$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/X8YHRmPIvZqbyLUsKwsgqzFYczM.roa File: X8YHRmPIvZqbyLUsKwsgqzFYczM.roa (raw, json) Hash identifier: iSTbBY04xoxJ+X5LXDNExmEyJ9IiBTVcLNmlGfbbFxk= Subject key identifier: 5F:C6:07:46:63:C8:BD:9A:9B:C8:B5:2C:2B:0B:20:AB:31:58:73:33 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 38B6 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/X8YHRmPIvZqbyLUsKwsgqzFYczM.roa Signing time: Fri 22 Aug 2025 08:45:33 +0000 ROA not before: Fri 22 Aug 2025 08:45:33 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.195.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14518 (0x38b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:33 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=5FC6074663C8BD9A9BC8B52C2B0B20AB31587333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:71:d3:ba:dc:1a:56:6f:1f:07:1c:cb:57:e1: ae:75:73:ce:00:89:0f:c2:0e:52:77:c4:72:04:69: 66:5e:9d:c3:a2:3e:e9:8f:a1:aa:a5:ac:45:bc:01: 9a:e9:c6:ea:03:c5:92:96:7f:b6:b7:fa:0d:d4:8e: 57:44:00:70:72:72:ac:66:e9:10:40:2c:7f:e1:76: 9b:f2:66:2b:da:61:e4:79:da:f4:1d:6c:3a:ab:1f: b1:ba:98:e1:b1:6d:fe:e2:ad:50:cb:64:e6:c9:28: 85:04:7c:29:cc:98:21:4f:61:ec:8c:38:1e:3e:cb: 07:23:f6:38:0d:3c:18:ed:82:da:cd:6c:0b:77:19: 61:d0:04:09:4b:41:51:1e:b9:aa:13:53:f4:55:a0: b0:fc:12:de:ea:ef:9a:78:9a:b7:18:c0:19:34:5e: df:02:1a:c8:63:e7:89:1f:4d:cf:17:6a:03:6a:c7: 55:e6:16:06:0a:51:c9:be:bf:0f:f3:49:0d:4c:26: d8:c6:5e:77:58:c8:0e:70:33:5b:42:63:fd:ab:46: 3d:56:c1:d5:0a:40:15:e1:23:db:63:ea:26:86:c7: c2:ca:8a:3e:50:6e:14:16:7b:1e:95:14:eb:f0:d3: fa:79:02:f4:36:66:bf:16:8c:07:67:d6:2f:9f:84: 60:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:C6:07:46:63:C8:BD:9A:9B:C8:B5:2C:2B:0B:20:AB:31:58:73:33 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/X8YHRmPIvZqbyLUsKwsgqzFYczM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.120.0/21 Signature Algorithm: sha256WithRSAEncryption 91:e0:ab:20:49:96:11:00:9c:93:ef:59:80:b5:b7:a7:d6:ff: cf:60:dc:13:24:e5:57:49:de:a9:fa:b7:cc:bf:fe:37:72:e3: 2d:e0:70:7d:90:2c:9c:1b:f8:2d:fc:bc:cb:e5:6d:c8:d5:e9: bd:03:61:77:18:fd:4a:4f:d3:b6:9e:e7:5d:ef:48:7f:b0:fe: 45:80:45:9e:f6:eb:56:6b:bc:5f:e0:ed:3d:42:05:08:4f:6e: 71:b8:17:66:13:e3:0b:9d:ac:ef:95:50:4d:a8:b6:8d:79:fa: 03:a2:75:fb:6e:ff:0d:7f:a0:1c:b1:8d:42:eb:ff:e8:f8:5e: f7:ae:5a:d0:cd:5f:d6:09:e9:07:dc:27:90:76:fb:e1:27:7d: 27:4f:b5:23:73:42:27:40:66:ae:4a:fa:2d:27:07:cc:5c:c3: ba:14:3b:31:e8:99:16:f5:74:02:75:09:2e:0a:c7:94:7a:55: bb:cb:c1:db:7a:bd:be:de:30:5e:22:bd:36:eb:8e:cb:db:95: 7b:04:cb:fb:44:4f:46:14:38:31:cc:aa:0c:5e:42:3f:0e:00: 34:40:86:39:af:96:5c:22:65:72:bb:e0:e9:0a:41:8d:12:fa: 83:41:e8:8a:e5:f6:4d:c7:e7:cf:0e:9e:9b:4b:51:96:a7:46: fd:02:1e:c4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOLYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1MzNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDVGQzYwNzQ2NjNDOEJE OUE5QkM4QjUyQzJCMEIyMEFCMzE1ODczMzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtcdO63BpWbx8HHMtX4a51c84AiQ/CDlJ3xHIEaWZencOiPumP oaqlrEW8AZrpxuoDxZKWf7a3+g3UjldEAHBycqxm6RBALH/hdpvyZivaYeR52vQd bDqrH7G6mOGxbf7irVDLZObJKIUEfCnMmCFPYeyMOB4+ywcj9jgNPBjtgtrNbAt3 GWHQBAlLQVEeuaoTU/RVoLD8Et7q75p4mrcYwBk0Xt8CGshj54kfTc8XagNqx1Xm FgYKUcm+vw/zSQ1MJtjGXndYyA5wM1tCY/2rRj1WwdUKQBXhI9tj6iaGx8LKij5Q bhQWex6VFOvw0/p5AvQ2Zr8WjAdn1i+fhGBvAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUX8YHRmPIvZqbyLUsKwsgqzFYczMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1g4WUhSbVBJdlpxYnlMVXNL d3NncXpGWWN6TS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 w3gwDQYJKoZIhvcNAQELBQADggEBAJHgqyBJlhEAnJPvWYC1t6fW/89g3BMk5VdJ 3qn6t8y//jdy4y3gcH2QLJwb+C38vMvlbcjV6b0DYXcY/UpP07ae513vSH+w/kWA RZ7261ZrvF/g7T1CBQhPbnG4F2YT4wudrO+VUE2oto15+gOidftu/w1/oByxjULr /+j4XveuWtDNX9YJ6QfcJ5B2++EnfSdPtSNzQidAZq5K+i0nB8xcw7oUOzHomRb1 dAJ1CS4Kx5R6VbvLwdt6vb7eMF4ivTbrjsvblXsEy/tET0YUODHMqgxeQj8OADRA hjmvllwiZXK74OkKQY0S+oNB6Irl9k3H588OnptLUZanRv0CHsQ= -----END CERTIFICATE-----Generated at Sun Aug 24 07:25:23 2025 by rpki-client