$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UmQ6kN0dLZkPgVzTEYb-ajqfeAE.roa File: UmQ6kN0dLZkPgVzTEYb-ajqfeAE.roa (raw, json) Hash identifier: 6ibOgSxMDhPCpvMyLDIfxZgaQKkUops61GjnwMV2W2w= Subject key identifier: 52:64:3A:90:DD:1D:2D:99:0F:81:5C:D3:11:86:FE:6A:3A:9F:78:01 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3959 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UmQ6kN0dLZkPgVzTEYb-ajqfeAE.roa Signing time: Fri 22 Aug 2025 08:46:13 +0000 ROA not before: Fri 22 Aug 2025 08:46:13 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 118.233.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14681 (0x3959) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:13 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=52643A90DD1D2D990F815CD31186FE6A3A9F7801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:26:a5:6a:e2:ce:02:d8:9f:17:fd:0d:5a:fd: 56:f3:83:d2:f4:bb:b8:9a:24:27:5d:74:01:b9:c9: cf:0b:1c:70:6f:45:bd:28:b8:36:d3:0d:f9:c2:6a: c8:9f:68:2d:1f:e3:44:fb:34:b9:1b:c2:a2:3d:e0: e1:15:48:31:8e:2a:15:e8:85:d7:51:2b:e3:bc:5b: 45:97:0b:3e:e8:4e:da:81:03:1e:e2:c5:27:0d:ec: 75:c3:28:e0:a4:82:12:43:91:d5:a9:6d:08:9d:81: bc:b3:a0:ad:52:33:ee:6d:de:07:23:a4:64:05:1d: 7b:58:6d:14:4b:9d:1d:e1:06:f7:93:b4:e2:56:49: 09:73:af:55:e1:49:3c:4d:a5:57:4c:c1:21:d1:7f: c5:b9:4f:17:e0:36:a0:a0:ea:b6:88:b0:8c:a9:ff: 5c:b6:19:a4:25:76:76:f4:a6:b1:8f:f8:3e:03:49: bc:64:15:25:92:bc:7f:1d:f4:5f:e7:45:1e:73:b3: fd:f1:05:e7:da:9e:04:d9:4f:9b:84:3b:e9:d5:72: fe:91:f7:72:06:4a:dc:0b:71:fc:a4:e7:5d:3f:3e: e1:00:d2:6b:63:a0:9a:ce:5d:68:ee:d3:48:4f:a3: e6:54:2a:d7:20:74:b7:50:f2:2a:33:01:18:ac:65: 15:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:64:3A:90:DD:1D:2D:99:0F:81:5C:D3:11:86:FE:6A:3A:9F:78:01 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UmQ6kN0dLZkPgVzTEYb-ajqfeAE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.119.0/24 Signature Algorithm: sha256WithRSAEncryption a0:0c:4e:14:fa:69:e5:6d:44:49:4a:2a:10:d6:7b:af:aa:d2: 56:96:a5:f7:8d:e4:f5:2d:45:24:86:46:73:51:d1:71:93:fb: 93:ec:88:2f:e3:40:c3:ed:fb:bb:a4:99:05:d0:9f:eb:30:90: f4:5d:b2:ae:e8:f7:af:8e:7b:dd:a6:2c:d8:da:d7:33:1e:9f: dc:c0:80:3a:c3:98:fc:fb:1d:7f:bb:04:05:b9:32:a7:b1:16: 4a:a3:14:a4:fc:d9:23:1d:ab:5f:64:e5:51:00:20:94:c6:47: cd:67:83:74:a9:2d:1e:ad:4b:74:82:76:a9:f6:13:95:9f:0c: 31:44:89:fb:de:6c:d9:6e:11:1f:17:e5:cf:60:50:02:c4:68: 1b:34:59:ca:f4:77:0c:9a:f2:9b:04:66:94:ce:74:06:44:fa: aa:b6:fa:cd:71:01:3c:37:f9:19:68:29:19:61:2f:d2:05:99: 68:c0:29:62:1b:d2:0b:23:13:72:48:87:27:d0:b5:14:55:79: a6:78:34:4a:27:1d:ad:23:2d:28:ec:a6:40:ac:bc:a9:6e:87: 39:9c:d1:f6:cb:9f:bd:91:6a:24:53:71:8f:6d:29:6e:ec:7c: 80:94:1e:a4:42:70:d8:3b:ce:73:f1:14:2b:82:1b:c3:42:b5: d0:11:3c:b8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOVkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2MTNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDUyNjQzQTkwREQxRDJE OTkwRjgxNUNEMzExODZGRTZBM0E5Rjc4MDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD1JqVq4s4C2J8X/Q1a/Vbzg9L0u7iaJCdddAG5yc8LHHBvRb0o uDbTDfnCasifaC0f40T7NLkbwqI94OEVSDGOKhXohddRK+O8W0WXCz7oTtqBAx7i xScN7HXDKOCkghJDkdWpbQidgbyzoK1SM+5t3gcjpGQFHXtYbRRLnR3hBveTtOJW SQlzr1XhSTxNpVdMwSHRf8W5TxfgNqCg6raIsIyp/1y2GaQldnb0prGP+D4DSbxk FSWSvH8d9F/nRR5zs/3xBefangTZT5uEO+nVcv6R93IGStwLcfyk510/PuEA0mtj oJrOXWju00hPo+ZUKtcgdLdQ8iozARisZRVzAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUUmQ6kN0dLZkPgVzTEYb+ajqfeAEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1VtUTZrTjBkTFprUGdWelRF WWItYWpxZmVBRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB2 6XcwDQYJKoZIhvcNAQELBQADggEBAKAMThT6aeVtRElKKhDWe6+q0laWpfeN5PUt RSSGRnNR0XGT+5PsiC/jQMPt+7ukmQXQn+swkPRdsq7o96+Oe92mLNja1zMen9zA gDrDmPz7HX+7BAW5MqexFkqjFKT82SMdq19k5VEAIJTGR81ng3SpLR6tS3SCdqn2 E5WfDDFEifvebNluER8X5c9gUALEaBs0Wcr0dwya8psEZpTOdAZE+qq2+s1xATw3 +RloKRlhL9IFmWjAKWIb0gsjE3JIhyfQtRRVeaZ4NEonHa0jLSjspkCsvKluhzmc 0fbLn72RaiRTcY9tKW7sfICUHqRCcNg7znPxFCuCG8NCtdARPLg= -----END CERTIFICATE-----Generated at Sun Aug 24 07:26:35 2025 by rpki-client