$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Q46GAUaMeZOigGo3Hzf6hZjC2co.roa File: Q46GAUaMeZOigGo3Hzf6hZjC2co.roa (raw, json) Hash identifier: lLjABbm3aa1SUjFnkE6qJYNmleHgLBCNmEJGfsf6nRY= Subject key identifier: 43:8E:86:01:46:8C:79:93:A2:80:6A:37:1F:37:FA:85:98:C2:D9:CA Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 397C Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Q46GAUaMeZOigGo3Hzf6hZjC2co.roa Signing time: Fri 22 Aug 2025 08:46:21 +0000 ROA not before: Fri 22 Aug 2025 08:46:21 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.194.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14716 (0x397c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:21 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=438E8601468C7993A2806A371F37FA8598C2D9CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:94:1e:eb:8e:d3:a8:6e:28:be:c3:06:18:ab: 4c:4e:54:95:0c:9e:57:ba:6c:55:4f:15:f7:b7:49: 6d:a2:53:6f:f7:d4:ae:16:5b:a0:48:01:70:ee:25: 96:dc:70:c7:68:1d:d9:11:28:ee:ca:89:6b:b8:1b: 51:ec:1a:ae:fb:c1:2c:24:99:ca:ac:2b:c3:09:a9: 8c:f9:b7:40:3b:db:c8:1e:81:dc:77:7f:70:3b:b4: 46:2e:73:bd:64:47:74:3c:dc:ef:27:f7:4c:ca:79: 0a:ae:e1:01:6d:83:e0:a4:97:fe:fe:67:b1:b5:85: c8:d7:42:0d:c1:ad:1b:a1:3e:d4:21:5d:f1:01:a7: ec:ac:38:23:6e:bf:46:04:09:4a:77:27:4a:39:2b: 33:5f:95:44:bc:34:a4:47:06:76:b6:ea:02:8b:83: 87:a1:30:d7:62:bd:31:96:10:50:e8:f1:53:07:5e: ac:c2:e5:70:c9:b7:67:da:3b:8a:62:ec:ba:c0:4a: fe:f7:30:96:91:c4:69:c5:6f:19:51:9e:03:7e:04: 98:cf:59:43:1d:0e:4a:e3:db:00:49:4d:ba:d6:35: 8f:6a:39:1e:1a:d3:cf:e5:f2:7e:8a:d9:7a:0a:6e: a5:19:43:2d:8c:58:2c:5b:b5:02:91:10:47:dd:8a: a6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:8E:86:01:46:8C:79:93:A2:80:6A:37:1F:37:FA:85:98:C2:D9:CA X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Q46GAUaMeZOigGo3Hzf6hZjC2co.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.208.0/22 Signature Algorithm: sha256WithRSAEncryption 76:cb:a3:9b:80:8a:a2:ca:3d:fd:50:ec:5a:33:ce:3e:d6:92: bb:49:a7:94:45:82:b4:65:0d:0d:7a:71:5a:e9:4d:0d:c0:8a: 21:33:2f:de:0b:53:08:70:d3:5c:a1:6a:5d:40:1f:41:5c:58: 14:b4:08:e0:ab:9d:68:fb:db:6d:ac:54:fe:af:f6:92:89:22: 5d:6a:5a:7f:a0:57:84:20:db:4d:73:08:49:e6:d6:a8:2f:1a: 66:7c:f5:0c:9a:94:22:11:65:f2:69:eb:c3:41:ca:26:b4:24: 64:1a:32:30:0b:fc:b5:5a:cb:6d:1a:87:0f:f8:a8:d6:c3:3d: fc:b6:b3:1d:07:a1:94:0e:36:33:b7:b4:d1:1e:5e:42:f7:95: 73:61:e3:c1:3b:1b:79:c5:8b:db:4d:3e:c7:9e:98:b5:34:a6: f1:b9:bf:71:de:2e:a8:1d:ac:d6:88:86:70:48:0d:93:09:49: dc:2d:66:14:24:1f:f6:9a:bd:6b:ac:cc:9b:66:ed:8c:d0:5b: 90:6e:50:b3:fc:14:a2:62:5c:26:96:97:04:0d:00:6a:d5:db: 03:6e:1f:e0:df:54:5a:55:51:7e:16:91:7a:c3:04:28:a3:a9: c5:be:17:03:d7:fa:f8:2a:d2:3c:1e:17:56:3f:b5:17:73:6b: 9f:2a:40:5a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOXwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2MjFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDQzOEU4NjAxNDY4Qzc5 OTNBMjgwNkEzNzFGMzdGQTg1OThDMkQ5Q0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKlB7rjtOobii+wwYYq0xOVJUMnle6bFVPFfe3SW2iU2/31K4W W6BIAXDuJZbccMdoHdkRKO7KiWu4G1HsGq77wSwkmcqsK8MJqYz5t0A728gegdx3 f3A7tEYuc71kR3Q83O8n90zKeQqu4QFtg+Ckl/7+Z7G1hcjXQg3BrRuhPtQhXfEB p+ysOCNuv0YECUp3J0o5KzNflUS8NKRHBna26gKLg4ehMNdivTGWEFDo8VMHXqzC 5XDJt2faO4pi7LrASv73MJaRxGnFbxlRngN+BJjPWUMdDkrj2wBJTbrWNY9qOR4a 08/l8n6K2XoKbqUZQy2MWCxbtQKREEfdiqYPAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUQ46GAUaMeZOigGo3Hzf6hZjC2cowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1E0NkdBVWFNZVpPaWdHbzNI emY2aFpqQzJjby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wtAwDQYJKoZIhvcNAQELBQADggEBAHbLo5uAiqLKPf1Q7Fozzj7WkrtJp5RFgrRl DQ16cVrpTQ3AiiEzL94LUwhw01yhal1AH0FcWBS0COCrnWj7222sVP6v9pKJIl1q Wn+gV4Qg201zCEnm1qgvGmZ89QyalCIRZfJp68NByia0JGQaMjAL/LVay20ahw/4 qNbDPfy2sx0HoZQONjO3tNEeXkL3lXNh48E7G3nFi9tNPseemLU0pvG5v3HeLqgd rNaIhnBIDZMJSdwtZhQkH/aavWuszJtm7YzQW5BuULP8FKJiXCaWlwQNAGrV2wNu H+DfVFpVUX4WkXrDBCijqcW+FwPX+vgq0jweF1Y/tRdza58qQFo= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:56 2025 by rpki-client