$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gMYPGZVR9aUwX8D46xh9ACaFlS4.roa File: gMYPGZVR9aUwX8D46xh9ACaFlS4.roa (raw, json) Hash identifier: 1jd8fsF/eVx33tq3Ltc0Rc4d7tm3s2IqOfLxjPf64tw= Subject key identifier: 80:C6:0F:19:95:51:F5:A5:30:5F:C0:F8:EB:18:7D:00:26:85:95:2E Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 39DB Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gMYPGZVR9aUwX8D46xh9ACaFlS4.roa Signing time: Fri 22 Aug 2025 08:46:45 +0000 ROA not before: Fri 22 Aug 2025 08:46:45 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.192.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14811 (0x39db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:45 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=80C60F199551F5A5305FC0F8EB187D002685952E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7e:8d:5f:87:ae:89:da:ef:53:65:2f:58:24: de:18:2b:0f:b3:46:2d:5b:c5:c0:1e:7c:a1:67:12: bb:fe:05:77:9b:8e:b2:6f:30:86:83:b0:c0:c2:d1: 4a:f3:c1:a3:fb:60:89:5a:b1:b7:a1:0d:8b:5a:c9: e0:4b:c6:83:a9:82:3f:6a:36:67:de:79:6f:ae:aa: e0:ec:28:27:8e:78:b6:5f:52:48:a6:ff:e4:3b:c5: 63:77:dd:f0:c5:f4:ea:16:e3:6c:75:18:57:ee:90: 1a:f3:ae:c8:94:33:af:c8:ad:2c:4a:8c:cc:57:91: 03:36:9f:58:f0:9d:88:a9:72:2a:41:49:ca:37:70: 94:d9:5e:2a:1f:97:73:0b:34:69:b8:07:f4:b4:5d: 74:25:b0:7c:50:fd:4c:31:34:18:9c:18:48:d5:25: 64:0c:5c:f2:66:35:a1:4c:b0:d6:13:c0:16:b1:7d: a7:09:12:58:53:6b:c3:86:f6:5d:99:de:2f:8a:26: 6f:08:c0:ec:02:f5:95:df:27:e4:e5:5c:bf:23:a7: 94:6a:d1:b0:d7:ab:9a:11:6a:62:42:ca:c7:88:5e: f0:81:98:c4:c0:33:f4:4c:32:8d:94:ef:2d:fe:7a: ef:02:10:ec:7f:2d:42:84:10:ec:2d:eb:53:f2:46: e8:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:C6:0F:19:95:51:F5:A5:30:5F:C0:F8:EB:18:7D:00:26:85:95:2E X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gMYPGZVR9aUwX8D46xh9ACaFlS4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.168.0/22 Signature Algorithm: sha256WithRSAEncryption 22:b9:00:a9:62:d5:1d:6c:e7:f8:a7:10:fd:c6:60:a0:2d:1a: 30:c9:80:11:7a:41:88:fd:30:57:8f:f9:d8:35:e5:87:1b:67: 83:a5:44:05:29:a3:af:6e:58:fa:73:eb:7d:5d:23:a4:ea:e5: bb:77:20:ff:d2:e3:07:a2:94:00:9a:b9:ae:49:77:4a:ae:45: 5f:86:23:6f:62:b3:5c:6b:ed:f7:2f:d3:fe:b0:5c:97:13:a6: 6f:7d:26:23:a2:f2:1f:41:62:f9:46:96:aa:14:79:99:17:d4: 5b:f2:82:d7:49:45:ed:4c:8f:e3:2d:09:5a:fb:ff:8d:4c:13: 63:95:a0:77:54:6b:07:c1:5b:1b:30:f2:86:e0:6a:78:bd:c6: 93:5c:ee:04:67:2c:c4:f6:05:35:39:8f:bc:65:db:10:e4:4b: 89:10:7e:6a:16:38:90:41:36:fa:46:b5:75:0e:83:ce:6a:0c: 5d:74:70:b1:1e:b5:4f:75:4f:82:42:14:02:4d:22:25:7b:a4: 2a:d7:c8:02:b3:22:19:2a:42:c8:0b:14:bf:30:01:57:71:bd: 14:ff:06:39:7b:fb:7b:82:cb:5a:29:58:89:05:72:77:fd:ea: c1:0c:78:24:8b:2e:f1:79:b9:4e:59:90:5d:11:9c:9e:d0:af: 94:dd:6a:a0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOdswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2NDVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDgwQzYwRjE5OTU1MUY1 QTUzMDVGQzBGOEVCMTg3RDAwMjY4NTk1MkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDUfo1fh66J2u9TZS9YJN4YKw+zRi1bxcAefKFnErv+BXebjrJv MIaDsMDC0UrzwaP7YIlasbehDYtayeBLxoOpgj9qNmfeeW+uquDsKCeOeLZfUkim /+Q7xWN33fDF9OoW42x1GFfukBrzrsiUM6/IrSxKjMxXkQM2n1jwnYipcipBSco3 cJTZXiofl3MLNGm4B/S0XXQlsHxQ/UwxNBicGEjVJWQMXPJmNaFMsNYTwBaxfacJ ElhTa8OG9l2Z3i+KJm8IwOwC9ZXfJ+TlXL8jp5Rq0bDXq5oRamJCyseIXvCBmMTA M/RMMo2U7y3+eu8CEOx/LUKEEOwt61PyRug7AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUgMYPGZVR9aUwX8D46xh9ACaFlS4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2dNWVBHWlZSOWFVd1g4RDQ2 eGg5QUNhRmxTNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wKgwDQYJKoZIhvcNAQELBQADggEBACK5AKli1R1s5/inEP3GYKAtGjDJgBF6QYj9 MFeP+dg15YcbZ4OlRAUpo69uWPpz631dI6Tq5bt3IP/S4weilACaua5Jd0quRV+G I29is1xr7fcv0/6wXJcTpm99JiOi8h9BYvlGlqoUeZkX1FvygtdJRe1Mj+MtCVr7 /41ME2OVoHdUawfBWxsw8obgani9xpNc7gRnLMT2BTU5j7xl2xDkS4kQfmoWOJBB NvpGtXUOg85qDF10cLEetU91T4JCFAJNIiV7pCrXyAKzIhkqQsgLFL8wAVdxvRT/ Bjl7+3uCy1opWIkFcnf96sEMeCSLLvF5uU5ZkF0RnJ7Qr5TdaqA= -----END CERTIFICATE-----Generated at Sun Aug 24 07:31:03 2025 by rpki-client