$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZOx2IbUhAH0nAMO4ARKx4-C9RZU.roa File: ZOx2IbUhAH0nAMO4ARKx4-C9RZU.roa (raw, json) Hash identifier: 0q0U/1oxr6E7OzKteZU6HpubbA8k7RSCSWq3Ms/uz34= Subject key identifier: 64:EC:76:21:B5:21:00:7D:27:00:C3:B8:01:12:B1:E3:E0:BD:45:95 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3B28 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZOx2IbUhAH0nAMO4ARKx4-C9RZU.roa Signing time: Fri 22 Aug 2025 08:48:07 +0000 ROA not before: Fri 22 Aug 2025 08:48:07 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 211.76.124.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15144 (0x3b28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:48:07 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=64EC7621B521007D2700C3B80112B1E3E0BD4595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:4f:1c:7d:cf:1c:ea:1b:15:a3:f9:e7:16:fd: a6:31:f3:f7:fa:4e:19:a9:bc:db:83:f4:e8:fd:64: 2d:84:36:95:7a:b3:76:5c:55:14:02:16:46:1f:58: f1:f4:37:d7:d7:45:d7:43:e2:0b:9a:72:e6:cd:ec: 70:b1:1f:50:af:51:08:04:f1:92:89:3d:77:42:83: a1:88:fc:12:2c:b4:ef:65:7f:63:c0:97:5c:12:30: a0:c5:91:ac:7d:27:51:d4:00:ef:3e:f3:c6:fd:60: 1f:26:37:a0:1c:bd:e6:67:a1:02:5a:22:d4:ef:b9: 75:e9:46:37:87:85:e2:ed:11:85:9c:d7:76:9e:0f: 28:61:eb:a2:fd:72:8f:88:47:26:f2:21:e2:54:43: f0:e2:5e:ad:60:b5:fb:e8:4c:7a:5e:54:ea:8a:1d: 55:56:c1:8a:58:0f:c6:07:7e:bb:82:06:d7:f9:b2: 16:0b:fe:8f:93:21:41:4c:58:67:be:f3:76:24:27: 00:b2:64:60:07:6a:d8:0e:10:77:22:dd:99:f0:25: 49:2c:a8:f7:3f:74:53:7e:ea:ce:5f:f4:16:b7:54: 6f:c4:66:b3:c4:ab:2b:86:c7:d3:c1:65:2b:6a:27: 85:46:ee:12:57:32:b8:df:cf:62:8b:36:31:cf:c7: bb:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:EC:76:21:B5:21:00:7D:27:00:C3:B8:01:12:B1:E3:E0:BD:45:95 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZOx2IbUhAH0nAMO4ARKx4-C9RZU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.124.128/25 Signature Algorithm: sha256WithRSAEncryption 7a:85:79:84:40:6d:08:4e:28:ba:b3:8e:72:e9:94:09:a1:b6: 33:d3:e3:b0:19:7a:5f:9e:7f:34:b6:49:ab:ea:c1:03:00:34: 36:36:21:a3:ed:1a:2a:18:f6:d6:3a:d6:5e:37:2a:bf:0a:99: 35:af:d6:85:11:3c:5c:06:24:cb:2e:ef:74:08:c1:e3:de:9d: f4:33:eb:e2:57:b6:79:7b:57:dc:0c:4c:63:dc:67:d6:e8:4a: 85:06:fa:0f:af:a1:5e:4c:f6:ec:46:4e:ff:a6:1a:29:d9:36: 4f:a6:8d:b0:8b:c4:d4:e8:03:19:e2:61:c8:18:11:95:fc:c8: ef:5b:d5:9a:c4:df:87:ab:26:70:58:4b:54:63:4a:0c:74:c3: 02:a9:6d:32:93:db:83:46:41:95:5c:b5:99:c6:cb:d5:a7:48: c7:3a:43:36:33:6c:69:0f:5f:77:3d:f2:0f:39:4b:71:ba:a7: 3e:ef:eb:00:41:81:e2:80:9b:d8:dd:d8:b1:e4:6e:14:ee:90: c4:b2:99:8e:92:39:5a:b8:aa:ea:a6:7c:3d:5e:1f:8b:cb:89: 09:ae:cd:8e:d9:10:35:84:17:61:01:ee:d9:70:9a:e9:e2:a8: 78:e2:fd:f8:b3:d1:51:49:56:cf:ea:d6:81:a6:ed:86:80:02: ac:1f:dd:1a -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICOygwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ4MDdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDY0RUM3NjIxQjUyMTAw N0QyNzAwQzNCODAxMTJCMUUzRTBCRDQ1OTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDlTxx9zxzqGxWj+ecW/aYx8/f6ThmpvNuD9Oj9ZC2ENpV6s3Zc VRQCFkYfWPH0N9fXRddD4guacubN7HCxH1CvUQgE8ZKJPXdCg6GI/BIstO9lf2PA l1wSMKDFkax9J1HUAO8+88b9YB8mN6AcveZnoQJaItTvuXXpRjeHheLtEYWc13ae Dyhh66L9co+IRybyIeJUQ/DiXq1gtfvoTHpeVOqKHVVWwYpYD8YHfruCBtf5shYL /o+TIUFMWGe+83YkJwCyZGAHatgOEHci3ZnwJUksqPc/dFN+6s5f9Ba3VG/EZrPE qyuGx9PBZStqJ4VG7hJXMrjfz2KLNjHPx7tjAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUZOx2IbUhAH0nAMO4ARKx4+C9RZUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1pPeDJJYlVoQUgwbkFNTzRB Ukt4NC1DOVJaVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQfT THyAMA0GCSqGSIb3DQEBCwUAA4IBAQB6hXmEQG0ITii6s45y6ZQJobYz0+OwGXpf nn80tkmr6sEDADQ2NiGj7RoqGPbWOtZeNyq/Cpk1r9aFETxcBiTLLu90CMHj3p30 M+viV7Z5e1fcDExj3GfW6EqFBvoPr6FeTPbsRk7/phop2TZPpo2wi8TU6AMZ4mHI GBGV/MjvW9WaxN+HqyZwWEtUY0oMdMMCqW0yk9uDRkGVXLWZxsvVp0jHOkM2M2xp D193PfIPOUtxuqc+7+sAQYHigJvY3dix5G4U7pDEspmOkjlauKrqpnw9Xh+Ly4kJ rs2O2RA1hBdhAe7ZcJrp4qh44v34s9FRSVbP6taBpu2GgAKsH90a -----END CERTIFICATE-----Generated at Sun Aug 24 07:30:59 2025 by rpki-client