$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RSwEahnPfucGaL-5JfCqLSIYgN8.roa File: RSwEahnPfucGaL-5JfCqLSIYgN8.roa (raw, json) Hash identifier: LniV4iFIq8JtEt3LvE6uuWl1YDNaMXSy7BMZWZ6j8Z8= Subject key identifier: 45:2C:04:6A:19:CF:7E:E7:06:68:BF:B9:25:F0:AA:2D:22:18:80:DF Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 39FC Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RSwEahnPfucGaL-5JfCqLSIYgN8.roa Signing time: Fri 22 Aug 2025 08:46:53 +0000 ROA not before: Fri 22 Aug 2025 08:46:53 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.192.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14844 (0x39fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:53 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=452C046A19CF7EE70668BFB925F0AA2D221880DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c9:bd:d2:85:e5:3a:61:6a:3a:e7:15:7d:05: 73:4b:ad:2f:b6:67:59:b9:6e:ce:eb:7d:4c:0b:f6: e5:52:ed:51:65:ec:9c:81:6e:7f:74:7c:e1:a5:42: c7:87:6c:22:6a:fc:61:cc:87:24:e3:18:89:b2:66: 3b:54:92:c2:4b:7a:f9:5e:dd:01:63:d7:f0:08:3b: b9:33:94:bc:43:c4:91:51:d5:23:46:db:5a:9c:1f: a3:97:3f:61:1f:36:61:b9:80:2c:b8:fd:59:6c:be: dc:ec:3f:90:2b:9e:ff:c0:d7:3d:da:9a:4b:d2:92: c8:2b:58:cc:f8:5f:31:35:c6:8d:e1:89:b0:1c:99: ae:8e:09:64:a6:d5:ef:9d:14:1d:fb:02:31:6a:ed: a0:13:9f:09:cf:d7:47:10:ee:08:c2:ec:9e:5c:4e: cd:bb:ae:fe:a2:04:92:6e:2c:52:35:8e:b0:49:43: 8a:a0:38:2a:d3:b2:7a:68:2b:0a:2f:54:76:b0:b2: 14:e8:db:9e:34:0e:91:1a:92:d1:1b:63:04:46:ac: 38:19:96:a0:bf:ec:4a:d2:5b:e2:03:2c:ec:24:75: 7d:84:d0:e1:c1:93:12:f7:f8:39:6d:39:38:21:45: e1:a2:55:7c:3d:8e:1a:a1:e2:ca:57:89:8e:de:20: 21:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:2C:04:6A:19:CF:7E:E7:06:68:BF:B9:25:F0:AA:2D:22:18:80:DF X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RSwEahnPfucGaL-5JfCqLSIYgN8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.32.0/21 Signature Algorithm: sha256WithRSAEncryption 40:33:40:ff:fe:7a:c2:c2:31:8c:90:b3:e6:8e:33:6e:ae:6c: 25:cd:9a:56:ba:f1:42:1e:95:e0:2b:bd:9a:09:e9:65:f9:df: bd:d8:b2:1d:24:1e:cb:7e:3a:3a:e9:8b:c7:e3:04:58:a0:30: 82:8f:de:d4:14:61:d6:c8:26:1e:a7:e2:c7:98:36:b7:f8:71: a7:8d:c9:1b:2f:8c:31:00:94:d3:88:ae:4f:d1:aa:51:93:5a: ee:e2:e1:d4:9d:59:ee:e9:c2:a7:d9:7c:f4:09:d9:24:aa:7a: ae:da:ea:8c:8f:2d:37:88:06:26:3c:0f:e8:06:af:ce:5a:3c: 22:be:73:21:4b:30:67:91:c8:8a:5f:c7:e8:e7:0e:e0:06:0f: 5a:54:ad:ae:3a:97:a1:4c:b0:ae:16:e0:55:ad:1f:ee:b4:30: 58:3b:75:10:f9:9a:69:dc:2e:9d:7b:c2:fe:1c:ff:ae:88:80: af:35:56:db:1f:c8:4e:e2:63:c1:d8:35:62:08:d2:57:0b:1e: b3:7c:8f:bf:21:55:12:c5:89:ed:5b:86:50:83:d2:cc:09:82: bb:44:0c:86:3f:a3:09:bd:53:85:09:a7:e0:f5:68:2f:d1:bb: c8:60:7f:d3:e2:a5:7a:42:0e:45:3c:13:db:70:b5:2e:eb:08: 62:35:86:0b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOfwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2NTNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDQ1MkMwNDZBMTlDRjdF RTcwNjY4QkZCOTI1RjBBQTJEMjIxODgwREYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0yb3SheU6YWo65xV9BXNLrS+2Z1m5bs7rfUwL9uVS7VFl7JyB bn90fOGlQseHbCJq/GHMhyTjGImyZjtUksJLevle3QFj1/AIO7kzlLxDxJFR1SNG 21qcH6OXP2EfNmG5gCy4/VlsvtzsP5Arnv/A1z3amkvSksgrWMz4XzE1xo3hibAc ma6OCWSm1e+dFB37AjFq7aATnwnP10cQ7gjC7J5cTs27rv6iBJJuLFI1jrBJQ4qg OCrTsnpoKwovVHawshTo2540DpEaktEbYwRGrDgZlqC/7ErSW+IDLOwkdX2E0OHB kxL3+DltOTghReGiVXw9jhqh4spXiY7eICF/AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQURSwEahnPfucGaL+5JfCqLSIYgN8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1JTd0VhaG5QZnVjR2FMLTVK ZkNxTFNJWWdOOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wCAwDQYJKoZIhvcNAQELBQADggEBAEAzQP/+esLCMYyQs+aOM26ubCXNmla68UIe leArvZoJ6WX5373Ysh0kHst+Ojrpi8fjBFigMIKP3tQUYdbIJh6n4seYNrf4caeN yRsvjDEAlNOIrk/RqlGTWu7i4dSdWe7pwqfZfPQJ2SSqeq7a6oyPLTeIBiY8D+gG r85aPCK+cyFLMGeRyIpfx+jnDuAGD1pUra46l6FMsK4W4FWtH+60MFg7dRD5mmnc Lp17wv4c/66IgK81VtsfyE7iY8HYNWII0lcLHrN8j78hVRLFie1bhlCD0swJgrtE DIY/owm9U4UJp+D1aC/Ru8hgf9PipXpCDkU8E9twtS7rCGI1hgs= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:47 2025 by rpki-client