$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hn9CIaIJ7w2IqF7QD5uK6x3bldA.roa File: hn9CIaIJ7w2IqF7QD5uK6x3bldA.roa (raw, json) Hash identifier: APdK35co4ufKf8PNwv/1RazGuMhknqdga8ZGEV6WSe8= Subject key identifier: 86:7F:42:21:A2:09:EF:0D:88:A8:5E:D0:0F:9B:8A:EB:1D:DB:95:D0 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3817 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hn9CIaIJ7w2IqF7QD5uK6x3bldA.roa Signing time: Fri 22 Aug 2025 08:44:57 +0000 ROA not before: Fri 22 Aug 2025 08:44:57 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9924 IP address blocks: 211.76.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14359 (0x3817) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:44:57 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=867F4221A209EF0D88A85ED00F9B8AEB1DDB95D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6f:51:e7:4e:33:a0:22:96:b9:ce:db:2f:96: 39:72:a3:de:82:cc:f0:7d:10:93:f9:80:c2:8f:b8: e4:05:20:00:db:2c:c3:85:c8:59:c4:ba:83:6a:97: 36:0c:bf:99:8b:e5:98:0b:6c:d4:b8:ec:d9:b9:57: 2a:44:c0:fc:24:b2:d2:fb:81:48:db:1b:4b:73:63: 36:89:59:a6:a1:b7:78:b7:7f:21:c7:80:03:58:f9: 15:81:9f:a6:76:c0:a2:0f:f4:47:b6:55:cc:91:c4: 99:d9:3b:d4:ce:0d:a2:a8:ca:b7:18:34:e7:5f:1e: a7:60:02:f8:e4:ad:75:d2:78:a6:01:a7:e4:60:46: 98:16:d4:20:d1:06:28:fe:24:48:fb:f5:c8:f5:33: 51:8d:c2:65:5b:3a:85:9f:03:a3:2e:60:18:ff:74: bd:57:cd:aa:a2:30:8b:31:a1:8d:83:09:dd:99:72: 7f:e4:e8:d6:76:76:41:31:75:e8:c8:8c:24:52:e4: f2:3f:a4:30:f0:e7:68:d4:fa:67:6d:5c:86:05:cb: 0d:ea:8a:0d:77:24:bb:6e:53:b3:1e:de:b4:38:a6: 89:74:6d:68:9f:22:b0:fd:ce:7a:01:7f:d5:d7:4d: 07:2d:e9:b1:02:9e:44:6b:df:55:fb:fb:23:fe:55: b2:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:7F:42:21:A2:09:EF:0D:88:A8:5E:D0:0F:9B:8A:EB:1D:DB:95:D0 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hn9CIaIJ7w2IqF7QD5uK6x3bldA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.119.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:cc:f6:e1:be:98:01:ae:74:03:6c:89:83:d3:52:ba:16:7b: c0:1d:63:ee:81:eb:52:5e:5d:22:97:4e:7c:94:26:fc:a4:af: 22:3f:b3:e0:8c:98:c0:51:bc:f1:ac:60:c9:0e:23:98:c5:fd: 65:4a:13:33:e2:a2:69:32:70:91:23:0b:69:4f:56:7f:df:3c: 98:e7:a7:d9:ae:0f:14:e8:2c:c0:04:f5:c9:fc:be:a0:98:27: 93:56:3a:07:53:6c:a8:34:17:5b:09:32:be:b0:1b:19:16:41: 70:be:d8:50:68:68:c0:7a:c1:6b:8d:d9:9b:c6:e8:4c:50:1b: d3:e0:71:fb:92:8a:d9:9a:9a:8c:d5:e3:95:82:5d:5c:99:d1: 0d:11:27:a3:c1:ef:a2:5f:8a:e5:5e:fd:75:42:b5:d8:56:0a: 79:e3:63:ae:b2:f4:88:cb:16:ef:ad:47:1b:3e:59:0a:c6:28: 5d:17:d4:5e:d9:5e:21:54:77:ee:25:74:b5:38:a0:f0:6e:b3: 45:4f:ff:f0:62:87:fb:6b:7f:ac:7d:a5:48:17:de:d0:66:c4: 61:8b:63:69:9b:5d:20:19:f5:0d:3f:d8:5f:95:f2:e0:53:2e: 77:25:70:5e:3e:ab:e6:06:94:b3:f5:4d:5e:65:41:11:ee:3a: 16:7f:44:e0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOBcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ0NTdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDg2N0Y0MjIxQTIwOUVG MEQ4OEE4NUVEMDBGOUI4QUVCMUREQjk1RDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpb1HnTjOgIpa5ztsvljlyo96CzPB9EJP5gMKPuOQFIADbLMOF yFnEuoNqlzYMv5mL5ZgLbNS47Nm5VypEwPwkstL7gUjbG0tzYzaJWaaht3i3fyHH gANY+RWBn6Z2wKIP9Ee2VcyRxJnZO9TODaKoyrcYNOdfHqdgAvjkrXXSeKYBp+Rg RpgW1CDRBij+JEj79cj1M1GNwmVbOoWfA6MuYBj/dL1XzaqiMIsxoY2DCd2Zcn/k 6NZ2dkExdejIjCRS5PI/pDDw52jU+mdtXIYFyw3qig13JLtuU7Me3rQ4pol0bWif IrD9znoBf9XXTQct6bECnkRr31X7+yP+VbKDAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUhn9CIaIJ7w2IqF7QD5uK6x3bldAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2huOUNJYUlKN3cySXFGN1FE NXVLNngzYmxkQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADT THcwDQYJKoZIhvcNAQELBQADggEBAB/M9uG+mAGudANsiYPTUroWe8AdY+6B61Je XSKXTnyUJvykryI/s+CMmMBRvPGsYMkOI5jF/WVKEzPiomkycJEjC2lPVn/fPJjn p9muDxToLMAE9cn8vqCYJ5NWOgdTbKg0F1sJMr6wGxkWQXC+2FBoaMB6wWuN2ZvG 6ExQG9PgcfuSitmamozV45WCXVyZ0Q0RJ6PB76JfiuVe/XVCtdhWCnnjY66y9IjL Fu+tRxs+WQrGKF0X1F7ZXiFUd+4ldLU4oPBus0VP//Bih/trf6x9pUgX3tBmxGGL Y2mbXSAZ9Q0/2F+V8uBTLnclcF4+q+YGlLP1TV5lQRHuOhZ/ROA= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:53 2025 by rpki-client