$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hems1YGYUlYJp-oJhVneIhQFbiY.roa File: hems1YGYUlYJp-oJhVneIhQFbiY.roa (raw, json) Hash identifier: O+a3aYsh8MDTeT7A7Dk3Wi+Xy/3A99bUqBLjEB8U6yc= Subject key identifier: 85:E9:AC:D5:81:98:52:56:09:A7:EA:09:85:59:DE:22:14:05:6E:26 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3A23 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hems1YGYUlYJp-oJhVneIhQFbiY.roa Signing time: Fri 22 Aug 2025 08:47:03 +0000 ROA not before: Fri 22 Aug 2025 08:47:03 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.193.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14883 (0x3a23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:03 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=85E9ACD58198525609A7EA098559DE2214056E26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:83:92:e6:46:ca:79:5f:cf:01:61:6b:72:59: 5f:83:9e:78:a0:5c:f8:e7:da:40:f7:6f:71:90:2c: ed:60:a3:c5:4c:6e:a5:d8:ae:be:00:36:f8:c6:3b: 94:31:b9:93:0c:87:c8:3d:ad:86:4d:e2:f3:1a:79: 7b:1c:2b:f1:0f:24:f2:04:d3:64:d5:66:e3:24:30: 9a:51:c1:eb:b6:52:e5:6f:e8:bf:22:fe:3e:4b:36: 1b:ae:6d:9d:75:79:59:5a:70:74:cf:16:66:ae:ad: c3:58:38:1e:e0:e9:f3:48:46:da:09:19:b2:c4:c7: 6d:6e:a4:fe:1c:b8:71:11:95:57:eb:15:84:6a:d0: 64:de:b6:f1:9a:83:0a:be:2e:2d:c1:17:26:23:e6: a3:36:ff:5e:ad:f2:52:aa:ab:5b:55:d9:f0:69:0f: 81:9f:9f:7e:58:5e:98:3e:79:a4:93:b4:ae:f4:64: c7:39:4d:85:b7:7f:85:c8:a7:22:c4:c0:fb:ec:ca: 5a:a8:fb:99:29:b0:26:7a:b5:3b:da:40:5d:f5:57: 56:4b:dc:bf:c0:c8:30:00:ee:75:5e:d6:ca:b7:e7: 64:b6:31:45:46:46:79:32:77:42:8a:cb:78:b4:6b: 78:99:99:78:54:19:f3:32:f0:0e:ce:da:22:40:32: 42:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:E9:AC:D5:81:98:52:56:09:A7:EA:09:85:59:DE:22:14:05:6E:26 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hems1YGYUlYJp-oJhVneIhQFbiY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.56.0/22 Signature Algorithm: sha256WithRSAEncryption 3f:d4:d0:55:de:45:6f:c3:16:c7:fe:7c:15:fa:28:81:9a:26: 19:33:cd:47:65:73:08:05:32:63:ea:a6:f4:30:bf:53:2f:72: b1:bc:9a:08:e7:c9:94:55:5a:fc:13:00:14:cc:5c:a4:49:41: ff:8d:97:25:af:06:d5:b6:7d:e6:53:40:c8:c2:46:f8:69:7a: 63:e6:b3:b7:2d:e5:06:c0:4d:9c:26:69:1f:6c:5a:97:0e:f5: ff:03:ca:0a:1d:0d:87:6a:66:d8:5b:06:3b:92:36:43:d6:92: f8:dc:f5:aa:14:41:a9:11:b1:a5:c5:e7:d5:b3:26:48:9f:a8: 33:cb:d0:9c:59:4b:04:cf:df:05:1d:dc:30:6a:7f:1a:df:ea: a3:cc:89:88:47:0c:de:0e:f8:a1:f7:21:17:62:34:f6:8f:3d: 23:de:cd:cf:c0:78:8f:d7:38:01:38:b9:e4:ab:33:34:ce:50: f8:1c:a0:4a:33:4d:9c:72:09:1c:0c:8b:5c:80:4e:51:13:77: e7:d2:d6:cf:c3:e4:be:6e:f4:7e:b5:35:26:00:45:48:f7:e6: e1:ea:25:b1:2e:13:53:ad:1d:3b:d8:c7:a6:e7:e1:e2:03:70: 13:ae:41:04:2f:e3:a7:ef:5e:2f:8c:0f:66:c0:5f:ea:1c:8e: 52:d2:88:34 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOiMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3MDNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDg1RTlBQ0Q1ODE5ODUy NTYwOUE3RUEwOTg1NTlERTIyMTQwNTZFMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNg5LmRsp5X88BYWtyWV+DnnigXPjn2kD3b3GQLO1go8VMbqXY rr4ANvjGO5QxuZMMh8g9rYZN4vMaeXscK/EPJPIE02TVZuMkMJpRweu2UuVv6L8i /j5LNhuubZ11eVlacHTPFmaurcNYOB7g6fNIRtoJGbLEx21upP4cuHERlVfrFYRq 0GTetvGagwq+Li3BFyYj5qM2/16t8lKqq1tV2fBpD4Gfn35YXpg+eaSTtK70ZMc5 TYW3f4XIpyLEwPvsylqo+5kpsCZ6tTvaQF31V1ZL3L/AyDAA7nVe1sq352S2MUVG Rnkyd0KKy3i0a3iZmXhUGfMy8A7O2iJAMkIlAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUhems1YGYUlYJp+oJhVneIhQFbiYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2hlbXMxWUdZVWxZSnAtb0po Vm5lSWhRRmJpWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wTgwDQYJKoZIhvcNAQELBQADggEBAD/U0FXeRW/DFsf+fBX6KIGaJhkzzUdlcwgF MmPqpvQwv1MvcrG8mgjnyZRVWvwTABTMXKRJQf+NlyWvBtW2feZTQMjCRvhpemPm s7ct5QbATZwmaR9sWpcO9f8DygodDYdqZthbBjuSNkPWkvjc9aoUQakRsaXF59Wz JkifqDPL0JxZSwTP3wUd3DBqfxrf6qPMiYhHDN4O+KH3IRdiNPaPPSPezc/AeI/X OAE4ueSrMzTOUPgcoEozTZxyCRwMi1yATlETd+fS1s/D5L5u9H61NSYARUj35uHq JbEuE1OtHTvYx6bn4eIDcBOuQQQv46fvXi+MD2bAX+ocjlLSiDQ= -----END CERTIFICATE-----Generated at Sun Aug 24 07:31:03 2025 by rpki-client