$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WsvpLClD2PkHin1qkg1CilOECLE.roa File: WsvpLClD2PkHin1qkg1CilOECLE.roa (raw, json) Hash identifier: 3QEykxD5zxY0RN1ctPNSt3gQhtu7dx8T0xzPY5Mhorg= Subject key identifier: 5A:CB:E9:2C:29:43:D8:F9:07:8A:7D:6A:92:0D:42:8A:53:84:08:B1 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 393F Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WsvpLClD2PkHin1qkg1CilOECLE.roa Signing time: Fri 22 Aug 2025 08:46:06 +0000 ROA not before: Fri 22 Aug 2025 08:46:06 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.192.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14655 (0x393f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:06 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=5ACBE92C2943D8F9078A7D6A920D428A538408B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:06:00:83:4b:23:4a:5c:a9:a3:7e:7e:15:a2: 0a:ff:a9:5e:4a:5c:25:5d:1f:cb:6b:38:2d:2e:d0: 85:cd:89:20:68:fd:8f:7b:e5:14:f3:ce:60:47:31: 78:bf:1f:b8:b2:af:16:ec:7a:1e:e7:1f:3e:6a:a0: d6:d1:32:c8:57:3a:48:31:15:e5:ce:50:16:a3:dc: 43:5d:cc:15:57:57:e7:2d:aa:ba:e0:94:37:11:09: 5b:60:7a:3a:23:9e:37:95:41:70:74:08:23:91:89: 3d:b8:32:dd:2d:2b:87:a1:b0:3e:cf:66:b2:49:c9: 2b:22:f7:27:04:1a:fc:f7:45:8e:0b:89:6e:f0:08: 9a:1a:43:4f:a3:8f:8e:67:bf:c6:8c:98:6d:4b:9f: ad:ef:3c:9c:74:5b:ee:df:ee:1a:b9:44:83:e7:7a: 37:4e:92:6a:2d:08:3d:fa:7c:1c:a8:0c:52:3e:89: d0:56:3a:40:e8:e1:1b:3c:44:af:10:ff:24:88:b4: c9:15:5b:00:71:ec:67:5c:c3:11:4c:cf:94:f0:e4: 6c:8e:b9:03:d1:58:f6:76:a4:dd:33:b6:ec:72:fe: c2:2c:d9:c9:dd:81:80:02:50:c0:63:29:bb:46:bb: 66:a7:00:4d:22:89:a9:7d:1d:9b:af:d6:85:2d:1a: c2:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:CB:E9:2C:29:43:D8:F9:07:8A:7D:6A:92:0D:42:8A:53:84:08:B1 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WsvpLClD2PkHin1qkg1CilOECLE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.224.0/22 Signature Algorithm: sha256WithRSAEncryption 0c:85:c7:bb:34:34:48:05:23:87:21:95:1a:97:a6:12:29:f9: ef:01:86:f6:a7:9a:43:27:7f:ca:1c:28:35:0a:aa:c0:9b:4c: 0a:fd:c6:e4:0f:08:0f:c0:48:52:95:ec:96:a8:da:39:af:61: 92:8e:94:e1:86:e2:ba:ca:5b:5c:de:6c:a2:02:c7:2a:84:56: 0d:2a:19:eb:37:39:cd:6a:ab:b9:57:b5:61:d4:5f:2b:70:a0: 1c:53:3c:86:ff:d4:e0:ec:21:fd:41:7d:7d:7e:e7:0e:23:e6: fe:ae:b3:11:6e:1c:74:6a:f5:a5:ce:2d:e1:b2:17:73:68:73: c3:00:d5:ad:7f:f8:dd:28:3b:b1:05:b9:d3:1a:7a:ae:73:a4: a2:c9:12:da:9b:ee:43:3b:d2:a8:f9:b0:96:03:dc:28:e4:32: ac:95:9a:87:2d:26:cf:f2:b6:44:14:0f:02:85:35:4b:f1:85: 90:df:13:d3:cd:ec:e3:79:c6:f5:aa:8f:af:da:7c:fb:3e:2b: b7:81:5f:36:9d:ca:f3:61:5c:eb:a0:bb:23:c8:b2:d6:33:25: e2:45:5d:e6:48:d8:ae:7e:5d:bb:54:18:54:c8:8f:d0:54:72: ef:a6:07:f2:57:04:c6:18:02:d5:5a:06:db:c4:bf:0f:bd:a7: 62:f3:2d:b8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOT8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2MDZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDVBQ0JFOTJDMjk0M0Q4 RjkwNzhBN0Q2QTkyMEQ0MjhBNTM4NDA4QjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEBgCDSyNKXKmjfn4Vogr/qV5KXCVdH8trOC0u0IXNiSBo/Y97 5RTzzmBHMXi/H7iyrxbseh7nHz5qoNbRMshXOkgxFeXOUBaj3ENdzBVXV+ctqrrg lDcRCVtgejojnjeVQXB0CCORiT24Mt0tK4ehsD7PZrJJySsi9ycEGvz3RY4LiW7w CJoaQ0+jj45nv8aMmG1Ln63vPJx0W+7f7hq5RIPnejdOkmotCD36fByoDFI+idBW OkDo4Rs8RK8Q/ySItMkVWwBx7GdcwxFMz5Tw5GyOuQPRWPZ2pN0ztuxy/sIs2cnd gYACUMBjKbtGu2anAE0iial9HZuv1oUtGsKTAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUWsvpLClD2PkHin1qkg1CilOECLEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1dzdnBMQ2xEMlBrSGluMXFr ZzFDaWxPRUNMRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wOAwDQYJKoZIhvcNAQELBQADggEBAAyFx7s0NEgFI4chlRqXphIp+e8BhvanmkMn f8ocKDUKqsCbTAr9xuQPCA/ASFKV7Jao2jmvYZKOlOGG4rrKW1zebKICxyqEVg0q Ges3Oc1qq7lXtWHUXytwoBxTPIb/1ODsIf1BfX1+5w4j5v6usxFuHHRq9aXOLeGy F3Noc8MA1a1/+N0oO7EFudMaeq5zpKLJEtqb7kM70qj5sJYD3CjkMqyVmoctJs/y tkQUDwKFNUvxhZDfE9PN7ON5xvWqj6/afPs+K7eBXzadyvNhXOuguyPIstYzJeJF XeZI2K5+XbtUGFTIj9BUcu+mB/JXBMYYAtVaBtvEvw+9p2LzLbg= -----END CERTIFICATE-----Generated at Sun Aug 24 07:28:25 2025 by rpki-client