$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cvuMzRRVPDEdYAqTnEpq8sCDyyw.roa File: cvuMzRRVPDEdYAqTnEpq8sCDyyw.roa (raw, json) Hash identifier: CinoDuUiiB9Cb+88ovZNl0xBtZyNIZbmaq/q0hdS7dQ= Subject key identifier: 72:FB:8C:CD:14:55:3C:31:1D:60:0A:93:9C:4A:6A:F2:C0:83:CB:2C Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3AB7 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cvuMzRRVPDEdYAqTnEpq8sCDyyw.roa Signing time: Fri 22 Aug 2025 08:47:41 +0000 ROA not before: Fri 22 Aug 2025 08:47:41 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.192.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15031 (0x3ab7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:41 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=72FB8CCD14553C311D600A939C4A6AF2C083CB2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:b3:77:e1:77:d1:9c:4a:f9:32:2d:80:5a:79: 33:b8:ac:ca:4b:eb:e7:30:a2:6d:a4:72:95:81:0f: 9c:f2:6e:cf:cd:e8:9e:f9:d5:99:22:95:07:db:a0: 3d:e9:1d:27:e3:20:77:a0:24:f5:31:63:2d:58:a2: 45:fe:de:79:17:50:ae:e7:ed:c0:2f:6e:9d:04:d8: 02:f5:b4:67:60:fd:c9:5b:15:4e:41:38:bc:f4:f8: b8:7c:1f:47:6f:0e:d8:63:d1:8b:f0:15:54:37:a3: aa:22:36:7a:f4:8a:4f:14:d6:7c:f6:a7:e5:54:1b: 57:ce:a5:5d:a4:f6:7d:05:e6:06:d5:f3:1e:83:4e: 43:7f:68:d3:bb:4c:cb:fe:e9:5c:bb:ab:1c:ad:e7: 7e:9c:fd:64:1e:69:db:05:fb:e9:54:ab:f5:d5:2b: bd:2d:5e:12:df:43:25:b5:97:f1:b0:95:45:4c:f7: 57:e2:56:09:85:7a:f3:5f:6b:0c:bb:d1:88:34:fc: 96:37:c9:f9:6c:82:04:6a:2c:fe:69:1a:d8:c6:f3: e9:7e:3d:7a:48:47:af:2f:5a:2b:30:c1:a2:cb:14: 44:4b:d4:80:f4:d4:3e:e7:72:1a:70:b3:71:f0:fc: b1:e6:d2:0d:66:bd:8f:9f:d7:6e:f9:b9:ec:ec:36: 1a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:FB:8C:CD:14:55:3C:31:1D:60:0A:93:9C:4A:6A:F2:C0:83:CB:2C X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cvuMzRRVPDEdYAqTnEpq8sCDyyw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.160.0/21 Signature Algorithm: sha256WithRSAEncryption 0a:5c:dd:85:90:09:da:98:cc:43:75:d2:5a:c1:1d:88:35:ee: 27:d6:e4:21:16:47:48:1a:24:b4:78:11:b2:0a:d0:0d:2c:8c: 5b:5a:25:8e:3a:e7:b4:22:96:f4:a5:ff:05:f4:d5:d3:66:9c: 18:47:3e:2c:19:22:ca:16:a1:ca:af:25:72:96:f2:17:7e:6e: 7c:c0:1a:ca:64:d2:89:97:ec:8c:d9:55:dd:6a:79:7c:56:0e: 3a:99:12:59:de:cb:53:73:50:67:52:b1:d6:2f:6a:c3:7d:1e: fe:df:b6:9c:7c:f4:23:b2:c9:c4:58:82:94:a9:89:66:79:2e: 12:03:b9:d6:b4:b6:a3:e1:e3:d3:5a:b5:d6:2e:fb:59:39:ea: 55:c9:cf:75:4e:46:a9:96:56:12:bd:14:44:c2:8e:27:bf:52: 7a:09:21:66:2a:72:d1:7d:99:60:32:b4:f8:43:7e:f4:df:5e: 7f:0b:08:f0:4d:89:15:33:fb:c4:52:bf:07:ee:8d:a4:8d:31: 55:99:0d:20:c7:a5:99:30:b1:5f:09:10:62:f9:d8:11:35:9b: 90:33:01:5c:75:b3:b5:25:5a:6d:01:ee:c8:f6:ab:6f:96:01: be:4f:53:4f:ee:b0:5e:9d:2d:e1:b6:5d:d9:9c:c4:42:12:54: 96:f8:6a:7a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOrcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3NDFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDcyRkI4Q0NEMTQ1NTND MzExRDYwMEE5MzlDNEE2QUYyQzA4M0NCMkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDus3fhd9GcSvkyLYBaeTO4rMpL6+cwom2kcpWBD5zybs/N6J75 1ZkilQfboD3pHSfjIHegJPUxYy1YokX+3nkXUK7n7cAvbp0E2AL1tGdg/clbFU5B OLz0+Lh8H0dvDthj0YvwFVQ3o6oiNnr0ik8U1nz2p+VUG1fOpV2k9n0F5gbV8x6D TkN/aNO7TMv+6Vy7qxyt536c/WQeadsF++lUq/XVK70tXhLfQyW1l/GwlUVM91fi VgmFevNfawy70Yg0/JY3yflsggRqLP5pGtjG8+l+PXpIR68vWiswwaLLFERL1ID0 1D7nchpws3Hw/LHm0g1mvY+f1275uezsNhrlAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUcvuMzRRVPDEdYAqTnEpq8sCDyywwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2N2dU16UlJWUERFZFlBcVRu RXBxOHNDRHl5dy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wKAwDQYJKoZIhvcNAQELBQADggEBAApc3YWQCdqYzEN10lrBHYg17ifW5CEWR0ga JLR4EbIK0A0sjFtaJY4657QilvSl/wX01dNmnBhHPiwZIsoWocqvJXKW8hd+bnzA Gspk0omX7IzZVd1qeXxWDjqZElney1NzUGdSsdYvasN9Hv7ftpx89COyycRYgpSp iWZ5LhIDuda0tqPh49NatdYu+1k56lXJz3VORqmWVhK9FETCjie/UnoJIWYqctF9 mWAytPhDfvTfXn8LCPBNiRUz+8RSvwfujaSNMVWZDSDHpZkwsV8JEGL52BE1m5Az AVx1s7UlWm0B7sj2q2+WAb5PU0/usF6dLeG2XdmcxEISVJb4ano= -----END CERTIFICATE-----Generated at Sun Aug 24 05:34:06 2025 by rpki-client