$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dxc5HC04pW7eSNNIxKOcaTwV8rY.roa File: dxc5HC04pW7eSNNIxKOcaTwV8rY.roa (raw, json) Hash identifier: qHeUcPDuMnGtSbx5KUbqDfTXXZA55LR7quuJWr7VgFU= Subject key identifier: 77:17:39:1C:2D:38:A5:6E:DE:48:D3:48:C4:A3:9C:69:3C:15:F2:B6 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3AF5 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dxc5HC04pW7eSNNIxKOcaTwV8rY.roa Signing time: Fri 22 Aug 2025 08:47:56 +0000 ROA not before: Fri 22 Aug 2025 08:47:56 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 45.64.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15093 (0x3af5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:56 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=7717391C2D38A56EDE48D348C4A39C693C15F2B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ee:ba:61:8b:e6:e8:18:68:24:2f:0c:16:a8: 49:b5:fe:91:f7:b6:df:4b:19:2a:d3:61:af:b5:0b: 72:3f:8b:89:d7:b0:f5:6a:06:23:f5:64:9f:06:0b: 64:7e:7a:e8:aa:04:58:ef:c1:20:56:18:43:db:cd: 8f:79:9c:e6:2f:27:6a:77:26:44:a3:3c:b1:51:b9: f6:9e:c3:dd:5e:63:89:86:3e:a8:81:f6:56:85:a2: 67:bf:fa:78:e4:5f:11:c7:47:81:38:3e:bb:a1:b4: 4b:57:d6:3c:a9:50:94:0c:14:05:83:58:e8:2d:99: ee:de:11:89:88:0c:e1:f7:1b:6c:10:53:ae:1e:04: dd:5f:e7:eb:6d:47:66:19:40:7b:99:4f:58:1a:6f: c1:c2:d6:70:85:92:c1:90:3c:9c:e6:da:61:11:88: f7:4e:cc:48:ff:66:b5:09:e9:30:61:77:15:9e:64: f8:4a:19:73:f6:6c:14:7a:91:fe:df:a5:24:4e:35: cb:30:77:c3:c7:4d:80:c0:45:03:8b:96:a6:db:d7: d8:c4:0b:e5:aa:d0:1d:9d:9e:b9:11:d0:ce:23:1c: 4f:2e:69:fc:ea:15:c5:75:58:42:b5:75:8f:f8:11: 95:30:dc:c3:46:97:50:7f:df:f0:e2:b8:cf:13:2b: d3:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:17:39:1C:2D:38:A5:6E:DE:48:D3:48:C4:A3:9C:69:3C:15:F2:B6 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dxc5HC04pW7eSNNIxKOcaTwV8rY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.64.28.0/22 Signature Algorithm: sha256WithRSAEncryption 15:a6:5f:17:c9:c9:1e:2e:8f:cc:4b:bb:ba:a1:97:ee:cc:6f: c9:cb:61:4b:0b:32:51:eb:19:a5:98:c7:76:94:9b:46:57:cb: 2d:d7:b3:8c:85:f0:8d:ee:33:3c:ab:5a:8b:c3:a8:c9:cc:69: d6:65:2e:4a:17:72:bd:43:41:97:47:11:ba:71:c4:9b:cf:a5: 10:76:aa:ed:64:34:da:c3:1d:47:ef:f8:d5:a5:ef:09:8f:84: 46:8a:ad:10:c1:4f:c8:e2:e8:ef:6a:c0:91:0a:92:54:4c:b4: 02:44:a8:12:df:55:fb:32:82:31:cc:65:5f:ed:fe:c6:43:28: 05:c4:4a:51:f3:18:03:49:d3:71:e2:96:d3:64:15:7a:2f:70: cc:a9:3d:e8:1d:83:a7:da:a0:83:55:e2:42:e7:c8:b8:1d:b7: 22:51:c9:d1:25:21:be:89:3a:f5:72:a7:18:e5:cd:88:fb:15: 62:85:1a:79:56:01:5f:6e:75:37:48:2f:54:7c:75:8d:3d:56: 5e:51:1a:58:29:20:6d:5d:32:8f:e9:55:cf:c1:94:2b:fa:5d: 9a:f4:42:3e:fd:e4:7c:69:20:4f:27:e5:b0:b7:34:a4:28:05: c1:a5:22:01:42:3f:fe:b9:fd:d4:31:dc:ac:17:e9:4f:d8:7e: 29:86:2d:34 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOvUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3NTZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDc3MTczOTFDMkQzOEE1 NkVERTQ4RDM0OEM0QTM5QzY5M0MxNUYyQjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDB7rphi+boGGgkLwwWqEm1/pH3tt9LGSrTYa+1C3I/i4nXsPVq BiP1ZJ8GC2R+euiqBFjvwSBWGEPbzY95nOYvJ2p3JkSjPLFRufaew91eY4mGPqiB 9laFome/+njkXxHHR4E4PruhtEtX1jypUJQMFAWDWOgtme7eEYmIDOH3G2wQU64e BN1f5+ttR2YZQHuZT1gab8HC1nCFksGQPJzm2mERiPdOzEj/ZrUJ6TBhdxWeZPhK GXP2bBR6kf7fpSRONcswd8PHTYDARQOLlqbb19jEC+Wq0B2dnrkR0M4jHE8uafzq FcV1WEK1dY/4EZUw3MNGl1B/3/DiuM8TK9MnAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUdxc5HC04pW7eSNNIxKOcaTwV8rYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2R4YzVIQzA0cFc3ZVNOTkl4 S09jYVR3VjhyWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIt QBwwDQYJKoZIhvcNAQELBQADggEBABWmXxfJyR4uj8xLu7qhl+7Mb8nLYUsLMlHr GaWYx3aUm0ZXyy3Xs4yF8I3uMzyrWovDqMnMadZlLkoXcr1DQZdHEbpxxJvPpRB2 qu1kNNrDHUfv+NWl7wmPhEaKrRDBT8ji6O9qwJEKklRMtAJEqBLfVfsygjHMZV/t /sZDKAXESlHzGANJ03HiltNkFXovcMypPegdg6faoINV4kLnyLgdtyJRydElIb6J OvVypxjlzYj7FWKFGnlWAV9udTdIL1R8dY09Vl5RGlgpIG1dMo/pVc/BlCv6XZr0 Qj795HxpIE8n5bC3NKQoBcGlIgFCP/65/dQx3KwX6U/YfimGLTQ= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:16 2025 by rpki-client