$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PfwA9zp8ubZTHaM5QNQPggVd20k.roa File: PfwA9zp8ubZTHaM5QNQPggVd20k.roa (raw, json) Hash identifier: VnFmPjdUAT4Yrsns+k7JzyejaR3IftoaAnOQTSaMVM8= Subject key identifier: 3D:FC:00:F7:3A:7C:B9:B6:53:1D:A3:39:40:D4:0F:82:05:5D:DB:49 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 39E3 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PfwA9zp8ubZTHaM5QNQPggVd20k.roa Signing time: Fri 22 Aug 2025 08:46:46 +0000 ROA not before: Fri 22 Aug 2025 08:46:46 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 118.233.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14819 (0x39e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:46 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=3DFC00F73A7CB9B6531DA33940D40F82055DDB49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c2:0b:10:8b:1b:ca:8e:88:aa:06:1c:d4:3e: ed:7d:96:2d:bd:03:5e:bc:57:ca:5b:d3:19:ac:df: 90:64:cc:0e:a7:26:e0:81:46:7c:bd:76:86:08:08: 2a:9d:50:16:44:77:c1:0a:f9:97:3a:bd:5f:09:cf: 3a:65:c5:9d:2b:9f:57:82:05:d6:34:36:cf:0b:78: 72:45:0a:61:ad:2c:7c:8f:16:ae:2e:87:a3:ec:35: 51:59:02:af:7c:58:e7:e5:71:87:ab:4e:d2:fc:42: c3:71:a0:4a:3c:48:79:e4:2b:f0:12:e1:1f:d1:05: 02:e8:82:4e:b4:63:41:dc:10:6d:81:03:65:0b:6a: 9a:ec:6b:cd:fd:d5:21:68:90:f0:b4:2e:10:02:82: 3b:87:27:7f:96:80:95:8a:9b:9b:a9:f8:b2:30:a6: 47:93:8d:1a:59:5b:8f:f0:fb:25:34:de:e6:00:fe: 51:cb:f0:e5:8b:d8:bf:7b:ac:87:f1:64:c1:c4:47: e7:7d:5b:b7:cc:f2:bd:6b:f3:8e:7c:a6:43:ad:65: 2d:2f:25:66:fc:cb:be:65:2e:6c:11:e0:20:c2:8d: d9:dd:52:7d:a3:fb:1d:38:44:3e:24:b1:0c:45:9b: 87:7d:c2:c4:32:77:c5:d8:f7:90:2b:98:b1:fe:ba: 0c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:FC:00:F7:3A:7C:B9:B6:53:1D:A3:39:40:D4:0F:82:05:5D:DB:49 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PfwA9zp8ubZTHaM5QNQPggVd20k.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.228.0/23 Signature Algorithm: sha256WithRSAEncryption 84:23:a0:2b:72:ad:63:29:36:8d:02:47:08:de:f2:77:26:43: 85:fd:69:9d:76:bd:b6:63:a3:40:f1:c2:48:1f:4b:4f:c3:46: e5:76:2c:ae:60:a5:c6:10:79:8b:8f:df:1e:a3:24:51:03:69: 98:c6:ac:9c:52:d6:09:94:03:78:5b:17:9e:00:4d:6a:12:bf: 42:96:a2:cd:d9:0f:14:3e:1b:2f:76:cc:0d:81:50:d4:1e:81: 75:f7:1e:bb:eb:50:d8:62:70:8f:46:b7:0f:39:88:4c:df:74: f6:ce:5d:4d:f9:68:a3:8c:b1:51:c5:d5:3f:c1:98:ae:01:72: 05:79:aa:65:5c:00:8a:8d:31:9b:c0:06:0c:83:34:2b:50:95: 66:c0:e3:fd:b1:28:9b:6e:f7:d3:fc:4f:8e:5c:85:ba:c6:73: b2:3c:be:36:5c:c1:57:2d:05:df:4b:da:06:27:47:a3:54:e2: d0:ac:30:9f:34:fd:cd:57:c0:d0:f8:00:d3:bb:06:0d:f7:07: df:91:77:7c:5b:9e:ee:07:b9:1a:b2:bf:c8:43:9a:79:3d:33: 2e:3a:77:0e:2c:19:65:75:55:43:4c:0b:6a:91:9b:54:f6:6d: 1d:36:1e:ab:c9:b2:d0:7f:04:2b:07:97:ec:f2:88:ba:4a:b6: 80:1a:bf:c0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOeMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2NDZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDNERkMwMEY3M0E3Q0I5 QjY1MzFEQTMzOTQwRDQwRjgyMDU1RERCNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXwgsQixvKjoiqBhzUPu19li29A168V8pb0xms35BkzA6nJuCB Rny9doYICCqdUBZEd8EK+Zc6vV8JzzplxZ0rn1eCBdY0Ns8LeHJFCmGtLHyPFq4u h6PsNVFZAq98WOflcYerTtL8QsNxoEo8SHnkK/AS4R/RBQLogk60Y0HcEG2BA2UL aprsa8391SFokPC0LhACgjuHJ3+WgJWKm5up+LIwpkeTjRpZW4/w+yU03uYA/lHL 8OWL2L97rIfxZMHER+d9W7fM8r1r8458pkOtZS0vJWb8y75lLmwR4CDCjdndUn2j +x04RD4ksQxFm4d9wsQyd8XY95ArmLH+ugwZAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUPfwA9zp8ubZTHaM5QNQPggVd20kwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1Bmd0E5enA4dWJaVEhhTTVR TlFQZ2dWZDIway5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF2 6eQwDQYJKoZIhvcNAQELBQADggEBAIQjoCtyrWMpNo0CRwje8ncmQ4X9aZ12vbZj o0DxwkgfS0/DRuV2LK5gpcYQeYuP3x6jJFEDaZjGrJxS1gmUA3hbF54ATWoSv0KW os3ZDxQ+Gy92zA2BUNQegXX3HrvrUNhicI9Gtw85iEzfdPbOXU35aKOMsVHF1T/B mK4BcgV5qmVcAIqNMZvABgyDNCtQlWbA4/2xKJtu99P8T45chbrGc7I8vjZcwVct Bd9L2gYnR6NU4tCsMJ80/c1XwND4ANO7Bg33B9+Rd3xbnu4HuRqyv8hDmnk9My46 dw4sGWV1VUNMC2qRm1T2bR02HqvJstB/BCsHl+zyiLpKtoAav8A= -----END CERTIFICATE-----Generated at Sun Aug 24 07:26:37 2025 by rpki-client