$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aaTuyi05k0k9PDFFucDcFp4sMYQ.roa File: aaTuyi05k0k9PDFFucDcFp4sMYQ.roa (raw, json) Hash identifier: YLZYsPtSTCa3LR4TmqvX2boW5o39FJoiPxY8yxzu59I= Subject key identifier: 69:A4:EE:CA:2D:39:93:49:3D:3C:31:45:B9:C0:DC:16:9E:2C:31:84 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3923 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aaTuyi05k0k9PDFFucDcFp4sMYQ.roa Signing time: Fri 22 Aug 2025 08:46:00 +0000 ROA not before: Fri 22 Aug 2025 08:46:00 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.192.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14627 (0x3923) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:00 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=69A4EECA2D3993493D3C3145B9C0DC169E2C3184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3b:14:7b:6f:4d:0d:ed:d1:da:4e:52:19:27: f7:01:76:0e:d4:a1:ec:1d:f0:6a:b0:eb:af:43:09: 64:0f:da:15:46:88:9b:16:1a:99:36:fc:a6:ce:27: 99:18:f3:ea:f9:3c:eb:1d:1d:78:25:40:31:0d:8c: 68:99:1b:7b:a8:41:98:5b:3e:dc:96:dd:0d:67:da: eb:77:0f:6f:f1:15:8d:f7:18:88:7d:38:34:f1:82: d5:63:0c:27:ed:ec:7e:de:3d:d1:b4:b6:93:ff:a9: 07:ad:a6:8b:0b:c6:b8:af:18:c7:7e:b6:b7:6d:9b: 90:9b:ee:78:a0:ed:36:0e:b2:f8:34:6e:d5:7e:1e: 61:51:d7:70:c2:7e:f4:20:56:c7:b6:7e:37:d6:1c: 87:cb:73:0c:01:47:ea:e0:81:cb:c2:f4:20:eb:25: fb:20:a0:d8:e2:f6:80:60:a0:be:44:bc:e1:a5:4c: a6:7b:77:94:bd:1d:07:21:3a:b6:7b:6b:d3:bc:a7: 80:0c:dd:f4:d0:b3:c5:9c:96:bd:b4:dd:6a:bc:11: e0:03:fd:f2:66:92:3b:34:5d:80:83:d1:3e:64:5d: a9:f7:b2:e9:59:af:ad:8e:4f:fa:81:d3:2e:a1:d9: 0d:28:fb:59:c1:3a:2b:bd:03:7a:77:6a:9a:5a:9f: 15:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:A4:EE:CA:2D:39:93:49:3D:3C:31:45:B9:C0:DC:16:9E:2C:31:84 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aaTuyi05k0k9PDFFucDcFp4sMYQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.184.0/22 Signature Algorithm: sha256WithRSAEncryption 71:c4:8c:b2:26:43:ca:3d:13:fd:31:8c:b1:cf:e3:3a:b5:b9: cd:37:a3:45:86:e4:8d:6f:03:90:35:f9:de:41:d5:46:16:0c: ee:ac:63:2a:bc:49:d0:92:f6:b4:a0:ee:e0:04:8c:e3:03:8d: 34:c3:69:cd:aa:7e:b5:fc:39:94:54:23:de:9f:19:85:42:6b: a4:e1:3c:96:2b:76:8e:a0:b4:f4:a7:e4:de:80:9a:72:7c:1a: 3a:34:27:f2:59:40:bc:c6:e7:10:71:44:1d:e3:74:4a:49:a8: 96:f5:e3:fc:3c:de:49:52:84:03:98:8d:e8:c1:36:28:25:cf: 86:00:94:ee:3a:d9:8e:d7:2e:c9:84:e5:e6:a1:df:50:0c:e1: 20:7f:ff:7d:9e:22:e3:e2:f3:43:86:74:3e:5f:0e:b8:4e:80: 14:de:cc:91:98:2b:7b:bb:a9:17:fb:e3:27:d5:d2:0e:53:db: ab:d3:6e:e5:93:73:7d:7f:fd:e8:4b:31:35:45:da:59:bc:a2: 71:eb:2b:af:1a:ee:b6:22:e2:a1:af:7a:27:e2:7e:bb:9f:a5: 6f:f4:03:0e:a0:a0:30:61:b2:df:ad:44:8e:ce:14:0e:ba:fc: 4d:a2:ed:b1:7a:68:09:b0:3a:87:c1:03:d3:cd:61:c6:ec:f5: b6:9c:6f:61 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOSMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2MDBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDY5QTRFRUNBMkQzOTkz NDkzRDNDMzE0NUI5QzBEQzE2OUUyQzMxODQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLOxR7b00N7dHaTlIZJ/cBdg7Uoewd8Gqw669DCWQP2hVGiJsW Gpk2/KbOJ5kY8+r5POsdHXglQDENjGiZG3uoQZhbPtyW3Q1n2ut3D2/xFY33GIh9 ODTxgtVjDCft7H7ePdG0tpP/qQetposLxrivGMd+trdtm5Cb7nig7TYOsvg0btV+ HmFR13DCfvQgVse2fjfWHIfLcwwBR+rggcvC9CDrJfsgoNji9oBgoL5EvOGlTKZ7 d5S9HQchOrZ7a9O8p4AM3fTQs8Wclr203Wq8EeAD/fJmkjs0XYCD0T5kXan3sulZ r62OT/qB0y6h2Q0o+1nBOiu9A3p3appanxWJAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUaaTuyi05k0k9PDFFucDcFp4sMYQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2FhVHV5aTA1azBrOVBERkZ1 Y0RjRnA0c01ZUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wLgwDQYJKoZIhvcNAQELBQADggEBAHHEjLImQ8o9E/0xjLHP4zq1uc03o0WG5I1v A5A1+d5B1UYWDO6sYyq8SdCS9rSg7uAEjOMDjTTDac2qfrX8OZRUI96fGYVCa6Th PJYrdo6gtPSn5N6AmnJ8Gjo0J/JZQLzG5xBxRB3jdEpJqJb14/w83klShAOYjejB Niglz4YAlO462Y7XLsmE5eah31AM4SB//32eIuPi80OGdD5fDrhOgBTezJGYK3u7 qRf74yfV0g5T26vTbuWTc31//ehLMTVF2lm8onHrK68a7rYi4qGveififrufpW/0 Aw6goDBhst+tRI7OFA66/E2i7bF6aAmwOofBA9PNYcbs9bacb2E= -----END CERTIFICATE-----Generated at Sun Aug 24 07:25:24 2025 by rpki-client