$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jM1GCR3-xMm3kKknlKkYNK9vb3Y.roa File: jM1GCR3-xMm3kKknlKkYNK9vb3Y.roa (raw, json) Hash identifier: vf+QXGkumB2RFC6p0lLUztcl+ofPqKMJ2Wv08D26tNM= Subject key identifier: 8C:CD:46:09:1D:FE:C4:C9:B7:90:A9:27:94:A9:18:34:AF:6F:6F:76 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3965 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jM1GCR3-xMm3kKknlKkYNK9vb3Y.roa Signing time: Fri 22 Aug 2025 08:46:16 +0000 ROA not before: Fri 22 Aug 2025 08:46:16 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.193.223.192/26 maxlen: 26 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14693 (0x3965) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:16 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=8CCD46091DFEC4C9B790A92794A91834AF6F6F76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3e:16:0f:05:67:25:db:c3:57:c6:59:1a:5c: d8:52:0d:a2:87:39:c6:07:13:26:22:25:15:d2:fd: 18:dd:78:84:64:80:3f:8a:be:d3:4a:bd:af:c5:4f: fb:27:67:7c:d8:db:6a:02:72:a4:36:2d:37:87:01: a0:b9:87:9b:5b:23:41:c2:b7:24:c3:4d:9b:bf:52: 28:7a:25:5f:0a:2f:d9:07:fb:6f:a3:b1:32:c0:fe: ea:78:a3:bd:42:92:1a:74:81:04:08:5a:22:ef:a6: 4d:2c:3a:4d:3d:b7:26:70:e9:47:94:78:9b:bb:28: 9d:c3:8b:dc:98:58:03:17:6d:ac:85:0a:2d:66:5f: a7:39:d2:c0:40:83:00:42:fb:87:0e:c8:1f:87:8f: ea:72:7f:82:41:95:d6:a2:1e:93:a0:32:82:7f:f9: 04:0a:4a:08:76:94:0a:0b:35:bb:2e:48:eb:9a:43: f1:67:40:5a:06:08:aa:1c:cc:97:86:f0:70:45:7e: a0:a3:f8:3b:38:9b:b8:27:1e:d0:04:69:2b:7c:dc: ca:85:1e:69:da:9b:32:26:e7:9f:44:3a:28:32:e1: 4e:84:2f:42:b2:8f:5f:70:ad:f4:f7:6e:b5:c4:d2: 59:b9:36:23:ec:26:04:f6:84:80:28:1f:0e:4f:c8: 75:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:CD:46:09:1D:FE:C4:C9:B7:90:A9:27:94:A9:18:34:AF:6F:6F:76 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jM1GCR3-xMm3kKknlKkYNK9vb3Y.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.223.192/26 Signature Algorithm: sha256WithRSAEncryption a7:2d:8a:96:fd:72:b0:aa:fa:e6:e9:37:25:f9:5c:55:96:b7: 3c:6f:73:bf:53:ec:8f:36:5a:6c:1b:b6:7e:fb:c1:97:41:d4: 9e:3b:a5:1c:d3:0c:ea:d2:b6:cb:ed:56:61:c9:29:2c:b7:bd: ec:88:e1:e4:8a:cb:4d:2e:7b:a2:33:4b:84:3c:1f:9d:d0:c7: 4e:88:34:37:54:0d:18:c1:36:31:53:fa:a7:87:48:71:17:46: 59:65:ca:c3:b3:5d:3e:b2:a4:61:73:2e:43:0a:f5:f7:35:a5: e4:69:3a:d3:5e:18:b7:be:4d:aa:08:ef:7a:9f:b7:22:3d:28: af:8d:46:4a:a7:57:19:fe:53:0f:43:4c:cf:4e:93:d3:8f:0f: 91:e9:88:9f:5f:94:b0:26:99:38:72:3c:b3:07:48:50:ab:6a: 3e:0d:2b:f6:e8:ea:98:6c:6f:37:ea:44:1b:f2:ae:08:d8:bf: dd:87:52:9e:d7:d8:f2:7e:94:30:be:4f:51:b1:2e:cf:72:e1: c5:24:c3:b1:2c:ae:cd:f1:fd:b6:c6:62:0d:4c:4f:b3:9a:cf: 49:09:e4:8d:9c:cb:a3:14:a6:3a:52:d5:81:67:93:f2:87:b9: 03:7e:57:ba:f9:8d:f8:61:4d:c8:8f:fb:46:14:6a:dd:ff:34: ca:2a:19:92 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICOWUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2MTZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDhDQ0Q0NjA5MURGRUM0 QzlCNzkwQTkyNzk0QTkxODM0QUY2RjZGNzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIPhYPBWcl28NXxlkaXNhSDaKHOcYHEyYiJRXS/RjdeIRkgD+K vtNKva/FT/snZ3zY22oCcqQ2LTeHAaC5h5tbI0HCtyTDTZu/Uih6JV8KL9kH+2+j sTLA/up4o71Ckhp0gQQIWiLvpk0sOk09tyZw6UeUeJu7KJ3Di9yYWAMXbayFCi1m X6c50sBAgwBC+4cOyB+Hj+pyf4JBldaiHpOgMoJ/+QQKSgh2lAoLNbsuSOuaQ/Fn QFoGCKoczJeG8HBFfqCj+Ds4m7gnHtAEaSt83MqFHmnamzIm559EOigy4U6EL0Ky j19wrfT3brXE0lm5NiPsJgT2hIAoHw5PyHWbAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUjM1GCR3+xMm3kKknlKkYNK9vb3YwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2pNMUdDUjMteE1tM2tLa25s S2tZTks5dmIzWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQZ7 wd/AMA0GCSqGSIb3DQEBCwUAA4IBAQCnLYqW/XKwqvrm6Tcl+VxVlrc8b3O/U+yP NlpsG7Z++8GXQdSeO6Uc0wzq0rbL7VZhySkst73siOHkistNLnuiM0uEPB+d0MdO iDQ3VA0YwTYxU/qnh0hxF0ZZZcrDs10+sqRhcy5DCvX3NaXkaTrTXhi3vk2qCO96 n7ciPSivjUZKp1cZ/lMPQ0zPTpPTjw+R6YifX5SwJpk4cjyzB0hQq2o+DSv26OqY bG836kQb8q4I2L/dh1Ke19jyfpQwvk9RsS7PcuHFJMOxLK7N8f22xmINTE+zms9J CeSNnMujFKY6UtWBZ5Pyh7kDfle6+Y34YU3Ij/tGFGrd/zTKKhmS -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:41 2025 by rpki-client