$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RZ5xbTNm3-CDyFSkuUiXyDXKNgc.roa File: RZ5xbTNm3-CDyFSkuUiXyDXKNgc.roa (raw, json) Hash identifier: POcZRmyTiDM62GZNlJEeZt7CKrH9dQFaxdwKhEzv82g= Subject key identifier: 45:9E:71:6D:33:66:DF:E0:83:C8:54:A4:B9:48:97:C8:35:CA:36:07 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3889 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RZ5xbTNm3-CDyFSkuUiXyDXKNgc.roa Signing time: Fri 22 Aug 2025 08:45:24 +0000 ROA not before: Fri 22 Aug 2025 08:45:24 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.192.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14473 (0x3889) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:24 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=459E716D3366DFE083C854A4B94897C835CA3607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c1:72:e5:5d:41:00:a0:86:a3:02:83:e0:42: ef:30:81:a0:72:a9:83:c0:7f:a9:42:9b:a9:32:cf: de:36:60:4b:fb:d6:84:e2:43:59:dd:7b:2b:7a:de: ac:46:7e:f2:73:48:a1:fe:8f:46:bf:ff:d9:73:0c: 14:e4:ea:a0:d0:93:6d:0a:17:25:a9:fb:77:d3:72: 0e:ab:a0:d6:a2:a4:59:ca:7f:39:f9:4a:7e:b8:6b: f5:5d:d9:54:90:b9:d6:c4:93:9c:7f:f8:44:da:9e: 8a:27:73:c4:a3:74:68:09:3e:6f:c8:95:a0:23:34: ce:7c:e4:ae:d4:12:2e:84:23:02:ad:4d:00:fa:a3: e4:e9:6c:56:9e:60:4f:33:b1:48:38:1e:76:a0:b4: 8a:92:6f:2d:d2:09:a4:c8:73:51:21:5b:0e:fa:48: 4d:ba:11:f8:08:9e:79:6c:c3:1a:1c:a1:99:38:61: 9d:c8:95:1a:35:cb:0c:f6:20:d8:1a:0d:43:5a:2b: 6a:a4:db:73:1f:2c:66:84:e3:22:ce:c6:67:90:e3: 46:4e:cd:53:9e:7a:d5:cc:5e:2b:c7:fe:77:43:0b: f4:0e:99:35:f7:25:f7:5f:da:c8:ca:f4:f2:6c:a3: 0b:76:3e:bb:19:c0:b2:14:d8:55:c9:cd:a3:7f:0d: d7:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:9E:71:6D:33:66:DF:E0:83:C8:54:A4:B9:48:97:C8:35:CA:36:07 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RZ5xbTNm3-CDyFSkuUiXyDXKNgc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.232.0/21 Signature Algorithm: sha256WithRSAEncryption 74:39:4f:16:32:8a:df:3a:62:9f:e8:a5:44:02:d9:56:26:58: 43:aa:32:b4:f0:0d:88:79:a4:94:b1:0f:ac:94:c1:fe:24:c7: 93:ec:e3:c9:8b:bf:4e:fc:49:8d:78:19:8e:96:dd:09:6c:73: fe:46:ed:61:e0:f6:d2:79:3a:77:2e:09:c3:55:b2:f8:3e:b3: 26:52:32:61:6d:3a:c7:54:62:b3:83:98:c2:13:3b:9c:0c:93: 4c:83:46:9d:92:c6:ed:3d:16:a3:b5:f9:6a:ea:36:e2:2d:d2: 8f:59:d6:ce:0e:7e:b8:b7:a4:a8:01:f3:0f:04:5b:17:98:fb: 4b:67:39:8f:11:b2:9a:a3:62:02:c6:0a:a6:cd:53:1e:81:63: b8:36:97:54:a8:5f:d3:7c:32:2d:ec:43:91:29:23:7c:28:4c: ec:2d:1f:db:48:54:3d:98:a5:c7:45:aa:ee:b5:43:ca:f0:ed: 01:ba:49:9f:ba:17:a1:68:ae:bf:fa:7b:29:29:02:7b:be:e9: 1b:b4:ad:3a:34:b3:1e:2d:8e:1c:6c:73:63:55:ee:fc:cb:4b: e9:fe:4d:28:9c:64:3f:31:e2:ca:ed:41:a7:9a:09:6a:22:09: fd:08:53:17:65:89:bd:67:91:da:91:a8:0f:bc:af:3a:04:e6: 88:64:b6:67 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOIkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1MjRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDQ1OUU3MTZEMzM2NkRG RTA4M0M4NTRBNEI5NDg5N0M4MzVDQTM2MDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCswXLlXUEAoIajAoPgQu8wgaByqYPAf6lCm6kyz942YEv71oTi Q1ndeyt63qxGfvJzSKH+j0a//9lzDBTk6qDQk20KFyWp+3fTcg6roNaipFnKfzn5 Sn64a/Vd2VSQudbEk5x/+ETanoonc8SjdGgJPm/IlaAjNM585K7UEi6EIwKtTQD6 o+TpbFaeYE8zsUg4HnagtIqSby3SCaTIc1EhWw76SE26EfgInnlswxocoZk4YZ3I lRo1ywz2INgaDUNaK2qk23MfLGaE4yLOxmeQ40ZOzVOeetXMXivH/ndDC/QOmTX3 Jfdf2sjK9PJsowt2PrsZwLIU2FXJzaN/DddBAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQURZ5xbTNm3+CDyFSkuUiXyDXKNgcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1JaNXhiVE5tMy1DRHlGU2t1 VWlYeURYS05nYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wOgwDQYJKoZIhvcNAQELBQADggEBAHQ5TxYyit86Yp/opUQC2VYmWEOqMrTwDYh5 pJSxD6yUwf4kx5Ps48mLv078SY14GY6W3Qlsc/5G7WHg9tJ5OncuCcNVsvg+syZS MmFtOsdUYrODmMITO5wMk0yDRp2Sxu09FqO1+WrqNuIt0o9Z1s4Ofri3pKgB8w8E WxeY+0tnOY8RspqjYgLGCqbNUx6BY7g2l1SoX9N8Mi3sQ5EpI3woTOwtH9tIVD2Y pcdFqu61Q8rw7QG6SZ+6F6Forr/6eykpAnu+6Ru0rTo0sx4tjhxsc2NV7vzLS+n+ TSicZD8x4srtQaeaCWoiCf0IUxdlib1nkdqRqA+8rzoE5ohktmc= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:27 2025 by rpki-client