$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iE3iVOEpmuzTKMvGt2PZCnUFnYs.roa File: iE3iVOEpmuzTKMvGt2PZCnUFnYs.roa (raw, json) Hash identifier: Wfc1qjONeKYg7rFC88x3a4phZgGCLTLUWqU0mvqZGWQ= Subject key identifier: 88:4D:E2:54:E1:29:9A:EC:D3:28:CB:C6:B7:63:D9:0A:75:05:9D:8B Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 399C Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iE3iVOEpmuzTKMvGt2PZCnUFnYs.roa Signing time: Fri 22 Aug 2025 08:46:28 +0000 ROA not before: Fri 22 Aug 2025 08:46:28 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.192.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14748 (0x399c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:28 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=884DE254E1299AECD328CBC6B763D90A75059D8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e1:5c:31:bd:c7:cb:bd:18:79:20:b7:e2:70: 3d:78:e0:cd:d0:99:9a:76:ec:2b:83:f6:1c:74:f1: 4f:0c:c6:0e:7e:18:a2:43:66:b6:81:95:fc:54:3e: 9d:82:be:e3:23:74:c9:df:77:5b:37:de:db:ec:5d: c3:88:06:52:43:07:e6:8f:37:73:d6:7b:fb:01:0c: 30:6c:c9:46:16:f6:d7:c5:49:82:f4:6a:b8:89:d6: e4:be:fa:3b:78:f5:20:56:eb:fa:a4:4b:41:85:5d: 23:97:24:8d:42:3c:cd:c5:a5:bb:0c:40:f9:21:59: b6:e0:1b:4b:3b:ae:75:b0:c7:cf:5a:88:d4:9b:80: bf:42:5f:60:ad:63:05:ed:ef:32:1e:fa:52:e6:cc: 3a:96:c1:46:85:08:3e:d7:83:8b:5f:cb:c4:8c:f7: 28:7b:a5:89:15:17:4b:82:6a:be:5b:ac:9b:3a:bc: 73:b6:91:eb:3f:06:f7:f3:02:16:95:2f:bc:38:4a: 8a:ac:a3:56:6a:f9:35:84:72:85:d1:8c:16:74:84: de:40:9f:ba:9e:03:ce:fd:8a:65:7d:73:ea:c3:08: 6b:5d:8f:67:91:11:82:a8:47:9f:7a:a0:c6:14:5c: 8a:b9:aa:9f:19:52:c2:cd:f0:64:d3:64:c2:dd:6e: 4e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:4D:E2:54:E1:29:9A:EC:D3:28:CB:C6:B7:63:D9:0A:75:05:9D:8B X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iE3iVOEpmuzTKMvGt2PZCnUFnYs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.164.0/22 Signature Algorithm: sha256WithRSAEncryption 4c:cc:8b:a7:58:45:e7:b1:87:0b:68:d4:ee:00:60:87:b1:8b: 68:1b:72:0f:80:5a:e0:c1:11:80:61:c5:89:33:42:7c:e7:49: 48:02:e4:d1:78:60:ee:2e:35:57:d8:5f:b5:b9:85:98:dc:e7: 34:97:93:3c:7b:fc:cc:bc:3a:2c:7d:b4:1d:97:8a:70:b7:ec: 0c:e3:3d:58:a7:b3:33:2d:c1:65:37:84:ba:50:cf:ef:48:ee: 6e:7c:89:02:3f:5b:75:76:f6:7a:10:5a:db:1f:c6:ef:c5:4b: 9f:59:25:32:2e:1e:36:14:90:f8:bb:98:d4:be:c9:49:c0:00: a5:74:ea:a1:95:3b:a4:4d:57:e5:00:13:be:14:77:1b:30:54: 65:c9:8a:cb:e8:ed:2d:b2:15:74:3b:a9:08:98:5d:e0:f8:5d: 26:e6:0d:2a:f6:83:af:14:be:22:b1:c0:68:e4:c4:ed:18:6b: e6:33:71:3a:f4:db:b5:18:67:9c:80:90:73:0e:9e:b8:f6:ec: 80:88:0e:e7:ba:c2:e2:cb:6b:40:2c:07:3e:1c:da:a7:9a:b2: 5e:4a:0b:a2:1c:89:e4:a1:c5:5b:2a:52:6c:34:17:17:6b:2e: aa:93:80:f5:8f:87:25:d7:19:b5:95:a7:01:f1:3d:e1:2b:06: 20:76:1b:e8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOZwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2MjhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDg4NERFMjU0RTEyOTlB RUNEMzI4Q0JDNkI3NjNEOTBBNzUwNTlEOEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCq4VwxvcfLvRh5ILficD144M3QmZp27CuD9hx08U8Mxg5+GKJD ZraBlfxUPp2CvuMjdMnfd1s33tvsXcOIBlJDB+aPN3PWe/sBDDBsyUYW9tfFSYL0 ariJ1uS++jt49SBW6/qkS0GFXSOXJI1CPM3FpbsMQPkhWbbgG0s7rnWwx89aiNSb gL9CX2CtYwXt7zIe+lLmzDqWwUaFCD7Xg4tfy8SM9yh7pYkVF0uCar5brJs6vHO2 kes/BvfzAhaVL7w4Soqso1Zq+TWEcoXRjBZ0hN5An7qeA879imV9c+rDCGtdj2eR EYKoR596oMYUXIq5qp8ZUsLN8GTTZMLdbk5/AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUiE3iVOEpmuzTKMvGt2PZCnUFnYswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2lFM2lWT0VwbXV6VEtNdkd0 MlBaQ25VRm5Zcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wKQwDQYJKoZIhvcNAQELBQADggEBAEzMi6dYReexhwto1O4AYIexi2gbcg+AWuDB EYBhxYkzQnznSUgC5NF4YO4uNVfYX7W5hZjc5zSXkzx7/My8Oix9tB2XinC37Azj PVinszMtwWU3hLpQz+9I7m58iQI/W3V29noQWtsfxu/FS59ZJTIuHjYUkPi7mNS+ yUnAAKV06qGVO6RNV+UAE74UdxswVGXJisvo7S2yFXQ7qQiYXeD4XSbmDSr2g68U viKxwGjkxO0Ya+YzcTr027UYZ5yAkHMOnrj27ICIDue6wuLLa0AsBz4c2qeasl5K C6IcieShxVsqUmw0FxdrLqqTgPWPhyXXGbWVpwHxPeErBiB2G+g= -----END CERTIFICATE-----Generated at Sun Aug 24 07:33:18 2025 by rpki-client