$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/W4h9b6IR0s4VVv6ygdVu2J2C-XM.roa File: W4h9b6IR0s4VVv6ygdVu2J2C-XM.roa (raw, json) Hash identifier: zA504gfsE5N9ZJp5UDVyMmmtA102Por3htt6woI4tXs= Subject key identifier: 5B:88:7D:6F:A2:11:D2:CE:15:56:FE:B2:81:D5:6E:D8:9D:82:F9:73 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3854 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/W4h9b6IR0s4VVv6ygdVu2J2C-XM.roa Signing time: Fri 22 Aug 2025 08:45:11 +0000 ROA not before: Fri 22 Aug 2025 08:45:11 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9924 IP address blocks: 123.193.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14420 (0x3854) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:11 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=5B887D6FA211D2CE1556FEB281D56ED89D82F973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1e:3d:6d:fb:c0:ee:66:3c:1a:05:c0:8d:17: 19:db:46:12:61:ce:76:72:c9:e3:75:12:9c:58:0c: 4e:b7:63:1f:e0:a8:10:be:fe:32:d6:c4:7b:af:72: a4:a9:86:ce:44:c6:98:65:da:31:d2:19:c7:13:3e: 6e:13:06:31:9a:d7:89:df:48:95:1c:9e:da:be:ac: 9f:dc:58:5f:38:5d:4b:25:29:1b:f2:2f:94:e3:ff: 76:72:46:6c:c6:0a:27:d6:0c:75:d5:ad:95:41:0e: ba:b5:78:34:74:f5:a2:64:50:55:9f:b4:ff:3e:d5: d7:f6:e3:06:a7:f4:39:8a:b2:e3:d3:f2:d6:67:c5: 5c:4f:b6:8f:85:d3:b8:33:cf:af:20:b1:88:0f:78: 46:58:99:08:ee:80:aa:3c:a1:d9:80:88:da:6c:11: 15:30:7c:51:8e:e3:84:c7:6c:bd:be:bf:ac:04:92: 45:12:d2:58:a3:f1:ce:56:ff:fe:6c:9d:f5:2d:c9: e9:02:19:fc:d9:16:38:aa:a3:88:ec:6b:f1:69:48: ff:6d:37:85:08:8b:ae:6b:ff:ab:ff:2b:d6:53:68: 4c:4b:bb:2b:31:50:94:e7:06:5b:90:1e:50:ea:14: 1d:8b:31:1a:53:d3:f5:87:93:d0:7b:c6:aa:e1:40: 37:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:88:7D:6F:A2:11:D2:CE:15:56:FE:B2:81:D5:6E:D8:9D:82:F9:73 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/W4h9b6IR0s4VVv6ygdVu2J2C-XM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.64.0/19 Signature Algorithm: sha256WithRSAEncryption 2e:fa:30:62:f9:79:c3:9e:36:42:97:79:a7:eb:5f:2f:76:1d: 9d:39:2e:f3:e8:36:2c:d3:ef:7e:2c:a7:00:61:f7:86:23:15: 10:e8:f0:ed:3e:0e:2a:b2:33:c6:b5:78:b9:6b:c3:c1:b6:34: f9:ba:53:44:10:a2:90:19:e6:09:c7:9e:61:3d:33:d2:82:3d: 0c:8b:b3:75:b0:26:0e:02:dc:a0:97:fa:37:6a:16:88:df:d2: 38:f4:31:03:50:cc:ae:28:ab:0d:c4:90:1d:61:01:8a:58:8c: e1:15:dd:7c:4d:03:af:ec:e6:9d:89:31:55:bd:6c:a9:9a:c4: f1:6b:b2:38:ed:c7:4b:a6:1b:e4:aa:92:5e:17:63:0f:15:1a: 27:ee:d3:1b:f3:6a:6f:4b:96:81:8c:b2:0a:fb:63:4e:e3:f6: a8:cc:a2:62:96:ed:5c:3f:e2:de:db:99:04:7b:99:b2:b0:5f: c6:6b:65:0e:6c:a6:59:06:54:fe:e6:3e:91:ee:1f:cd:9c:29: 92:ae:d3:1d:1a:c5:73:47:5a:9a:23:bf:d3:c4:d5:99:38:f6: 08:89:02:98:bf:fd:fb:95:48:3a:c2:ee:c2:aa:19:6d:43:74: 98:fb:fb:a0:fc:0d:49:b3:9b:e3:b8:30:85:3e:fe:b8:52:99: 4b:a7:05:5e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOFQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1MTFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDVCODg3RDZGQTIxMUQy Q0UxNTU2RkVCMjgxRDU2RUQ4OUQ4MkY5NzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCmHj1t+8DuZjwaBcCNFxnbRhJhznZyyeN1EpxYDE63Yx/gqBC+ /jLWxHuvcqSphs5Exphl2jHSGccTPm4TBjGa14nfSJUcntq+rJ/cWF84XUslKRvy L5Tj/3ZyRmzGCifWDHXVrZVBDrq1eDR09aJkUFWftP8+1df24wan9DmKsuPT8tZn xVxPto+F07gzz68gsYgPeEZYmQjugKo8odmAiNpsERUwfFGO44THbL2+v6wEkkUS 0lij8c5W//5snfUtyekCGfzZFjiqo4jsa/FpSP9tN4UIi65r/6v/K9ZTaExLuysx UJTnBluQHlDqFB2LMRpT0/WHk9B7xqrhQDfVAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUW4h9b6IR0s4VVv6ygdVu2J2C+XMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1c0aDliNklSMHM0VlZ2Nnln ZFZ1MkoyQy1YTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV7 wUAwDQYJKoZIhvcNAQELBQADggEBAC76MGL5ecOeNkKXeafrXy92HZ05LvPoNizT 734spwBh94YjFRDo8O0+DiqyM8a1eLlrw8G2NPm6U0QQopAZ5gnHnmE9M9KCPQyL s3WwJg4C3KCX+jdqFojf0jj0MQNQzK4oqw3EkB1hAYpYjOEV3XxNA6/s5p2JMVW9 bKmaxPFrsjjtx0umG+Sqkl4XYw8VGifu0xvzam9LloGMsgr7Y07j9qjMomKW7Vw/ 4t7bmQR7mbKwX8ZrZQ5splkGVP7mPpHuH82cKZKu0x0axXNHWpojv9PE1Zk49giJ Api//fuVSDrC7sKqGW1DdJj7+6D8DUmzm+O4MIU+/rhSmUunBV4= -----END CERTIFICATE-----Generated at Sun Aug 24 05:34:06 2025 by rpki-client