$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QZo4IW05lsMlTieA7tJMK-LwicQ.roa File: QZo4IW05lsMlTieA7tJMK-LwicQ.roa (raw, json) Hash identifier: MA8A11Tdp2I17K8tfb2FRB1Kscy+Qfszvq2JRrhL7ck= Subject key identifier: 41:9A:38:21:6D:39:96:C3:25:4E:27:80:EE:D2:4C:2B:E2:F0:89:C4 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 37EB Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QZo4IW05lsMlTieA7tJMK-LwicQ.roa Signing time: Fri 22 Aug 2025 08:44:46 +0000 ROA not before: Fri 22 Aug 2025 08:44:46 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 106.1.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14315 (0x37eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:44:46 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=419A38216D3996C3254E2780EED24C2BE2F089C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:7a:dc:2c:9d:94:32:85:0f:34:9b:86:3e:f0: 54:a8:3a:40:39:03:d6:c6:36:e2:65:98:71:57:0f: da:3a:f8:90:6d:37:04:dd:05:dd:dd:e9:b1:22:91: 70:c2:85:60:4b:13:19:a1:a1:6e:86:d9:12:91:eb: c4:35:ed:7b:0d:96:30:17:d1:3c:85:b1:0f:a5:97: b3:e8:9e:7e:4b:43:0d:d5:f7:40:ed:96:d5:f7:60: 4b:6b:41:d2:77:99:5d:31:a4:60:6d:97:89:1e:64: 93:07:25:f0:49:ed:bd:fd:d9:27:81:99:cb:31:51: e7:a0:8c:80:60:8d:e7:c4:e9:a5:ad:59:40:83:92: 93:45:14:36:b8:ff:84:7c:1c:15:80:14:4b:b3:46: 67:2e:6a:6d:54:86:9d:fe:14:8d:4b:6a:c9:6c:5d: fd:e9:93:27:99:2b:7e:35:b8:77:40:f5:e6:65:03: 20:99:a6:f5:c3:e5:d7:3b:0b:26:ba:a6:9b:1b:84: 00:b9:1d:33:83:b3:6b:a7:be:20:0a:ef:fd:e3:2f: 18:73:f2:8d:45:dd:f5:00:28:90:18:17:0e:c6:0c: 5a:a9:60:7e:bc:84:a0:d9:d0:63:cb:6c:9d:fa:c4: 18:2a:79:63:cc:86:af:aa:7d:f9:8b:c7:52:0d:b6: 38:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:9A:38:21:6D:39:96:C3:25:4E:27:80:EE:D2:4C:2B:E2:F0:89:C4 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QZo4IW05lsMlTieA7tJMK-LwicQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.0.0/22 Signature Algorithm: sha256WithRSAEncryption 42:c2:81:fd:2b:04:67:74:9b:25:86:d3:3d:37:dd:f6:2d:a1: c5:45:a1:98:2f:fa:f2:67:4a:c4:84:f4:ba:23:96:a9:6f:44: 04:94:64:8a:b3:4e:c7:35:cc:ab:52:19:68:5f:3a:45:93:51: 0d:fd:55:5d:cd:2d:a7:f4:d1:29:c7:6a:12:23:fe:85:9b:91: c0:c9:cb:65:79:ff:e7:e7:f1:37:a7:ec:0d:5c:5a:91:51:20: 16:77:c0:7b:c5:9e:00:95:e2:92:ce:f4:50:ec:13:8e:c6:fb: a3:48:94:db:49:8e:98:e2:59:3e:7a:11:af:41:f8:87:14:6d: d5:1f:18:fd:96:d4:fe:aa:35:29:d5:50:ac:ef:6d:17:b0:d2: e5:ab:ec:8b:85:d6:c4:48:da:b0:c9:89:e6:fa:86:9a:78:19: be:6d:c1:3f:3a:f5:49:bf:81:fc:33:57:25:8c:62:3a:20:43: e4:0e:46:c0:99:29:5b:99:80:65:38:47:44:4d:cf:2f:37:94: f3:fc:b8:7d:37:36:29:bf:3f:fc:d8:db:75:09:35:24:41:52: 9e:a8:53:79:66:40:5e:81:1e:6b:58:18:74:54:1a:b2:b6:58: 8a:39:d3:44:8d:05:cb:ff:9a:00:5c:c1:a1:a3:b3:39:3c:d6: fd:51:74:bf -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICN+swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ0NDZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDQxOUEzODIxNkQzOTk2 QzMyNTRFMjc4MEVFRDI0QzJCRTJGMDg5QzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCZetwsnZQyhQ80m4Y+8FSoOkA5A9bGNuJlmHFXD9o6+JBtNwTd Bd3d6bEikXDChWBLExmhoW6G2RKR68Q17XsNljAX0TyFsQ+ll7Ponn5LQw3V90Dt ltX3YEtrQdJ3mV0xpGBtl4keZJMHJfBJ7b392SeBmcsxUeegjIBgjefE6aWtWUCD kpNFFDa4/4R8HBWAFEuzRmcuam1Uhp3+FI1LaslsXf3pkyeZK341uHdA9eZlAyCZ pvXD5dc7Cya6ppsbhAC5HTODs2unviAK7/3jLxhz8o1F3fUAKJAYFw7GDFqpYH68 hKDZ0GPLbJ36xBgqeWPMhq+qffmLx1INtjhlAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUQZo4IW05lsMlTieA7tJMK+LwicQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1FabzRJVzA1bHNNbFRpZUE3 dEpNSy1Md2ljUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq AQAwDQYJKoZIhvcNAQELBQADggEBAELCgf0rBGd0myWG0z033fYtocVFoZgv+vJn SsSE9LojlqlvRASUZIqzTsc1zKtSGWhfOkWTUQ39VV3NLaf00SnHahIj/oWbkcDJ y2V5/+fn8Ten7A1cWpFRIBZ3wHvFngCV4pLO9FDsE47G+6NIlNtJjpjiWT56Ea9B +IcUbdUfGP2W1P6qNSnVUKzvbRew0uWr7IuF1sRI2rDJieb6hpp4Gb5twT869Um/ gfwzVyWMYjogQ+QORsCZKVuZgGU4R0RNzy83lPP8uH03Nim/P/zY23UJNSRBUp6o U3lmQF6BHmtYGHRUGrK2WIo500SNBcv/mgBcwaGjszk81v1RdL8= -----END CERTIFICATE-----Generated at Sun Aug 24 07:33:11 2025 by rpki-client