$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UuxNcJwTjPvbXg7VQHx1aXFZgxY.roa File: UuxNcJwTjPvbXg7VQHx1aXFZgxY.roa (raw, json) Hash identifier: 4xK656cafKSxG1mmug+WcauU4cuMZBqFCV5m3Q1yF0E= Subject key identifier: 52:EC:4D:70:9C:13:8C:FB:DB:5E:0E:D5:40:7C:75:69:71:59:83:16 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 38A9 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UuxNcJwTjPvbXg7VQHx1aXFZgxY.roa Signing time: Fri 22 Aug 2025 08:45:30 +0000 ROA not before: Fri 22 Aug 2025 08:45:30 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.192.88.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14505 (0x38a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:30 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=52EC4D709C138CFBDB5E0ED5407C756971598316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ea:de:22:10:c0:e9:74:1e:06:8c:12:a6:2e: 1c:97:76:7d:c5:15:ef:17:8f:dc:a8:14:1e:3d:1e: e3:e6:e4:99:9a:7e:29:3c:44:a0:75:3a:8c:3d:ee: 77:b9:be:31:24:9d:61:58:9a:7b:c2:50:9a:ad:86: bc:b4:d4:a7:10:d4:7d:3f:f3:d1:a2:e3:19:5c:80: df:04:9b:67:1f:54:5b:48:7d:e4:70:d8:04:53:3d: 55:b2:92:61:4f:9a:2c:98:f3:89:cc:69:03:0b:c0: 29:29:0c:e2:29:58:03:77:8a:6f:92:c2:02:dd:67: df:a4:6f:f3:4c:a3:ff:ad:d2:62:df:de:4d:dc:d2: a5:e3:41:66:71:28:6a:1b:ee:0c:41:a6:25:db:cf: c5:4d:be:f8:fc:31:d9:ef:af:41:c1:aa:37:b5:3f: 0f:5e:46:82:49:d2:9b:65:5a:78:83:30:6f:52:18: 66:d4:3b:d3:0b:37:7f:76:bc:31:c4:7c:fd:4a:cf: 77:bc:a7:83:f8:0f:94:2b:54:aa:ff:10:5d:fa:ff: 8f:21:51:33:52:0f:77:83:be:76:7c:5d:a0:74:90: a7:b0:70:b5:8a:bf:07:c6:32:d8:01:af:1a:6f:d8: 62:c0:c5:6b:f2:ee:f5:5d:0c:f6:21:4f:73:1a:ae: 0e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:EC:4D:70:9C:13:8C:FB:DB:5E:0E:D5:40:7C:75:69:71:59:83:16 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UuxNcJwTjPvbXg7VQHx1aXFZgxY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.88.0/21 Signature Algorithm: sha256WithRSAEncryption a4:a5:e3:23:7b:43:7d:5a:f5:74:6b:1b:38:40:1d:00:02:b5: e0:e0:23:dd:69:77:a8:fe:79:cb:13:b4:e7:e2:cb:40:9e:1e: 28:8f:8a:86:a2:44:8f:cc:00:f9:1d:c5:6a:fc:dd:67:33:45: b4:5d:94:e5:d1:35:7e:58:d7:94:ae:47:ec:01:8c:ca:8a:0a: 29:b2:cf:3a:ae:cb:76:01:5c:ae:fe:a2:79:fe:2f:ac:9f:b2: da:5c:f3:f8:07:9b:58:f1:21:20:28:de:7b:67:b6:9d:4b:3b: 8f:25:c6:db:48:b4:59:6f:03:a8:55:69:41:7d:9e:ad:4c:3a: df:88:86:4e:7e:ef:79:5a:cc:af:28:29:dc:19:06:63:76:16: f7:1a:1c:33:c2:5b:80:d2:59:21:9d:9c:3a:7f:37:b3:8c:2b: a2:40:ab:11:4d:8d:00:ec:c3:7b:22:1b:6f:9a:8d:02:70:85: 8c:bc:73:20:e6:68:d8:bd:c9:81:47:a0:3a:8c:75:29:a0:9f: 5c:08:4f:72:8e:eb:67:12:2d:92:71:9d:34:26:e6:00:5e:61: db:44:bf:68:4e:ec:bd:19:de:20:cb:5e:21:66:88:62:0e:b8: 8d:cd:10:1f:1c:6a:f5:71:41:f1:ca:b7:4b:e3:43:cd:f0:9c: 37:c2:6a:6f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOKkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1MzBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDUyRUM0RDcwOUMxMzhD RkJEQjVFMEVENTQwN0M3NTY5NzE1OTgzMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCX6t4iEMDpdB4GjBKmLhyXdn3FFe8Xj9yoFB49HuPm5Jmafik8 RKB1Oow97ne5vjEknWFYmnvCUJqthry01KcQ1H0/89Gi4xlcgN8Em2cfVFtIfeRw 2ARTPVWykmFPmiyY84nMaQMLwCkpDOIpWAN3im+SwgLdZ9+kb/NMo/+t0mLf3k3c 0qXjQWZxKGob7gxBpiXbz8VNvvj8Mdnvr0HBqje1Pw9eRoJJ0ptlWniDMG9SGGbU O9MLN392vDHEfP1Kz3e8p4P4D5QrVKr/EF36/48hUTNSD3eDvnZ8XaB0kKewcLWK vwfGMtgBrxpv2GLAxWvy7vVdDPYhT3Marg6fAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUUuxNcJwTjPvbXg7VQHx1aXFZgxYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1V1eE5jSndUalB2YlhnN1ZR SHgxYVhGWmd4WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wFgwDQYJKoZIhvcNAQELBQADggEBAKSl4yN7Q31a9XRrGzhAHQACteDgI91pd6j+ ecsTtOfiy0CeHiiPioaiRI/MAPkdxWr83WczRbRdlOXRNX5Y15SuR+wBjMqKCimy zzquy3YBXK7+onn+L6yfstpc8/gHm1jxISAo3ntntp1LO48lxttItFlvA6hVaUF9 nq1MOt+Ihk5+73lazK8oKdwZBmN2FvcaHDPCW4DSWSGdnDp/N7OMK6JAqxFNjQDs w3siG2+ajQJwhYy8cyDmaNi9yYFHoDqMdSmgn1wIT3KO62cSLZJxnTQm5gBeYdtE v2hO7L0Z3iDLXiFmiGIOuI3NEB8cavVxQfHKt0vjQ83wnDfCam8= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:15 2025 by rpki-client