$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bkjjK8RxLlQK4I8yO5PXT9aJlGE.roa File: bkjjK8RxLlQK4I8yO5PXT9aJlGE.roa (raw, json) Hash identifier: TmYuWn9amL8/n8sjSnjNZ1gArl+aCvYLWggRqPKmJ34= Subject key identifier: 6E:48:E3:2B:C4:71:2E:54:0A:E0:8F:32:3B:93:D7:4F:D6:89:94:61 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3A11 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bkjjK8RxLlQK4I8yO5PXT9aJlGE.roa Signing time: Fri 22 Aug 2025 08:46:58 +0000 ROA not before: Fri 22 Aug 2025 08:46:58 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.192.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14865 (0x3a11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:58 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=6E48E32BC4712E540AE08F323B93D74FD6899461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:7d:fd:b6:e6:ea:4f:2f:bd:16:26:28:35:03: 72:36:3c:10:80:d1:0e:34:35:5f:78:41:d3:8a:42: 3c:cb:49:6c:00:f4:2d:d7:46:95:45:9c:9a:f1:dc: d4:a0:62:2a:cd:7b:1c:e7:3d:a4:4d:54:e4:9b:26: 48:bb:ad:d8:dc:8e:47:ce:c6:99:02:49:1b:36:9e: 0a:66:87:c9:49:3b:00:4a:79:80:7c:36:47:da:09: c1:27:b0:b5:1e:f7:c6:16:55:1c:4d:17:39:ac:3e: c0:12:3a:0b:fd:d6:85:73:3a:c7:df:cf:25:b5:07: ae:b9:50:e7:91:4d:53:f2:ba:de:66:16:50:ab:12: c8:bf:06:e4:d3:08:17:c9:fb:97:71:bb:99:7b:33: 50:8c:a5:2b:34:3d:ad:2a:f4:ac:26:a8:b1:71:dc: 5e:02:d7:66:b2:f3:20:8c:8b:ff:0c:d8:04:b6:08: 6d:4a:38:c0:a9:c7:48:18:c0:04:e7:65:ff:28:67: 41:98:85:36:4b:d4:86:1f:fb:2d:80:2c:7b:44:76: 30:d0:d4:8f:14:ce:ed:6a:f1:c5:35:df:b0:11:e0: 78:22:7b:6f:cb:9d:c0:5d:dc:99:35:bb:dc:8a:31: 6c:61:46:6d:92:a9:ef:ae:79:4b:a8:f0:2c:1b:20: 6e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:48:E3:2B:C4:71:2E:54:0A:E0:8F:32:3B:93:D7:4F:D6:89:94:61 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bkjjK8RxLlQK4I8yO5PXT9aJlGE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.200.0/22 Signature Algorithm: sha256WithRSAEncryption b6:79:69:f2:63:ea:3d:d9:ef:3a:c9:3d:62:b3:c0:c9:15:22: 14:ba:f9:f2:61:da:d3:2f:6c:12:2c:33:c7:e4:ac:1e:29:cb: 37:2e:e9:aa:4c:1e:fc:62:47:08:eb:16:4e:27:b7:81:ee:b9: e8:23:69:dd:87:33:29:b0:24:a2:76:70:48:41:e4:94:f2:ed: d7:23:60:f7:75:1a:e9:41:02:e6:1b:e2:84:cd:d2:20:eb:a0: f0:09:64:83:94:ea:02:f2:3c:8c:c0:78:68:dd:ee:8a:a5:e2: 92:ba:d2:49:1f:66:72:bc:af:20:e6:03:88:1a:e8:d5:27:f0: 4c:f5:b4:02:47:f7:e9:96:f1:af:df:04:49:36:67:86:84:21: ed:77:d1:68:d1:dc:49:2c:e6:ef:8f:ac:59:13:52:c4:7a:d5: 06:29:31:1a:d5:47:13:5c:43:0e:ef:92:43:56:09:dd:fd:b3: a6:46:35:d1:be:3c:5f:23:6b:a1:5e:f9:51:b7:e3:53:32:f8: 54:cf:99:cf:c5:22:5a:ac:90:3a:02:dd:25:6e:73:bb:1d:0c: 52:2d:50:b6:99:ef:fa:e9:de:1c:64:94:24:d4:2e:65:af:b4: 03:51:63:23:e6:eb:44:b9:50:e9:ce:8c:90:96:71:1b:dc:e9: a4:f0:eb:02 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOhEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2NThaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDZFNDhFMzJCQzQ3MTJF NTQwQUUwOEYzMjNCOTNENzRGRDY4OTk0NjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDlff225upPL70WJig1A3I2PBCA0Q40NV94QdOKQjzLSWwA9C3X RpVFnJrx3NSgYirNexznPaRNVOSbJki7rdjcjkfOxpkCSRs2ngpmh8lJOwBKeYB8 NkfaCcEnsLUe98YWVRxNFzmsPsASOgv91oVzOsffzyW1B665UOeRTVPyut5mFlCr Esi/BuTTCBfJ+5dxu5l7M1CMpSs0Pa0q9KwmqLFx3F4C12ay8yCMi/8M2AS2CG1K OMCpx0gYwATnZf8oZ0GYhTZL1IYf+y2ALHtEdjDQ1I8Uzu1q8cU137AR4Hgie2/L ncBd3Jk1u9yKMWxhRm2Sqe+ueUuo8CwbIG5VAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUbkjjK8RxLlQK4I8yO5PXT9aJlGEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2JrampLOFJ4TGxRSzRJOHlP NVBYVDlhSmxHRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wMgwDQYJKoZIhvcNAQELBQADggEBALZ5afJj6j3Z7zrJPWKzwMkVIhS6+fJh2tMv bBIsM8fkrB4pyzcu6apMHvxiRwjrFk4nt4Huuegjad2HMymwJKJ2cEhB5JTy7dcj YPd1GulBAuYb4oTN0iDroPAJZIOU6gLyPIzAeGjd7oql4pK60kkfZnK8ryDmA4ga 6NUn8Ez1tAJH9+mW8a/fBEk2Z4aEIe130WjR3Eks5u+PrFkTUsR61QYpMRrVRxNc Qw7vkkNWCd39s6ZGNdG+PF8ja6Fe+VG341My+FTPmc/FIlqskDoC3SVuc7sdDFIt ULaZ7/rp3hxklCTULmWvtANRYyPm60S5UOnOjJCWcRvc6aTw6wI= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:23 2025 by rpki-client