$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_rgvAenX5otFq9vTM_sh0_Y1bOE.roa File: _rgvAenX5otFq9vTM_sh0_Y1bOE.roa (raw, json) Hash identifier: 72sOnI9RRI1EXV6rXpAcqWxvVHVmf2vXo+Py69QFz4A= Subject key identifier: FE:B8:2F:01:E9:D7:E6:8B:45:AB:DB:D3:33:FB:21:D3:F6:35:6C:E1 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3B61 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_rgvAenX5otFq9vTM_sh0_Y1bOE.roa Signing time: Tue 14 Oct 2025 02:56:57 +0000 ROA not before: Tue 14 Oct 2025 02:56:57 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 106.1.170.0/24 maxlen: 26 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 03:26:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15201 (0x3b61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Oct 14 02:56:57 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=FEB82F01E9D7E68B45ABDBD333FB21D3F6356CE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ab:e6:b3:6c:db:7a:c8:5d:6e:1f:fa:2a:ab: 50:15:ce:86:97:3f:6b:39:34:f6:8d:5b:a3:c4:09: d6:a3:72:f8:b7:00:fc:04:62:19:06:d1:20:38:18: dd:a0:52:08:6a:b1:d6:31:9b:f4:b8:af:7f:40:88: bd:e2:7a:f3:c1:ee:68:a6:83:37:88:51:a0:27:ef: ca:06:23:e5:80:7f:00:6d:dc:2a:a8:1c:cc:53:ba: 9e:68:9f:17:a3:8e:6e:c9:b0:f2:2d:dd:dd:76:45: 79:69:13:cc:c1:94:45:8c:60:12:3d:43:d2:b9:47: 5c:44:50:83:9f:8c:46:67:3c:0e:31:14:9d:2d:c1: e0:2d:f7:11:37:68:24:33:40:fd:b2:a4:0a:c3:93: 5a:4c:a3:76:36:1e:4b:27:1c:5c:22:16:39:a2:a7: f6:87:ec:a1:aa:fe:9e:bb:2b:48:51:aa:03:4a:a1: 78:d0:9e:cb:e0:9d:fd:f0:d1:54:14:d9:9e:5e:57: fe:f3:23:f8:f2:77:78:00:04:0a:9e:3b:28:0a:b2: fe:fa:7f:73:cb:9c:d4:c2:ae:20:ee:01:9b:db:cb: 7f:1c:bb:35:16:ab:d8:83:33:f8:67:ee:ca:35:83: fd:b7:32:e1:ef:ae:7c:ec:a0:90:aa:5a:23:c1:6e: 03:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:B8:2F:01:E9:D7:E6:8B:45:AB:DB:D3:33:FB:21:D3:F6:35:6C:E1 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_rgvAenX5otFq9vTM_sh0_Y1bOE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.170.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:73:8d:53:f2:0b:b3:43:02:b0:7f:c6:3d:34:54:c6:1e:89: 03:eb:8e:cd:8d:14:12:fc:69:65:b7:23:25:20:e9:07:56:90: 2b:37:24:14:db:97:41:2b:c1:59:96:2e:aa:2d:35:1b:43:36: df:39:76:45:1d:44:ee:8a:0e:e7:89:e1:b3:a7:be:82:a9:d7: 64:25:51:15:d9:cc:b1:30:b7:78:41:50:7f:1b:8d:82:04:a6: 39:23:18:a3:d0:22:f7:87:68:d7:69:05:fc:52:04:ae:5c:3e: 06:b2:a0:67:45:fe:78:1b:7d:9c:13:df:6a:3f:27:4e:5d:d0: 29:75:99:81:5f:6f:80:44:2c:f7:6d:27:e2:60:f1:b3:40:c5: ed:e5:cf:ad:f6:69:93:67:ab:d0:54:14:4c:10:13:60:88:53: 40:f0:ff:06:d5:87:26:31:bb:44:33:ac:6a:ef:60:61:92:24: aa:ae:0a:91:33:07:46:4c:0b:15:01:9a:47:44:c4:8a:c7:de: 08:87:a3:71:97:14:ec:41:4e:b4:21:78:1e:77:f4:7c:1e:6e: 50:58:a5:c2:40:3d:61:c7:12:01:d3:57:02:80:70:5e:fc:cc: e7:56:a2:82:44:be:cc:da:cb:7e:6b:de:59:e3:c0:61:dd:69: 92:ee:80:59 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICO2EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTEwMTQw MjU2NTdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEZFQjgyRjAxRTlEN0U2 OEI0NUFCREJEMzMzRkIyMUQzRjYzNTZDRTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQClq+azbNt6yF1uH/oqq1AVzoaXP2s5NPaNW6PECdajcvi3APwE YhkG0SA4GN2gUghqsdYxm/S4r39AiL3ievPB7mimgzeIUaAn78oGI+WAfwBt3Cqo HMxTup5onxejjm7JsPIt3d12RXlpE8zBlEWMYBI9Q9K5R1xEUIOfjEZnPA4xFJ0t weAt9xE3aCQzQP2ypArDk1pMo3Y2HksnHFwiFjmip/aH7KGq/p67K0hRqgNKoXjQ nsvgnf3w0VQU2Z5eV/7zI/jyd3gABAqeOygKsv76f3PLnNTCriDuAZvby38cuzUW q9iDM/hn7so1g/23MuHvrnzsoJCqWiPBbgOtAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU/rgvAenX5otFq9vTM/sh0/Y1bOEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL19yZ3ZBZW5YNW90RnE5dlRN X3NoMF9ZMWJPRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq AaowDQYJKoZIhvcNAQELBQADggEBACpzjVPyC7NDArB/xj00VMYeiQPrjs2NFBL8 aWW3IyUg6QdWkCs3JBTbl0ErwVmWLqotNRtDNt85dkUdRO6KDueJ4bOnvoKp12Ql URXZzLEwt3hBUH8bjYIEpjkjGKPQIveHaNdpBfxSBK5cPgayoGdF/ngbfZwT32o/ J05d0Cl1mYFfb4BELPdtJ+Jg8bNAxe3lz632aZNnq9BUFEwQE2CIU0Dw/wbVhyYx u0QzrGrvYGGSJKquCpEzB0ZMCxUBmkdExIrH3giHo3GXFOxBTrQheB539HweblBY pcJAPWHHEgHTVwKAcF78zOdWooJEvszay35r3lnjwGHdaZLugFk= -----END CERTIFICATE-----Generated at Tue Oct 21 00:41:11 2025 by rpki-client