$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/f-vIgsLWC1twUGp7DwdflR9JwQc.roa File: f-vIgsLWC1twUGp7DwdflR9JwQc.roa (raw, json) Hash identifier: rQ/JMPwGFztiQnvlPKGDZCwGj7wbW6NPZQ1L8LHdqWk= Subject key identifier: 7F:EB:C8:82:C2:D6:0B:5B:70:50:6A:7B:0F:07:5F:95:1F:49:C1:07 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 388E Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/f-vIgsLWC1twUGp7DwdflR9JwQc.roa Signing time: Fri 22 Aug 2025 08:45:25 +0000 ROA not before: Fri 22 Aug 2025 08:45:25 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 106.1.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14478 (0x388e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:25 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=7FEBC882C2D60B5B70506A7B0F075F951F49C107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4f:ec:c1:50:a1:eb:0a:46:29:78:ac:e4:96: ea:78:aa:f5:76:f8:82:9b:3d:18:34:9e:40:0e:18: 74:08:5e:c0:19:9c:33:13:df:09:08:b8:64:9b:ad: ec:17:f2:55:60:ce:f6:43:ba:c5:f4:b1:7c:f9:37: 83:c4:56:ad:fd:6e:e9:8f:1a:c7:e7:85:a9:5e:30: b8:7d:70:01:b2:ab:75:2d:9d:7e:d6:b4:8b:f9:fa: b1:e8:cc:57:5f:72:5d:66:28:f2:07:aa:f9:db:61: 07:fc:58:ec:3a:8e:73:65:83:31:56:51:b6:f7:e6: 43:e6:72:5c:4c:c2:7f:8c:c2:98:7e:ea:f3:2b:5a: cb:1c:3c:d0:56:d9:d6:ec:c7:44:ca:4b:2f:79:0d: ce:56:75:35:19:d3:87:c0:a7:48:67:ff:37:b3:08: d4:00:ed:59:ad:40:c8:13:bb:2d:9f:39:c5:90:ba: a1:9e:03:73:61:4f:0c:68:98:05:1e:5d:6d:a6:ac: d6:c9:71:09:ad:1a:12:7a:6f:7b:ff:3c:5f:29:ef: dd:64:f7:7f:a3:1e:db:d9:0d:45:fe:9f:9f:bf:d4: 52:06:27:8d:3e:69:00:2d:80:05:45:98:47:88:3a: 3d:da:d9:44:ed:6b:dc:b1:d1:cd:d9:79:0e:7d:f6: b0:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:EB:C8:82:C2:D6:0B:5B:70:50:6A:7B:0F:07:5F:95:1F:49:C1:07 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/f-vIgsLWC1twUGp7DwdflR9JwQc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.69.0/24 Signature Algorithm: sha256WithRSAEncryption 14:fa:ca:d0:c6:f2:3f:13:03:1a:2b:ed:96:87:a8:0c:55:c1: ab:f9:07:28:ac:10:ca:bd:e2:d9:9d:70:e4:3c:b6:64:9e:c9: 6e:b3:99:80:12:60:be:7a:94:d9:a5:ea:53:88:d6:e8:52:de: ad:c0:45:b2:2d:e3:2f:9e:08:da:74:15:15:69:be:2c:90:7f: ae:14:18:5a:1f:3c:f5:2c:41:b1:33:35:37:9b:d7:d9:fa:35: dc:bf:4b:03:dd:fc:97:ee:a5:f9:2e:4b:61:61:64:ab:d2:f9: a1:d3:2f:82:cd:85:05:a2:d8:ed:65:21:82:69:b3:55:34:9c: 2c:bf:be:05:ae:db:39:e6:70:e2:c6:8b:96:df:c4:4a:b9:23: f2:1a:1b:c0:53:4b:c2:4b:55:76:ec:f7:7f:a1:a9:eb:39:d0: 2f:4c:49:59:16:dc:3a:1f:a5:54:b7:e2:45:72:36:82:fc:97: 41:6b:25:bb:8d:e1:9f:ae:cc:b6:ce:b9:6a:18:b6:11:99:5b: cd:86:31:43:ac:12:bc:01:74:d0:35:c2:34:2f:28:f2:9e:e9: a3:0b:2e:56:88:b5:e4:63:85:6b:3f:2b:3f:e9:66:47:c8:c3: e4:39:9c:e6:4e:0c:01:03:6b:c9:83:87:d3:5a:07:53:03:0f: 0b:f0:9d:35 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOI4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1MjVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDdGRUJDODgyQzJENjBC NUI3MDUwNkE3QjBGMDc1Rjk1MUY0OUMxMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQT+zBUKHrCkYpeKzklup4qvV2+IKbPRg0nkAOGHQIXsAZnDMT 3wkIuGSbrewX8lVgzvZDusX0sXz5N4PEVq39bumPGsfnhaleMLh9cAGyq3UtnX7W tIv5+rHozFdfcl1mKPIHqvnbYQf8WOw6jnNlgzFWUbb35kPmclxMwn+Mwph+6vMr WsscPNBW2dbsx0TKSy95Dc5WdTUZ04fAp0hn/zezCNQA7VmtQMgTuy2fOcWQuqGe A3NhTwxomAUeXW2mrNbJcQmtGhJ6b3v/PF8p791k93+jHtvZDUX+n5+/1FIGJ40+ aQAtgAVFmEeIOj3a2UTta9yx0c3ZeQ599rC5AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUf+vIgsLWC1twUGp7DwdflR9JwQcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2Ytdklnc0xXQzF0d1VHcDdE d2RmbFI5SndRYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq AUUwDQYJKoZIhvcNAQELBQADggEBABT6ytDG8j8TAxor7ZaHqAxVwav5ByisEMq9 4tmdcOQ8tmSeyW6zmYASYL56lNml6lOI1uhS3q3ARbIt4y+eCNp0FRVpviyQf64U GFofPPUsQbEzNTeb19n6Ndy/SwPd/JfupfkuS2FhZKvS+aHTL4LNhQWi2O1lIYJp s1U0nCy/vgWu2znmcOLGi5bfxEq5I/IaG8BTS8JLVXbs93+hqes50C9MSVkW3Dof pVS34kVyNoL8l0FrJbuN4Z+uzLbOuWoYthGZW82GMUOsErwBdNA1wjQvKPKe6aML LlaIteRjhWs/Kz/pZkfIw+Q5nOZODAEDa8mDh9NaB1MDDwvwnTU= -----END CERTIFICATE-----Generated at Sun Aug 24 07:24:12 2025 by rpki-client