$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cIFU9SxjQOn5nyjZxtnQO_kfCkM.roa File: cIFU9SxjQOn5nyjZxtnQO_kfCkM.roa (raw, json) Hash identifier: rjXdXwdUVGA0XkuKx8xyNQ2gZd05imkLutX3WIgb9Vk= Subject key identifier: 70:81:54:F5:2C:63:40:E9:F9:9F:28:D9:C6:D9:D0:3B:F9:1F:0A:43 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 38B3 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cIFU9SxjQOn5nyjZxtnQO_kfCkM.roa Signing time: Fri 22 Aug 2025 08:45:32 +0000 ROA not before: Fri 22 Aug 2025 08:45:32 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 106.1.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14515 (0x38b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:32 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=708154F52C6340E9F99F28D9C6D9D03BF91F0A43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:33:99:c5:39:63:76:8d:96:f0:3e:54:d1:ad: c3:43:0a:29:1c:a5:1a:fd:99:45:9d:f9:44:04:4a: 88:fb:df:2e:41:ea:ab:6b:3f:23:29:7c:3c:34:a5: 14:f5:a2:b9:cf:48:66:15:b2:de:eb:35:cc:8b:10: 44:d4:25:fa:37:fe:4d:d7:ef:7a:1f:2f:19:92:fa: c8:73:f5:df:bb:ba:4b:06:3e:e4:ba:5c:a0:63:95: b7:77:a8:82:b5:e2:3f:0f:c7:6e:74:c8:77:d3:da: 23:d5:f2:95:64:c6:d6:41:71:32:8d:a2:74:92:2f: f0:2f:2e:f9:ba:c6:ee:b2:ca:84:7d:66:57:1a:2e: 3f:e3:a8:c8:a8:c3:b3:44:5b:b0:ee:da:3e:5d:1f: d6:36:14:4a:46:dc:39:6f:97:52:b8:79:31:84:66: 33:fb:99:ba:39:b5:da:c7:af:fe:0c:16:e6:72:9f: 38:33:25:b4:e8:22:9e:d8:bc:21:06:0c:16:73:3c: 0f:11:dd:26:7a:f7:32:99:65:ee:57:11:65:ca:e7: e6:c0:08:e5:f7:2c:aa:6a:83:26:9c:94:5c:41:b4: a7:a2:5b:69:a2:86:fd:82:4f:7d:5f:6f:7c:bc:de: 05:a5:65:fc:1e:d3:1b:d1:65:86:8b:47:f6:0f:27: 1c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:81:54:F5:2C:63:40:E9:F9:9F:28:D9:C6:D9:D0:3B:F9:1F:0A:43 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cIFU9SxjQOn5nyjZxtnQO_kfCkM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.140.0/22 Signature Algorithm: sha256WithRSAEncryption 70:36:37:17:b1:96:aa:4b:f8:2d:7b:a6:ac:86:63:3d:f6:49: 99:69:9c:bc:7b:09:e5:7b:b0:59:75:a5:b9:7b:e7:12:b2:ca: e6:a4:1e:0f:0e:61:8a:2a:34:c0:ec:6b:8f:71:8f:e4:8d:ec: 9f:cc:ff:32:99:b1:b1:8a:91:e4:99:98:74:da:32:6f:1a:56: 1b:21:88:18:16:ca:fe:87:a8:10:55:5d:38:f7:0e:9f:88:a5: 32:95:d0:65:c2:cf:00:44:1a:a0:77:ab:b9:8c:61:32:18:79: a9:b7:dc:9a:d3:e9:ea:da:50:b9:8b:27:26:46:9b:ef:83:5b: 7b:ef:b2:0f:2c:88:a7:97:04:24:bf:57:75:5f:c6:d9:3e:eb: 1d:46:e8:da:ea:6b:a7:cb:b2:0d:f3:0b:0c:2c:a4:0a:b1:06: b2:e9:b1:bf:ad:a0:d4:e7:8e:3a:a1:21:ab:2d:a3:96:f5:67: 55:73:3b:2f:47:c9:49:cc:8a:ec:19:fc:85:ae:4b:61:e0:cd: 13:67:be:d3:2c:cc:00:3f:87:8c:6c:68:04:91:d7:42:d8:40: 0d:4e:45:d5:1b:9a:0d:25:02:b7:71:a5:59:b9:1b:44:8e:7f: 9c:c8:51:e5:b4:06:63:e3:1d:23:c9:83:68:d8:05:24:2f:8d: 75:7b:e8:95 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOLMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1MzJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDcwODE1NEY1MkM2MzQw RTlGOTlGMjhEOUM2RDlEMDNCRjkxRjBBNDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSM5nFOWN2jZbwPlTRrcNDCikcpRr9mUWd+UQESoj73y5B6qtr PyMpfDw0pRT1ornPSGYVst7rNcyLEETUJfo3/k3X73ofLxmS+shz9d+7uksGPuS6 XKBjlbd3qIK14j8Px250yHfT2iPV8pVkxtZBcTKNonSSL/AvLvm6xu6yyoR9Zlca Lj/jqMiow7NEW7Du2j5dH9Y2FEpG3Dlvl1K4eTGEZjP7mbo5tdrHr/4MFuZynzgz JbToIp7YvCEGDBZzPA8R3SZ69zKZZe5XEWXK5+bACOX3LKpqgyaclFxBtKeiW2mi hv2CT31fb3y83gWlZfwe0xvRZYaLR/YPJxxNAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUcIFU9SxjQOn5nyjZxtnQO/kfCkMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2NJRlU5U3hqUU9uNW55alp4 dG5RT19rZkNrTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq AYwwDQYJKoZIhvcNAQELBQADggEBAHA2NxexlqpL+C17pqyGYz32SZlpnLx7CeV7 sFl1pbl75xKyyuakHg8OYYoqNMDsa49xj+SN7J/M/zKZsbGKkeSZmHTaMm8aVhsh iBgWyv6HqBBVXTj3Dp+IpTKV0GXCzwBEGqB3q7mMYTIYeam33JrT6eraULmLJyZG m++DW3vvsg8siKeXBCS/V3Vfxtk+6x1G6Nrqa6fLsg3zCwwspAqxBrLpsb+toNTn jjqhIasto5b1Z1VzOy9HyUnMiuwZ/IWuS2HgzRNnvtMszAA/h4xsaASR10LYQA1O RdUbmg0lArdxpVm5G0SOf5zIUeW0BmPjHSPJg2jYBSQvjXV76JU= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:22 2025 by rpki-client