$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SsIW5LJzVRMk4eijfQLWBnXzWeY.roa File: SsIW5LJzVRMk4eijfQLWBnXzWeY.roa (raw, json) Hash identifier: ORzIDEv1PYSk1OVszA8YT8zdQooteS1R7NTUyna2yyw= Subject key identifier: 4A:C2:16:E4:B2:73:55:13:24:E1:E8:A3:7D:02:D6:06:75:F3:59:E6 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3A14 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SsIW5LJzVRMk4eijfQLWBnXzWeY.roa Signing time: Fri 22 Aug 2025 08:46:59 +0000 ROA not before: Fri 22 Aug 2025 08:46:59 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.193.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14868 (0x3a14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:59 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=4AC216E4B273551324E1E8A37D02D60675F359E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3a:8e:5f:b6:c1:00:56:18:38:3d:ac:2a:28: 89:d0:44:bf:f3:7d:67:a5:7e:05:69:62:37:57:17: 3c:d8:87:44:e3:a3:05:4f:dc:f9:22:62:3b:86:fa: c0:56:69:83:dc:9e:ee:f3:2a:89:ae:8d:21:d2:49: 66:e4:5b:07:81:4c:da:33:2e:a4:3d:56:db:2e:75: 4c:a1:37:c8:09:dc:06:57:60:c8:d7:bf:d7:fe:96: 7f:07:34:a0:6a:e5:e0:74:c4:9c:28:5a:9b:a5:b4: 66:84:d9:ce:89:4d:1d:a3:c1:2f:e6:6f:fe:cd:3b: 4d:03:44:b9:72:fb:9f:90:55:80:19:c8:af:63:6b: b2:2a:1b:ca:2e:fe:c3:e5:01:ae:94:a5:7d:cf:f0: 92:20:ab:28:51:09:cb:32:65:dd:aa:85:45:41:3e: f1:25:9a:ee:2a:46:70:34:b8:0d:9e:d9:65:28:76: d1:ec:24:21:ee:01:82:50:ba:27:d9:d6:77:34:66: 66:d2:39:13:aa:1e:05:d9:46:23:b3:f5:d6:0a:31: b7:b4:2f:9e:0f:52:5b:03:41:0c:cc:70:b8:53:23: 36:fd:64:5d:7f:49:99:91:83:50:e0:fa:2a:00:c3: 2f:49:ee:3c:bc:3d:75:f2:c7:dd:b7:a7:28:c4:54: 0e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:C2:16:E4:B2:73:55:13:24:E1:E8:A3:7D:02:D6:06:75:F3:59:E6 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SsIW5LJzVRMk4eijfQLWBnXzWeY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.44.0/22 Signature Algorithm: sha256WithRSAEncryption b1:78:0d:c4:75:7d:70:92:59:d4:85:86:cf:72:60:38:cb:cd: c1:36:7b:30:fa:08:c0:66:f1:6b:50:a0:79:36:44:b7:93:b3: 3c:ca:42:6d:fb:a6:2b:79:65:a2:89:bf:8c:36:d8:6e:77:38: c0:0c:4b:17:22:90:f5:a3:4d:1b:c6:2c:06:c2:cd:d3:62:c5: 3e:f1:b4:57:fe:2b:b1:4b:9f:37:07:22:89:09:c9:b6:ef:93: 4f:ee:b8:17:7b:3c:a9:23:33:8f:d7:e2:c4:09:d7:75:21:d1: 90:9d:3d:ea:53:f9:46:91:b7:cc:cc:66:42:6f:48:64:70:19: 03:34:2b:e2:00:38:6f:4b:dc:6e:76:65:66:ba:b8:80:79:55: 7d:89:da:b6:16:54:ed:5c:1d:d9:9c:1e:b4:38:ec:52:c0:45: f1:c5:bf:e0:13:64:ec:05:f3:3d:07:46:bb:61:2a:5c:bc:62: 8a:16:4e:06:c8:29:6c:55:ed:d1:9a:11:08:79:74:59:8b:d2: 06:68:55:65:82:30:8e:4e:7e:8f:2a:3c:a0:af:b7:86:67:21: 31:e0:ed:4e:0d:3c:e0:0f:04:60:2b:2a:59:db:dc:cf:ea:c7: c2:3c:b2:d1:41:46:ce:f2:3e:63:dc:14:1a:08:bb:df:db:9d: 11:c1:71:cb -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOhQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2NTlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDRBQzIxNkU0QjI3MzU1 MTMyNEUxRThBMzdEMDJENjA2NzVGMzU5RTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVOo5ftsEAVhg4PawqKInQRL/zfWelfgVpYjdXFzzYh0TjowVP 3PkiYjuG+sBWaYPcnu7zKomujSHSSWbkWweBTNozLqQ9VtsudUyhN8gJ3AZXYMjX v9f+ln8HNKBq5eB0xJwoWpultGaE2c6JTR2jwS/mb/7NO00DRLly+5+QVYAZyK9j a7IqG8ou/sPlAa6UpX3P8JIgqyhRCcsyZd2qhUVBPvElmu4qRnA0uA2e2WUodtHs JCHuAYJQuifZ1nc0ZmbSOROqHgXZRiOz9dYKMbe0L54PUlsDQQzMcLhTIzb9ZF1/ SZmRg1Dg+ioAwy9J7jy8PXXyx923pyjEVA5FAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUSsIW5LJzVRMk4eijfQLWBnXzWeYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1NzSVc1TEp6VlJNazRlaWpm UUxXQm5YeldlWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wSwwDQYJKoZIhvcNAQELBQADggEBALF4DcR1fXCSWdSFhs9yYDjLzcE2ezD6CMBm 8WtQoHk2RLeTszzKQm37pit5ZaKJv4w22G53OMAMSxcikPWjTRvGLAbCzdNixT7x tFf+K7FLnzcHIokJybbvk0/uuBd7PKkjM4/X4sQJ13Uh0ZCdPepT+UaRt8zMZkJv SGRwGQM0K+IAOG9L3G52ZWa6uIB5VX2J2rYWVO1cHdmcHrQ47FLARfHFv+ATZOwF 8z0HRrthKly8YooWTgbIKWxV7dGaEQh5dFmL0gZoVWWCMI5Ofo8qPKCvt4ZnITHg 7U4NPOAPBGArKlnb3M/qx8I8stFBRs7yPmPcFBoIu9/bnRHBccs= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:35 2025 by rpki-client