$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fWC9ghIkwccjS6CmyF9HlSIrMmg.roa File: fWC9ghIkwccjS6CmyF9HlSIrMmg.roa (raw, json) Hash identifier: 4yW9mTbMQ3u4yxP1XwgO1VWC3O3n9FrixB5rYHkagWg= Subject key identifier: 7D:60:BD:82:12:24:C1:C7:23:4B:A0:A6:C8:5F:47:95:22:2B:32:68 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 38C6 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fWC9ghIkwccjS6CmyF9HlSIrMmg.roa Signing time: Fri 22 Aug 2025 08:45:37 +0000 ROA not before: Fri 22 Aug 2025 08:45:37 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.195.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14534 (0x38c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:37 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=7D60BD821224C1C7234BA0A6C85F4795222B3268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:58:40:45:c2:fc:9b:69:4e:c8:c6:c0:7b:c6: e4:07:66:4c:6d:0e:74:91:25:6e:8c:55:47:bc:a3: 66:69:19:28:78:44:12:f0:32:7b:1d:c8:bb:4c:c7: d4:9d:58:ff:c1:81:3f:63:d4:b1:c6:ed:47:07:5a: 66:bd:a2:7e:9e:29:2f:f6:04:0d:bf:a5:e3:8b:8b: 33:d5:7b:b6:fb:44:be:47:3f:05:3d:d5:9d:9a:2a: 28:2d:f0:07:7c:d8:95:27:87:bd:23:d0:14:8b:d1: 25:1f:b4:b7:9d:35:c1:4c:23:24:0f:d0:66:c6:39: df:94:31:ff:31:0d:29:e0:07:de:35:30:80:cd:e0: d9:d5:c8:30:19:e9:c4:ca:6e:38:7a:dc:81:5a:28: ab:68:07:e7:96:9a:a2:a4:30:57:74:cd:fc:d1:34: 19:e7:99:ed:9e:57:7f:a5:3b:87:c1:01:e3:dd:ec: 8d:53:2c:ce:dd:2f:3b:c4:53:dc:7d:cb:ed:46:ae: 5f:dc:db:3f:6e:19:58:c7:83:b7:ba:a6:f3:99:80: 5a:96:62:bf:cd:ae:6a:38:b8:4e:bd:0b:fe:94:5f: 20:1e:00:6b:4b:79:51:2a:96:ff:da:57:1b:91:f6: 41:52:1a:4a:53:e5:d2:04:9c:05:1a:ad:69:ed:a4: a4:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:60:BD:82:12:24:C1:C7:23:4B:A0:A6:C8:5F:47:95:22:2B:32:68 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fWC9ghIkwccjS6CmyF9HlSIrMmg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.104.0/22 Signature Algorithm: sha256WithRSAEncryption 68:6d:a2:9b:af:17:72:7e:1e:7d:e2:b4:d1:d4:11:a2:36:58: 8a:67:fc:78:e2:2b:d8:41:2f:8b:c6:33:1d:65:0a:58:fc:67: 62:f0:35:06:c2:d0:f9:52:04:06:76:a3:07:44:59:e3:13:2f: 3a:cc:10:f8:0a:e2:f2:21:02:59:72:45:21:29:0f:3a:d6:24: 63:8b:4c:f8:df:7a:e1:2d:8e:00:eb:58:ca:84:14:98:b4:17: 2d:16:6a:4e:36:36:84:a0:c2:a2:7a:0c:23:72:e8:52:6a:f9: 2f:46:20:e4:80:2e:81:41:4b:97:ed:79:77:01:13:b4:69:f0: ef:08:4c:02:14:5c:88:18:18:f2:66:06:40:67:90:f2:0f:14: e4:20:5f:95:e0:75:97:d3:3a:b1:9a:72:76:9f:3a:50:61:21: e4:39:f3:0e:67:a4:a1:dc:7a:e5:5f:d2:ef:12:d8:18:2e:44: 60:3a:c8:9a:72:ae:cd:73:55:9f:7a:bd:49:ec:fa:8c:a7:1d: 37:2d:94:1e:39:2e:ec:50:bf:89:78:21:a2:ab:06:59:54:79: 3e:4b:c3:2a:c6:df:d3:5e:df:37:0d:f9:88:a7:c3:3d:3b:d8: 13:6f:59:09:a3:a6:6b:05:36:17:37:3e:4e:cb:86:34:72:37: 1c:a2:a0:06 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOMYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1MzdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDdENjBCRDgyMTIyNEMx QzcyMzRCQTBBNkM4NUY0Nzk1MjIyQjMyNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIWEBFwvybaU7IxsB7xuQHZkxtDnSRJW6MVUe8o2ZpGSh4RBLw MnsdyLtMx9SdWP/BgT9j1LHG7UcHWma9on6eKS/2BA2/peOLizPVe7b7RL5HPwU9 1Z2aKigt8Ad82JUnh70j0BSL0SUftLedNcFMIyQP0GbGOd+UMf8xDSngB941MIDN 4NnVyDAZ6cTKbjh63IFaKKtoB+eWmqKkMFd0zfzRNBnnme2eV3+lO4fBAePd7I1T LM7dLzvEU9x9y+1Grl/c2z9uGVjHg7e6pvOZgFqWYr/Nrmo4uE69C/6UXyAeAGtL eVEqlv/aVxuR9kFSGkpT5dIEnAUarWntpKQhAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUfWC9ghIkwccjS6CmyF9HlSIrMmgwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2ZXQzlnaElrd2NjalM2Q215 RjlIbFNJck1tZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 w2gwDQYJKoZIhvcNAQELBQADggEBAGhtopuvF3J+Hn3itNHUEaI2WIpn/HjiK9hB L4vGMx1lClj8Z2LwNQbC0PlSBAZ2owdEWeMTLzrMEPgK4vIhAllyRSEpDzrWJGOL TPjfeuEtjgDrWMqEFJi0Fy0Wak42NoSgwqJ6DCNy6FJq+S9GIOSALoFBS5fteXcB E7Rp8O8ITAIUXIgYGPJmBkBnkPIPFOQgX5XgdZfTOrGacnafOlBhIeQ58w5npKHc euVf0u8S2BguRGA6yJpyrs1zVZ96vUns+oynHTctlB45LuxQv4l4IaKrBllUeT5L wyrG39Ne3zcN+Yinwz072BNvWQmjpmsFNhc3Pk7LhjRyNxyioAY= -----END CERTIFICATE-----Generated at Sun Aug 24 07:31:58 2025 by rpki-client