$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/afKi6AqABrFJq5gP4-Fp54PYnuk.roa File: afKi6AqABrFJq5gP4-Fp54PYnuk.roa (raw, json) Hash identifier: voTTftaAnSyGn3fnKo542a6Ep+IbPo7Z3Wann0/QPTI= Subject key identifier: 69:F2:A2:E8:0A:80:06:B1:49:AB:98:0F:E3:E1:69:E7:83:D8:9E:E9 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3A85 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/afKi6AqABrFJq5gP4-Fp54PYnuk.roa Signing time: Fri 22 Aug 2025 08:47:27 +0000 ROA not before: Fri 22 Aug 2025 08:47:27 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.193.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14981 (0x3a85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:27 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=69F2A2E80A8006B149AB980FE3E169E783D89EE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:86:ef:09:dd:d3:ba:b1:9a:f5:dd:b8:73:91: 8b:37:cb:55:a3:b4:0d:1c:07:03:9a:a7:88:cd:6d: c9:d7:79:ed:87:22:16:1c:76:e0:12:ae:52:11:9b: be:40:a6:69:98:f9:d6:3c:f5:ac:ba:9e:60:64:f6: e0:c2:38:b7:eb:6e:7a:af:4e:8c:6a:6a:9f:6a:15: 0b:e8:2f:d2:ba:e7:e0:3f:45:bc:48:cb:44:da:c8: cc:d8:2d:8d:53:71:05:e4:8e:97:67:eb:41:68:1d: 61:68:e3:db:90:7c:ec:68:53:e9:75:ed:e1:6d:0e: 86:2d:15:9a:23:97:87:82:be:d6:b7:82:00:91:6c: c2:51:f7:3a:5d:3b:bb:c1:54:6e:b2:68:08:d2:73: 89:a7:81:02:3b:be:84:8d:a8:d5:d9:87:60:f7:73: 88:23:d8:ac:e4:6c:2b:f4:3c:ce:69:f2:59:fe:df: 9d:91:e7:5d:ae:5c:62:5d:35:6a:72:ed:7a:e2:e4: 20:ec:aa:7d:aa:f7:20:54:d8:36:33:e8:20:08:a4: 1a:4e:70:c7:a0:7b:6c:55:b1:9e:40:d8:b2:03:c8: db:e1:a5:06:22:e6:a1:f0:27:31:9e:99:5f:d4:07: 28:93:84:4f:fa:7b:7f:01:b6:7c:1a:9e:36:de:2c: 12:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:F2:A2:E8:0A:80:06:B1:49:AB:98:0F:E3:E1:69:E7:83:D8:9E:E9 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/afKi6AqABrFJq5gP4-Fp54PYnuk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.248.0/21 Signature Algorithm: sha256WithRSAEncryption 93:0a:da:97:32:a8:82:71:0e:d3:7e:dc:6e:32:68:4d:48:7c: 49:2f:d3:d9:fb:cd:29:5e:e2:aa:18:fb:d8:4e:f7:4e:d6:e3: e8:51:86:5e:25:63:76:d2:91:e3:8d:5c:19:a6:c3:0f:b7:91: e5:dd:91:7b:1d:1d:d7:f8:a1:4a:8e:eb:74:a1:e6:cb:cd:6f: a6:2c:07:43:a2:fb:d9:f5:a3:bf:fc:e4:96:67:2a:52:2d:d1: ab:bb:99:08:af:3f:14:12:a7:76:dd:e2:5d:a9:f2:4f:fd:45: 96:39:6e:d1:03:e3:ee:89:e5:da:82:90:2a:4e:80:49:c4:29: 44:86:5c:8f:fd:16:07:49:a6:9c:14:eb:f6:2d:31:c3:01:02: 24:25:0b:4a:57:69:7c:0a:ea:4f:dd:ab:28:ae:fc:7d:87:2d: d4:c4:44:a8:2a:ea:4d:52:21:c4:4e:34:db:07:63:99:04:9c: 86:8c:05:4f:74:c6:a0:b9:3e:b3:a9:60:d3:14:5c:a7:01:bf: b9:24:e1:31:97:26:64:f6:c9:47:07:61:2d:ef:74:1e:6f:bc: d9:ac:81:6c:32:c1:99:24:92:0f:20:79:be:4a:b1:11:88:7c: cb:85:73:08:30:72:62:43:86:d0:1b:04:8d:dd:57:ab:8b:c2: 92:2d:fd:cf -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOoUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3MjdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDY5RjJBMkU4MEE4MDA2 QjE0OUFCOTgwRkUzRTE2OUU3ODNEODlFRTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5hu8J3dO6sZr13bhzkYs3y1WjtA0cBwOap4jNbcnXee2HIhYc duASrlIRm75ApmmY+dY89ay6nmBk9uDCOLfrbnqvToxqap9qFQvoL9K65+A/RbxI y0TayMzYLY1TcQXkjpdn60FoHWFo49uQfOxoU+l17eFtDoYtFZojl4eCvta3ggCR bMJR9zpdO7vBVG6yaAjSc4mngQI7voSNqNXZh2D3c4gj2KzkbCv0PM5p8ln+352R 512uXGJdNWpy7Xri5CDsqn2q9yBU2DYz6CAIpBpOcMege2xVsZ5A2LIDyNvhpQYi 5qHwJzGemV/UByiThE/6e38BtnwanjbeLBLzAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUafKi6AqABrFJq5gP4+Fp54PYnukwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2FmS2k2QXFBQnJGSnE1Z1A0 LUZwNTRQWW51ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wfgwDQYJKoZIhvcNAQELBQADggEBAJMK2pcyqIJxDtN+3G4yaE1IfEkv09n7zSle 4qoY+9hO907W4+hRhl4lY3bSkeONXBmmww+3keXdkXsdHdf4oUqO63Sh5svNb6Ys B0Oi+9n1o7/85JZnKlIt0au7mQivPxQSp3bd4l2p8k/9RZY5btED4+6J5dqCkCpO gEnEKUSGXI/9FgdJppwU6/YtMcMBAiQlC0pXaXwK6k/dqyiu/H2HLdTERKgq6k1S IcRONNsHY5kEnIaMBU90xqC5PrOpYNMUXKcBv7kk4TGXJmT2yUcHYS3vdB5vvNms gWwywZkkkg8geb5KsRGIfMuFcwgwcmJDhtAbBI3dV6uLwpIt/c8= -----END CERTIFICATE-----Generated at Sun Aug 24 07:23:15 2025 by rpki-client