$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RHEZdtnFpJqT7jozGFltWh7y2LA.roa File: RHEZdtnFpJqT7jozGFltWh7y2LA.roa (raw, json) Hash identifier: 6O6zd/xpfX4W+sUjf4y4Akpk4znpCgJEPH6tJxLuo4E= Subject key identifier: 44:71:19:76:D9:C5:A4:9A:93:EE:3A:33:18:59:6D:5A:1E:F2:D8:B0 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 39F8 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RHEZdtnFpJqT7jozGFltWh7y2LA.roa Signing time: Fri 22 Aug 2025 08:46:52 +0000 ROA not before: Fri 22 Aug 2025 08:46:52 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 106.1.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14840 (0x39f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:52 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=44711976D9C5A49A93EE3A3318596D5A1EF2D8B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8f:5f:c9:81:ac:ff:7d:86:2f:43:b9:33:c1: 1b:a9:c0:3c:4a:ec:2c:50:10:e6:2f:0c:b8:64:91: d6:f2:4b:19:ce:7c:a5:7b:03:45:cd:dd:f8:ee:31: 87:4a:62:76:58:e6:af:b7:ce:21:3a:4f:e6:82:5f: f8:58:72:51:58:d8:50:3d:7e:0e:ef:f4:b4:f5:16: 0f:d1:91:23:bf:b3:dd:03:d8:97:8c:a5:37:43:01: 83:58:fe:8a:1c:c6:4b:a7:5b:32:09:c8:d3:50:9e: f8:ca:1c:f6:af:f3:5e:b4:b1:c1:c1:5d:58:f2:0f: e8:38:0b:b0:63:67:86:85:ba:0a:f2:3b:37:93:26: 01:08:07:dd:c9:50:b0:47:42:e7:34:f3:30:45:47: 1a:82:3c:98:0a:99:91:e6:56:2d:69:0c:51:be:76: 99:2e:53:87:32:6e:1d:c1:97:a0:0a:1f:5c:cb:e8: 4b:86:73:90:4d:a4:f6:6e:41:0d:2c:2e:bf:d1:44: 13:9e:48:e3:6e:f7:54:ba:ea:fb:1c:21:d8:ac:91: 49:13:8d:b1:c0:27:cf:8a:e4:4e:d6:9d:87:6b:39: 5c:9c:78:2f:90:e9:b2:b7:dd:ba:7e:ed:21:a7:c6: 35:5e:75:a3:09:38:f1:6a:ca:9d:16:a5:dc:c7:ab: e3:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:71:19:76:D9:C5:A4:9A:93:EE:3A:33:18:59:6D:5A:1E:F2:D8:B0 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RHEZdtnFpJqT7jozGFltWh7y2LA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.221.0/24 Signature Algorithm: sha256WithRSAEncryption 30:83:86:d5:4b:2e:1a:b8:1c:09:b4:dc:e5:1b:4e:2b:cf:cd: 59:49:f7:62:ec:4d:9c:9c:26:1e:1f:46:46:2c:40:fe:f8:73: f3:26:8a:6b:41:3b:93:36:71:7c:60:13:3d:45:f8:b4:55:82: 5e:c1:cd:b6:2b:18:e0:13:86:11:49:be:1a:ca:80:38:d2:a5: e3:ea:47:84:c1:5b:78:6a:af:0c:ee:66:e8:33:58:76:03:48: ae:e1:01:c9:51:3c:81:03:e5:a8:ff:45:bf:9a:6f:4c:e7:21: f0:50:e1:4d:63:ee:a7:8e:31:aa:15:de:fd:b3:15:ce:1d:a9: d3:61:6b:99:59:e0:2f:dd:eb:09:52:e6:ed:78:9e:b6:fb:83: 27:bd:56:19:07:18:5c:d3:c6:35:48:b1:62:57:94:d4:8b:56: 95:be:c9:d3:b6:c7:07:ca:63:e6:cb:87:d7:51:ff:82:f1:68: c0:ed:9f:ea:03:9a:ef:5d:5f:f9:03:be:b4:7a:07:87:35:cd: e5:25:12:d2:57:73:58:c6:6b:3a:ae:67:f6:2c:86:e1:94:d6: 99:da:c4:13:19:4f:e1:0e:9a:5a:a3:26:33:44:aa:cd:31:8b: 24:27:3c:22:45:0b:7a:7f:43:f2:d3:9f:d0:43:5a:91:71:fe: 31:40:e1:1e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOfgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2NTJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDQ0NzExOTc2RDlDNUE0 OUE5M0VFM0EzMzE4NTk2RDVBMUVGMkQ4QjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBj1/Jgaz/fYYvQ7kzwRupwDxK7CxQEOYvDLhkkdbySxnOfKV7 A0XN3fjuMYdKYnZY5q+3ziE6T+aCX/hYclFY2FA9fg7v9LT1Fg/RkSO/s90D2JeM pTdDAYNY/oocxkunWzIJyNNQnvjKHPav8160scHBXVjyD+g4C7BjZ4aFugryOzeT JgEIB93JULBHQuc08zBFRxqCPJgKmZHmVi1pDFG+dpkuU4cybh3Bl6AKH1zL6EuG c5BNpPZuQQ0sLr/RRBOeSONu91S66vscIdiskUkTjbHAJ8+K5E7WnYdrOVyceC+Q 6bK33bp+7SGnxjVedaMJOPFqyp0WpdzHq+NJAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQURHEZdtnFpJqT7jozGFltWh7y2LAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1JIRVpkdG5GcEpxVDdqb3pH Rmx0V2g3eTJMQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq Ad0wDQYJKoZIhvcNAQELBQADggEBADCDhtVLLhq4HAm03OUbTivPzVlJ92LsTZyc Jh4fRkYsQP74c/MmimtBO5M2cXxgEz1F+LRVgl7BzbYrGOAThhFJvhrKgDjSpePq R4TBW3hqrwzuZugzWHYDSK7hAclRPIED5aj/Rb+ab0znIfBQ4U1j7qeOMaoV3v2z Fc4dqdNha5lZ4C/d6wlS5u14nrb7gye9VhkHGFzTxjVIsWJXlNSLVpW+ydO2xwfK Y+bLh9dR/4LxaMDtn+oDmu9dX/kDvrR6B4c1zeUlEtJXc1jGazquZ/YshuGU1pna xBMZT+EOmlqjJjNEqs0xiyQnPCJFC3p/Q/LTn9BDWpFx/jFA4R4= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:37 2025 by rpki-client