 3a:04:a1:f2:7b:03:ca:73:79:46:61:7c:ce:b0:2c:cc:af:bd: a9:45:f5:ef:88:57:f1:14:c0:60:16:91:52:27:6d:e5:79:f0: fb:7d:82:f1:0a:51:81:04:3f:6b:77:8f:e0:c5:22:91:db:7f: 6a:84:de:99:14:1e:dd:cf:64:4d:55:6e:6b:e3:84:e3:54:fd: 04:2f:9e:34:43:19:e7:de:2e:b6:dc:0a:30:3b:f3:e3:f6:4d: 55:7c:91:8b:25:39:a5:91:8c:05:1d:3e:90:bc:f8:12:b0:b0: 7f:4e:21:78:bf:9c:49:c1:52:39:13:45:93:05:36:f5:22:f7: 94:3b:92:2b:1b:ee:68:4c:5e:24:de:ed:99:a9:e8:0d:e0:71: 89:f1:b2:cf:46:28:f2:05:82:40:e8:27:f6:51:44:80:ba:d8: 6d:d9:85:66:40:72:d9:43:c4:29:ec:83:a4:b9:92:4e:f9:a2: df:8c:b7:62:9a:ed:8f:eb:57:13:6d:7d:81:fa:13:dc:4e:1c: 03:03:10:62:9b:bf:50:c8:e7:88:61:cd:f9:6c:1d:9b:26:d6: c2:93:0e:aa:35:1d:27:38:12:f5:67:e9:d9:9c:fc:a3:57:4a: 7f:4e:10:9f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOjUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3MDhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDNDOTYyRTJDMTNCMjc4 QzJBMDE5M0ExNEMyMDk5M0FBQzRCRjcwOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCdpTjIqyu+9Y/bpZDR1QaP8gI7jQWsnLR//yIQ6n8uN1/BROCC Lywr1sD6XM7BXeltMJdL4DagGmxtzgRkKEX4IIzGa4iml1Ols9Ju0BuyU5PO/rsC 94hkeZm7KfwiXdKWUTYm32gjAqPZzffgMx3IKn9hLZI8N9VQ3wHoU6P9WIbAQUBK R2CYQvSjh1C2X6/MY0uEMQwITdhSitdDQujPWxkSAQTSbrH+dsAzmUKHtvcvVzUk GRiKaziU3g0LQVHF0da7BtnAwQCzeNlffkJCx+HGPzYyHkJVQQ07t6GR8iUBofPL +pnueBYD89sq03rXhbfXOwFKB6g6qITwlTEZAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUPJYuLBOyeMKgGToUwgmTqsS/cJMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1BKWXVMQk95ZU1LZ0dUb1V3 Z21UcXNTX2NKTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR7 wgAwDQYJKoZIhvcNAQELBQADggEBADYoeRJKNSLO+ogr+WOE6ZGYTjoEofJ7A8pz eUZhfM6wLMyvvalF9e+IV/EUwGAWkVInbeV58Pt9gvEKUYEEP2t3j+DFIpHbf2qE 3pkUHt3PZE1VbmvjhONU/QQvnjRDGefeLrbcCjA78+P2TVV8kYslOaWRjAUdPpC8 +BKwsH9OIXi/nEnBUjkTRZMFNvUi95Q7kisb7mhMXiTe7Zmp6A3gcYnxss9GKPIF gkDoJ/ZRRIC62G3ZhWZActlDxCnsg6S5kk75ot+Mt2Ka7Y/rVxNtfYH6E9xOHAMD EGKbv1DI54hhzflsHZsm1sKTDqo1HSc4EvVn6dmc/KNXSn9OEJ8= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:32 2025 by rpki-client