$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eyWz8D_ZgyhtaxYJYdoewAAdGtQ.roa File: eyWz8D_ZgyhtaxYJYdoewAAdGtQ.roa (raw, json) Hash identifier: 7NbJ3me79HDeKyeHSTOnVpYH+dKXCFbeVB/up2k7aic= Subject key identifier: 7B:25:B3:F0:3F:D9:83:28:6D:6B:16:09:61:DA:1E:C0:00:1D:1A:D4 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3904 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eyWz8D_ZgyhtaxYJYdoewAAdGtQ.roa Signing time: Fri 22 Aug 2025 08:45:52 +0000 ROA not before: Fri 22 Aug 2025 08:45:52 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 106.1.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14596 (0x3904) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:52 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=7B25B3F03FD983286D6B160961DA1EC0001D1AD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a6:63:e0:4f:9c:91:49:3a:2c:2a:25:ef:c8: e4:b9:7d:7a:7b:d2:53:dd:ed:81:d5:d6:c3:aa:47: 7a:15:e6:aa:39:01:5a:84:f0:fd:f0:b1:01:59:61: b0:4e:3e:21:51:d6:2d:02:69:51:bc:16:63:eb:2e: 91:3a:82:82:ff:83:84:5d:50:99:4e:bd:f8:2b:33: c5:e7:90:99:84:1d:b6:aa:69:2d:c0:5b:24:82:83: 6a:af:3d:42:63:55:ad:d9:6c:29:8e:1c:b8:a3:8a: de:96:51:50:3b:cd:6c:20:de:95:12:a0:68:d9:48: da:50:7f:d6:4e:fb:be:56:1b:c5:f4:66:de:14:98: 1b:a6:40:7b:f5:84:bf:ac:88:d5:dd:e8:65:7b:dc: 01:21:b2:5f:eb:bd:02:0e:71:44:d5:5b:50:63:09: 03:75:7f:d6:23:01:88:7d:b2:31:14:6e:68:11:73: 65:df:4f:0a:66:f6:14:01:f5:d5:2a:57:65:22:1f: de:21:ff:63:0e:67:29:f1:c4:e6:20:96:f2:86:a6: f8:89:cf:27:3f:c4:b7:8d:35:34:d0:88:fa:c7:c3: 51:22:b8:54:a0:d0:90:d0:b2:24:36:d6:f5:b1:0a: d3:6a:58:2f:51:d4:20:5e:9a:24:0c:8b:87:d3:54: a8:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:25:B3:F0:3F:D9:83:28:6D:6B:16:09:61:DA:1E:C0:00:1D:1A:D4 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eyWz8D_ZgyhtaxYJYdoewAAdGtQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.108.0/23 Signature Algorithm: sha256WithRSAEncryption 81:d5:27:b3:35:4b:dc:17:e1:bd:ea:6a:4a:d9:b6:71:46:24: df:19:2e:d5:4d:45:d4:77:5a:82:35:d7:ef:18:9d:c5:d9:02: 5a:de:14:b0:59:2c:07:c8:95:54:56:4c:ec:50:b5:f9:1a:3d: 08:28:74:0f:10:85:27:51:ed:6b:a7:b4:90:68:1a:77:71:7d: 44:3a:ce:f5:f4:14:27:c5:b1:e4:9f:07:ac:ae:05:02:59:61: 78:50:ae:d9:14:2e:cb:77:bc:40:dc:da:16:de:50:ec:3d:18: 6b:3c:37:3a:f8:59:12:58:dc:47:f3:31:5f:e9:6a:09:53:71: 5e:c3:53:88:24:eb:fa:1b:35:67:f9:69:44:97:b0:c4:a3:dc: 02:5a:e9:6d:cf:a8:04:3f:ab:df:ec:e9:98:a3:86:52:1d:c8: 1f:78:b0:54:86:ae:8a:90:ed:f4:fe:df:da:be:1a:b6:fa:03: 58:9d:da:77:7c:74:c8:87:76:d0:ac:76:d1:71:7a:d7:1f:b1: c4:af:b4:e7:ea:fd:15:bb:5d:3c:09:7a:de:14:83:71:a2:64: 4d:71:9a:d5:5c:4b:f6:f2:1b:31:e1:ba:7e:df:79:2d:1b:d4: b0:de:ca:be:07:8f:eb:60:25:91:4e:05:01:ad:03:d2:4a:fe: 8d:c9:66:d5 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOQQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1NTJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDdCMjVCM0YwM0ZEOTgz Mjg2RDZCMTYwOTYxREExRUMwMDAxRDFBRDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDbpmPgT5yRSTosKiXvyOS5fXp70lPd7YHV1sOqR3oV5qo5AVqE 8P3wsQFZYbBOPiFR1i0CaVG8FmPrLpE6goL/g4RdUJlOvfgrM8XnkJmEHbaqaS3A WySCg2qvPUJjVa3ZbCmOHLijit6WUVA7zWwg3pUSoGjZSNpQf9ZO+75WG8X0Zt4U mBumQHv1hL+siNXd6GV73AEhsl/rvQIOcUTVW1BjCQN1f9YjAYh9sjEUbmgRc2Xf Twpm9hQB9dUqV2UiH94h/2MOZynxxOYglvKGpviJzyc/xLeNNTTQiPrHw1EiuFSg 0JDQsiQ21vWxCtNqWC9R1CBemiQMi4fTVKjfAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUeyWz8D/ZgyhtaxYJYdoewAAdGtQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2V5V3o4RF9aZ3lodGF4WUpZ ZG9ld0FBZEd0US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFq AWwwDQYJKoZIhvcNAQELBQADggEBAIHVJ7M1S9wX4b3qakrZtnFGJN8ZLtVNRdR3 WoI11+8YncXZAlreFLBZLAfIlVRWTOxQtfkaPQgodA8QhSdR7WuntJBoGndxfUQ6 zvX0FCfFseSfB6yuBQJZYXhQrtkULst3vEDc2hbeUOw9GGs8Nzr4WRJY3EfzMV/p aglTcV7DU4gk6/obNWf5aUSXsMSj3AJa6W3PqAQ/q9/s6ZijhlIdyB94sFSGroqQ 7fT+39q+Grb6A1id2nd8dMiHdtCsdtFxetcfscSvtOfq/RW7XTwJet4Ug3GiZE1x mtVcS/byGzHhun7feS0b1LDeyr4Hj+tgJZFOBQGtA9JK/o3JZtU= -----END CERTIFICATE-----Generated at Sun Aug 24 07:30:59 2025 by rpki-client