$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iCpzFPfAAQdplTvOCJzsXnf7i50.roa File: iCpzFPfAAQdplTvOCJzsXnf7i50.roa (raw, json) Hash identifier: TxBif2DlCNA7BNAOLvx9IaU6tEy82t3u/3nuivE70uM= Subject key identifier: 88:2A:73:14:F7:C0:01:07:69:95:3B:CE:08:9C:EC:5E:77:FB:8B:9D Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3AF3 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iCpzFPfAAQdplTvOCJzsXnf7i50.roa Signing time: Fri 22 Aug 2025 08:47:55 +0000 ROA not before: Fri 22 Aug 2025 08:47:55 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 106.1.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15091 (0x3af3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:55 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=882A7314F7C0010769953BCE089CEC5E77FB8B9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d3:83:40:98:4b:d7:65:b9:88:c4:ea:04:2a: 9c:f8:61:e8:48:e9:ae:f9:96:ad:0e:ff:5e:bb:7c: ed:9a:a9:5d:6a:04:d7:3e:98:d8:04:e4:ad:5f:03: c7:11:cd:b5:31:2b:35:41:c8:f0:5f:f9:7e:74:a2: 55:d5:d1:f7:8d:2d:49:ac:b0:53:04:06:3d:e4:1e: ba:2c:e9:89:70:13:4f:f3:dc:ec:90:c4:2a:8c:7b: a5:1b:ca:b3:d1:55:a4:c0:e8:cc:38:83:76:67:8d: 59:95:c8:d8:5b:1e:42:79:c0:96:aa:2d:07:f5:8a: 84:dd:69:f9:eb:fd:7b:8d:72:53:d8:7e:db:c0:6c: d2:21:53:bb:cf:fc:95:e5:1c:cc:8f:a0:6e:a5:26: 79:10:af:c8:ee:b8:34:4a:f5:e4:8e:c6:7b:30:53: fe:19:8d:c8:0a:db:c3:f5:04:31:73:79:b9:0d:9a: 36:0d:de:c2:b8:f2:d8:d5:08:81:e3:e4:b2:d3:b1: d7:1a:c8:d1:e6:09:cc:e3:e4:b0:dd:1a:49:79:d6: 2d:6d:db:24:76:00:8f:d0:68:aa:93:60:02:34:e0: 78:a7:d3:28:6d:40:21:f2:0e:e1:9f:11:b8:f4:64: f1:98:42:53:f4:b5:3e:6a:7e:ad:54:b1:6d:22:73: 53:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:2A:73:14:F7:C0:01:07:69:95:3B:CE:08:9C:EC:5E:77:FB:8B:9D X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iCpzFPfAAQdplTvOCJzsXnf7i50.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.240.0/22 Signature Algorithm: sha256WithRSAEncryption 19:f4:b9:bf:3b:9a:25:0a:26:5c:10:5d:a3:bb:20:67:19:54: 0c:22:5c:a3:62:87:a8:37:ee:99:99:8f:92:10:c5:a1:cc:8b: a1:22:f6:a1:9e:5a:82:88:9f:42:21:48:3e:f0:d5:0e:48:e6: 14:b3:29:26:33:03:a5:21:65:0b:87:de:e8:0e:fc:ef:78:40: cd:86:ac:16:d6:4c:16:9e:cb:bd:56:03:ff:69:1a:fc:60:65: 0f:f4:60:85:7b:38:c0:9f:b1:cd:2b:b5:19:c7:74:40:08:c0: 78:11:13:c6:33:c3:73:ec:19:f6:f4:f5:d5:91:80:3c:36:0c: be:31:8e:11:25:10:66:e2:b2:92:47:04:e9:fb:e1:d8:02:fd: f0:e3:72:ba:fa:b0:35:a5:ca:f5:b0:2b:55:15:a4:8a:7c:0a: 3e:15:87:3f:30:08:46:b8:ee:d8:93:76:35:f2:7c:93:86:52: 52:a8:be:4e:31:c7:6a:ac:07:a7:5e:3a:ef:0b:41:09:be:0c: e8:67:9b:d3:a5:96:a1:9b:c4:01:41:6c:fa:ad:d2:08:42:07: 6e:f3:12:fe:57:85:19:6f:14:e9:cf:bd:28:3a:2c:a2:bf:86: ca:62:6d:6c:8d:a2:f3:8c:f8:79:7f:99:01:85:78:fb:00:2a: f2:12:05:04 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOvMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3NTVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDg4MkE3MzE0RjdDMDAx MDc2OTk1M0JDRTA4OUNFQzVFNzdGQjhCOUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDP04NAmEvXZbmIxOoEKpz4YehI6a75lq0O/167fO2aqV1qBNc+ mNgE5K1fA8cRzbUxKzVByPBf+X50olXV0feNLUmssFMEBj3kHros6YlwE0/z3OyQ xCqMe6UbyrPRVaTA6Mw4g3ZnjVmVyNhbHkJ5wJaqLQf1ioTdafnr/XuNclPYftvA bNIhU7vP/JXlHMyPoG6lJnkQr8juuDRK9eSOxnswU/4ZjcgK28P1BDFzebkNmjYN 3sK48tjVCIHj5LLTsdcayNHmCczj5LDdGkl51i1t2yR2AI/QaKqTYAI04Hin0yht QCHyDuGfEbj0ZPGYQlP0tT5qfq1UsW0ic1O/AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUiCpzFPfAAQdplTvOCJzsXnf7i50wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2lDcHpGUGZBQVFkcGxUdk9D SnpzWG5mN2k1MC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq AfAwDQYJKoZIhvcNAQELBQADggEBABn0ub87miUKJlwQXaO7IGcZVAwiXKNih6g3 7pmZj5IQxaHMi6Ei9qGeWoKIn0IhSD7w1Q5I5hSzKSYzA6UhZQuH3ugO/O94QM2G rBbWTBaey71WA/9pGvxgZQ/0YIV7OMCfsc0rtRnHdEAIwHgRE8Yzw3PsGfb09dWR gDw2DL4xjhElEGbispJHBOn74dgC/fDjcrr6sDWlyvWwK1UVpIp8Cj4Vhz8wCEa4 7tiTdjXyfJOGUlKovk4xx2qsB6deOu8LQQm+DOhnm9OllqGbxAFBbPqt0ghCB27z Ev5XhRlvFOnPvSg6LKK/hspibWyNovOM+Hl/mQGFePsAKvISBQQ= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:15 2025 by rpki-client