$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iTC1xn2TRpPKus0J5iqVEOitrM0.roa File: iTC1xn2TRpPKus0J5iqVEOitrM0.roa (raw, json) Hash identifier: sXa8vrVBDN5uAhmlZd+qXUZ7h7ezJMpzLbObFGlvCGA= Subject key identifier: 89:30:B5:C6:7D:93:46:93:CA:BA:CD:09:E6:2A:95:10:E8:AD:AC:CD Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 37FA Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iTC1xn2TRpPKus0J5iqVEOitrM0.roa Signing time: Fri 22 Aug 2025 08:44:51 +0000 ROA not before: Fri 22 Aug 2025 08:44:51 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9924 IP address blocks: 123.193.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14330 (0x37fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:44:51 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=8930B5C67D934693CABACD09E62A9510E8ADACCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:97:03:d4:7e:b8:e0:83:83:2e:e0:ac:c8:96: 83:29:f8:49:ff:29:b4:63:95:09:e8:af:d1:42:c8: e0:57:11:dd:a6:18:c1:b8:88:33:b4:17:ca:01:33: 4c:17:19:91:b2:ec:13:ae:5f:ce:2e:11:bb:5c:ac: 5a:75:23:2d:8c:44:3a:86:cf:54:42:6e:ce:8c:40: ba:d2:f3:81:d5:84:25:94:6f:d9:df:a0:4d:11:8b: ef:21:85:2d:21:60:51:4a:c2:55:45:14:18:cb:01: 7d:f9:b4:a5:09:3d:bd:0e:d7:01:df:39:e7:1e:e4: 2b:a2:73:a6:9b:6f:aa:d0:f5:c5:51:0a:fe:8e:fa: 9d:d1:61:6a:bb:af:7a:e4:7f:52:f3:1c:f2:6c:2e: 23:9a:5b:f4:56:f4:7f:13:85:e7:45:ad:07:4c:91: f0:6f:9d:73:04:cf:e4:1e:99:30:b7:e4:60:a5:27: 4c:f0:36:c5:f8:95:5a:0c:93:c6:52:8d:75:6d:d3: 07:27:86:d2:28:39:e3:3a:f5:73:75:2e:e8:ce:6d: 33:27:24:22:ba:ab:a8:c8:1b:67:29:a3:2b:c3:7c: 9f:3e:79:2b:e8:35:5a:c7:be:5a:6e:3e:81:35:58: bc:56:b5:73:72:5f:eb:58:50:2d:6a:79:9f:9b:2a: 0e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:30:B5:C6:7D:93:46:93:CA:BA:CD:09:E6:2A:95:10:E8:AD:AC:CD X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iTC1xn2TRpPKus0J5iqVEOitrM0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.32.0/19 Signature Algorithm: sha256WithRSAEncryption 20:3f:32:0f:69:c6:8f:8e:d4:e3:d4:84:da:6e:6f:43:c3:24: 43:a0:3b:4f:d0:44:b0:ed:d3:11:82:f9:ad:53:9e:f0:57:97: 5d:0a:f6:83:3b:87:e5:98:7d:f3:99:18:9b:d2:06:41:b4:95: 7e:45:f5:42:2a:f5:55:ef:b2:30:1c:e3:fd:a5:e9:bf:d5:84: c7:42:01:87:b3:12:1b:24:f5:40:d8:93:8e:b8:76:23:55:ab: 37:01:22:0a:1e:05:12:35:f2:fe:c9:1f:aa:6a:a8:e6:4c:89: 10:bd:61:f2:20:ea:32:77:5d:63:3b:65:33:31:fa:6e:10:43: 70:ac:c2:c1:ba:e0:3a:af:22:fd:1e:0b:41:63:ef:16:05:86: 95:bd:0a:4b:68:c5:ed:c4:bd:de:11:8c:3f:ad:9e:13:10:8c: 0a:e1:69:a1:e1:57:7d:06:f2:22:87:c3:8b:24:b6:0d:b2:67: 3f:c9:50:52:af:94:21:a3:d0:8a:53:dd:1f:c2:b7:33:e1:70: 85:9b:d4:b6:ef:af:aa:90:88:39:be:28:7c:73:02:71:29:06: a2:ba:62:30:ac:a3:d9:e9:18:f9:db:51:5d:fe:f0:f5:07:92: 54:1b:66:58:f4:96:5a:19:ad:0e:c4:3c:90:61:6d:bd:94:9f: fd:2b:81:49 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICN/owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ0NTFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDg5MzBCNUM2N0Q5MzQ2 OTNDQUJBQ0QwOUU2MkE5NTEwRThBREFDQ0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHlwPUfrjgg4Mu4KzIloMp+En/KbRjlQnor9FCyOBXEd2mGMG4 iDO0F8oBM0wXGZGy7BOuX84uEbtcrFp1Iy2MRDqGz1RCbs6MQLrS84HVhCWUb9nf oE0Ri+8hhS0hYFFKwlVFFBjLAX35tKUJPb0O1wHfOece5Cuic6abb6rQ9cVRCv6O +p3RYWq7r3rkf1LzHPJsLiOaW/RW9H8ThedFrQdMkfBvnXMEz+QemTC35GClJ0zw NsX4lVoMk8ZSjXVt0wcnhtIoOeM69XN1LujObTMnJCK6q6jIG2cpoyvDfJ8+eSvo NVrHvlpuPoE1WLxWtXNyX+tYUC1qeZ+bKg6fAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUiTC1xn2TRpPKus0J5iqVEOitrM0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2lUQzF4bjJUUnBQS3VzMEo1 aXFWRU9pdHJNMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV7 wSAwDQYJKoZIhvcNAQELBQADggEBACA/Mg9pxo+O1OPUhNpub0PDJEOgO0/QRLDt 0xGC+a1TnvBXl10K9oM7h+WYffOZGJvSBkG0lX5F9UIq9VXvsjAc4/2l6b/VhMdC AYezEhsk9UDYk464diNVqzcBIgoeBRI18v7JH6pqqOZMiRC9YfIg6jJ3XWM7ZTMx +m4QQ3CswsG64DqvIv0eC0Fj7xYFhpW9Cktoxe3Evd4RjD+tnhMQjArhaaHhV30G 8iKHw4sktg2yZz/JUFKvlCGj0IpT3R/CtzPhcIWb1Lbvr6qQiDm+KHxzAnEpBqK6 YjCso9npGPnbUV3+8PUHklQbZlj0lloZrQ7EPJBhbb2Un/0rgUk= -----END CERTIFICATE-----Generated at Sun Aug 24 07:23:15 2025 by rpki-client