$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Uo8Jpgn1itkVU_S20cL2J11GSq4.roa File: Uo8Jpgn1itkVU_S20cL2J11GSq4.roa (raw, json) Hash identifier: /AQmIwMsvsUj5rbsMVx3o0h51jDOvfW/5oFEzoO7bSY= Subject key identifier: 52:8F:09:A6:09:F5:8A:D9:15:53:F4:B6:D1:C2:F6:27:5D:46:4A:AE Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 37FD Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Uo8Jpgn1itkVU_S20cL2J11GSq4.roa Signing time: Fri 22 Aug 2025 08:44:51 +0000 ROA not before: Fri 22 Aug 2025 08:44:51 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.195.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14333 (0x37fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:44:51 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=528F09A609F58AD91553F4B6D1C2F6275D464AAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:08:5a:33:e0:3c:6f:f1:3f:db:89:0a:2a:9c: 97:ad:7b:1d:6e:73:ed:aa:ed:0c:f7:de:5f:76:44: 18:a5:ad:c8:00:6a:cf:13:81:59:0f:a6:a4:2a:65: cc:bc:13:44:4e:72:8c:a4:1c:e0:1d:18:7b:45:c6: 7b:1b:bd:db:1f:39:1d:56:c9:db:e2:3d:72:9e:81: ca:06:a3:47:42:de:ed:0d:85:13:ba:76:56:7e:3d: 9c:c7:03:50:18:e6:c2:4a:ef:1b:35:c4:59:77:a3: 97:be:f7:ce:cf:7b:87:3e:1b:7c:36:05:eb:cd:92: f7:fc:ae:cd:f2:78:9f:ce:5c:4d:01:2c:09:51:23: c4:1c:ec:b7:5e:6d:52:20:1e:eb:e2:28:4d:8e:28: ac:b1:e1:6b:a8:c9:13:74:e3:01:ca:39:38:27:c7: 82:f5:c0:92:c0:5d:4e:10:49:ac:d3:67:f8:a6:66: 26:1f:50:91:e5:b0:1b:56:69:7c:ed:1f:98:16:55: 26:7f:7a:b4:cb:3b:dc:78:97:0d:1d:c2:68:ac:c6: 09:b5:be:af:f7:74:18:33:d7:95:36:52:db:9e:97: db:1d:8b:f3:bd:06:1e:16:a7:9c:aa:9e:40:be:c1: 1b:e8:3e:da:e7:ca:48:fe:fb:19:25:d5:6b:85:4e: 4c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:8F:09:A6:09:F5:8A:D9:15:53:F4:B6:D1:C2:F6:27:5D:46:4A:AE X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Uo8Jpgn1itkVU_S20cL2J11GSq4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.149.0/24 Signature Algorithm: sha256WithRSAEncryption 43:55:03:b4:30:7c:02:2c:19:d1:be:b9:67:c3:07:24:91:19: a4:7b:91:f9:3a:81:66:6d:5e:db:6c:9f:be:fe:e7:80:5e:22: 53:1a:95:25:2b:ed:2c:14:6b:93:43:39:ef:69:83:04:4b:d9: a6:af:b9:8f:af:a1:a7:47:91:b6:47:74:a0:24:c9:b7:6d:0b: 40:c2:0b:c4:3a:4d:0e:0b:b4:0c:40:1d:88:87:ca:fb:80:fa: 10:7d:ce:81:42:34:72:54:6e:46:78:29:14:a3:f1:eb:f7:0f: b7:85:9e:1b:d5:26:76:0c:ca:e3:51:96:92:44:a9:88:7a:3c: d9:c6:13:2c:55:3f:0c:01:c2:7f:01:ae:d7:7a:f9:45:e1:c0: d2:96:8e:f6:5f:f9:f9:d8:f0:8e:98:25:ee:6e:e8:ec:d4:ff: 34:f9:c0:3e:c2:20:e8:f4:5f:ac:c3:7d:28:ba:fd:5b:20:f9: 4f:7b:4c:7e:25:0d:b1:f0:8f:4f:7d:2e:4b:b0:72:69:68:ab: c0:8d:0f:a5:f9:d3:35:50:84:6d:98:32:08:74:9a:f2:cc:a1: ce:9f:62:f6:1a:c5:f0:62:0a:72:fc:f1:4c:ed:69:6c:62:dc: ef:b6:44:31:25:ba:5e:29:96:08:c6:0e:de:67:d6:6d:30:15: cf:ee:5a:1f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICN/0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ0NTFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDUyOEYwOUE2MDlGNThB RDkxNTUzRjRCNkQxQzJGNjI3NUQ0NjRBQUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCdCFoz4Dxv8T/biQoqnJetex1uc+2q7Qz33l92RBilrcgAas8T gVkPpqQqZcy8E0ROcoykHOAdGHtFxnsbvdsfOR1WydviPXKegcoGo0dC3u0NhRO6 dlZ+PZzHA1AY5sJK7xs1xFl3o5e+987Pe4c+G3w2BevNkvf8rs3yeJ/OXE0BLAlR I8Qc7LdebVIgHuviKE2OKKyx4WuoyRN04wHKOTgnx4L1wJLAXU4QSazTZ/imZiYf UJHlsBtWaXztH5gWVSZ/erTLO9x4lw0dwmisxgm1vq/3dBgz15U2Utuel9sdi/O9 Bh4Wp5yqnkC+wRvoPtrnykj++xkl1WuFTkw5AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUUo8Jpgn1itkVU/S20cL2J11GSq4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1VvOEpwZ24xaXRrVlVfUzIw Y0wySjExR1NxNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7 w5UwDQYJKoZIhvcNAQELBQADggEBAENVA7QwfAIsGdG+uWfDBySRGaR7kfk6gWZt Xttsn77+54BeIlMalSUr7SwUa5NDOe9pgwRL2aavuY+voadHkbZHdKAkybdtC0DC C8Q6TQ4LtAxAHYiHyvuA+hB9zoFCNHJUbkZ4KRSj8ev3D7eFnhvVJnYMyuNRlpJE qYh6PNnGEyxVPwwBwn8Brtd6+UXhwNKWjvZf+fnY8I6YJe5u6OzU/zT5wD7CIOj0 X6zDfSi6/Vsg+U97TH4lDbHwj099Lkuwcmloq8CND6X50zVQhG2YMgh0mvLMoc6f YvYaxfBiCnL88UztaWxi3O+2RDElul4plgjGDt5n1m0wFc/uWh8= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:21 2025 by rpki-client