$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hvr9NGkqdo2Bbe789eI2XWndR24.roa File: hvr9NGkqdo2Bbe789eI2XWndR24.roa (raw, json) Hash identifier: IPWTfT4neU5BkoP6aZP+YK4Wm3ODD4I8cM4ly5XfY3k= Subject key identifier: 86:FA:FD:34:69:2A:76:8D:81:6D:EE:FC:F5:E2:36:5D:69:DD:47:6E Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3B0F Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hvr9NGkqdo2Bbe789eI2XWndR24.roa Signing time: Fri 22 Aug 2025 08:48:02 +0000 ROA not before: Fri 22 Aug 2025 08:48:02 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 118.233.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15119 (0x3b0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:48:02 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=86FAFD34692A768D816DEEFCF5E2365D69DD476E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:50:a9:fd:9a:1a:bc:71:16:d8:46:49:21:6a: 2f:4e:28:49:95:c9:91:1d:51:99:5b:48:a0:10:82: 57:0b:c6:7b:db:30:d2:91:72:fa:f0:fe:67:95:e8: c7:60:33:e6:e6:85:3a:89:90:30:1e:17:2d:f3:f9: 64:8f:4f:34:31:10:d3:bf:ec:ab:f2:2f:5b:1a:b9: 2e:89:18:61:60:1f:26:ce:71:16:5f:18:87:7f:02: c1:9c:9e:68:34:12:d4:ab:76:0d:e2:52:32:f0:29: 38:02:3e:18:6d:ac:b3:a1:d3:2d:14:b4:99:df:bc: 1a:99:c1:d5:c4:c3:32:bb:6e:f7:79:b2:3a:c4:f9: 4a:1f:8f:b9:bb:be:28:cf:5b:59:3c:be:60:88:d7: c3:4e:1f:35:40:5b:ef:35:a5:6b:9d:78:09:7c:07: e6:c1:00:f8:73:53:fd:ea:ca:03:65:89:37:26:24: 41:6a:48:df:ba:12:ff:ec:6a:15:d0:4b:27:63:18: d2:6b:9d:2c:1e:67:5c:09:19:a1:f5:3a:26:c7:3c: 56:21:01:78:4b:8a:9c:8e:9c:ad:20:4c:e5:f4:b2: d2:b3:cb:7e:50:e5:53:59:ca:d7:ec:6f:00:7b:0f: 0a:85:23:a9:b9:90:cb:70:1b:81:86:f9:86:67:27: f5:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:FA:FD:34:69:2A:76:8D:81:6D:EE:FC:F5:E2:36:5D:69:DD:47:6E X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hvr9NGkqdo2Bbe789eI2XWndR24.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.100.0/22 Signature Algorithm: sha256WithRSAEncryption 5c:88:84:f9:b9:8b:8d:46:56:3b:67:d9:61:f4:c7:91:07:37: fe:60:ea:08:92:92:00:aa:37:19:61:05:e4:1f:e0:26:f8:3f: b3:be:61:be:7d:23:18:4c:17:72:08:57:6e:15:e7:19:4f:5d: a5:d3:31:e4:52:2f:ed:80:29:b4:bf:8a:a7:c3:1a:73:8e:32: 6e:29:68:a5:c7:ff:0d:7b:fc:f7:07:ed:6e:6f:c2:b5:08:d2: 90:02:5f:0e:45:69:f6:a3:af:26:a7:e8:90:88:56:d6:8b:21: 23:21:4d:c0:4e:3e:84:65:5a:6d:c1:b9:20:6f:ce:db:68:f6: ad:7b:2d:d1:0d:53:21:63:fd:4d:e1:a3:7b:0f:83:a4:cd:c6: ac:ac:9b:34:6c:0a:aa:22:53:48:ee:8c:77:30:27:0a:ef:65: 96:a1:2b:a6:44:88:d2:52:d3:b6:94:40:41:78:d2:a5:33:99: 8a:57:57:39:46:2c:a0:37:28:63:5e:4b:3c:fd:2c:28:5a:60: a3:7c:fb:99:f6:e4:41:6e:1d:db:94:a7:a0:84:d5:60:b4:a0: 85:a7:62:71:92:c9:3f:20:1f:30:f5:cb:9a:4f:9d:12:74:f2: 2f:5b:cc:2a:fd:6c:43:99:e8:f4:4c:81:3a:d1:fb:59:87:b2: ff:59:20:34 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOw8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ4MDJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDg2RkFGRDM0NjkyQTc2 OEQ4MTZERUVGQ0Y1RTIzNjVENjlERDQ3NkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3UKn9mhq8cRbYRkkhai9OKEmVyZEdUZlbSKAQglcLxnvbMNKR cvrw/meV6MdgM+bmhTqJkDAeFy3z+WSPTzQxENO/7KvyL1sauS6JGGFgHybOcRZf GId/AsGcnmg0EtSrdg3iUjLwKTgCPhhtrLOh0y0UtJnfvBqZwdXEwzK7bvd5sjrE +Uofj7m7vijPW1k8vmCI18NOHzVAW+81pWudeAl8B+bBAPhzU/3qygNliTcmJEFq SN+6Ev/sahXQSydjGNJrnSweZ1wJGaH1OibHPFYhAXhLipyOnK0gTOX0stKzy35Q 5VNZytfsbwB7DwqFI6m5kMtwG4GG+YZnJ/XJAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUhvr9NGkqdo2Bbe789eI2XWndR24wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2h2cjlOR2txZG8yQmJlNzg5 ZUkyWFduZFIyNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6WQwDQYJKoZIhvcNAQELBQADggEBAFyIhPm5i41GVjtn2WH0x5EHN/5g6giSkgCq NxlhBeQf4Cb4P7O+Yb59IxhMF3IIV24V5xlPXaXTMeRSL+2AKbS/iqfDGnOOMm4p aKXH/w17/PcH7W5vwrUI0pACXw5Fafajryan6JCIVtaLISMhTcBOPoRlWm3BuSBv ztto9q17LdENUyFj/U3ho3sPg6TNxqysmzRsCqoiU0jujHcwJwrvZZahK6ZEiNJS 07aUQEF40qUzmYpXVzlGLKA3KGNeSzz9LChaYKN8+5n25EFuHduUp6CE1WC0oIWn YnGSyT8gHzD1y5pPnRJ08i9bzCr9bEOZ6PRMgTrR+1mHsv9ZIDQ= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:47 2025 by rpki-client