$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Yp4POCid4M2rRW3PWTqLdwmBloU.roa File: Yp4POCid4M2rRW3PWTqLdwmBloU.roa (raw, json) Hash identifier: 7VFejwBQPeea4Z6iT2tUNVMWC4HT4Xh7QXSlT69Yh0Q= Subject key identifier: 62:9E:0F:38:28:9D:E0:CD:AB:45:6D:CF:59:3A:8B:77:09:81:96:85 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 394B Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Yp4POCid4M2rRW3PWTqLdwmBloU.roa Signing time: Fri 22 Aug 2025 08:46:09 +0000 ROA not before: Fri 22 Aug 2025 08:46:09 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.193.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14667 (0x394b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:09 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=629E0F38289DE0CDAB456DCF593A8B7709819685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:7b:8b:e8:0b:3e:c6:bc:40:09:17:ef:e4:cf: 53:d0:81:1f:61:ed:bf:0b:a8:3c:71:ef:1c:bc:74: a3:bd:97:e5:51:76:26:a8:42:83:81:12:03:7f:1d: 2a:ea:84:a9:08:f4:63:61:ad:a1:e0:2f:8a:75:c4: 01:4f:70:f9:dd:4e:6a:6f:fa:b9:91:08:55:74:37: 19:d6:fd:9c:2e:67:30:23:7b:b1:32:dd:f3:6b:94: c0:fe:2b:37:45:f2:1f:00:19:15:5f:54:04:d4:83: 75:07:86:19:99:fb:e9:34:49:44:5d:26:cd:a8:d0: 84:bb:48:ee:36:a6:23:b3:94:ea:73:e5:99:fe:90: 6d:47:b4:2f:86:ae:b6:7c:ff:e1:63:7f:e9:20:4f: 9e:a6:26:5f:d0:41:85:6a:83:4f:e2:17:08:87:25: 64:e5:0b:5a:62:72:91:60:37:93:68:87:19:9b:c6: d0:46:5c:1e:76:fa:3c:dd:06:96:48:7a:2b:74:2e: 4a:ab:99:35:54:6d:21:f2:f8:19:3f:d8:bc:3e:c8: 09:86:a3:ce:b6:e1:60:ad:1d:ae:f3:ae:50:9a:85: bd:8a:f4:ba:c1:34:a0:e6:ff:22:e4:48:58:c6:96: d9:42:e2:3f:c7:e6:83:c1:85:7e:d4:68:b8:2c:7c: ed:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:9E:0F:38:28:9D:E0:CD:AB:45:6D:CF:59:3A:8B:77:09:81:96:85 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Yp4POCid4M2rRW3PWTqLdwmBloU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.56.0/21 Signature Algorithm: sha256WithRSAEncryption 52:0c:41:b5:e7:d8:d1:f3:be:de:c2:04:73:ab:42:cf:34:e7: db:a1:d7:3d:92:23:50:a3:0a:38:61:2a:24:c2:9b:70:8f:a2: 43:7f:64:8d:03:9d:f2:09:f3:dd:67:24:8c:1c:c6:91:e5:da: 39:83:ff:e1:bb:2f:6e:d6:a3:7b:8a:d7:65:e3:22:78:e1:d8: 41:59:54:83:3d:24:ac:77:d4:a0:43:a3:72:a7:ec:0e:5d:75: d4:3f:c0:d0:26:fc:c7:b3:b1:7c:c3:d1:32:77:12:de:89:d3: 78:8b:99:d6:d5:be:9d:50:ad:ca:c1:8a:a4:58:93:9e:f8:82: 9d:88:59:24:03:63:ed:71:f3:02:f2:6e:fc:22:03:2a:f4:41: 89:31:d9:33:1d:d3:b6:5c:9e:8e:21:56:da:10:ab:a9:30:b7: 00:7c:bb:94:b8:d7:e0:33:ef:e5:11:34:ed:6b:d8:95:96:5c: 67:09:d8:86:fd:2f:96:77:1e:91:58:d7:e1:07:57:a7:55:b7: 59:4b:32:bf:4a:97:c8:b9:45:71:80:c5:02:16:7e:02:f9:0d: e9:9e:7e:e6:c9:a5:45:dd:4d:bd:2c:4a:f7:c5:e1:b1:93:75: e3:da:a3:61:ca:c0:28:93:d6:8f:13:7b:22:41:58:43:5c:a4: 37:ed:5f:58 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOUswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2MDlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDYyOUUwRjM4Mjg5REUw Q0RBQjQ1NkRDRjU5M0E4Qjc3MDk4MTk2ODUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDke4voCz7GvEAJF+/kz1PQgR9h7b8LqDxx7xy8dKO9l+VRdiao QoOBEgN/HSrqhKkI9GNhraHgL4p1xAFPcPndTmpv+rmRCFV0NxnW/ZwuZzAje7Ey 3fNrlMD+KzdF8h8AGRVfVATUg3UHhhmZ++k0SURdJs2o0IS7SO42piOzlOpz5Zn+ kG1HtC+GrrZ8/+Fjf+kgT56mJl/QQYVqg0/iFwiHJWTlC1picpFgN5NohxmbxtBG XB52+jzdBpZIeit0LkqrmTVUbSHy+Bk/2Lw+yAmGo8624WCtHa7zrlCahb2K9LrB NKDm/yLkSFjGltlC4j/H5oPBhX7UaLgsfO3BAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUYp4POCid4M2rRW3PWTqLdwmBloUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1lwNFBPQ2lkNE0yclJXM1BX VHFMZHdtQmxvVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wTgwDQYJKoZIhvcNAQELBQADggEBAFIMQbXn2NHzvt7CBHOrQs8059uh1z2SI1Cj CjhhKiTCm3CPokN/ZI0DnfIJ891nJIwcxpHl2jmD/+G7L27Wo3uK12XjInjh2EFZ VIM9JKx31KBDo3Kn7A5dddQ/wNAm/MezsXzD0TJ3Et6J03iLmdbVvp1QrcrBiqRY k574gp2IWSQDY+1x8wLybvwiAyr0QYkx2TMd07Zcno4hVtoQq6kwtwB8u5S41+Az 7+URNO1r2JWWXGcJ2Ib9L5Z3HpFY1+EHV6dVt1lLMr9Kl8i5RXGAxQIWfgL5Deme fubJpUXdTb0sSvfF4bGTdePao2HKwCiT1o8TeyJBWENcpDftX1g= -----END CERTIFICATE-----Generated at Sun Aug 24 05:34:04 2025 by rpki-client