$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XLO69MxeagVvgJkGGoYGvSObHiw.roa File: XLO69MxeagVvgJkGGoYGvSObHiw.roa (raw, json) Hash identifier: hsVo2vUJ3A7zJAFMMb7sRN62q3VFNZDdJ4jAOymVlq4= Subject key identifier: 5C:B3:BA:F4:CC:5E:6A:05:6F:80:99:06:1A:86:06:BD:23:9B:1E:2C Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3A9C Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XLO69MxeagVvgJkGGoYGvSObHiw.roa Signing time: Fri 22 Aug 2025 08:47:33 +0000 ROA not before: Fri 22 Aug 2025 08:47:33 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.195.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15004 (0x3a9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:33 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=5CB3BAF4CC5E6A056F8099061A8606BD239B1E2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:20:e8:59:96:82:6f:e4:ec:24:33:af:20:b0: 85:b5:25:82:86:b4:a7:a0:c4:b5:72:05:a0:33:a5: d7:8b:0e:c8:c1:0c:91:ad:49:da:23:66:b3:7d:54: 3f:2a:f2:8b:5b:e7:19:d6:f8:bc:60:4d:a4:b0:9a: a6:9e:41:0b:b7:db:ec:a0:85:87:55:60:58:fa:e5: 26:ee:c6:71:ee:33:9b:e3:18:90:f6:c6:0e:98:43: 4c:87:7b:81:cb:40:ea:34:67:68:47:8c:30:bf:a1: ed:a7:bc:8c:79:0c:1f:0d:cd:80:c5:5b:e9:6f:4b: 92:7b:73:71:a2:44:7e:94:25:e1:55:f4:6a:29:1b: 2f:ab:8e:29:0a:5c:67:78:9e:23:e7:cb:04:0e:91: a4:aa:1f:54:e5:5c:37:37:94:5a:51:5e:7f:17:0c: 93:91:82:ce:36:37:e4:cb:ad:3b:ae:30:f5:ef:66: 10:5c:61:5e:a2:f1:ac:04:fb:46:5b:d8:fd:81:b2: c3:33:c7:6b:5b:38:c3:a5:f8:30:d0:67:cb:25:f9: 7a:eb:22:43:d4:13:0d:3e:de:dd:dc:d5:99:74:87: aa:02:60:7f:8e:72:a4:70:15:57:7d:25:26:4e:7a: a6:d7:8c:51:e7:e1:ed:0f:92:dd:ab:85:de:0b:10: 49:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:B3:BA:F4:CC:5E:6A:05:6F:80:99:06:1A:86:06:BD:23:9B:1E:2C X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XLO69MxeagVvgJkGGoYGvSObHiw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.160.0/21 Signature Algorithm: sha256WithRSAEncryption 6d:bc:3a:76:c5:72:51:f1:99:66:8d:9f:02:75:62:dd:cb:ec: b9:3c:87:45:dc:5c:c5:98:1f:09:c8:5a:f0:03:0c:35:fd:0a: 58:f7:a3:ee:d3:b8:a4:66:6b:36:aa:f9:cd:e2:bd:44:1e:ea: da:4e:27:12:8d:d9:ca:d7:64:07:b9:0f:8b:23:56:2c:54:d7: 7e:0e:2e:8b:b3:1b:88:c4:5d:64:f6:48:89:c7:2e:05:4a:e4: 03:e6:55:cf:66:b2:d1:e4:b2:60:a7:a5:f7:03:e3:7b:a0:7b: 9d:00:32:cb:5b:e6:78:a9:de:d7:17:21:6d:3b:52:ea:71:7d: d7:45:46:f2:38:d0:eb:34:9a:d7:68:32:e6:4b:3c:6a:e3:ac: 47:40:28:f5:65:6f:8c:b4:3d:c3:d4:df:0c:55:9c:7e:5e:fd: 5e:1a:8c:e2:0d:96:6e:a6:42:8c:ab:09:14:f4:81:73:a7:05: bb:70:a9:26:51:e8:46:f1:24:4f:e9:d5:f0:a3:c5:5c:f1:9f: be:a2:86:89:14:ed:f2:bf:aa:5d:30:85:6b:22:91:01:61:86: 08:4e:c0:be:e5:81:78:bc:4f:e3:01:9e:f4:be:87:91:67:08: 0a:ad:65:43:12:41:2e:10:d0:e6:04:97:02:85:3a:1e:9e:24: c9:da:c2:3b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOpwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3MzNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDVDQjNCQUY0Q0M1RTZB MDU2RjgwOTkwNjFBODYwNkJEMjM5QjFFMkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCaIOhZloJv5OwkM68gsIW1JYKGtKegxLVyBaAzpdeLDsjBDJGt SdojZrN9VD8q8otb5xnW+LxgTaSwmqaeQQu32+yghYdVYFj65SbuxnHuM5vjGJD2 xg6YQ0yHe4HLQOo0Z2hHjDC/oe2nvIx5DB8NzYDFW+lvS5J7c3GiRH6UJeFV9Gop Gy+rjikKXGd4niPnywQOkaSqH1TlXDc3lFpRXn8XDJORgs42N+TLrTuuMPXvZhBc YV6i8awE+0Zb2P2BssMzx2tbOMOl+DDQZ8sl+XrrIkPUEw0+3t3c1Zl0h6oCYH+O cqRwFVd9JSZOeqbXjFHn4e0Pkt2rhd4LEEk3AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUXLO69MxeagVvgJkGGoYGvSObHiwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1hMTzY5TXhlYWdWdmdKa0dH b1lHdlNPYkhpdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 w6AwDQYJKoZIhvcNAQELBQADggEBAG28OnbFclHxmWaNnwJ1Yt3L7Lk8h0XcXMWY HwnIWvADDDX9Clj3o+7TuKRmazaq+c3ivUQe6tpOJxKN2crXZAe5D4sjVixU134O LouzG4jEXWT2SInHLgVK5APmVc9mstHksmCnpfcD43uge50AMstb5nip3tcXIW07 UupxfddFRvI40Os0mtdoMuZLPGrjrEdAKPVlb4y0PcPU3wxVnH5e/V4ajOINlm6m QoyrCRT0gXOnBbtwqSZR6EbxJE/p1fCjxVzxn76ihokU7fK/ql0whWsikQFhhghO wL7lgXi8T+MBnvS+h5FnCAqtZUMSQS4Q0OYElwKFOh6eJMnawjs= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:30 2025 by rpki-client