$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WG1YgnzzdyYrsXJRh_OBC09dVGE.roa File: WG1YgnzzdyYrsXJRh_OBC09dVGE.roa (raw, json) Hash identifier: Mte3i97sfdnYmoPxFbc0JQBCbQtyy5JmuOZkjr5fU0c= Subject key identifier: 58:6D:58:82:7C:F3:77:26:2B:B1:72:51:87:F3:81:0B:4F:5D:54:61 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 38ED Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WG1YgnzzdyYrsXJRh_OBC09dVGE.roa Signing time: Fri 22 Aug 2025 08:45:46 +0000 ROA not before: Fri 22 Aug 2025 08:45:46 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9924 IP address blocks: 118.233.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14573 (0x38ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:46 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=586D58827CF377262BB1725187F3810B4F5D5461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:51:df:8d:fa:6b:6e:d9:d4:97:94:a7:d5:5b: 43:e5:d0:fd:18:1c:25:23:4b:4e:78:25:1a:39:35: 73:32:a1:05:84:24:ca:33:2c:4b:8f:77:c2:3e:86: fa:61:d9:0d:a3:0c:ed:21:19:2f:f7:48:e9:81:5e: 96:3f:4e:52:96:d2:68:05:26:b5:98:4d:89:58:81: 05:3f:99:f9:0f:17:b7:68:1d:ea:21:a5:dd:22:c0: 85:9d:e7:cf:be:f3:b4:7b:dd:e4:db:27:22:f6:d3: 36:b8:9c:aa:c4:d5:72:97:9b:04:6a:ae:2c:95:27: 5f:53:e8:8c:55:83:53:88:c1:3a:2b:f6:f6:63:d4: c6:d7:b3:0f:1c:3e:32:f6:4e:e6:0d:b0:58:5c:ec: a7:e5:d8:cf:7b:d4:1f:d8:a2:9d:70:3d:ee:4f:9b: 29:d2:76:0c:5d:6f:a1:0c:db:a0:af:8e:41:b6:56: 65:56:73:c6:67:44:66:98:46:55:9d:75:63:e5:01: 59:eb:40:53:ac:4f:6a:4e:22:be:4b:81:0e:9c:27: 70:5e:c9:a6:e1:65:34:e0:86:d7:09:7d:2f:01:52: 65:de:90:5c:b1:a8:80:87:89:a4:f9:37:ef:08:ff: 9b:ef:05:07:30:89:23:6d:ab:fe:ed:10:60:15:31: c3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:6D:58:82:7C:F3:77:26:2B:B1:72:51:87:F3:81:0B:4F:5D:54:61 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WG1YgnzzdyYrsXJRh_OBC09dVGE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.128.0/17 Signature Algorithm: sha256WithRSAEncryption 61:de:4e:c0:e5:0e:99:c5:63:ac:e0:23:11:3e:4d:6b:9c:b0: 9e:47:0a:08:d0:aa:53:f0:65:e7:00:16:2b:31:e5:0e:56:bd: 02:f3:2c:d6:dd:8c:95:17:9d:2c:62:4c:6c:99:ae:0d:e1:a7: 57:59:47:57:2e:f5:09:ef:a2:8e:15:4b:ff:72:51:67:7c:9b: 96:13:aa:ef:e5:73:b7:fd:0e:a2:01:e1:b5:b3:12:c8:e8:be: 00:c1:a9:09:95:a7:bb:6c:31:f1:e8:bb:0a:58:1f:ce:05:62: ea:4c:2d:0d:33:2f:f1:39:62:bd:48:9a:46:52:a1:58:55:a5: 72:c4:04:c9:6f:c6:12:f9:57:74:09:e1:0a:3b:9f:80:4c:7c: 1a:c5:02:12:7b:0f:80:ad:79:a3:7d:3a:9d:5d:7a:95:81:62: 3d:71:bb:78:3f:1b:e6:0a:19:00:ae:6a:f8:32:c6:3a:ed:4d: e8:19:86:d5:6a:ba:75:09:ed:fa:f9:0a:25:c0:c3:e2:c7:a8: d1:f4:6b:12:35:1e:e1:69:a9:75:1e:96:82:5b:55:eb:16:4b: 03:59:f1:d3:ec:2f:af:3f:24:a9:bd:c5:33:0d:ec:a5:e8:a7: bc:87:4e:f0:f9:73:5e:1d:27:ca:5e:05:2e:22:28:bd:49:81: 32:3a:f1:c4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOO0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1NDZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDU4NkQ1ODgyN0NGMzc3 MjYyQkIxNzI1MTg3RjM4MTBCNEY1RDU0NjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCjUd+N+mtu2dSXlKfVW0Pl0P0YHCUjS054JRo5NXMyoQWEJMoz LEuPd8I+hvph2Q2jDO0hGS/3SOmBXpY/TlKW0mgFJrWYTYlYgQU/mfkPF7doHeoh pd0iwIWd58++87R73eTbJyL20za4nKrE1XKXmwRqriyVJ19T6IxVg1OIwTor9vZj 1MbXsw8cPjL2TuYNsFhc7Kfl2M971B/Yop1wPe5PmynSdgxdb6EM26CvjkG2VmVW c8ZnRGaYRlWddWPlAVnrQFOsT2pOIr5LgQ6cJ3BeyabhZTTghtcJfS8BUmXekFyx qICHiaT5N+8I/5vvBQcwiSNtq/7tEGAVMcNjAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUWG1YgnzzdyYrsXJRh/OBC09dVGEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1dHMVlnbnp6ZHlZcnNYSlJo X09CQzA5ZFZHRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAd2 6YAwDQYJKoZIhvcNAQELBQADggEBAGHeTsDlDpnFY6zgIxE+TWucsJ5HCgjQqlPw ZecAFisx5Q5WvQLzLNbdjJUXnSxiTGyZrg3hp1dZR1cu9Qnvoo4VS/9yUWd8m5YT qu/lc7f9DqIB4bWzEsjovgDBqQmVp7tsMfHouwpYH84FYupMLQ0zL/E5Yr1ImkZS oVhVpXLEBMlvxhL5V3QJ4Qo7n4BMfBrFAhJ7D4CteaN9Op1depWBYj1xu3g/G+YK GQCuavgyxjrtTegZhtVqunUJ7fr5CiXAw+LHqNH0axI1HuFpqXUeloJbVesWSwNZ 8dPsL68/JKm9xTMN7KXop7yHTvD5c14dJ8peBS4iKL1JgTI68cQ= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:21 2025 by rpki-client