$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/S0-5uaqFy0HQ_O7zT3ZadvbOugk.roa File: S0-5uaqFy0HQ_O7zT3ZadvbOugk.roa (raw, json) Hash identifier: zGyb2nyGWI5XV+6MtTE6HJuFW+PNyKSHXWpCLwd1qwE= Subject key identifier: 4B:4F:B9:B9:AA:85:CB:41:D0:FC:EE:F3:4F:76:5A:76:F6:CE:BA:09 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3A34 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/S0-5uaqFy0HQ_O7zT3ZadvbOugk.roa Signing time: Fri 22 Aug 2025 08:47:07 +0000 ROA not before: Fri 22 Aug 2025 08:47:07 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 211.76.121.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14900 (0x3a34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:07 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=4B4FB9B9AA85CB41D0FCEEF34F765A76F6CEBA09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f1:4c:9f:9c:65:95:43:57:da:ad:7e:40:26: f2:4d:4d:fc:6a:b0:6a:1d:77:f4:81:31:de:5b:c4: 7b:26:af:d6:8b:57:c9:c9:7e:4a:e6:32:de:8d:ab: 4d:09:fc:76:36:c0:6f:25:58:c1:f4:b1:c2:70:e2: ca:7b:d9:b9:1a:6c:33:85:d3:c6:c5:da:5b:eb:61: d3:9f:16:e0:25:2e:9b:a7:00:0f:aa:c2:1d:c9:d0: 04:95:0e:ce:de:a7:59:36:ac:d4:dd:3a:88:2a:90: 12:c5:de:f9:00:a7:f3:45:7b:2c:bb:0f:c8:ea:3a: bf:ea:61:b7:d3:40:10:fd:9d:c1:5b:f3:75:2f:4d: dc:24:75:41:8e:d3:a2:1e:85:03:1c:93:09:ee:5e: 27:e1:f4:b4:fc:ae:32:e4:72:e8:81:64:56:d7:7a: 65:51:b6:ee:59:ec:ee:9c:8e:bc:66:9c:65:12:cb: aa:aa:6d:b1:2e:8a:b1:28:9c:38:4a:db:0b:ed:b6: 85:32:da:5e:70:c0:62:f9:da:dd:cf:f1:66:4e:f2: b0:4b:11:f7:06:c4:b3:52:2d:e8:0d:a4:ff:44:cc: b7:36:3e:64:f2:78:eb:07:9b:11:4d:2c:3e:45:af: 73:05:bc:6a:38:af:b8:bd:75:4d:33:92:de:39:09: 28:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:4F:B9:B9:AA:85:CB:41:D0:FC:EE:F3:4F:76:5A:76:F6:CE:BA:09 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/S0-5uaqFy0HQ_O7zT3ZadvbOugk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.121.128/25 Signature Algorithm: sha256WithRSAEncryption 6b:1d:5a:3a:df:86:a8:2b:89:79:d4:4e:c9:49:d4:44:05:bc: db:a4:05:d4:50:f1:f8:86:d8:8d:08:c3:1b:e4:8a:57:d3:a1: 18:d3:ed:5a:81:ed:ed:3e:88:08:3c:95:c9:61:ce:6d:87:12: e6:89:9a:44:c7:62:bf:47:71:0e:0d:7a:84:4c:6d:a3:27:d9: 19:1e:a6:3d:b3:bb:90:da:7e:b7:df:6a:e2:ad:a5:ed:55:0c: eb:97:ab:07:d6:90:d1:d3:a9:eb:40:be:62:f5:44:88:3f:87: b7:5e:d4:80:98:56:b0:e9:32:d0:52:5a:e7:b0:7f:7a:df:0a: c9:49:a8:43:a9:2b:05:e2:f5:0c:56:38:8c:38:2c:32:47:0d: 2d:5b:81:27:26:56:b3:c0:3f:71:33:a1:e3:c5:de:45:fa:cd: 8d:23:05:e3:b4:c5:2c:d7:e9:a7:c3:1a:be:53:d4:f3:ba:a0: 2a:0e:01:0b:e1:63:70:67:94:26:69:22:1a:ae:2d:1b:52:27: aa:37:dd:12:51:02:e8:77:7c:30:14:6c:b7:9c:0f:7f:c1:2f: b7:5e:7f:bf:c4:5c:3a:e2:13:12:44:fb:56:59:7d:6b:2e:5f: dd:5a:e5:9b:14:97:d9:b6:d1:e5:b3:7d:92:45:47:95:0a:4e: 9f:85:47:04 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICOjQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3MDdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDRCNEZCOUI5QUE4NUNC NDFEMEZDRUVGMzRGNzY1QTc2RjZDRUJBMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+8UyfnGWVQ1farX5AJvJNTfxqsGodd/SBMd5bxHsmr9aLV8nJ fkrmMt6Nq00J/HY2wG8lWMH0scJw4sp72bkabDOF08bF2lvrYdOfFuAlLpunAA+q wh3J0ASVDs7ep1k2rNTdOogqkBLF3vkAp/NFeyy7D8jqOr/qYbfTQBD9ncFb83Uv TdwkdUGO06IehQMckwnuXifh9LT8rjLkcuiBZFbXemVRtu5Z7O6cjrxmnGUSy6qq bbEuirEonDhK2wvttoUy2l5wwGL52t3P8WZO8rBLEfcGxLNSLegNpP9EzLc2PmTy eOsHmxFNLD5Fr3MFvGo4r7i9dU0zkt45CSgvAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUS0+5uaqFy0HQ/O7zT3ZadvbOugkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1MwLTV1YXFGeTBIUV9PN3pU M1phZHZiT3Vnay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQfT THmAMA0GCSqGSIb3DQEBCwUAA4IBAQBrHVo634aoK4l51E7JSdREBbzbpAXUUPH4 htiNCMMb5IpX06EY0+1age3tPogIPJXJYc5thxLmiZpEx2K/R3EODXqETG2jJ9kZ HqY9s7uQ2n6332riraXtVQzrl6sH1pDR06nrQL5i9USIP4e3XtSAmFaw6TLQUlrn sH963wrJSahDqSsF4vUMVjiMOCwyRw0tW4EnJlazwD9xM6Hjxd5F+s2NIwXjtMUs 1+mnwxq+U9TzuqAqDgEL4WNwZ5QmaSIari0bUieqN90SUQLod3wwFGy3nA9/wS+3 Xn+/xFw64hMSRPtWWX1rLl/dWuWbFJfZttHls32SRUeVCk6fhUcE -----END CERTIFICATE-----Generated at Sun Aug 24 05:34:01 2025 by rpki-client