$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WVkaMiu8NIgK-iAn1hN9YKwejrw.roa File: WVkaMiu8NIgK-iAn1hN9YKwejrw.roa (raw, json) Hash identifier: McVmxIiXS2sBnEJ41s+uxtzDWqU4an8tbYQtRKRxn1c= Subject key identifier: 59:59:1A:32:2B:BC:34:88:0A:FA:20:27:D6:13:7D:60:AC:1E:8E:BC Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 38DD Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WVkaMiu8NIgK-iAn1hN9YKwejrw.roa Signing time: Fri 22 Aug 2025 08:45:43 +0000 ROA not before: Fri 22 Aug 2025 08:45:43 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9924 IP address blocks: 123.195.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14557 (0x38dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:43 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=59591A322BBC34880AFA2027D6137D60AC1E8EBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:83:c4:0c:3b:5d:4e:2f:f8:ab:57:c9:0d:87: 53:70:51:ff:6c:3d:6c:6c:7c:27:3f:43:39:1a:c8: ea:30:4e:34:58:78:03:0c:fe:b6:41:c8:3f:e8:ae: 3c:a9:2a:93:b1:90:43:f4:94:5e:ea:69:b3:16:b0: d5:3b:e1:2f:c0:d1:01:f7:a4:57:94:56:f9:ec:a3: 0f:b3:34:c8:d1:9b:9e:0b:36:84:41:0f:32:73:01: 25:ef:0b:c1:6b:84:ec:0d:46:fc:da:f7:0c:7c:eb: 92:72:06:35:0b:14:9f:a5:3b:ac:b9:c3:66:60:a4: d7:5a:a0:4b:a1:3b:c5:23:57:55:b0:fd:d6:45:0a: 62:0f:36:91:03:db:7e:b4:c3:03:41:b6:9b:9f:d4: 83:d2:3f:b5:05:ce:12:3b:be:01:e6:6b:e6:e9:aa: 6d:51:6b:22:e7:80:8b:b6:93:00:ba:fd:a4:b0:b6: 6f:96:78:43:a3:65:43:64:17:0c:09:19:ec:ef:a2: 8b:93:21:b7:ab:a0:1a:82:54:22:50:27:90:12:20: d1:ae:cd:4b:e0:97:de:7d:9f:ba:2a:fb:ef:47:4c: 59:73:31:a6:42:65:34:0d:09:b5:ae:b4:77:2f:61: d0:72:7b:54:97:55:e6:b8:4c:a6:71:02:e5:72:4a: ad:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:59:1A:32:2B:BC:34:88:0A:FA:20:27:D6:13:7D:60:AC:1E:8E:BC X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WVkaMiu8NIgK-iAn1hN9YKwejrw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.224.0/21 Signature Algorithm: sha256WithRSAEncryption 08:30:65:6b:2c:f7:ef:57:54:aa:ab:07:ce:46:7d:81:0b:5e: f9:cf:25:d3:09:02:c4:4f:b6:98:40:56:33:70:a9:30:a3:25: c8:a7:37:f4:a7:68:24:b2:7f:a2:0e:e7:b5:9b:b6:c1:1e:3c: 5d:e0:80:c2:b1:4c:1c:19:33:73:ca:71:66:a7:23:b0:1e:b0: ed:6c:1f:31:e2:58:1b:37:0e:e9:7d:68:67:4b:2d:77:33:5f: 12:28:aa:c8:c9:68:eb:52:80:fe:44:9f:d0:c7:40:04:8e:6a: be:42:ce:a5:f4:8e:62:ee:c8:82:0c:b0:ed:55:17:9d:31:4f: 38:67:14:28:a7:0d:38:ee:2a:59:bf:f5:5e:c1:75:a4:f0:ef: 60:cc:1a:29:e5:ed:bc:06:45:8c:d6:d8:25:4d:fc:f0:c8:95: 27:0f:63:2b:57:38:5c:7e:98:91:7e:81:88:e1:09:68:42:8e: 2e:0c:77:35:e8:72:e3:de:3d:f1:ec:97:33:bb:b9:a0:ba:e9: 18:0a:e0:f4:f1:72:35:39:11:b8:f1:5f:07:93:1e:dd:25:e7: 7f:f8:ff:8a:f2:f2:6f:32:18:59:6a:e6:65:7e:54:40:c9:36: f2:cb:5b:9d:d6:0b:cf:96:c0:51:9c:28:0e:01:3b:58:89:85: 81:94:fe:b2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICON0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1NDNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDU5NTkxQTMyMkJCQzM0 ODgwQUZBMjAyN0Q2MTM3RDYwQUMxRThFQkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAg8QMO11OL/irV8kNh1NwUf9sPWxsfCc/QzkayOowTjRYeAMM /rZByD/orjypKpOxkEP0lF7qabMWsNU74S/A0QH3pFeUVvnsow+zNMjRm54LNoRB DzJzASXvC8FrhOwNRvza9wx865JyBjULFJ+lO6y5w2ZgpNdaoEuhO8UjV1Ww/dZF CmIPNpED2360wwNBtpuf1IPSP7UFzhI7vgHma+bpqm1RayLngIu2kwC6/aSwtm+W eEOjZUNkFwwJGezvoouTIberoBqCVCJQJ5ASINGuzUvgl959n7oq++9HTFlzMaZC ZTQNCbWutHcvYdBye1SXVea4TKZxAuVySq3rAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUWVkaMiu8NIgK+iAn1hN9YKwejrwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1dWa2FNaXU4TklnSy1pQW4x aE45WUt3ZWpydy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 w+AwDQYJKoZIhvcNAQELBQADggEBAAgwZWss9+9XVKqrB85GfYELXvnPJdMJAsRP tphAVjNwqTCjJcinN/SnaCSyf6IO57WbtsEePF3ggMKxTBwZM3PKcWanI7AesO1s HzHiWBs3Dul9aGdLLXczXxIoqsjJaOtSgP5En9DHQASOar5CzqX0jmLuyIIMsO1V F50xTzhnFCinDTjuKlm/9V7BdaTw72DMGinl7bwGRYzW2CVN/PDIlScPYytXOFx+ mJF+gYjhCWhCji4MdzXocuPePfHslzO7uaC66RgK4PTxcjU5EbjxXweTHt0l53/4 /4ry8m8yGFlq5mV+VEDJNvLLW53WC8+WwFGcKA4BO1iJhYGU/rI= -----END CERTIFICATE-----Generated at Sun Aug 24 07:25:26 2025 by rpki-client