$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TnC3DME5pBKBR16oi1dN4Oz8J_4.roa File: TnC3DME5pBKBR16oi1dN4Oz8J_4.roa (raw, json) Hash identifier: HOwlh25pRrZ26xH/Ze7q8Y1ym8Km9Q1wkQmeUj/wN8s= Subject key identifier: 4E:70:B7:0C:C1:39:A4:12:81:47:5E:A8:8B:57:4D:E0:EC:FC:27:FE Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 385D Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TnC3DME5pBKBR16oi1dN4Oz8J_4.roa Signing time: Fri 22 Aug 2025 08:45:13 +0000 ROA not before: Fri 22 Aug 2025 08:45:13 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9924 IP address blocks: 123.194.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14429 (0x385d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:13 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=4E70B70CC139A41281475EA88B574DE0ECFC27FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:4e:c1:a3:3f:76:f1:95:a9:cc:b7:c6:53:c6: 7c:5f:a8:64:7c:78:ba:76:1e:44:7c:82:36:dd:e5: 07:9a:b0:46:8b:d2:7b:76:ec:43:cc:c3:b7:1b:1f: 04:7f:97:95:d5:98:7a:2d:4f:11:4f:16:ee:04:dd: 79:46:29:51:b1:0a:29:ce:c6:55:a1:83:c1:46:97: 8f:0d:c0:73:99:8f:ef:81:de:72:89:ee:bc:f6:6c: f2:1b:ad:b3:16:02:2c:dd:3c:32:0a:a6:55:e3:fd: a5:9f:e3:88:2d:b3:4b:d8:e0:f7:c7:45:e2:36:bd: 03:4b:c9:85:ae:ea:f3:c6:f7:da:78:bb:d5:88:9d: 0a:3f:a6:c5:01:45:ec:c0:11:cb:4c:58:76:fb:c8: d6:d2:3e:ca:16:25:51:d9:2f:f7:80:24:1f:89:9b: 35:14:0b:cf:58:d6:52:1d:ee:aa:31:d6:50:d4:90: 0d:c1:0e:21:c2:b5:01:3b:9f:0f:be:11:5c:4e:83: 49:f0:c1:89:43:3f:35:aa:3d:4f:b5:b2:d2:58:c3: f4:01:e9:17:bb:04:66:73:ca:6c:4c:e9:ae:ac:c6: d3:9e:0d:c0:ac:9b:12:9d:62:b0:f0:c4:16:69:0a: 24:52:41:b1:91:4f:81:24:80:64:ca:02:9a:de:b1: fc:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:70:B7:0C:C1:39:A4:12:81:47:5E:A8:8B:57:4D:E0:EC:FC:27:FE X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TnC3DME5pBKBR16oi1dN4Oz8J_4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.204.0/23 Signature Algorithm: sha256WithRSAEncryption 97:56:93:56:35:62:cf:e2:a5:92:0c:21:59:ff:49:4e:ca:3f: ee:bc:55:f4:67:bc:4e:a7:c4:7a:2f:95:b9:33:f1:e7:24:cd: f6:a5:1e:c5:bd:0a:7f:9c:23:15:08:65:eb:ed:b8:45:cc:e0: ce:67:81:c2:22:81:40:39:f8:85:41:33:fc:00:d7:7d:14:f5: 96:57:4b:3b:f3:ee:89:a7:84:e2:62:aa:a6:33:17:63:69:aa: f3:02:82:b6:e6:7e:7b:19:04:2b:9b:7f:03:b5:b7:4f:08:c2: 0b:32:58:6f:82:a0:ed:32:2f:10:91:82:7e:8e:28:81:44:22: ae:24:5b:e4:9d:01:01:4f:26:ce:62:d4:c4:37:2b:a1:23:99: 45:47:9c:31:e1:b1:38:36:af:b8:65:96:e0:24:96:ea:93:33: 4a:e5:cc:fa:ee:7f:a4:97:3f:3b:ea:81:e8:7b:e7:48:ce:3f: c4:02:6e:ce:14:e4:6a:bb:cc:a0:04:df:cf:ca:47:0b:fe:a8: f6:a2:39:f4:fa:1b:08:b4:ba:11:2b:91:02:ff:d1:55:d2:08: d1:07:e0:d6:c5:57:15:6a:88:a9:e8:3d:fc:53:74:fe:6c:29: 2d:fb:0b:28:98:ab:bf:52:75:b7:67:0d:70:b1:37:cf:58:dd: bd:58:f8:ba -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOF0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1MTNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDRFNzBCNzBDQzEzOUE0 MTI4MTQ3NUVBODhCNTc0REUwRUNGQzI3RkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDpTsGjP3bxlanMt8ZTxnxfqGR8eLp2HkR8gjbd5QeasEaL0nt2 7EPMw7cbHwR/l5XVmHotTxFPFu4E3XlGKVGxCinOxlWhg8FGl48NwHOZj++B3nKJ 7rz2bPIbrbMWAizdPDIKplXj/aWf44gts0vY4PfHReI2vQNLyYWu6vPG99p4u9WI nQo/psUBRezAEctMWHb7yNbSPsoWJVHZL/eAJB+JmzUUC89Y1lId7qox1lDUkA3B DiHCtQE7nw++EVxOg0nwwYlDPzWqPU+1stJYw/QB6Re7BGZzymxM6a6sxtOeDcCs mxKdYrDwxBZpCiRSQbGRT4EkgGTKApresfzLAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUTnC3DME5pBKBR16oi1dN4Oz8J/4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1RuQzNETUU1cEJLQlIxNm9p MWRONE96OEpfNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF7 wswwDQYJKoZIhvcNAQELBQADggEBAJdWk1Y1Ys/ipZIMIVn/SU7KP+68VfRnvE6n xHovlbkz8eckzfalHsW9Cn+cIxUIZevtuEXM4M5ngcIigUA5+IVBM/wA130U9ZZX Szvz7omnhOJiqqYzF2NpqvMCgrbmfnsZBCubfwO1t08IwgsyWG+CoO0yLxCRgn6O KIFEIq4kW+SdAQFPJs5i1MQ3K6EjmUVHnDHhsTg2r7hlluAkluqTM0rlzPruf6SX Pzvqgeh750jOP8QCbs4U5Gq7zKAE38/KRwv+qPaiOfT6Gwi0uhErkQL/0VXSCNEH 4NbFVxVqiKnoPfxTdP5sKS37CyiYq79SdbdnDXCxN89Y3b1Y+Lo= -----END CERTIFICATE-----Generated at Sun Aug 24 07:30:59 2025 by rpki-client