$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VqGAiDv6SIH63wWVW3Q6FpKWQqo.roa File: VqGAiDv6SIH63wWVW3Q6FpKWQqo.roa (raw, json) Hash identifier: ieeZFCpaqxFHjcIbhtX7N26EgtWn7KwAGgkssRPqQiU= Subject key identifier: 56:A1:80:88:3B:FA:48:81:FA:DF:05:95:5B:74:3A:16:92:96:42:AA Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 38AC Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VqGAiDv6SIH63wWVW3Q6FpKWQqo.roa Signing time: Fri 22 Aug 2025 08:45:31 +0000 ROA not before: Fri 22 Aug 2025 08:45:31 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 211.76.113.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14508 (0x38ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:31 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=56A180883BFA4881FADF05955B743A16929642AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cd:f8:d3:34:5f:9c:21:93:f7:0e:af:ec:f5: 24:ce:5d:16:03:29:eb:76:d5:eb:e3:8d:b9:01:65: 5d:05:0f:4a:85:05:f0:18:41:1a:55:8f:b2:c5:aa: 8b:90:76:0d:b9:d3:c9:39:66:a5:58:7d:06:db:06: 8a:12:38:ea:7f:03:b7:95:a9:60:34:59:2b:d6:ec: 15:19:0d:1c:19:7d:ee:f8:c2:f0:ed:82:8e:a8:42: 49:75:ea:a5:f9:ba:ab:39:4e:35:82:1c:c4:ec:59: df:fe:84:53:04:4d:25:93:95:ba:44:62:14:9e:87: 13:49:73:66:78:49:0c:6c:fb:90:ca:6c:56:8d:67: bb:0e:9e:47:8a:2f:93:dd:bc:23:bf:ad:a4:3a:3b: da:06:05:8a:0b:10:45:0c:c1:b6:9d:f5:31:19:51: bd:02:0b:eb:c1:df:1a:c8:a8:1b:e3:ff:31:3a:9f: fc:71:96:fc:57:dd:d7:7b:7c:45:05:98:da:04:0f: 35:fb:62:b2:a7:19:73:82:10:39:14:04:99:e3:f4: 73:c3:bc:0f:89:43:40:3a:9e:b1:0b:81:d4:38:30: 30:a5:6f:a5:f9:09:ad:40:2e:bd:e5:0d:fe:a7:fe: 87:6a:c3:fe:2b:5f:52:53:6d:10:8b:9f:c3:da:40: 48:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:A1:80:88:3B:FA:48:81:FA:DF:05:95:5B:74:3A:16:92:96:42:AA X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VqGAiDv6SIH63wWVW3Q6FpKWQqo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.113.128/25 Signature Algorithm: sha256WithRSAEncryption 37:da:3c:8c:b5:c6:19:c5:e8:cd:2c:cc:e6:88:ea:14:21:c6: 35:db:61:eb:47:b4:5f:40:3b:1d:f4:e6:77:be:b4:d5:7d:d8: 8b:0d:b0:1f:85:33:10:3d:7c:5f:b8:93:25:d1:70:97:83:3a: 0c:79:9e:01:96:8a:9d:84:3b:0d:05:13:99:eb:f5:8d:3c:66: 00:1d:da:3c:bc:23:93:d9:71:28:37:58:c7:52:7e:52:2f:c4: 92:65:4f:d6:ea:26:97:6a:ae:29:d6:d1:52:15:40:6a:cd:ec: 48:d2:b0:12:b3:45:54:81:68:b6:09:20:2c:ae:a9:2f:ed:5c: 4c:4c:d6:b5:4a:73:34:6a:fe:1c:66:9a:ca:de:1a:39:ce:67: 9d:96:80:fd:bb:40:09:12:e9:8a:a0:73:8c:62:86:f3:02:89: 5c:58:b9:57:f1:6a:0c:5e:86:22:78:c0:95:b2:d3:46:47:95: e7:56:8a:ae:1f:c7:f0:2c:14:57:a7:84:9c:3c:fa:ca:07:ba: d6:ef:50:d5:ea:5d:db:9b:2d:dd:c1:62:56:fa:7a:f3:58:e4: 8f:18:a5:7f:25:db:03:d4:bb:93:55:22:17:ff:bd:49:d1:46: 5a:1d:48:c0:d0:b2:52:ef:07:79:3a:b7:55:e1:6b:79:7f:ff: 37:80:8f:55 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICOKwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1MzFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDU2QTE4MDg4M0JGQTQ4 ODFGQURGMDU5NTVCNzQzQTE2OTI5NjQyQUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCizfjTNF+cIZP3Dq/s9STOXRYDKet21evjjbkBZV0FD0qFBfAY QRpVj7LFqouQdg2508k5ZqVYfQbbBooSOOp/A7eVqWA0WSvW7BUZDRwZfe74wvDt go6oQkl16qX5uqs5TjWCHMTsWd/+hFMETSWTlbpEYhSehxNJc2Z4SQxs+5DKbFaN Z7sOnkeKL5PdvCO/raQ6O9oGBYoLEEUMwbad9TEZUb0CC+vB3xrIqBvj/zE6n/xx lvxX3dd7fEUFmNoEDzX7YrKnGXOCEDkUBJnj9HPDvA+JQ0A6nrELgdQ4MDClb6X5 Ca1ALr3lDf6n/odqw/4rX1JTbRCLn8PaQEixAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUVqGAiDv6SIH63wWVW3Q6FpKWQqowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1ZxR0FpRHY2U0lINjN3V1ZX M1E2RnBLV1Fxby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQfT THGAMA0GCSqGSIb3DQEBCwUAA4IBAQA32jyMtcYZxejNLMzmiOoUIcY122HrR7Rf QDsd9OZ3vrTVfdiLDbAfhTMQPXxfuJMl0XCXgzoMeZ4BloqdhDsNBROZ6/WNPGYA Hdo8vCOT2XEoN1jHUn5SL8SSZU/W6iaXaq4p1tFSFUBqzexI0rASs0VUgWi2CSAs rqkv7VxMTNa1SnM0av4cZprK3ho5zmedloD9u0AJEumKoHOMYobzAolcWLlX8WoM XoYieMCVstNGR5XnVoquH8fwLBRXp4ScPPrKB7rW71DV6l3bmy3dwWJW+nrzWOSP GKV/JdsD1LuTVSIX/71J0UZaHUjA0LJS7wd5OrdV4Wt5f/83gI9V -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:24 2025 by rpki-client