$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jTM3AWFW8quR64_-ROg3wwpnxIM.roa File: jTM3AWFW8quR64_-ROg3wwpnxIM.roa (raw, json) Hash identifier: W7M/4MeNwcMZoRWUCAlvWw/+JOGuSPxZUtoI35D6OEg= Subject key identifier: 8D:33:37:01:61:56:F2:AB:91:EB:8F:FE:44:E8:37:C3:0A:67:C4:83 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3985 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jTM3AWFW8quR64_-ROg3wwpnxIM.roa Signing time: Fri 22 Aug 2025 08:46:22 +0000 ROA not before: Fri 22 Aug 2025 08:46:22 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.194.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14725 (0x3985) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:22 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=8D3337016156F2AB91EB8FFE44E837C30A67C483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:25:60:3e:77:95:1b:a2:40:d0:73:97:31:07: 04:91:86:e3:69:0b:30:dd:3a:29:5c:54:fe:98:46: 5d:d0:e9:4d:4f:7f:94:a9:90:da:36:1e:71:ac:1f: 99:ad:05:5c:7e:b2:68:01:b7:cd:0b:b5:ff:ab:6d: 59:d0:d4:e0:5f:6d:f1:a6:44:8e:d7:22:f7:98:ff: 2b:6d:a0:f3:db:69:e9:d8:ef:9b:70:ae:2e:a1:a3: d8:bc:d4:c4:19:86:aa:75:b8:a8:b8:92:ad:2e:5f: 33:10:9c:75:b0:44:ee:0a:4b:2e:f8:84:63:c3:2a: d7:f1:b4:e2:35:8b:e8:72:f9:b3:6f:1a:e9:35:d0: 1b:6d:73:04:8e:61:3b:05:7b:7b:6b:df:bc:06:db: aa:33:3a:d6:2c:be:a6:59:e7:3b:0a:93:02:46:6e: 6a:fd:f3:3e:db:8b:72:f9:06:24:ee:f6:0c:09:49: c5:8d:07:4d:f5:d4:fa:3d:fd:f6:7b:33:be:47:94: 39:ba:2d:0f:d5:57:2c:e6:1c:db:d6:32:fa:bc:b5: 13:01:ac:47:61:c0:e4:03:f5:d7:fc:d4:b4:4d:47: 51:ad:b9:6e:85:b8:91:03:67:82:8c:03:89:5f:60: 56:7f:49:9f:b1:59:f1:98:3b:1d:d5:3a:a0:ba:cb: 86:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:33:37:01:61:56:F2:AB:91:EB:8F:FE:44:E8:37:C3:0A:67:C4:83 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jTM3AWFW8quR64_-ROg3wwpnxIM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.240.0/21 Signature Algorithm: sha256WithRSAEncryption 2d:b3:2d:65:f5:d5:d6:8e:08:38:03:c9:b5:8a:c6:7f:a2:2f: 97:43:20:9d:52:5e:0a:1b:89:87:12:87:30:cd:d7:67:e9:5f: 95:cd:2d:54:90:f0:53:fd:02:6a:f0:90:11:0b:a9:71:29:87: 1f:a9:09:88:09:29:78:84:71:b6:4e:a5:2a:e7:e3:cb:16:54: d3:12:7c:92:25:46:a1:d0:2c:c3:79:88:33:91:2b:42:93:a2: 70:22:1d:4e:09:e3:6a:4e:fd:da:2e:be:b8:b4:1f:6b:df:7a: bb:51:72:25:39:db:91:9e:8b:04:0e:e9:e3:7f:ed:77:e1:c8: 33:78:a6:55:7b:0c:5c:79:8d:55:e9:34:48:7a:34:74:3f:4b: 7c:ef:85:e0:b0:6c:a3:80:45:06:ab:dd:05:ca:8a:8c:86:d7: 5d:07:43:45:30:05:0c:32:26:73:f9:2a:f5:00:26:73:cd:fb: 75:83:fb:bf:f9:10:9b:eb:48:2b:56:fd:ff:1a:c6:af:dd:56: 19:7c:1d:97:a7:dc:20:80:3e:a7:72:6e:64:33:35:68:b1:9b: 0f:56:80:f0:59:af:6d:00:92:fd:3a:53:20:98:8c:58:ad:80: 2a:2f:e5:ad:eb:e4:63:2f:7e:a6:95:6b:89:b1:83:73:63:37: b9:49:ec:c4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOYUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2MjJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDhEMzMzNzAxNjE1NkYy QUI5MUVCOEZGRTQ0RTgzN0MzMEE2N0M0ODMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCgJWA+d5UbokDQc5cxBwSRhuNpCzDdOilcVP6YRl3Q6U1Pf5Sp kNo2HnGsH5mtBVx+smgBt80Ltf+rbVnQ1OBfbfGmRI7XIveY/yttoPPbaenY75tw ri6ho9i81MQZhqp1uKi4kq0uXzMQnHWwRO4KSy74hGPDKtfxtOI1i+hy+bNvGuk1 0BttcwSOYTsFe3tr37wG26ozOtYsvqZZ5zsKkwJGbmr98z7bi3L5BiTu9gwJScWN B0311Po9/fZ7M75HlDm6LQ/VVyzmHNvWMvq8tRMBrEdhwOQD9df81LRNR1GtuW6F uJEDZ4KMA4lfYFZ/SZ+xWfGYOx3VOqC6y4bTAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUjTM3AWFW8quR64/+ROg3wwpnxIMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2pUTTNBV0ZXOHF1UjY0Xy1S T2czd3dwbnhJTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wvAwDQYJKoZIhvcNAQELBQADggEBAC2zLWX11daOCDgDybWKxn+iL5dDIJ1SXgob iYcShzDN12fpX5XNLVSQ8FP9AmrwkBELqXEphx+pCYgJKXiEcbZOpSrn48sWVNMS fJIlRqHQLMN5iDORK0KTonAiHU4J42pO/douvri0H2vfertRciU525GeiwQO6eN/ 7XfhyDN4plV7DFx5jVXpNEh6NHQ/S3zvheCwbKOARQar3QXKioyG110HQ0UwBQwy JnP5KvUAJnPN+3WD+7/5EJvrSCtW/f8axq/dVhl8HZen3CCAPqdybmQzNWixmw9W gPBZr20Akv06UyCYjFitgCov5a3r5GMvfqaVa4mxg3NjN7lJ7MQ= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:24 2025 by rpki-client