$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VZ3aEwfMFPRzO9HiGnzI_PueHEk.roa File: VZ3aEwfMFPRzO9HiGnzI_PueHEk.roa (raw, json) Hash identifier: MjtVNRxJUKdHv3BhGV1ZCqBGAcw9O7MA3/GLCfuflYw= Subject key identifier: 55:9D:DA:13:07:CC:14:F4:73:3B:D1:E2:1A:7C:C8:FC:FB:9E:1C:49 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3878 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VZ3aEwfMFPRzO9HiGnzI_PueHEk.roa Signing time: Fri 22 Aug 2025 08:45:19 +0000 ROA not before: Fri 22 Aug 2025 08:45:19 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 106.1.110.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14456 (0x3878) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:19 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=559DDA1307CC14F4733BD1E21A7CC8FCFB9E1C49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1c:d6:9f:6b:68:b1:85:50:d1:c1:c6:d3:47: 6d:63:2e:5e:e5:3b:b5:93:5a:87:cb:95:6c:1d:41: 6e:7d:2e:ec:c2:e7:4d:25:73:f9:7d:07:ed:31:96: 01:ea:1a:59:da:42:9f:f4:18:02:61:6e:4b:b3:72: 27:76:08:bf:93:a4:9a:4d:e9:7b:bf:81:f5:b3:ee: 4b:3e:2b:a1:71:f2:c8:4f:c9:f8:4b:a0:bf:23:da: 2d:4d:d6:4d:24:6b:43:49:1c:92:36:5f:09:45:f8: d8:1f:af:dc:2b:07:f0:24:f8:dd:77:67:39:23:6d: 1b:b6:44:6f:d6:4d:77:67:82:ba:fb:fa:c8:6f:9d: 4e:5e:f7:8f:8d:28:5d:4f:be:bc:1f:58:b3:bc:3f: 4b:2a:59:d4:91:7a:6e:b7:93:f9:bc:f0:e5:c1:1b: f3:ae:00:9c:b2:93:80:12:ea:b6:bc:74:2b:f5:f3: 5a:0e:34:42:bb:0a:b9:25:ae:8e:ee:78:82:4b:85: 4c:60:17:e8:6e:4a:18:e7:bb:8d:40:a8:7a:56:7a: 59:46:da:b7:a0:d8:c0:30:c4:22:12:b6:9a:4f:2d: 80:95:dc:6e:7a:32:24:37:ae:8d:71:20:ac:67:62: b9:fe:dd:bc:02:cd:f5:b0:ab:e9:3f:9b:79:29:b0: 1e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:9D:DA:13:07:CC:14:F4:73:3B:D1:E2:1A:7C:C8:FC:FB:9E:1C:49 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VZ3aEwfMFPRzO9HiGnzI_PueHEk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.110.0/23 Signature Algorithm: sha256WithRSAEncryption 99:9c:98:21:7a:4d:91:4e:99:28:cf:6e:fd:45:a1:84:d1:db: 62:cf:cc:1d:47:8b:be:ed:f3:95:a7:d3:b2:3e:df:69:0f:81: 6a:cc:be:f7:dc:64:4e:92:04:15:e7:34:51:6f:a8:9e:92:b1: f4:8a:29:b3:8f:90:10:d5:95:ed:57:fa:20:97:3e:72:c4:28: 2b:14:97:fc:d5:a4:a7:a0:e4:7e:96:4b:8f:27:1d:11:a2:7c: d0:e4:e1:9c:a0:9a:2d:b3:99:e1:83:45:ae:4f:6c:7d:05:b1: 9a:c0:62:79:16:c4:44:7c:d1:60:c4:af:43:6c:d2:83:ad:40: ab:9a:8a:94:a9:1c:c0:2b:6e:75:f5:60:dc:da:10:ef:ab:96: de:32:9c:d7:21:95:75:bb:5a:72:91:31:a0:e4:5c:e5:6a:3e: ef:87:f6:ed:20:18:2c:16:52:aa:06:f8:36:75:34:21:95:8c: 7d:d1:67:5a:f4:f2:be:b0:8b:f8:d2:84:1e:f3:82:69:65:ea: 6b:ba:19:7f:6b:3b:52:f7:3c:f8:bb:45:cb:40:1c:a1:60:3c: e8:2a:4e:cb:ba:a5:6a:15:69:51:4c:11:0a:a7:aa:04:41:1e: c1:8c:8c:66:c4:dc:aa:66:86:9a:3a:f2:af:02:d7:bc:51:35: 2a:82:a8:9e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOHgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1MTlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDU1OUREQTEzMDdDQzE0 RjQ3MzNCRDFFMjFBN0NDOEZDRkI5RTFDNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0HNafa2ixhVDRwcbTR21jLl7lO7WTWofLlWwdQW59LuzC500l c/l9B+0xlgHqGlnaQp/0GAJhbkuzcid2CL+TpJpN6Xu/gfWz7ks+K6Fx8shPyfhL oL8j2i1N1k0ka0NJHJI2XwlF+Ngfr9wrB/Ak+N13ZzkjbRu2RG/WTXdngrr7+shv nU5e94+NKF1PvrwfWLO8P0sqWdSRem63k/m88OXBG/OuAJyyk4AS6ra8dCv181oO NEK7Crklro7ueIJLhUxgF+huShjnu41AqHpWellG2reg2MAwxCIStppPLYCV3G56 MiQ3ro1xIKxnYrn+3bwCzfWwq+k/m3kpsB6ZAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUVZ3aEwfMFPRzO9HiGnzI/PueHEkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1ZaM2FFd2ZNRlBSek85SGlH bnpJX1B1ZUhFay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFq AW4wDQYJKoZIhvcNAQELBQADggEBAJmcmCF6TZFOmSjPbv1FoYTR22LPzB1Hi77t 85Wn07I+32kPgWrMvvfcZE6SBBXnNFFvqJ6SsfSKKbOPkBDVle1X+iCXPnLEKCsU l/zVpKeg5H6WS48nHRGifNDk4Zygmi2zmeGDRa5PbH0FsZrAYnkWxER80WDEr0Ns 0oOtQKuaipSpHMArbnX1YNzaEO+rlt4ynNchlXW7WnKRMaDkXOVqPu+H9u0gGCwW UqoG+DZ1NCGVjH3RZ1r08r6wi/jShB7zgmll6mu6GX9rO1L3PPi7RctAHKFgPOgq Tsu6pWoVaVFMEQqnqgRBHsGMjGbE3Kpmhpo68q8C17xRNSqCqJ4= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:52 2025 by rpki-client