$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZygVaU74KMaMn-wpqTAvSkIERjk.roa File: ZygVaU74KMaMn-wpqTAvSkIERjk.roa (raw, json) Hash identifier: 10rNdq7zqOuAnuMYv3TTe+Fg97zlYul5w5q+cROEeL8= Subject key identifier: 67:28:15:69:4E:F8:28:C6:8C:9F:EC:29:A9:30:2F:4A:42:04:46:39 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3980 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZygVaU74KMaMn-wpqTAvSkIERjk.roa Signing time: Fri 22 Aug 2025 08:46:21 +0000 ROA not before: Fri 22 Aug 2025 08:46:21 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18429 IP address blocks: 118.232.200.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14720 (0x3980) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:21 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=672815694EF828C68C9FEC29A9302F4A42044639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:01:86:d1:72:f0:9a:04:7f:24:0e:83:d7:9e: 18:34:b8:db:8f:8e:8b:01:89:85:e8:f5:82:f9:0b: 7d:d3:da:a4:65:fb:74:f3:10:12:ae:09:7d:3b:f9: 63:4d:0a:56:16:7d:df:fd:8a:e2:57:0a:ae:a4:dc: d7:31:7b:fc:17:ce:52:8d:4f:48:28:49:e6:77:58: 77:39:ea:39:b4:b3:67:e6:26:14:16:b4:93:02:40: a9:8b:dc:6a:05:45:69:2c:80:aa:5f:63:58:f8:d6: 57:05:a6:e6:87:36:49:4e:c7:84:4b:5e:f7:b3:1a: d5:d9:ac:0b:b9:9f:d1:ec:a3:57:b7:d9:51:a5:a0: 75:34:a4:a3:a9:fe:c2:e8:2d:10:ce:c9:8d:ac:2a: a3:1a:20:c1:cf:06:1a:02:6b:50:16:c1:28:8b:8b: db:55:57:61:8d:c4:68:b6:2f:aa:68:bc:af:83:b7: b3:ca:46:5c:d7:e6:b8:fa:6b:63:b2:21:9b:eb:50: fe:97:e8:8d:af:fc:a4:0b:0a:3c:33:a5:d1:a7:8d: 39:bb:e9:37:4f:28:c8:a4:8a:25:99:b8:ea:1f:18: 96:14:06:b6:4f:74:a1:55:8f:59:21:5b:a7:ad:5b: 2d:de:ab:22:3c:c0:be:56:22:0c:53:31:7d:77:e9: cc:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:28:15:69:4E:F8:28:C6:8C:9F:EC:29:A9:30:2F:4A:42:04:46:39 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZygVaU74KMaMn-wpqTAvSkIERjk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.200.0/25 Signature Algorithm: sha256WithRSAEncryption 0e:41:ba:7f:55:46:24:63:05:53:fa:70:de:e8:7f:50:fb:41: f9:9e:6d:76:2b:e5:98:5e:ec:6f:12:cc:fa:87:74:a4:e4:28: 10:62:fb:62:c9:7c:d1:9a:97:92:f6:da:bb:83:af:14:5a:4d: 5d:b5:b8:12:4e:54:1c:9b:60:c3:34:a6:81:9e:20:8d:5c:a6: 18:fe:38:8b:17:13:28:49:ac:66:af:ba:6c:de:db:d8:eb:24: 93:60:1a:97:6c:60:ea:67:da:9d:56:16:4d:e7:fb:02:c3:ae: 57:d6:e7:85:b2:e5:f3:50:b9:a3:c6:7b:2a:60:85:e6:41:57: 70:a5:5d:f1:f6:b3:c1:3e:51:84:2b:ec:a8:32:4f:92:26:04: 53:e0:db:1b:b8:3e:68:1f:8b:f1:14:d1:74:04:0a:ad:14:e0: c5:9b:ba:77:6f:97:9e:1d:b7:c4:4b:18:72:38:43:77:6c:27: a6:50:54:26:c5:bf:d8:79:2f:37:2a:50:2b:0b:54:9d:a7:2b: 71:7a:7a:ed:32:57:22:58:de:c5:63:1d:99:99:b3:2a:af:6a: 40:0b:c4:92:cd:37:dc:b6:75:3a:c2:f1:d2:31:9e:20:b4:a9: f4:cb:41:ca:ac:41:39:f2:13:47:3f:17:85:11:d0:c5:26:ad: 53:b3:dc:fb -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICOYAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2MjFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDY3MjgxNTY5NEVGODI4 QzY4QzlGRUMyOUE5MzAyRjRBNDIwNDQ2MzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdAYbRcvCaBH8kDoPXnhg0uNuPjosBiYXo9YL5C33T2qRl+3Tz EBKuCX07+WNNClYWfd/9iuJXCq6k3Ncxe/wXzlKNT0goSeZ3WHc56jm0s2fmJhQW tJMCQKmL3GoFRWksgKpfY1j41lcFpuaHNklOx4RLXvezGtXZrAu5n9Hso1e32VGl oHU0pKOp/sLoLRDOyY2sKqMaIMHPBhoCa1AWwSiLi9tVV2GNxGi2L6povK+Dt7PK RlzX5rj6a2OyIZvrUP6X6I2v/KQLCjwzpdGnjTm76TdPKMikiiWZuOofGJYUBrZP dKFVj1khW6etWy3eqyI8wL5WIgxTMX136cx7AgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUZygVaU74KMaMn+wpqTAvSkIERjkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1p5Z1ZhVTc0S01hTW4td3Bx VEF2U2tJRVJqay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQd2 6MgAMA0GCSqGSIb3DQEBCwUAA4IBAQAOQbp/VUYkYwVT+nDe6H9Q+0H5nm12K+WY XuxvEsz6h3Sk5CgQYvtiyXzRmpeS9tq7g68UWk1dtbgSTlQcm2DDNKaBniCNXKYY /jiLFxMoSaxmr7ps3tvY6ySTYBqXbGDqZ9qdVhZN5/sCw65X1ueFsuXzULmjxnsq YIXmQVdwpV3x9rPBPlGEK+yoMk+SJgRT4NsbuD5oH4vxFNF0BAqtFODFm7p3b5ee HbfESxhyOEN3bCemUFQmxb/YeS83KlArC1SdpytxenrtMlciWN7FYx2ZmbMqr2pA C8SSzTfctnU6wvHSMZ4gtKn0y0HKrEE58hNHPxeFEdDFJq1Ts9z7 -----END CERTIFICATE-----Generated at Sun Aug 24 07:23:13 2025 by rpki-client