$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PZtRPlX1wzM_FH1WTxsVPWuNSe4.roa File: PZtRPlX1wzM_FH1WTxsVPWuNSe4.roa (raw, json) Hash identifier: O21n6hWlZCVnOY2tjTJ36luhJ3nO657ShFl3OLMxFfQ= Subject key identifier: 3D:9B:51:3E:55:F5:C3:33:3F:14:7D:56:4F:1B:15:3D:6B:8D:49:EE Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3A3B Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PZtRPlX1wzM_FH1WTxsVPWuNSe4.roa Signing time: Fri 22 Aug 2025 08:47:08 +0000 ROA not before: Fri 22 Aug 2025 08:47:08 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 118.233.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14907 (0x3a3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:08 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=3D9B513E55F5C3333F147D564F1B153D6B8D49EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:61:ed:cc:1f:24:3e:23:ad:6d:7a:27:10:04: 6e:27:09:41:5e:71:e4:15:11:57:a1:38:24:cd:ab: 8a:b4:e0:c1:a0:c7:11:ab:af:eb:93:85:b8:fe:c8: 72:38:44:d8:06:43:e7:b6:14:d5:00:90:9e:e0:e7: f5:e7:5e:07:14:8f:2e:c5:18:03:a2:ac:00:a9:42: 22:16:4d:a8:42:6f:2b:cd:5b:ae:0b:66:da:03:7e: 44:94:06:3c:a0:a1:66:f9:d9:80:59:1e:a7:74:36: e6:d5:a3:58:fd:d9:c0:90:8e:7c:6b:38:56:dd:9d: 3f:d9:64:5a:ae:42:bc:c7:99:84:d1:5e:85:db:32: 22:73:66:b7:40:72:7a:e2:f6:6c:1c:0f:6b:1c:f9: 9d:5b:e9:3e:2c:c7:2a:ec:cf:e2:37:96:15:70:82: 18:29:74:c6:7c:c0:9a:bc:3a:84:a1:1b:a8:ed:9c: 88:ea:92:69:68:5b:0d:10:26:f1:c0:57:31:ac:bb: 4d:77:3f:15:47:e7:dd:92:16:c1:98:2a:77:26:00: 16:4c:e9:26:94:15:cc:b8:9c:8d:ab:c4:80:f3:90: 30:9a:7b:e8:bb:ea:98:b7:e1:73:68:36:54:6a:82: 8f:b5:a6:aa:be:00:6a:4c:5a:14:42:dc:aa:5a:40: 34:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:9B:51:3E:55:F5:C3:33:3F:14:7D:56:4F:1B:15:3D:6B:8D:49:EE X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PZtRPlX1wzM_FH1WTxsVPWuNSe4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.100.0/24 Signature Algorithm: sha256WithRSAEncryption 44:7b:bc:cf:88:cb:91:a2:06:3a:29:fd:be:91:0f:b2:0a:80: 5e:c2:11:5d:f3:5a:51:4e:3d:0d:02:8b:63:72:11:c0:a7:b6: 83:1a:e7:e8:10:c9:7d:4f:ea:d4:2e:d0:c6:dc:1a:13:2e:34: cd:3b:f6:0d:1c:26:05:5c:09:e5:c7:e9:fe:e0:bb:00:b6:a1: 07:78:b0:a3:06:33:16:cd:4d:f2:e4:0d:d9:11:8b:8a:6c:4f: 6d:64:86:c7:d6:cc:db:6b:22:a4:64:6b:39:67:a9:ab:dc:d1: 0f:24:07:9d:3b:1f:b9:86:91:53:8f:8a:7b:b4:23:20:48:e4: 77:1b:0b:ad:3b:77:2e:1d:86:20:14:0a:a6:82:2f:b5:c7:09: e5:36:53:97:0c:7f:78:cc:dc:11:bf:be:b2:60:cd:db:6d:90: 90:fc:e7:cc:13:12:16:5a:98:0f:9b:cf:23:fd:55:af:38:ba: a3:5b:8e:50:db:6e:42:e5:f9:0f:13:55:63:08:fe:ea:9e:33: dd:f6:aa:38:09:ca:a5:37:2d:82:13:d0:db:df:35:1c:a5:9e: 36:4a:e1:4c:5b:5d:73:c4:c1:82:2a:f2:63:44:3b:48:26:11: 74:27:33:82:6f:26:20:7d:55:d5:4b:32:19:67:bd:87:c0:b5: c7:aa:62:64 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOjswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3MDhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDNEOUI1MTNFNTVGNUMz MzMzRjE0N0Q1NjRGMUIxNTNENkI4RDQ5RUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCjYe3MHyQ+I61teicQBG4nCUFeceQVEVehOCTNq4q04MGgxxGr r+uThbj+yHI4RNgGQ+e2FNUAkJ7g5/XnXgcUjy7FGAOirACpQiIWTahCbyvNW64L ZtoDfkSUBjygoWb52YBZHqd0NubVo1j92cCQjnxrOFbdnT/ZZFquQrzHmYTRXoXb MiJzZrdAcnri9mwcD2sc+Z1b6T4sxyrsz+I3lhVwghgpdMZ8wJq8OoShG6jtnIjq kmloWw0QJvHAVzGsu013PxVH592SFsGYKncmABZM6SaUFcy4nI2rxIDzkDCae+i7 6pi34XNoNlRqgo+1pqq+AGpMWhRC3KpaQDTfAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUPZtRPlX1wzM/FH1WTxsVPWuNSe4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1BadFJQbFgxd3pNX0ZIMVdU eHNWUFd1TlNlNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB2 6WQwDQYJKoZIhvcNAQELBQADggEBAER7vM+Iy5GiBjop/b6RD7IKgF7CEV3zWlFO PQ0Ci2NyEcCntoMa5+gQyX1P6tQu0MbcGhMuNM079g0cJgVcCeXH6f7guwC2oQd4 sKMGMxbNTfLkDdkRi4psT21khsfWzNtrIqRkazlnqavc0Q8kB507H7mGkVOPinu0 IyBI5HcbC607dy4dhiAUCqaCL7XHCeU2U5cMf3jM3BG/vrJgzdttkJD858wTEhZa mA+bzyP9Va84uqNbjlDbbkLl+Q8TVWMI/uqeM932qjgJyqU3LYIT0NvfNRylnjZK 4UxbXXPEwYIq8mNEO0gmEXQnM4JvJiB9VdVLMhlnvYfAtceqYmQ= -----END CERTIFICATE-----Generated at Sun Aug 24 07:25:27 2025 by rpki-client