$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Vw-g6zaNFevSpf7vZHMMN7TZ3qM.roa File: Vw-g6zaNFevSpf7vZHMMN7TZ3qM.roa (raw, json) Hash identifier: fHRH3FQapK+1tnqc205m+c0EcANgqQDQqY6Hg44aaqM= Subject key identifier: 57:0F:A0:EB:36:8D:15:EB:D2:A5:FE:EF:64:73:0C:37:B4:D9:DE:A3 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 38DF Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Vw-g6zaNFevSpf7vZHMMN7TZ3qM.roa Signing time: Fri 22 Aug 2025 08:45:43 +0000 ROA not before: Fri 22 Aug 2025 08:45:43 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 106.1.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14559 (0x38df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:43 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=570FA0EB368D15EBD2A5FEEF64730C37B4D9DEA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:aa:b8:45:3f:9e:b5:02:1b:26:42:88:e9:a9: 1d:57:ba:59:6a:63:c6:1f:c4:43:ca:6e:27:71:be: 61:36:2e:57:cf:11:36:95:3c:96:5a:7d:13:26:80: 5e:f1:f2:b3:cb:d3:5b:24:c4:50:5e:d0:e0:b8:d0: 07:3a:13:73:09:55:75:d2:64:1b:c2:a3:91:c6:cf: 9b:f4:c2:22:57:cc:a3:da:6c:54:31:2b:bf:a7:a5: 42:39:f7:be:69:c9:b5:91:17:b0:ce:bd:96:1b:af: c1:ed:0c:d4:7f:24:03:ad:2f:ad:5f:0b:b4:46:37: 13:4d:d6:55:f4:2f:9f:f5:1a:b7:17:ad:1b:f8:5b: 01:32:e1:d8:8f:21:eb:cb:c2:0c:ad:f1:5e:eb:24: 7d:3b:00:d9:c5:e3:c3:49:95:a7:e0:72:d7:a1:1c: d2:4f:d5:36:be:49:ca:09:9f:07:5d:07:f5:0a:68: 88:be:bd:c5:10:3b:09:63:6d:14:c4:54:29:34:56: 3b:ec:bd:cb:52:d6:9c:ab:bc:6a:d7:b3:79:19:69: bb:a6:b5:3e:cf:ce:35:b2:e1:56:73:f2:d3:35:f8: 33:59:de:5d:50:e9:da:47:a8:c1:2f:2d:65:96:f2: f6:06:68:31:70:b6:b6:70:e6:a5:8a:59:81:48:1b: 7e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:0F:A0:EB:36:8D:15:EB:D2:A5:FE:EF:64:73:0C:37:B4:D9:DE:A3 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Vw-g6zaNFevSpf7vZHMMN7TZ3qM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.216.0/22 Signature Algorithm: sha256WithRSAEncryption 94:10:4e:88:b7:7d:b0:0b:09:ab:7d:3c:77:2a:40:55:2d:a9: 7e:e0:07:62:92:f5:da:88:28:71:ec:d5:ae:d2:9c:1f:34:e6: 90:3c:6c:b7:58:d4:d6:5e:7b:92:3d:61:38:7e:a9:18:ef:07: bd:f9:36:9e:69:15:f4:05:7e:3e:82:84:88:59:de:73:99:bc: 27:69:e1:83:2f:96:e8:b3:04:24:6d:2c:33:e9:3e:f8:66:57: e8:c5:ee:53:5d:c5:4f:38:1a:93:b6:42:92:d4:d3:63:de:18: 8c:f0:4d:63:04:62:d9:6d:93:8f:fd:97:91:8c:75:03:40:23: 73:3f:a2:b5:6b:a5:8c:00:ff:df:d5:2c:3f:e5:28:44:bf:70: 94:51:02:75:18:0c:97:c7:59:53:eb:7d:0f:90:4f:0d:b7:6d: af:13:e4:4a:c0:79:5d:e9:7e:cf:65:ee:2d:92:c4:73:59:3c: 4d:d4:7b:6a:67:62:df:1b:bb:34:9b:4f:cd:27:65:af:17:94: ef:8a:6c:8a:af:e8:d9:99:32:89:4d:58:ad:98:0b:2e:19:2f: 90:e5:8f:bf:ef:1e:08:87:72:67:aa:3b:68:5f:7e:fd:6f:36: 3b:33:2d:0e:1b:ea:a4:33:26:38:4f:a4:54:88:37:c2:18:a6: ce:e1:fd:a3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICON8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1NDNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDU3MEZBMEVCMzY4RDE1 RUJEMkE1RkVFRjY0NzMwQzM3QjREOURFQTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrqrhFP561AhsmQojpqR1XullqY8YfxEPKbidxvmE2LlfPETaV PJZafRMmgF7x8rPL01skxFBe0OC40Ac6E3MJVXXSZBvCo5HGz5v0wiJXzKPabFQx K7+npUI5975pybWRF7DOvZYbr8HtDNR/JAOtL61fC7RGNxNN1lX0L5/1GrcXrRv4 WwEy4diPIevLwgyt8V7rJH07ANnF48NJlafgctehHNJP1Ta+ScoJnwddB/UKaIi+ vcUQOwljbRTEVCk0VjvsvctS1pyrvGrXs3kZabumtT7PzjWy4VZz8tM1+DNZ3l1Q 6dpHqMEvLWWW8vYGaDFwtrZw5qWKWYFIG36FAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUVw+g6zaNFevSpf7vZHMMN7TZ3qMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1Z3LWc2emFORmV2U3BmN3Za SE1NTjdUWjNxTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq AdgwDQYJKoZIhvcNAQELBQADggEBAJQQToi3fbALCat9PHcqQFUtqX7gB2KS9dqI KHHs1a7SnB805pA8bLdY1NZee5I9YTh+qRjvB735Np5pFfQFfj6ChIhZ3nOZvCdp 4YMvluizBCRtLDPpPvhmV+jF7lNdxU84GpO2QpLU02PeGIzwTWMEYtltk4/9l5GM dQNAI3M/orVrpYwA/9/VLD/lKES/cJRRAnUYDJfHWVPrfQ+QTw23ba8T5ErAeV3p fs9l7i2SxHNZPE3Ue2pnYt8buzSbT80nZa8XlO+KbIqv6NmZMolNWK2YCy4ZL5Dl j7/vHgiHcmeqO2hffv1vNjszLQ4b6qQzJjhPpFSIN8IYps7h/aM= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:58 2025 by rpki-client