$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Yztghyfra0fD0NSSzp9Xm-Uc9XU.roa File: Yztghyfra0fD0NSSzp9Xm-Uc9XU.roa (raw, json) Hash identifier: u5FqUzj5a/6c1BN86ihWS4/zlrpy2YeP5nbHSIxZjKg= Subject key identifier: 63:3B:60:87:27:EB:6B:47:C3:D0:D4:92:CE:9F:57:9B:E5:1C:F5:75 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 395C Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Yztghyfra0fD0NSSzp9Xm-Uc9XU.roa Signing time: Fri 22 Aug 2025 08:46:13 +0000 ROA not before: Fri 22 Aug 2025 08:46:13 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.192.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14684 (0x395c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:13 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=633B608727EB6B47C3D0D492CE9F579BE51CF575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:48:7b:c8:36:fc:40:c4:c7:a8:74:30:fd:57: 8c:ec:b0:1d:6f:02:ab:90:f1:69:e4:f1:b1:ab:6f: 71:68:45:94:0e:a2:f4:04:52:ba:e8:d8:7f:e3:f0: a5:b9:e5:7d:d5:c2:15:68:50:fa:99:07:63:77:f0: fd:33:a1:7b:15:1d:77:79:4d:a3:94:72:85:ea:76: 7b:13:15:9c:f6:eb:24:af:30:a6:ec:e1:c9:f6:f5: 70:f9:8c:d9:57:68:06:40:38:0a:6c:a9:76:2e:c9: a4:30:e2:a8:8b:e8:cb:20:f2:ab:c2:e9:f1:c6:50: ea:34:e2:4b:2d:2d:bf:ce:59:7a:51:f4:db:ca:9d: 62:a2:43:db:b5:72:ce:1d:9e:bf:eb:c7:84:1b:90: 21:84:96:0e:87:5b:db:21:f4:d7:e4:31:71:c6:36: 34:86:5a:b6:30:fc:51:1e:12:b0:12:c6:f7:be:63: f7:b2:ec:f1:89:0f:c8:4b:cb:a5:f4:08:f4:dd:e9: 61:7b:95:64:b1:e9:96:44:ce:bb:9d:6f:84:2c:78: dc:3f:36:a6:d7:3c:f2:ff:ac:51:15:b8:aa:5c:28: 66:79:66:ff:19:2f:da:dd:b8:48:e5:cf:0c:c9:aa: 9c:4c:0c:0e:d5:36:20:67:38:19:29:10:99:0c:f2: ca:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:3B:60:87:27:EB:6B:47:C3:D0:D4:92:CE:9F:57:9B:E5:1C:F5:75 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Yztghyfra0fD0NSSzp9Xm-Uc9XU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.176.0/22 Signature Algorithm: sha256WithRSAEncryption b8:8b:5e:86:3d:f0:6f:f2:eb:73:32:da:a9:49:82:92:fd:cf: 82:46:69:29:e1:31:32:84:a1:1c:ae:f6:63:c7:2b:39:06:14: c0:fa:e0:6a:8a:61:f4:37:b9:97:90:ed:f5:4f:d1:bf:1f:b7: c2:25:92:b9:20:fb:fb:0a:db:a1:38:cb:17:a1:98:25:6f:01: 2e:76:aa:da:d0:71:c0:3b:a0:87:e6:d7:e7:f1:bd:dd:a9:de: 24:1c:f8:27:13:cc:91:ec:3e:24:99:59:85:d5:1e:81:f7:a8: 3e:32:c1:c5:57:10:5f:39:28:a3:a6:00:67:57:e9:e1:32:e5: 1a:63:0a:23:47:d7:4b:03:4b:54:3e:8a:e3:ff:07:50:f6:df: c6:6c:9a:35:38:07:83:3c:dc:2c:de:4c:ae:a9:88:1f:51:86: ad:2b:6c:2d:89:86:af:57:5f:15:75:c7:07:c8:ed:c8:3d:07: e7:7e:db:d4:a4:fb:8d:8e:5b:e5:8b:aa:c3:48:d6:2c:3f:de: ff:15:f6:ba:de:49:e7:cd:fe:2f:d0:b3:7e:94:3e:fb:5d:a1: 14:4f:8a:c1:de:b2:84:3e:6e:44:76:be:a3:49:8f:c1:75:2a: 31:33:2b:4a:5b:54:fa:05:a2:38:ec:04:d1:c7:cb:a5:f0:29: 39:b4:7d:02 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOVwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2MTNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDYzM0I2MDg3MjdFQjZC NDdDM0QwRDQ5MkNFOUY1NzlCRTUxQ0Y1NzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFSHvINvxAxMeodDD9V4zssB1vAquQ8Wnk8bGrb3FoRZQOovQE Urro2H/j8KW55X3VwhVoUPqZB2N38P0zoXsVHXd5TaOUcoXqdnsTFZz26ySvMKbs 4cn29XD5jNlXaAZAOApsqXYuyaQw4qiL6Msg8qvC6fHGUOo04kstLb/OWXpR9NvK nWKiQ9u1cs4dnr/rx4QbkCGElg6HW9sh9NfkMXHGNjSGWrYw/FEeErASxve+Y/ey 7PGJD8hLy6X0CPTd6WF7lWSx6ZZEzrudb4QseNw/NqbXPPL/rFEVuKpcKGZ5Zv8Z L9rduEjlzwzJqpxMDA7VNiBnOBkpEJkM8spPAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUYztghyfra0fD0NSSzp9Xm+Uc9XUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1l6dGdoeWZyYTBmRDBOU1N6 cDlYbS1VYzlYVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wLAwDQYJKoZIhvcNAQELBQADggEBALiLXoY98G/y63My2qlJgpL9z4JGaSnhMTKE oRyu9mPHKzkGFMD64GqKYfQ3uZeQ7fVP0b8ft8Ilkrkg+/sK26E4yxehmCVvAS52 qtrQccA7oIfm1+fxvd2p3iQc+CcTzJHsPiSZWYXVHoH3qD4ywcVXEF85KKOmAGdX 6eEy5RpjCiNH10sDS1Q+iuP/B1D238ZsmjU4B4M83CzeTK6piB9Rhq0rbC2Jhq9X XxV1xwfI7cg9B+d+29Sk+42OW+WLqsNI1iw/3v8V9rreSefN/i/Qs36UPvtdoRRP isHesoQ+bkR2vqNJj8F1KjEzK0pbVPoFojjsBNHHy6XwKTm0fQI= -----END CERTIFICATE-----Generated at Sun Aug 24 07:28:25 2025 by rpki-client