$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PkzjNYEpnBkUig0Rx2jU7cntVHc.roa File: PkzjNYEpnBkUig0Rx2jU7cntVHc.roa (raw, json) Hash identifier: qT//mMFq6CevrthRxY2H0W2eAUEhIZL7mrFJmWtEBCk= Subject key identifier: 3E:4C:E3:35:81:29:9C:19:14:8A:0D:11:C7:68:D4:ED:C9:ED:54:77 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3B3C Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PkzjNYEpnBkUig0Rx2jU7cntVHc.roa Signing time: Fri 22 Aug 2025 08:48:13 +0000 ROA not before: Fri 22 Aug 2025 08:48:13 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 106.1.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15164 (0x3b3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:48:13 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=3E4CE33581299C19148A0D11C768D4EDC9ED5477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:0f:d5:7b:25:a4:29:d7:6e:c8:d6:ae:0e:74: f8:a1:10:e9:5d:fd:4c:20:a3:31:1f:63:c9:08:69: fe:28:a9:0f:7d:f0:e6:7e:5c:7e:69:36:bf:17:40: 0e:ec:8c:d1:23:33:19:b0:15:e9:3b:a3:41:2a:30: 23:d4:26:8e:52:64:5c:09:1c:fd:b9:2e:a8:41:52: 00:8b:50:d1:57:d7:b6:4d:fa:c7:02:4c:68:2e:ac: f2:5f:1d:5e:84:69:50:00:dc:a2:4d:e1:77:44:db: 7f:4b:d8:39:26:b7:65:66:5e:56:f5:37:b0:13:82: 90:d6:da:4b:41:f7:60:2c:ca:54:0f:ca:63:68:1c: a8:af:50:62:52:7d:79:d4:df:2d:18:b3:6e:d7:17: fd:42:b7:75:7f:78:32:91:2c:62:3f:41:a5:02:bc: fc:9d:4d:91:5a:20:29:dd:1c:43:46:14:fc:11:d2: c9:33:f1:fa:9c:f6:43:07:42:b7:3d:1c:76:29:f1: 16:54:46:ca:65:8e:3b:72:45:53:88:a7:9b:6a:61: 1b:c2:f1:9c:51:f1:2f:48:9b:84:fb:a1:ae:b5:8c: 7d:01:f1:39:de:6a:76:80:f2:6f:36:2a:ba:0c:5c: ec:28:f9:35:7c:39:04:a0:1d:83:63:76:27:ad:d2: 57:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:4C:E3:35:81:29:9C:19:14:8A:0D:11:C7:68:D4:ED:C9:ED:54:77 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PkzjNYEpnBkUig0Rx2jU7cntVHc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.152.0/21 Signature Algorithm: sha256WithRSAEncryption 10:72:d7:06:1a:73:03:72:1c:55:75:8f:87:11:c2:35:e7:40: 3e:33:49:dc:6f:9e:91:18:f9:f2:f7:74:a1:14:81:e4:3a:ae: d3:d2:b0:bb:09:c9:0d:11:3b:87:22:16:10:d6:78:2d:14:5f: 2f:be:b3:81:e0:0f:32:6b:c6:ec:56:7c:c5:a0:1f:7d:cf:ee: 19:37:bd:7e:9c:df:02:b4:8b:9d:04:94:63:b2:c3:2a:68:1a: 3d:b4:1a:d5:f8:01:e0:85:4d:fb:aa:2b:38:83:62:3a:88:43: 5b:34:79:ec:69:02:72:fb:88:f4:2a:8d:49:1f:aa:4f:eb:44: 15:bc:2f:90:c7:b7:a9:7b:ab:6b:29:96:8a:dd:0c:39:0c:19: 94:ed:bb:46:59:0d:4b:69:ab:3c:1c:61:bc:71:79:cd:fb:df: 95:e6:d4:d2:12:b2:b0:64:1e:91:8e:59:49:ea:22:d4:3f:a3: 71:64:e9:46:7f:d9:27:0b:ef:d1:d5:21:f7:02:57:24:e2:b7: 73:d2:e6:b3:ca:d1:3e:be:8f:bf:58:e3:8a:c9:30:d2:cd:6d: b2:f4:0a:ee:09:f7:9d:11:bc:c3:f4:b6:31:3c:e7:99:49:eb: b5:a7:db:6b:aa:3a:8f:51:a3:f5:a7:3c:df:27:1e:47:bf:0b: 15:d9:1a:8f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOzwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ4MTNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDNFNENFMzM1ODEyOTlD MTkxNDhBMEQxMUM3NjhENEVEQzlFRDU0NzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDwD9V7JaQp127I1q4OdPihEOld/UwgozEfY8kIaf4oqQ998OZ+ XH5pNr8XQA7sjNEjMxmwFek7o0EqMCPUJo5SZFwJHP25LqhBUgCLUNFX17ZN+scC TGgurPJfHV6EaVAA3KJN4XdE239L2Dkmt2VmXlb1N7ATgpDW2ktB92AsylQPymNo HKivUGJSfXnU3y0Ys27XF/1Ct3V/eDKRLGI/QaUCvPydTZFaICndHENGFPwR0skz 8fqc9kMHQrc9HHYp8RZURspljjtyRVOIp5tqYRvC8ZxR8S9Im4T7oa61jH0B8Tne anaA8m82KroMXOwo+TV8OQSgHYNjdiet0lddAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUPkzjNYEpnBkUig0Rx2jU7cntVHcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1BrempOWUVwbkJrVWlnMFJ4 MmpVN2NudFZIYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBANq AZgwDQYJKoZIhvcNAQELBQADggEBABBy1wYacwNyHFV1j4cRwjXnQD4zSdxvnpEY +fL3dKEUgeQ6rtPSsLsJyQ0RO4ciFhDWeC0UXy++s4HgDzJrxuxWfMWgH33P7hk3 vX6c3wK0i50ElGOywypoGj20GtX4AeCFTfuqKziDYjqIQ1s0eexpAnL7iPQqjUkf qk/rRBW8L5DHt6l7q2splordDDkMGZTtu0ZZDUtpqzwcYbxxec3735Xm1NISsrBk HpGOWUnqItQ/o3Fk6UZ/2ScL79HVIfcCVyTit3PS5rPK0T6+j79Y44rJMNLNbbL0 Cu4J950RvMP0tjE855lJ67Wn22uqOo9Ro/WnPN8nHke/CxXZGo8= -----END CERTIFICATE-----Generated at Sun Aug 24 07:28:20 2025 by rpki-client