$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eVE_fLTCgeepbQCM_vTbLp2wRkM.roa File: eVE_fLTCgeepbQCM_vTbLp2wRkM.roa (raw, json) Hash identifier: Bv66Ujiv87AD1UQsEYmvqUETJlHkF5R8XQyxwsmWzw0= Subject key identifier: 79:51:3F:7C:B4:C2:81:E7:A9:6D:00:8C:FE:F4:DB:2E:9D:B0:46:43 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3B21 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eVE_fLTCgeepbQCM_vTbLp2wRkM.roa Signing time: Fri 22 Aug 2025 08:48:06 +0000 ROA not before: Fri 22 Aug 2025 08:48:06 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.194.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15137 (0x3b21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:48:06 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=79513F7CB4C281E7A96D008CFEF4DB2E9DB04643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ec:dc:d8:8b:cc:2d:17:cb:3a:fd:13:4d:a0: 1e:e5:43:53:c7:bf:15:b1:48:61:9a:50:97:6f:2e: 32:d5:ce:a2:c0:e1:91:96:c9:b2:52:32:bc:bb:a2: cb:e7:5b:61:2b:6f:5a:26:d5:35:24:a7:f1:a2:4c: 7d:7b:13:66:67:df:5d:ce:10:5e:46:93:83:5a:9c: a2:8b:1f:e9:ee:0f:a7:44:df:cf:f4:bb:cb:da:61: 9f:e5:ce:06:74:97:96:58:9c:37:04:05:0b:97:aa: c1:2d:90:f6:ac:b9:70:bc:de:44:7b:2f:bd:a7:a6: 7b:a8:00:e8:d9:77:a9:6e:e3:67:05:15:92:4e:e4: 9a:82:0d:ac:b2:87:6e:bc:9b:d6:9a:70:2b:df:bf: 8c:2d:f0:64:29:ea:e2:ae:46:8c:4d:67:75:09:82: f0:94:26:26:68:01:dc:84:06:84:b2:9e:0c:17:4a: ee:f4:b2:e7:8e:b1:23:3c:d1:72:61:95:c9:9b:58: e8:88:70:38:77:38:31:c1:a7:b8:32:a6:55:c6:fa: f8:25:91:cf:b2:4a:3b:b6:ed:74:b0:a0:fa:f7:1e: ca:c9:21:50:5e:dd:c1:51:5f:5e:db:d9:66:e1:b2: 52:47:59:f0:3a:0b:2a:53:92:7b:dd:79:02:d5:f0: ed:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:51:3F:7C:B4:C2:81:E7:A9:6D:00:8C:FE:F4:DB:2E:9D:B0:46:43 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eVE_fLTCgeepbQCM_vTbLp2wRkM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.196.0/22 Signature Algorithm: sha256WithRSAEncryption 59:90:9b:e3:a7:10:5d:8f:78:4e:cb:47:dc:a5:35:e1:d9:0f: bd:2a:d7:e7:01:09:48:3a:ee:b9:f2:fa:d8:4d:27:9a:79:f6: aa:fb:26:df:62:e6:6b:f6:42:c0:b3:96:cb:f9:83:ee:1b:42: ba:77:cf:a4:3c:4f:5b:9b:41:0f:11:c0:4e:a4:8a:73:b7:2f: 62:41:18:36:0c:fb:6c:f5:c4:70:bd:c0:08:c7:42:30:08:98: b6:13:1f:04:1c:ec:74:81:6c:fb:ce:68:8b:36:53:ad:f0:28: ec:1f:76:95:d3:ed:46:fc:ff:5f:3d:f4:18:81:6e:0f:10:27: 88:18:b9:7b:79:fa:20:8e:dd:e3:b1:23:a0:44:50:d7:61:39: 40:80:56:b2:75:3c:e5:26:87:6b:80:2f:74:64:d0:d6:bf:27: d4:45:4e:44:f7:86:85:9e:90:0d:56:2d:49:50:c5:04:ba:f9: 03:51:6a:76:6e:0a:35:66:a8:c8:cb:7a:50:ab:7c:d6:2b:04: 79:89:46:6a:c8:e0:0a:93:e4:25:10:93:0f:56:83:1c:71:b7: 7e:8a:0e:b0:2d:48:dc:71:48:05:c4:1a:af:f8:62:31:e6:83: 88:c2:2e:45:12:88:a2:c2:74:f2:c0:2a:f7:2f:70:65:62:70: ae:03:a3:81 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOyEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ4MDZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDc5NTEzRjdDQjRDMjgx RTdBOTZEMDA4Q0ZFRjREQjJFOURCMDQ2NDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC97NzYi8wtF8s6/RNNoB7lQ1PHvxWxSGGaUJdvLjLVzqLA4ZGW ybJSMry7osvnW2Erb1om1TUkp/GiTH17E2Zn313OEF5Gk4NanKKLH+nuD6dE38/0 u8vaYZ/lzgZ0l5ZYnDcEBQuXqsEtkPasuXC83kR7L72npnuoAOjZd6lu42cFFZJO 5JqCDayyh268m9aacCvfv4wt8GQp6uKuRoxNZ3UJgvCUJiZoAdyEBoSyngwXSu70 sueOsSM80XJhlcmbWOiIcDh3ODHBp7gyplXG+vglkc+ySju27XSwoPr3HsrJIVBe 3cFRX17b2WbhslJHWfA6CypTknvdeQLV8O0ZAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUeVE/fLTCgeepbQCM/vTbLp2wRkMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2VWRV9mTFRDZ2VlcGJRQ01f dlRiTHAyd1JrTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wsQwDQYJKoZIhvcNAQELBQADggEBAFmQm+OnEF2PeE7LR9ylNeHZD70q1+cBCUg6 7rny+thNJ5p59qr7Jt9i5mv2QsCzlsv5g+4bQrp3z6Q8T1ubQQ8RwE6kinO3L2JB GDYM+2z1xHC9wAjHQjAImLYTHwQc7HSBbPvOaIs2U63wKOwfdpXT7Ub8/1899BiB bg8QJ4gYuXt5+iCO3eOxI6BEUNdhOUCAVrJ1POUmh2uAL3Rk0Na/J9RFTkT3hoWe kA1WLUlQxQS6+QNRanZuCjVmqMjLelCrfNYrBHmJRmrI4AqT5CUQkw9Wgxxxt36K DrAtSNxxSAXEGq/4YjHmg4jCLkUSiKLCdPLAKvcvcGVicK4Do4E= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:59 2025 by rpki-client