$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gAPeNPipNeVYCzsRlp_LKCZ2Qmk.roa File: gAPeNPipNeVYCzsRlp_LKCZ2Qmk.roa (raw, json) Hash identifier: VLQLsoDf1v2X1dgmZ+gykBXz1KTcchWf1TfP3wp/qSs= Subject key identifier: 80:03:DE:34:F8:A9:35:E5:58:0B:3B:11:96:9F:CB:28:26:76:42:69 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3ADA Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gAPeNPipNeVYCzsRlp_LKCZ2Qmk.roa Signing time: Fri 22 Aug 2025 08:47:50 +0000 ROA not before: Fri 22 Aug 2025 08:47:50 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 106.1.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15066 (0x3ada) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:50 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=8003DE34F8A935E5580B3B11969FCB2826764269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:55:88:11:fb:7d:3d:4b:fb:74:9f:d5:72:9d: 8b:42:61:17:93:df:05:42:80:0b:8f:5f:2a:b2:b6: 80:02:76:af:83:1c:1f:83:bf:de:0b:a3:ba:21:b8: 99:a0:fe:4e:b1:64:ab:41:a5:21:5d:8e:98:ff:8a: 88:49:1d:51:a7:09:aa:09:77:5b:50:99:07:74:8e: 8f:b7:8a:72:fc:0d:ed:00:a1:ca:ad:d4:61:f9:e9: 54:b5:34:cd:cd:df:2b:b6:df:9d:7f:e0:36:32:b0: c7:40:a2:9a:ec:ef:97:84:92:b0:08:39:56:b1:3c: ad:0f:55:fe:24:7a:d0:ee:3d:66:c5:19:50:d8:9a: 53:74:70:36:6b:ac:9e:a2:1a:21:2a:10:08:37:0b: 45:c6:b4:ef:cc:53:d7:d1:fe:89:74:1d:a7:32:3c: 62:f0:e1:68:03:f8:96:b7:ae:7e:fb:0d:75:22:f9: db:35:77:2e:88:37:4f:23:e8:aa:be:77:46:26:45: 9f:01:6f:db:76:a3:d5:e4:7d:e8:4e:82:51:2b:2d: 86:78:e9:9c:1d:5a:63:ea:98:03:01:55:48:7c:66: 3a:cb:2b:d4:a0:ef:89:1d:d2:f9:5f:84:41:cc:95: fe:82:01:6e:fe:c3:87:29:77:02:50:99:e6:dd:90: e2:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:03:DE:34:F8:A9:35:E5:58:0B:3B:11:96:9F:CB:28:26:76:42:69 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gAPeNPipNeVYCzsRlp_LKCZ2Qmk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.224.0/21 Signature Algorithm: sha256WithRSAEncryption 9d:b4:cb:2b:f9:79:31:eb:a3:b6:56:9b:cc:7e:50:eb:1d:a6: 4f:ed:d2:be:e9:b5:01:e5:06:71:fd:28:cc:f3:8d:fd:05:39: 2d:9b:bc:3d:6e:58:b1:c7:d2:f6:a3:60:37:46:93:6b:bc:33: 20:fd:44:e4:5d:56:97:b9:aa:3d:f7:21:0c:a3:e9:ce:d0:32: ec:90:d2:fd:f8:24:22:c8:05:fc:a6:ac:03:2c:c4:52:7d:8d: 19:5d:28:bd:d1:3b:c2:53:02:89:6d:c4:e5:be:1a:b3:0b:88: 8a:c6:6d:00:28:25:95:66:9c:e9:4f:49:4a:0f:0d:c2:6f:92: ae:fe:b1:6b:be:9a:a8:d3:41:1a:14:2d:e4:52:fa:06:6b:fd: 0a:df:8e:7d:b5:a4:a6:9d:9c:f3:cb:2e:c5:d8:34:6b:5c:32: e0:93:77:ca:be:13:23:cb:d7:eb:d6:cb:20:c4:ec:f5:99:c0: 98:62:0b:92:7a:b4:36:6a:25:73:03:3e:05:f2:20:11:6f:54: 01:14:99:cd:3f:6e:ca:1f:e5:8d:60:fe:af:73:8a:f5:e2:f7: de:35:ae:0b:69:b0:87:2e:71:33:0d:62:02:fd:5d:1a:52:b9: a4:24:9d:6c:cd:c5:23:dd:05:85:7c:3a:99:2b:4d:da:a0:e2: 7c:03:12:b3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOtowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3NTBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDgwMDNERTM0RjhBOTM1 RTU1ODBCM0IxMTk2OUZDQjI4MjY3NjQyNjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCmVYgR+309S/t0n9VynYtCYReT3wVCgAuPXyqytoACdq+DHB+D v94Lo7ohuJmg/k6xZKtBpSFdjpj/iohJHVGnCaoJd1tQmQd0jo+3inL8De0Aocqt 1GH56VS1NM3N3yu2351/4DYysMdAoprs75eEkrAIOVaxPK0PVf4ketDuPWbFGVDY mlN0cDZrrJ6iGiEqEAg3C0XGtO/MU9fR/ol0HacyPGLw4WgD+Ja3rn77DXUi+ds1 dy6IN08j6Kq+d0YmRZ8Bb9t2o9XkfehOglErLYZ46ZwdWmPqmAMBVUh8ZjrLK9Sg 74kd0vlfhEHMlf6CAW7+w4cpdwJQmebdkOIbAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUgAPeNPipNeVYCzsRlp/LKCZ2QmkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2dBUGVOUGlwTmVWWUN6c1Js cF9MS0NaMlFtay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBANq AeAwDQYJKoZIhvcNAQELBQADggEBAJ20yyv5eTHro7ZWm8x+UOsdpk/t0r7ptQHl BnH9KMzzjf0FOS2bvD1uWLHH0vajYDdGk2u8MyD9RORdVpe5qj33IQyj6c7QMuyQ 0v34JCLIBfymrAMsxFJ9jRldKL3RO8JTAoltxOW+GrMLiIrGbQAoJZVmnOlPSUoP DcJvkq7+sWu+mqjTQRoULeRS+gZr/Qrfjn21pKadnPPLLsXYNGtcMuCTd8q+EyPL 1+vWyyDE7PWZwJhiC5J6tDZqJXMDPgXyIBFvVAEUmc0/bsof5Y1g/q9zivXi9941 rgtpsIcucTMNYgL9XRpSuaQknWzNxSPdBYV8OpkrTdqg4nwDErM= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:56 2025 by rpki-client