$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bJ28In5iGcCBktjRGQviita6C7E.roa File: bJ28In5iGcCBktjRGQviita6C7E.roa (raw, json) Hash identifier: VUdNHTIiCkxqhHvSgvvyu1y1qC7kcCwpfEQvpKwwMkc= Subject key identifier: 6C:9D:BC:22:7E:62:19:C0:81:92:D8:D1:19:0B:E2:8A:D6:BA:0B:B1 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3A9B Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bJ28In5iGcCBktjRGQviita6C7E.roa Signing time: Fri 22 Aug 2025 08:47:33 +0000 ROA not before: Fri 22 Aug 2025 08:47:33 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 118.233.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15003 (0x3a9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:33 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=6C9DBC227E6219C08192D8D1190BE28AD6BA0BB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8b:c6:61:28:65:96:9f:4a:1a:6d:c2:8e:f5: de:9f:f4:21:72:b7:04:22:84:7f:fe:0e:4f:7e:d2: fa:81:f6:36:23:b2:f1:7e:4c:c1:58:bf:c3:8e:02: c7:94:a5:16:7d:c5:74:75:92:5a:f5:a6:a4:8b:d4: 04:ae:59:20:82:1a:7e:7b:2b:ad:ad:67:77:21:da: 62:7d:77:8a:43:89:c2:c9:19:6f:a2:8c:8b:16:4b: ab:96:da:44:25:df:5b:4d:6a:42:8c:51:e1:96:12: 2e:fb:14:3e:5c:47:8c:f3:c7:e3:3b:c5:92:c2:d0: b5:07:0e:5e:65:a9:55:ef:e1:d5:e9:bc:a7:c9:d3: 24:4d:6f:ca:69:22:2e:09:60:29:40:ac:0b:88:ab: 7d:df:a9:b0:87:ed:26:98:a7:d6:05:81:6e:e8:a4: 5b:3c:57:82:dc:f5:05:80:fb:56:8b:7b:71:4e:00: dc:0b:0a:60:e9:51:c1:74:c2:34:e5:0a:ec:12:e7: 23:d7:b1:d6:45:84:9d:51:e5:f2:40:0c:d1:1e:51: ee:45:76:58:4d:0c:aa:b7:9d:40:5b:64:e7:29:77: 2f:01:70:2d:c8:b8:81:c1:0e:52:9d:2e:b2:1f:26: 1f:6b:60:3d:af:52:3d:2e:60:ac:88:55:67:61:d2: 58:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:9D:BC:22:7E:62:19:C0:81:92:D8:D1:19:0B:E2:8A:D6:BA:0B:B1 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bJ28In5iGcCBktjRGQviita6C7E.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.112.0/22 Signature Algorithm: sha256WithRSAEncryption 79:33:5e:29:72:9f:0c:2d:da:c1:69:75:68:b1:58:b0:8a:06: a1:42:8a:04:64:7d:be:1f:35:98:d8:1d:bc:6b:40:5d:c2:82: d4:5c:52:91:c4:68:b5:7f:44:4d:fc:30:b8:0e:c5:ba:fd:9b: 3e:49:26:9a:2b:7d:35:53:73:87:f6:63:0d:bc:5e:e5:14:a5: f0:e9:57:5a:24:76:3b:9c:b3:53:78:48:28:aa:21:00:ab:b3: 1d:e8:a7:91:97:e8:6d:66:09:d7:dc:e2:ce:0c:87:c5:34:d2: 08:17:8b:af:64:aa:b3:b4:1e:9c:9a:8c:ff:06:17:d9:5b:8c: 87:71:4f:4f:c8:fc:28:45:d9:2a:28:60:99:86:07:d6:29:42: 03:84:8d:73:de:4f:f2:6d:9d:84:46:a6:c9:31:34:14:9f:82: 30:65:fc:c2:39:e4:4d:59:97:2e:0d:7f:79:00:bb:d3:38:9f: 84:8d:33:8b:67:47:c2:db:5f:97:da:b7:68:7f:94:6d:9a:72: 74:1a:c6:ef:6f:de:db:a2:27:f1:5e:af:62:16:4c:af:3c:2a: 32:90:90:a4:6f:f9:d8:f1:57:f3:56:09:75:7f:db:4c:2b:17: 01:06:e7:02:13:fe:88:3e:93:5f:fc:35:e8:81:cd:e2:64:28: 87:78:a1:8d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOpswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3MzNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDZDOURCQzIyN0U2MjE5 QzA4MTkyRDhEMTE5MEJFMjhBRDZCQTBCQjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNi8ZhKGWWn0oabcKO9d6f9CFytwQihH/+Dk9+0vqB9jYjsvF+ TMFYv8OOAseUpRZ9xXR1klr1pqSL1ASuWSCCGn57K62tZ3ch2mJ9d4pDicLJGW+i jIsWS6uW2kQl31tNakKMUeGWEi77FD5cR4zzx+M7xZLC0LUHDl5lqVXv4dXpvKfJ 0yRNb8ppIi4JYClArAuIq33fqbCH7SaYp9YFgW7opFs8V4Lc9QWA+1aLe3FOANwL CmDpUcF0wjTlCuwS5yPXsdZFhJ1R5fJADNEeUe5FdlhNDKq3nUBbZOcpdy8BcC3I uIHBDlKdLrIfJh9rYD2vUj0uYKyIVWdh0lixAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUbJ28In5iGcCBktjRGQviita6C7EwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2JKMjhJbjVpR2NDQmt0alJH UXZpaXRhNkM3RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6XAwDQYJKoZIhvcNAQELBQADggEBAHkzXilynwwt2sFpdWixWLCKBqFCigRkfb4f NZjYHbxrQF3CgtRcUpHEaLV/RE38MLgOxbr9mz5JJporfTVTc4f2Yw28XuUUpfDp V1okdjucs1N4SCiqIQCrsx3op5GX6G1mCdfc4s4Mh8U00ggXi69kqrO0HpyajP8G F9lbjIdxT0/I/ChF2SooYJmGB9YpQgOEjXPeT/JtnYRGpskxNBSfgjBl/MI55E1Z ly4Nf3kAu9M4n4SNM4tnR8LbX5fat2h/lG2acnQaxu9v3tuiJ/Fer2IWTK88KjKQ kKRv+djxV/NWCXV/20wrFwEG5wIT/og+k1/8NeiBzeJkKId4oY0= -----END CERTIFICATE-----Generated at Sun Aug 24 07:25:27 2025 by rpki-client