$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/W7nzKtYuXazvawdwhBf1ALCAw2E.roa File: W7nzKtYuXazvawdwhBf1ALCAw2E.roa (raw, json) Hash identifier: 6EbXAfUqxSRvWT3K6AWW/e7wbjLSQnuu9vpj7z2q5Sk= Subject key identifier: 5B:B9:F3:2A:D6:2E:5D:AC:EF:6B:07:70:84:17:F5:00:B0:80:C3:61 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3979 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/W7nzKtYuXazvawdwhBf1ALCAw2E.roa Signing time: Fri 22 Aug 2025 08:46:20 +0000 ROA not before: Fri 22 Aug 2025 08:46:20 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.195.48.0/21 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14713 (0x3979) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:20 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=5BB9F32AD62E5DACEF6B07708417F500B080C361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a7:92:12:4b:e4:d6:98:cf:3a:b1:9a:cd:7d: 1b:56:55:41:96:64:3b:28:23:55:4e:b5:d3:d9:95: 82:a6:e5:f8:1f:30:b3:d9:bd:35:9f:f1:8f:e7:74: 6f:fc:ee:35:a9:1f:b5:b8:9e:7d:14:aa:ac:c5:48: da:74:bb:ca:89:9e:72:ee:53:ca:92:f4:1b:d6:05: 71:e7:e8:38:39:c0:77:e5:57:c4:de:9a:29:5a:83: 53:70:d9:20:96:7a:88:be:8f:1a:7f:26:2d:f0:3d: 37:00:ee:db:20:5d:aa:6b:fc:a9:91:6e:e1:d1:ce: 30:e3:7a:75:8f:ec:3f:22:8f:bf:26:c8:60:d4:fc: 7e:e8:67:71:6f:6a:1b:58:32:e0:57:ba:0e:ce:91: 6b:b3:df:99:74:27:e5:1d:4e:c1:73:59:07:69:a8: 15:3a:fd:6d:51:7f:21:ff:25:4e:7f:27:79:44:89: 24:3c:c5:ec:95:a5:0b:f4:eb:ca:a5:9c:af:03:f6: 1a:77:e7:12:b6:0c:b6:67:12:ba:5d:78:dc:e1:a7: 3e:da:80:20:5b:ad:0f:12:72:15:06:78:0e:1e:da: cd:f6:44:64:e3:5b:d6:30:35:63:f4:90:e6:f8:31: b1:c6:9e:25:db:68:dc:c0:04:eb:6a:23:e3:36:fe: d4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:B9:F3:2A:D6:2E:5D:AC:EF:6B:07:70:84:17:F5:00:B0:80:C3:61 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/W7nzKtYuXazvawdwhBf1ALCAw2E.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.48.0/21 Signature Algorithm: sha256WithRSAEncryption 53:17:e2:5e:77:54:ca:66:4f:f6:f8:35:5c:f5:b7:58:fe:2a: ed:be:73:5e:a6:f5:dc:82:be:ce:24:96:76:51:dd:1d:45:ea: fb:b4:67:7b:b2:18:27:5e:31:ac:f3:50:d0:9d:31:a9:8d:55: 91:b4:43:96:6e:35:7e:7a:12:6c:56:a8:c5:f6:93:95:5f:99: 7f:d7:cd:ae:ef:bc:7f:b3:8e:88:d9:8b:a6:bd:23:e7:79:d6: 1c:24:60:9b:c0:6d:6d:a1:d5:d3:d4:2b:68:0c:ca:aa:2f:ba: 54:62:97:63:f6:7e:7a:a5:dd:47:83:59:f3:dc:a9:5b:b3:51: d0:f6:01:c2:ae:29:cf:ee:58:80:ca:5d:f8:09:3e:06:b3:fb: c9:9f:c8:49:05:0b:d7:5a:04:94:31:f3:e5:ae:a8:82:a9:7e: 91:7e:a4:c4:f4:35:ed:bb:bc:cb:64:9b:14:6a:51:eb:9a:d9: 73:72:11:28:ff:ea:91:71:d5:5f:4f:94:f2:34:90:86:0c:f4: 2d:9c:80:cc:69:62:b4:2f:ae:8a:fa:e0:de:e4:16:26:46:9b: 81:9d:7d:81:14:e6:3c:3b:89:4e:14:a3:68:e9:4a:5c:06:9e: 31:af:88:a3:74:7c:00:7f:59:97:6a:bb:a8:9b:e8:e2:de:86: 9f:7a:26:6f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOXkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2MjBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDVCQjlGMzJBRDYyRTVE QUNFRjZCMDc3MDg0MTdGNTAwQjA4MEMzNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6p5ISS+TWmM86sZrNfRtWVUGWZDsoI1VOtdPZlYKm5fgfMLPZ vTWf8Y/ndG/87jWpH7W4nn0UqqzFSNp0u8qJnnLuU8qS9BvWBXHn6Dg5wHflV8Te milag1Nw2SCWeoi+jxp/Ji3wPTcA7tsgXapr/KmRbuHRzjDjenWP7D8ij78myGDU /H7oZ3FvahtYMuBXug7OkWuz35l0J+UdTsFzWQdpqBU6/W1RfyH/JU5/J3lEiSQ8 xeyVpQv068qlnK8D9hp35xK2DLZnErpdeNzhpz7agCBbrQ8SchUGeA4e2s32RGTj W9YwNWP0kOb4MbHGniXbaNzABOtqI+M2/tRZAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUW7nzKtYuXazvawdwhBf1ALCAw2EwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1c3bnpLdFl1WGF6dmF3ZHdo QmYxQUxDQXcyRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wzAwDQYJKoZIhvcNAQELBQADggEBAFMX4l53VMpmT/b4NVz1t1j+Ku2+c16m9dyC vs4klnZR3R1F6vu0Z3uyGCdeMazzUNCdMamNVZG0Q5ZuNX56EmxWqMX2k5VfmX/X za7vvH+zjojZi6a9I+d51hwkYJvAbW2h1dPUK2gMyqovulRil2P2fnql3UeDWfPc qVuzUdD2AcKuKc/uWIDKXfgJPgaz+8mfyEkFC9daBJQx8+WuqIKpfpF+pMT0Ne27 vMtkmxRqUeua2XNyESj/6pFx1V9PlPI0kIYM9C2cgMxpYrQvror64N7kFiZGm4Gd fYEU5jw7iU4Uo2jpSlwGnjGviKN0fAB/WZdqu6ib6OLehp96Jm8= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:19 2025 by rpki-client