$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/X1ENa29aHX6X3PexEnt76aRAmlc.roa File: X1ENa29aHX6X3PexEnt76aRAmlc.roa (raw, json) Hash identifier: 8g8LgXruT9SDXZvmXVA+pZdD50h7YzFUzqpqfLiD/BI= Subject key identifier: 5F:51:0D:6B:6F:5A:1D:7E:97:DC:F7:B1:12:7B:7B:E9:A4:40:9A:57 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3B0A Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/X1ENa29aHX6X3PexEnt76aRAmlc.roa Signing time: Fri 22 Aug 2025 08:48:00 +0000 ROA not before: Fri 22 Aug 2025 08:48:00 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.195.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15114 (0x3b0a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:48:00 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=5F510D6B6F5A1D7E97DCF7B1127B7BE9A4409A57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:dd:80:56:24:3a:ad:8c:b6:32:b7:03:a5:68: 79:37:03:a2:a7:0e:22:32:28:17:6c:d7:1b:07:11: 8b:2c:21:a7:f1:fb:05:d0:f4:cb:3f:cd:70:d2:cc: 1f:65:f8:54:b4:07:f9:c5:ac:9d:2b:80:34:7b:bd: ef:2a:ae:86:48:c6:41:50:fb:ec:f6:51:9f:c7:5b: 5a:f4:40:03:bb:08:4f:50:b2:e0:12:44:2a:d0:96: de:8a:f4:d8:f8:66:83:7f:a8:ce:88:c4:27:e1:4c: d4:28:b4:e0:e8:0b:28:c5:eb:a6:0e:9e:f0:87:4d: 6d:aa:f8:a2:f5:78:73:61:7a:a8:a5:8e:87:a0:c7: b2:13:54:33:ab:10:08:2e:50:25:1d:39:ed:2a:f1: 3d:61:64:f8:17:f8:25:b6:07:89:46:d7:69:44:ad: cc:bf:fd:e7:85:f2:d7:ec:b5:8d:46:1f:4d:10:8a: 67:12:fa:a4:74:2f:7b:f5:ba:6f:54:8f:6e:55:ec: bd:41:09:40:e0:b1:33:71:3a:e9:52:03:f2:0e:a2: 82:26:f9:86:1b:d1:9a:d1:3e:c0:1a:05:ea:b1:2d: 61:9f:83:7d:6f:f1:18:8c:9d:b8:ff:ea:62:b3:73: 99:fe:9b:7b:18:95:7b:9a:e8:05:af:5b:9d:2e:92: 7c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:51:0D:6B:6F:5A:1D:7E:97:DC:F7:B1:12:7B:7B:E9:A4:40:9A:57 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/X1ENa29aHX6X3PexEnt76aRAmlc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.196.0/22 Signature Algorithm: sha256WithRSAEncryption 9e:d3:9c:e8:ae:c4:41:71:46:74:e8:f9:c7:07:61:b4:40:ab: a5:d1:20:ef:3f:ce:1b:34:dd:f1:1e:58:91:cc:a3:e9:c3:69: 84:b2:fe:bb:f4:f5:12:ae:07:84:ba:86:a3:5e:88:d1:18:5e: 85:4e:3b:2e:70:25:58:7e:94:08:ed:41:e4:d2:e4:77:ca:1f: 1f:b6:6f:0b:66:0b:04:88:4d:c8:bb:8e:76:b1:37:17:e4:3e: 3f:d0:08:ab:02:07:22:ab:3d:9a:f2:93:48:88:c0:75:e0:86: 5d:d6:0a:cc:fd:a1:aa:3b:03:29:66:f3:3e:54:3a:b8:bb:f2: 9f:41:3e:74:99:c5:12:96:7e:12:df:cc:88:a4:68:a0:91:d4: b1:e8:fc:94:23:12:eb:bd:49:0f:58:48:9f:d5:62:2a:9d:d8: 16:64:a0:6f:5a:86:07:d4:c4:95:0c:40:1e:ca:ca:f2:f9:22: 90:10:b7:5c:37:89:c5:20:cb:2a:2e:44:d0:d2:d0:7e:80:89: ea:f3:21:35:13:60:d5:bd:cf:32:fd:20:35:09:c5:63:1c:90: 93:f5:f3:2a:83:ee:a5:39:18:9f:d4:aa:b6:41:e4:cd:7d:c9: 96:54:76:08:4e:09:f9:9b:0a:0b:00:9b:bb:e7:79:9a:95:4d: 28:64:be:6d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOwowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ4MDBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDVGNTEwRDZCNkY1QTFE N0U5N0RDRjdCMTEyN0I3QkU5QTQ0MDlBNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZ3YBWJDqtjLYytwOlaHk3A6KnDiIyKBds1xsHEYssIafx+wXQ 9Ms/zXDSzB9l+FS0B/nFrJ0rgDR7ve8qroZIxkFQ++z2UZ/HW1r0QAO7CE9QsuAS RCrQlt6K9Nj4ZoN/qM6IxCfhTNQotODoCyjF66YOnvCHTW2q+KL1eHNheqiljoeg x7ITVDOrEAguUCUdOe0q8T1hZPgX+CW2B4lG12lErcy//eeF8tfstY1GH00QimcS +qR0L3v1um9Uj25V7L1BCUDgsTNxOulSA/IOooIm+YYb0ZrRPsAaBeqxLWGfg31v 8RiMnbj/6mKzc5n+m3sYlXua6AWvW50ukny7AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUX1ENa29aHX6X3PexEnt76aRAmlcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1gxRU5hMjlhSFg2WDNQZXhF bnQ3NmFSQW1sYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 w8QwDQYJKoZIhvcNAQELBQADggEBAJ7TnOiuxEFxRnTo+ccHYbRAq6XRIO8/zhs0 3fEeWJHMo+nDaYSy/rv09RKuB4S6hqNeiNEYXoVOOy5wJVh+lAjtQeTS5HfKHx+2 bwtmCwSITci7jnaxNxfkPj/QCKsCByKrPZryk0iIwHXghl3WCsz9oao7Aylm8z5U Ori78p9BPnSZxRKWfhLfzIikaKCR1LHo/JQjEuu9SQ9YSJ/VYiqd2BZkoG9ahgfU xJUMQB7KyvL5IpAQt1w3icUgyyouRNDS0H6AierzITUTYNW9zzL9IDUJxWMckJP1 8yqD7qU5GJ/UqrZB5M19yZZUdghOCfmbCgsAm7vneZqVTShkvm0= -----END CERTIFICATE-----Generated at Sun Aug 24 05:32:08 2025 by rpki-client