$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZvDacIr7DeYGAuzA3ubzeOMAvS4.roa File: ZvDacIr7DeYGAuzA3ubzeOMAvS4.roa (raw, json) Hash identifier: 1mdRNcxJecaWDhn1ejhyBS0skO8UWSG6T+gt6mryPkI= Subject key identifier: 66:F0:DA:70:8A:FB:0D:E6:06:02:EC:C0:DE:E6:F3:78:E3:00:BD:2E Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 391E Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZvDacIr7DeYGAuzA3ubzeOMAvS4.roa Signing time: Fri 22 Aug 2025 08:45:58 +0000 ROA not before: Fri 22 Aug 2025 08:45:58 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 118.233.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14622 (0x391e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:58 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=66F0DA708AFB0DE60602ECC0DEE6F378E300BD2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:08:29:2a:2d:ff:0c:96:cb:6b:5f:fd:68:63: ba:d0:fa:f5:2a:70:a7:60:fd:52:f2:27:6d:fa:a8: cc:35:ac:05:77:4d:7f:67:d8:0b:c5:ff:bb:15:09: f1:ab:0b:8c:33:89:cd:63:56:ea:59:6a:c5:a4:16: 1a:48:40:db:a5:6e:58:b0:54:61:06:e3:e5:36:76: 62:9c:f1:ca:7e:9a:34:1d:5c:7c:42:5f:1c:d3:e9: 65:8d:1f:c0:7a:4b:b7:16:d4:06:5e:89:08:bd:9e: 0f:af:e8:f2:f8:a2:e3:a9:82:e5:7e:15:17:a1:5e: f4:c3:a1:59:f6:e9:9b:a7:a4:9d:e5:f9:53:32:d2: 1e:0e:cd:7e:f2:95:80:fa:de:51:65:33:f6:69:79: 0f:d0:c8:6a:3d:9c:3d:99:b3:3e:d5:85:ed:92:3c: d6:eb:1b:d2:bf:59:a7:0f:d8:55:28:51:c7:54:c5: 68:cc:1b:92:1d:c8:e2:2f:a8:8d:ee:67:4a:53:05: 0e:dc:f9:50:79:40:62:e1:f1:f2:81:0f:e9:f4:9d: 73:ec:ee:c6:ef:49:c1:f8:f5:0a:43:5d:3a:f7:f2: 4c:82:33:8c:e4:0c:ea:8d:a9:3b:c6:fc:e5:be:23: 03:77:70:8d:a6:52:fa:44:c2:9e:c7:00:93:05:15: 17:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:F0:DA:70:8A:FB:0D:E6:06:02:EC:C0:DE:E6:F3:78:E3:00:BD:2E X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZvDacIr7DeYGAuzA3ubzeOMAvS4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.28.0/22 Signature Algorithm: sha256WithRSAEncryption 30:1b:1f:61:1b:a4:dc:a7:8f:71:25:7a:f8:7c:7f:1a:02:4c: af:fd:e6:7c:7e:3b:06:89:31:fa:f5:d0:f3:9c:88:05:a6:82: a8:c4:99:5e:b2:59:5d:22:f8:4f:1a:66:d2:9d:79:10:02:e7: 7b:fd:f7:60:bf:73:36:25:b4:2a:1c:3a:70:53:e6:9a:98:c5: 9c:18:b5:8a:60:1c:94:7f:68:64:80:4d:c6:9e:d2:9d:83:7f: 73:ed:8c:82:83:65:c2:f6:96:b6:52:61:01:7b:8e:29:cc:3b: ee:20:87:e1:32:65:ef:bf:75:dd:2b:48:f3:f5:63:fd:0d:6e: ca:38:01:99:27:69:ed:d5:fb:a2:8e:61:9f:32:9f:41:90:41: ec:17:38:93:75:7f:c7:2b:ef:96:b2:ae:33:59:cc:8b:ac:88: 40:3a:93:b2:06:52:6c:16:8d:ba:8b:7b:7a:2a:b2:b1:e1:47: 92:27:66:9d:3a:5d:fd:bc:a3:05:eb:17:59:c0:39:8f:94:f5: a2:30:e3:29:36:a0:e7:77:fc:80:c4:8a:b6:ae:39:64:ea:d7: 2b:34:1c:d3:05:6b:90:4a:a4:ee:d4:80:15:fb:ef:e8:d2:72: dc:6d:0e:dc:71:46:7a:49:6f:5a:88:40:fa:ca:69:83:28:fb: 32:d0:9f:51 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOR4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1NThaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDY2RjBEQTcwOEFGQjBE RTYwNjAyRUNDMERFRTZGMzc4RTMwMEJEMkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGCCkqLf8MlstrX/1oY7rQ+vUqcKdg/VLyJ236qMw1rAV3TX9n 2AvF/7sVCfGrC4wzic1jVupZasWkFhpIQNulbliwVGEG4+U2dmKc8cp+mjQdXHxC XxzT6WWNH8B6S7cW1AZeiQi9ng+v6PL4ouOpguV+FRehXvTDoVn26ZunpJ3l+VMy 0h4OzX7ylYD63lFlM/ZpeQ/QyGo9nD2Zsz7Vhe2SPNbrG9K/WacP2FUoUcdUxWjM G5IdyOIvqI3uZ0pTBQ7c+VB5QGLh8fKBD+n0nXPs7sbvScH49QpDXTr38kyCM4zk DOqNqTvG/OW+IwN3cI2mUvpEwp7HAJMFFRehAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUZvDacIr7DeYGAuzA3ubzeOMAvS4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1p2RGFjSXI3RGVZR0F1ekEz dWJ6ZU9NQXZTNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6RwwDQYJKoZIhvcNAQELBQADggEBADAbH2EbpNynj3Elevh8fxoCTK/95nx+OwaJ Mfr10POciAWmgqjEmV6yWV0i+E8aZtKdeRAC53v992C/czYltCocOnBT5pqYxZwY tYpgHJR/aGSATcae0p2Df3PtjIKDZcL2lrZSYQF7jinMO+4gh+EyZe+/dd0rSPP1 Y/0Nbso4AZknae3V+6KOYZ8yn0GQQewXOJN1f8cr75ayrjNZzIusiEA6k7IGUmwW jbqLe3oqsrHhR5InZp06Xf28owXrF1nAOY+U9aIw4yk2oOd3/IDEirauOWTq1ys0 HNMFa5BKpO7UgBX77+jSctxtDtxxRnpJb1qIQPrKaYMo+zLQn1E= -----END CERTIFICATE-----Generated at Sun Aug 24 07:28:22 2025 by rpki-client