$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WcRwwfmVAqh32sDfo-XMnHdJug8.roa File: WcRwwfmVAqh32sDfo-XMnHdJug8.roa (raw, json) Hash identifier: pJc5ySFp03z9qfom4v/6JmgLOyISwydzEz3Hp4EpfgY= Subject key identifier: 59:C4:70:C1:F9:95:02:A8:77:DA:C0:DF:A3:E5:CC:9C:77:49:BA:0F Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3833 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WcRwwfmVAqh32sDfo-XMnHdJug8.roa Signing time: Fri 22 Aug 2025 08:45:03 +0000 ROA not before: Fri 22 Aug 2025 08:45:03 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.194.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14387 (0x3833) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:03 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=59C470C1F99502A877DAC0DFA3E5CC9C7749BA0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6c:66:d7:22:d9:e6:3b:90:63:ab:dd:c9:46: 65:07:b9:36:cb:e7:b1:a5:c3:cd:cc:9d:7e:6a:6e: 85:ec:63:17:c4:28:7b:ad:6d:c5:8c:eb:2f:a4:fd: 99:dc:ca:4a:b3:0a:8a:6f:1d:94:d1:75:30:59:76: 1a:cb:f5:8c:8e:db:61:a7:97:61:95:d9:a6:08:36: 42:92:d9:76:37:62:b2:44:03:f2:9d:77:4a:a4:91: d3:bb:b5:68:b3:bd:5f:84:bb:c1:37:99:54:70:61: 14:c3:f8:55:65:7b:10:7d:9a:7f:76:bc:9f:df:87: d8:50:dc:72:2b:e7:15:2c:84:3c:4b:10:54:29:38: 52:cf:b1:63:d3:e4:a8:f4:fc:6c:22:1a:a3:8a:9a: a7:c7:5b:58:c6:b7:74:21:df:5a:bc:6f:9f:34:6b: 2e:25:10:2f:5d:80:d7:68:d1:a7:cb:3c:cb:d6:96: ce:84:d4:0a:83:4f:b0:f4:47:f1:4b:92:1a:74:ea: 39:a1:3c:5c:cd:5b:22:7b:22:93:ec:f4:c1:3f:3a: 38:a9:0b:b3:ca:6d:ab:0b:7a:dd:5f:5b:02:70:b4: 81:f5:7f:a1:10:38:3b:fc:fa:e1:da:53:6c:bb:35: 69:2b:a3:58:de:19:ba:d1:b8:db:53:98:59:d8:a2: 37:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:C4:70:C1:F9:95:02:A8:77:DA:C0:DF:A3:E5:CC:9C:77:49:BA:0F X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WcRwwfmVAqh32sDfo-XMnHdJug8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.144.0/22 Signature Algorithm: sha256WithRSAEncryption 21:ed:a9:29:e3:7b:00:bd:0c:ca:1d:1b:75:a6:84:aa:cf:d8: 89:1c:90:c8:66:c0:d0:bc:67:8f:33:17:0e:0d:d7:a8:00:d5: 9a:d6:85:de:ae:06:ff:88:d4:b6:30:35:05:09:1e:03:a4:a2: 1d:33:b7:44:f7:7c:e0:49:3c:cd:15:9a:d1:10:ce:8f:ae:d5: aa:c1:c3:f8:2c:0f:8a:b7:2c:66:7c:76:cd:c6:e4:70:f3:45: cc:00:cf:18:08:a3:e2:a0:c4:e6:11:8b:26:c1:23:5b:fd:df: 84:19:cd:5c:c0:f3:bc:e3:37:4b:5a:87:f3:a7:d2:8e:3f:b3: 3d:1a:94:67:b7:43:53:b7:67:5d:fb:ee:28:ee:97:5a:3f:47: c9:51:d3:5e:3b:9c:7d:f8:31:a8:0f:03:a3:4a:65:83:e2:e4: 5f:4e:f3:20:10:1f:8a:d0:1b:66:9d:a0:53:59:3e:ce:9b:e5: f2:18:65:bc:b6:f6:a3:30:eb:2a:61:df:f7:8f:c9:93:e9:eb: 75:2e:29:78:3f:e6:c8:b4:b7:5e:db:e7:9a:1f:a8:c2:82:ee: 4b:6b:0e:b8:34:70:27:be:c0:c2:82:58:1d:db:f0:4e:12:97: 29:41:63:34:a3:ac:59:a6:bb:c0:21:3d:fd:7e:80:ae:3e:b6: 97:e7:68:a8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICODMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1MDNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDU5QzQ3MEMxRjk5NTAy QTg3N0RBQzBERkEzRTVDQzlDNzc0OUJBMEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKbGbXItnmO5Bjq93JRmUHuTbL57Glw83MnX5qboXsYxfEKHut bcWM6y+k/ZncykqzCopvHZTRdTBZdhrL9YyO22Gnl2GV2aYINkKS2XY3YrJEA/Kd d0qkkdO7tWizvV+Eu8E3mVRwYRTD+FVlexB9mn92vJ/fh9hQ3HIr5xUshDxLEFQp OFLPsWPT5Kj0/GwiGqOKmqfHW1jGt3Qh31q8b580ay4lEC9dgNdo0afLPMvWls6E 1AqDT7D0R/FLkhp06jmhPFzNWyJ7IpPs9ME/OjipC7PKbasLet1fWwJwtIH1f6EQ ODv8+uHaU2y7NWkro1jeGbrRuNtTmFnYojdtAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUWcRwwfmVAqh32sDfo+XMnHdJug8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1djUnd3Zm1WQXFoMzJzRGZv LVhNbkhkSnVnOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wpAwDQYJKoZIhvcNAQELBQADggEBACHtqSnjewC9DModG3WmhKrP2IkckMhmwNC8 Z48zFw4N16gA1ZrWhd6uBv+I1LYwNQUJHgOkoh0zt0T3fOBJPM0VmtEQzo+u1arB w/gsD4q3LGZ8ds3G5HDzRcwAzxgIo+KgxOYRiybBI1v934QZzVzA87zjN0tah/On 0o4/sz0alGe3Q1O3Z1377ijul1o/R8lR0147nH34MagPA6NKZYPi5F9O8yAQH4rQ G2adoFNZPs6b5fIYZby29qMw6yph3/ePyZPp63UuKXg/5si0t17b55ofqMKC7ktr Drg0cCe+wMKCWB3b8E4SlylBYzSjrFmmu8AhPf1+gK4+tpfnaKg= -----END CERTIFICATE-----Generated at Sun Aug 24 07:32:00 2025 by rpki-client