$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ixK8q2fqtbxO1pYxmKvg4HXou1U.roa File: ixK8q2fqtbxO1pYxmKvg4HXou1U.roa (raw, json) Hash identifier: x0s2KkPuOhYf7Ifbz2afjHniorJmAfh2RjGzMHPnfXA= Subject key identifier: 8B:12:BC:AB:67:EA:B5:BC:4E:D6:96:31:98:AB:E0:E0:75:E8:BB:55 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3AC9 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ixK8q2fqtbxO1pYxmKvg4HXou1U.roa Signing time: Fri 22 Aug 2025 08:47:46 +0000 ROA not before: Fri 22 Aug 2025 08:47:46 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 211.76.119.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15049 (0x3ac9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:46 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=8B12BCAB67EAB5BC4ED6963198ABE0E075E8BB55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:bd:c1:25:bf:e3:e1:79:6a:ff:f5:c0:d4:e9: 00:a5:d3:9f:e9:83:75:8e:94:27:d6:8d:c5:6e:57: 67:90:c5:74:1f:2b:af:17:28:56:07:b7:bf:21:56: 8f:72:85:c6:af:02:50:74:28:53:ca:2e:1d:cc:cc: c3:4f:62:f5:c7:57:6d:aa:59:31:92:0f:6a:a7:5a: e8:a0:79:e4:51:cf:39:82:3f:77:5e:8d:e6:a0:27: fa:1f:3e:bc:93:59:d0:70:c9:98:98:38:81:df:e5: f9:0d:af:02:c0:a2:0e:fb:cb:69:17:31:8b:54:c9: ae:fe:10:2a:81:f6:ac:ea:98:0b:2e:d5:d7:8e:55: 07:7b:9e:d5:5b:ed:9d:aa:39:6b:53:ff:70:e2:07: 18:81:a2:c4:b4:d9:2a:f9:0b:89:27:a2:5a:21:8e: 90:60:11:6a:e1:88:39:fc:cf:b9:81:f4:31:e6:a7: fc:e3:0b:6a:ea:c2:e6:c6:a8:73:cd:da:54:49:24: 9b:d9:b7:c7:28:ad:0f:d0:86:7e:e4:25:91:3d:3d: 3b:d1:e4:9e:27:f8:a2:ca:f9:3b:f2:22:af:74:a8: ee:e0:16:c9:ca:1e:72:26:e2:da:df:ef:16:3d:42: a8:0e:68:32:5e:99:cd:89:37:93:48:f7:e0:c9:c0: 21:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:12:BC:AB:67:EA:B5:BC:4E:D6:96:31:98:AB:E0:E0:75:E8:BB:55 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ixK8q2fqtbxO1pYxmKvg4HXou1U.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.119.0/25 Signature Algorithm: sha256WithRSAEncryption 01:1a:6a:8d:e8:fe:59:9d:e0:d0:f8:55:d7:20:14:46:d2:3d: dc:ef:92:70:cb:af:1d:c1:39:35:e4:c9:5b:3a:a9:53:44:2f: ec:12:77:e0:bc:c9:b8:a1:55:42:4e:6d:fb:b4:e6:25:23:d0: 72:3e:3c:06:d8:e3:32:64:aa:fb:31:8a:7c:51:0b:f8:6f:a0: ac:43:e5:6e:f4:1d:67:40:db:0e:8b:14:a5:44:94:74:19:ed: 5e:31:65:a0:cd:f8:2d:96:cd:f3:12:7a:8c:9e:f0:d1:88:97: 5a:6c:10:4f:5d:7f:ae:2c:29:1a:9f:ca:81:49:33:c3:cb:9b: 21:b1:da:cd:ca:8c:22:af:a1:75:37:07:18:3a:e7:58:6a:0c: 9a:89:06:94:0c:2c:98:ad:8a:8d:00:d5:9e:c2:bf:0e:e5:bb: 5d:a5:7b:a2:0f:54:ef:36:b1:c1:d5:39:2b:e9:cf:40:91:c8: 9a:24:9e:29:37:3b:07:47:75:05:55:79:26:1b:c1:50:ca:d0: 84:98:35:26:35:0d:c9:f7:45:58:9a:4d:9a:bc:09:38:25:bb: aa:a6:63:38:4e:20:19:30:ee:0e:3d:cd:b9:c3:e4:5d:86:7d: 24:6e:d9:dd:0e:88:d6:1a:01:f6:eb:bd:51:b7:f8:d2:43:81: 96:c1:f7:da -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICOskwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3NDZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDhCMTJCQ0FCNjdFQUI1 QkM0RUQ2OTYzMTk4QUJFMEUwNzVFOEJCNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQChvcElv+PheWr/9cDU6QCl05/pg3WOlCfWjcVuV2eQxXQfK68X KFYHt78hVo9yhcavAlB0KFPKLh3MzMNPYvXHV22qWTGSD2qnWuigeeRRzzmCP3de jeagJ/ofPryTWdBwyZiYOIHf5fkNrwLAog77y2kXMYtUya7+ECqB9qzqmAsu1deO VQd7ntVb7Z2qOWtT/3DiBxiBosS02Sr5C4knolohjpBgEWrhiDn8z7mB9DHmp/zj C2rqwubGqHPN2lRJJJvZt8corQ/Qhn7kJZE9PTvR5J4n+KLK+TvyIq90qO7gFsnK HnIm4trf7xY9QqgOaDJemc2JN5NI9+DJwCF3AgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUixK8q2fqtbxO1pYxmKvg4HXou1UwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2l4SzhxMmZxdGJ4TzFwWXht S3ZnNEhYb3UxVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQfT THcAMA0GCSqGSIb3DQEBCwUAA4IBAQABGmqN6P5ZneDQ+FXXIBRG0j3c75Jwy68d wTk15MlbOqlTRC/sEnfgvMm4oVVCTm37tOYlI9ByPjwG2OMyZKr7MYp8UQv4b6Cs Q+Vu9B1nQNsOixSlRJR0Ge1eMWWgzfgtls3zEnqMnvDRiJdabBBPXX+uLCkan8qB STPDy5shsdrNyowir6F1NwcYOudYagyaiQaUDCyYrYqNANWewr8O5btdpXuiD1Tv NrHB1Tkr6c9AkciaJJ4pNzsHR3UFVXkmG8FQytCEmDUmNQ3J90VYmk2avAk4Jbuq pmM4TiAZMO4OPc25w+Rdhn0kbtndDojWGgH2671Rt/jSQ4GWwffa -----END CERTIFICATE-----Generated at Sun Aug 24 07:29:31 2025 by rpki-client