$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gGyXTiIqBjtCT5_N1jm3z_nqLPU.roa File: gGyXTiIqBjtCT5_N1jm3z_nqLPU.roa (raw, json) Hash identifier: LipU1arI4i/TB/VxfKvTK/arDHV6mNl2ZwSEYgG4i30= Subject key identifier: 80:6C:97:4E:22:2A:06:3B:42:4F:9F:CD:D6:39:B7:CF:F9:EA:2C:F5 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3A38 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gGyXTiIqBjtCT5_N1jm3z_nqLPU.roa Signing time: Fri 22 Aug 2025 08:47:08 +0000 ROA not before: Fri 22 Aug 2025 08:47:08 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.194.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14904 (0x3a38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:08 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=806C974E222A063B424F9FCDD639B7CFF9EA2CF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2c:44:ba:87:5d:a4:6a:a2:1a:71:03:06:0f: 0d:1a:5e:21:c3:75:51:e8:7a:bb:42:6a:8c:22:49: 56:61:f8:24:e0:13:e7:b4:2c:21:ba:30:45:5b:0b: 06:de:3f:57:3a:f0:14:6c:de:75:19:b1:ad:94:f0: cf:3f:93:61:da:92:f2:f8:e0:c1:a0:2a:f9:35:5e: 1b:e3:f8:31:0a:03:73:86:17:32:ec:d9:e9:d1:39: 81:f5:8d:bb:59:b0:8e:b1:5d:aa:b6:16:28:e8:b0: a2:bb:f1:94:bf:c7:a2:cb:95:7a:28:05:70:de:9d: 1c:19:50:55:4b:c3:ca:e3:0c:4a:dc:63:1d:aa:f0: 3e:eb:75:46:8c:82:c4:09:08:9c:b8:f9:21:8a:31: 2e:4c:d7:80:c0:df:76:c0:2d:22:57:ab:0b:06:d9: 1e:27:73:4d:b9:f2:17:43:14:e6:81:9a:db:9b:4e: d4:08:2b:80:ea:3a:ad:8b:1d:f6:bd:1a:c1:f0:3d: c6:e6:4e:09:37:d5:f9:a1:f0:94:0d:eb:41:60:ff: 27:cd:c3:45:71:8a:ac:09:80:7c:71:66:d2:ef:51: 38:c1:e8:bf:75:a4:bf:f0:9c:ca:5a:05:43:c7:56: eb:61:e1:87:6f:69:0c:5e:bd:21:9c:2b:69:1c:26: 0f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:6C:97:4E:22:2A:06:3B:42:4F:9F:CD:D6:39:B7:CF:F9:EA:2C:F5 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gGyXTiIqBjtCT5_N1jm3z_nqLPU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.128.0/19 Signature Algorithm: sha256WithRSAEncryption 3b:9f:f0:a9:32:6e:f3:62:30:af:48:47:23:c3:48:2c:e8:0b: 51:b9:9b:de:2a:d0:14:50:24:9c:65:e7:b6:56:95:72:7c:3f: 6e:6b:3f:70:3f:6f:40:90:e1:ed:41:50:49:2a:f9:e4:e8:a4: b8:b5:c8:41:bc:35:44:0b:48:ac:1c:e0:37:1d:4f:87:f6:d1: bc:72:3a:13:41:b9:35:36:fa:15:ec:ba:9a:1e:08:b2:e4:df: 56:d1:69:af:1a:95:09:97:d4:92:45:c6:aa:6d:2b:10:4d:7c: 58:6c:23:17:fc:41:4b:29:6a:d8:95:9c:24:52:91:6f:fb:97: 55:3d:47:9b:b2:16:2c:db:e1:a1:a8:85:73:6f:92:3f:d0:c5: 1e:e5:53:42:ca:9f:9a:f1:d9:e5:20:05:42:8d:36:af:0f:c0: 73:a5:8a:40:f2:30:07:6a:10:49:71:f4:e9:9c:c3:24:4f:5f: 4f:d9:e4:c2:9f:39:7f:3c:3a:de:0b:f6:f0:de:b2:53:38:63: 0a:ff:ba:33:ac:4f:77:e7:cd:37:4c:5c:54:98:c2:89:12:44: ee:45:e3:e1:b5:39:ab:19:81:e8:a0:c6:91:29:38:ab:5a:66: 83:c0:fd:27:e5:c7:3f:dd:f1:c2:48:95:6d:17:0d:b9:be:fc: 27:2e:0c:d9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOjgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3MDhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDgwNkM5NzRFMjIyQTA2 M0I0MjRGOUZDREQ2MzlCN0NGRjlFQTJDRjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGLES6h12kaqIacQMGDw0aXiHDdVHoertCaowiSVZh+CTgE+e0 LCG6MEVbCwbeP1c68BRs3nUZsa2U8M8/k2HakvL44MGgKvk1Xhvj+DEKA3OGFzLs 2enROYH1jbtZsI6xXaq2FijosKK78ZS/x6LLlXooBXDenRwZUFVLw8rjDErcYx2q 8D7rdUaMgsQJCJy4+SGKMS5M14DA33bALSJXqwsG2R4nc0258hdDFOaBmtubTtQI K4DqOq2LHfa9GsHwPcbmTgk31fmh8JQN60Fg/yfNw0VxiqwJgHxxZtLvUTjB6L91 pL/wnMpaBUPHVuth4YdvaQxevSGcK2kcJg/PAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUgGyXTiIqBjtCT5/N1jm3z/nqLPUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2dHeVhUaUlxQmp0Q1Q1X04x am0zel9ucUxQVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV7 woAwDQYJKoZIhvcNAQELBQADggEBADuf8KkybvNiMK9IRyPDSCzoC1G5m94q0BRQ JJxl57ZWlXJ8P25rP3A/b0CQ4e1BUEkq+eTopLi1yEG8NUQLSKwc4DcdT4f20bxy OhNBuTU2+hXsupoeCLLk31bRaa8alQmX1JJFxqptKxBNfFhsIxf8QUspatiVnCRS kW/7l1U9R5uyFizb4aGohXNvkj/QxR7lU0LKn5rx2eUgBUKNNq8PwHOlikDyMAdq EElx9OmcwyRPX0/Z5MKfOX88Ot4L9vDeslM4Ywr/ujOsT3fnzTdMXFSYwokSRO5F 4+G1OasZgeigxpEpOKtaZoPA/Sflxz/d8cJIlW0XDbm+/CcuDNk= -----END CERTIFICATE-----Generated at Sun Aug 24 05:32:11 2025 by rpki-client