$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aq3tnpyg4sKYPeKGhmpHFZbzp88.roa File: aq3tnpyg4sKYPeKGhmpHFZbzp88.roa (raw, json) Hash identifier: 6bBfNdsT8jSEOtVZPfOYPG+Dq63d59EfWJhj2TnK3rQ= Subject key identifier: 6A:AD:ED:9E:9C:A0:E2:C2:98:3D:E2:86:86:6A:47:15:96:F3:A7:CF Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 39B9 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aq3tnpyg4sKYPeKGhmpHFZbzp88.roa Signing time: Fri 22 Aug 2025 08:46:35 +0000 ROA not before: Fri 22 Aug 2025 08:46:35 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.195.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14777 (0x39b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:35 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=6AADED9E9CA0E2C2983DE286866A471596F3A7CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:53:1f:2d:fc:2b:d7:35:ad:82:f2:90:06:1e: 35:c7:0c:6e:5e:11:04:fb:30:5f:48:4a:d9:23:61: c5:5c:7b:10:46:98:4d:44:d4:2e:ce:8c:7f:c0:e9: 28:2c:ac:8e:e9:74:e8:0a:49:a9:86:23:71:f4:03: f4:54:22:dc:63:64:74:37:1f:0b:a2:e2:a7:0b:e7: be:c0:86:15:05:20:14:7c:29:77:d2:42:d0:30:54: 89:38:1c:05:ec:5c:39:1f:47:72:19:51:cc:5b:ea: 66:1d:06:df:c2:3e:11:39:9c:0d:0a:22:e3:3d:36: 20:eb:33:84:b0:4b:1f:e2:e0:a0:df:2b:e7:83:af: d4:6b:1b:bb:ab:00:75:15:33:61:37:6c:bc:d8:7e: 60:60:87:e1:c7:49:98:c3:28:23:e0:e8:4d:d7:db: 39:9b:31:19:7a:b7:f4:e7:82:c0:26:73:74:c7:3e: 50:6b:e6:00:f6:4d:e7:2d:4d:d2:c3:5b:3f:1b:ad: 08:05:b8:e5:a9:13:0a:9e:09:5c:bf:4d:71:82:e9: 31:37:9d:78:1c:d3:c9:98:40:ba:f8:99:54:04:91: 51:8d:49:0a:3c:e9:00:e1:7e:88:a7:17:04:b5:92: 96:b3:60:7b:1e:ed:74:5e:10:cd:60:2c:8a:30:da: 6e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:AD:ED:9E:9C:A0:E2:C2:98:3D:E2:86:86:6A:47:15:96:F3:A7:CF X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aq3tnpyg4sKYPeKGhmpHFZbzp88.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.151.0/24 Signature Algorithm: sha256WithRSAEncryption 37:85:ea:10:8b:47:be:b9:7c:27:87:5f:42:66:5e:e7:46:64: 7d:6d:b2:5f:03:08:53:22:7d:42:95:d1:86:41:1b:7c:16:90: b2:6e:ed:5c:50:72:0d:15:a3:92:e1:c5:f2:db:46:9c:38:49: 18:c9:d2:52:60:94:ed:53:73:9f:0a:7a:00:3c:cc:fe:03:ff: 81:4c:54:23:26:07:ac:0a:a0:20:51:3d:b4:88:0e:23:70:d9: cc:64:19:2e:8c:89:c1:04:cf:6c:b8:b5:3c:5a:c1:96:e9:4f: 69:ae:e5:5e:32:a6:e2:21:49:39:01:37:48:90:e0:f3:16:b0: cd:5a:30:1c:a2:8b:3a:4b:b9:d0:72:7c:07:be:34:42:d3:c6: a0:56:91:98:bf:8e:c1:61:c8:09:9c:b4:f8:d7:ef:c1:7b:9f: 95:b3:a5:fd:3f:aa:da:f6:f4:44:71:63:b7:b1:31:1d:52:fe: aa:fd:35:63:f3:a6:62:72:ec:e9:99:cc:a5:ae:a6:e5:3e:4b: b4:08:53:b1:2f:d1:c4:20:6f:c0:68:83:3d:23:6b:17:d4:5e: 05:4b:9e:e1:16:31:98:2d:cb:68:5a:ad:db:ff:40:14:77:ab: 4c:7d:9f:49:9d:8f:cf:6c:13:77:7a:36:77:59:7f:2a:fc:66: 01:5b:5a:bc -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICObkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2MzVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDZBQURFRDlFOUNBMEUy QzI5ODNERTI4Njg2NkE0NzE1OTZGM0E3Q0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSUx8t/CvXNa2C8pAGHjXHDG5eEQT7MF9IStkjYcVcexBGmE1E 1C7OjH/A6SgsrI7pdOgKSamGI3H0A/RUItxjZHQ3Hwui4qcL577AhhUFIBR8KXfS QtAwVIk4HAXsXDkfR3IZUcxb6mYdBt/CPhE5nA0KIuM9NiDrM4SwSx/i4KDfK+eD r9RrG7urAHUVM2E3bLzYfmBgh+HHSZjDKCPg6E3X2zmbMRl6t/TngsAmc3THPlBr 5gD2TectTdLDWz8brQgFuOWpEwqeCVy/TXGC6TE3nXgc08mYQLr4mVQEkVGNSQo8 6QDhfoinFwS1kpazYHse7XReEM1gLIow2m5FAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUaq3tnpyg4sKYPeKGhmpHFZbzp88wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2FxM3RucHlnNHNLWVBlS0do bXBIRlpienA4OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7 w5cwDQYJKoZIhvcNAQELBQADggEBADeF6hCLR765fCeHX0JmXudGZH1tsl8DCFMi fUKV0YZBG3wWkLJu7VxQcg0Vo5LhxfLbRpw4SRjJ0lJglO1Tc58KegA8zP4D/4FM VCMmB6wKoCBRPbSIDiNw2cxkGS6MicEEz2y4tTxawZbpT2mu5V4ypuIhSTkBN0iQ 4PMWsM1aMByiizpLudByfAe+NELTxqBWkZi/jsFhyAmctPjX78F7n5Wzpf0/qtr2 9ERxY7exMR1S/qr9NWPzpmJy7OmZzKWupuU+S7QIU7Ev0cQgb8Bogz0jaxfUXgVL nuEWMZgty2hardv/QBR3q0x9n0mdj89sE3d6NndZfyr8ZgFbWrw= -----END CERTIFICATE-----Generated at Sun Aug 24 07:33:18 2025 by rpki-client