$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bkhZWfr-SC8-SRzGI34ZN9b-CRA.roa File: bkhZWfr-SC8-SRzGI34ZN9b-CRA.roa (raw, json) Hash identifier: 8+iE0COmCpwzKqaS3/11OOSCYuww2ftXQ9SxmypJeMk= Subject key identifier: 6E:48:59:59:FA:FE:48:2F:3E:49:1C:C6:23:7E:19:37:D6:FE:09:10 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3AEC Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bkhZWfr-SC8-SRzGI34ZN9b-CRA.roa Signing time: Fri 22 Aug 2025 08:47:53 +0000 ROA not before: Fri 22 Aug 2025 08:47:53 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 106.1.176.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15084 (0x3aec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:53 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=6E485959FAFE482F3E491CC6237E1937D6FE0910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c4:3e:d7:6f:66:0f:a7:01:c6:1d:74:8e:f4: 50:4b:07:21:31:63:0d:e2:ed:c2:e9:32:cc:21:d3: 78:0b:0e:fb:ad:48:e8:a2:24:2d:fe:50:90:fb:5c: 17:be:90:e5:e0:b0:42:9f:f7:ee:84:23:34:b8:d5: 2a:cd:e3:01:90:af:45:6a:83:2a:45:d3:97:5f:be: 64:5c:a0:37:51:a9:51:4a:c3:9b:f7:44:ac:4c:fd: 4d:c3:ab:12:83:76:e9:10:bf:62:9d:8d:f5:d0:73: e7:4a:6d:4e:16:6c:9c:a3:8d:cd:52:d7:27:7d:a4: bb:d4:05:d5:c4:8c:c1:40:8c:a0:6b:c4:c3:68:ab: c0:b3:f0:96:0b:d8:bf:5f:60:a5:34:49:1f:53:d1: 7d:e7:9f:70:e8:f4:b8:26:ae:83:a3:43:99:a1:e0: f7:c7:67:2c:11:3f:4d:a9:51:a5:e2:54:c9:a5:8f: b4:7e:ff:c1:e2:98:13:41:84:71:fd:b8:b7:5e:71: 5d:96:87:55:e4:a1:dc:a3:b9:be:17:2d:34:a2:39: 9a:b3:4c:64:6c:6e:ee:af:49:a4:df:18:31:07:cd: be:c6:b6:7f:5d:54:a2:42:6a:a6:a6:cb:e8:c7:e9: c9:20:1a:f4:19:0b:9a:dd:0d:35:64:6d:fa:73:af: cd:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:48:59:59:FA:FE:48:2F:3E:49:1C:C6:23:7E:19:37:D6:FE:09:10 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bkhZWfr-SC8-SRzGI34ZN9b-CRA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.176.0/23 Signature Algorithm: sha256WithRSAEncryption a2:ee:d8:f6:8b:b4:c9:37:31:43:45:30:06:9b:c2:8a:78:25: a8:55:3e:4a:57:59:1b:05:95:d1:03:d2:ef:29:65:8d:db:dd: b2:ef:9a:a0:55:5b:73:d7:32:ea:01:72:0b:fa:cf:bd:56:13: be:06:9f:65:d1:3d:06:bf:07:0a:0f:06:91:e7:ee:d7:6f:22: 60:0e:98:80:c3:02:ef:a3:d7:5d:77:12:e6:56:89:43:70:06: ce:95:30:e8:45:f4:29:56:cb:99:06:d1:9a:c0:f2:d4:d7:33: b3:e9:8c:55:ad:bd:af:6b:71:cf:8d:54:35:92:08:74:92:f6: f6:74:f0:c1:34:11:c4:ef:ac:27:de:a5:c2:1c:b2:df:c3:a4: ba:bc:dc:b5:3e:c6:f6:37:51:e6:72:7e:b5:2d:1c:d6:63:ea: e7:ff:8d:6a:65:05:c4:28:32:ad:18:0d:5e:c0:9e:cc:49:e2: 5c:43:df:c7:06:2f:cd:a6:c2:06:24:d9:85:13:8d:b6:91:de: 3f:2a:25:31:41:04:0a:4e:62:9e:2d:59:d0:db:a2:01:50:1c: 24:9a:dc:ee:7b:9c:ec:13:2b:74:f7:10:a2:f8:be:4a:e2:74: 12:77:7d:7f:1a:76:8b:bc:db:57:08:af:ba:03:7f:ff:ed:7a: 60:58:e0:c0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOuwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3NTNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDZFNDg1OTU5RkFGRTQ4 MkYzRTQ5MUNDNjIzN0UxOTM3RDZGRTA5MTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCxD7Xb2YPpwHGHXSO9FBLByExYw3i7cLpMswh03gLDvutSOii JC3+UJD7XBe+kOXgsEKf9+6EIzS41SrN4wGQr0VqgypF05dfvmRcoDdRqVFKw5v3 RKxM/U3DqxKDdukQv2KdjfXQc+dKbU4WbJyjjc1S1yd9pLvUBdXEjMFAjKBrxMNo q8Cz8JYL2L9fYKU0SR9T0X3nn3Do9LgmroOjQ5mh4PfHZywRP02pUaXiVMmlj7R+ /8HimBNBhHH9uLdecV2Wh1Xkodyjub4XLTSiOZqzTGRsbu6vSaTfGDEHzb7Gtn9d VKJCaqamy+jH6ckgGvQZC5rdDTVkbfpzr82RAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUbkhZWfr+SC8+SRzGI34ZN9b+CRAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2JraFpXZnItU0M4LVNSekdJ MzRaTjliLUNSQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFq AbAwDQYJKoZIhvcNAQELBQADggEBAKLu2PaLtMk3MUNFMAabwop4JahVPkpXWRsF ldED0u8pZY3b3bLvmqBVW3PXMuoBcgv6z71WE74Gn2XRPQa/BwoPBpHn7tdvImAO mIDDAu+j1113EuZWiUNwBs6VMOhF9ClWy5kG0ZrA8tTXM7PpjFWtva9rcc+NVDWS CHSS9vZ08ME0EcTvrCfepcIcst/DpLq83LU+xvY3UeZyfrUtHNZj6uf/jWplBcQo Mq0YDV7AnsxJ4lxD38cGL82mwgYk2YUTjbaR3j8qJTFBBApOYp4tWdDbogFQHCSa 3O57nOwTK3T3EKL4vkridBJ3fX8adou821cIr7oDf//temBY4MA= -----END CERTIFICATE-----Generated at Sun Aug 24 07:24:10 2025 by rpki-client