$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jxAm3299q9p-JQFVatARSTF_GdQ.roa File: jxAm3299q9p-JQFVatARSTF_GdQ.roa (raw, json) Hash identifier: wzqUBBv9boXyowsZE5GslAtxXHdZnfo7WIprUTe3wOQ= Subject key identifier: 8F:10:26:DF:6F:7D:AB:DA:7E:25:01:55:6A:D0:11:49:31:7F:19:D4 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3993 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jxAm3299q9p-JQFVatARSTF_GdQ.roa Signing time: Fri 22 Aug 2025 08:46:26 +0000 ROA not before: Fri 22 Aug 2025 08:46:26 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.192.248.0/21 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14739 (0x3993) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:26 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=8F1026DF6F7DABDA7E2501556AD01149317F19D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:02:f6:db:cc:13:0a:81:66:ad:12:b2:a7:ec: eb:75:df:52:ee:a6:81:da:9a:88:d3:cc:c1:2f:75: d5:1a:f0:9e:ee:69:a9:9f:aa:0e:1d:64:4f:1d:cd: 47:66:3e:94:d5:8e:c7:06:a0:f3:b9:ca:7e:d2:9e: 55:ba:2a:82:ae:97:bd:e2:a6:89:77:b2:7d:3b:2f: 41:49:d4:bc:2c:dc:4d:c1:77:36:63:6b:08:ef:9f: 58:62:85:a0:bd:0e:f2:26:cd:41:56:14:71:e2:38: 57:62:6b:fe:62:d1:c1:0d:4d:89:2d:4f:bb:b7:05: 2e:19:ce:2e:05:05:3a:89:01:b9:44:e8:b4:9e:7a: f6:4f:03:bd:87:72:d0:3b:31:67:0b:3e:9c:c5:4d: 81:84:cc:e5:f8:31:eb:cb:ff:d3:f3:07:a1:78:9c: 9a:94:6a:74:be:ed:3c:21:fc:53:a1:d9:05:7e:12: ab:e2:49:db:f1:fb:61:ee:cb:30:b4:b9:f9:0d:b5: bc:00:d1:93:88:4b:88:16:59:66:be:43:b2:cf:56: 71:c4:be:b3:5e:52:2e:55:00:ed:46:d0:d8:1d:23: 76:35:42:07:3f:fa:44:4c:46:aa:be:86:d2:c4:ad: 2e:1f:da:19:ab:2f:d0:bc:a2:a7:2d:e0:6b:54:13: 33:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:10:26:DF:6F:7D:AB:DA:7E:25:01:55:6A:D0:11:49:31:7F:19:D4 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jxAm3299q9p-JQFVatARSTF_GdQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.248.0/21 Signature Algorithm: sha256WithRSAEncryption 53:4c:67:a4:ab:de:d6:e1:57:46:36:fb:32:a0:aa:e9:d8:1b: c6:bb:76:49:0b:15:07:b7:99:fe:58:03:e6:cd:8b:e8:89:af: c6:19:d2:e9:75:1d:40:1a:38:05:df:1f:03:14:d4:e0:b3:96: 99:e0:34:88:3b:48:a5:87:a4:35:ff:11:e2:73:07:d9:c7:32: 22:aa:36:6e:27:45:78:a7:8a:35:cd:d8:34:cd:fd:29:42:ef: a5:9a:61:84:f5:18:bb:11:a3:17:91:6a:75:5f:db:0b:1a:83: 72:6e:bc:b2:5c:83:8a:9d:19:e9:c9:88:41:d7:a1:f7:7b:a0: 72:41:9e:04:c0:f2:54:a5:3a:53:36:77:7f:ba:e3:5d:b8:39: 72:4a:fb:33:d8:ab:6f:47:f2:8e:38:37:30:b3:74:7b:5e:03: 37:c0:d3:df:68:82:cc:aa:7e:ec:e4:0a:28:2b:fa:80:42:2c: 9b:4e:db:a0:de:78:fd:5d:b6:8b:d2:52:20:87:af:18:f6:c0: 9b:3d:fe:06:97:80:2a:9f:99:3d:c9:40:05:ca:57:fb:c8:fe: ed:04:e5:91:20:d8:4b:50:4f:2c:95:64:66:26:bd:6e:c3:bb: 0a:0b:9f:18:c2:6b:b2:fa:ce:00:d7:13:c0:9d:4b:ad:df:d0: bb:6b:71:2e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOZMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2MjZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDhGMTAyNkRGNkY3REFC REE3RTI1MDE1NTZBRDAxMTQ5MzE3RjE5RDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFAvbbzBMKgWatErKn7Ot131LupoHamojTzMEvddUa8J7uaamf qg4dZE8dzUdmPpTVjscGoPO5yn7SnlW6KoKul73ipol3sn07L0FJ1Lws3E3BdzZj awjvn1hihaC9DvImzUFWFHHiOFdia/5i0cENTYktT7u3BS4Zzi4FBTqJAblE6LSe evZPA72HctA7MWcLPpzFTYGEzOX4MevL/9PzB6F4nJqUanS+7Twh/FOh2QV+Eqvi Sdvx+2HuyzC0ufkNtbwA0ZOIS4gWWWa+Q7LPVnHEvrNeUi5VAO1G0NgdI3Y1Qgc/ +kRMRqq+htLErS4f2hmrL9C8oqct4GtUEzPrAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUjxAm3299q9p+JQFVatARSTF/GdQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2p4QW0zMjk5cTlwLUpRRlZh dEFSU1RGX0dkUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wPgwDQYJKoZIhvcNAQELBQADggEBAFNMZ6Sr3tbhV0Y2+zKgqunYG8a7dkkLFQe3 mf5YA+bNi+iJr8YZ0ul1HUAaOAXfHwMU1OCzlpngNIg7SKWHpDX/EeJzB9nHMiKq Nm4nRXinijXN2DTN/SlC76WaYYT1GLsRoxeRanVf2wsag3JuvLJcg4qdGenJiEHX ofd7oHJBngTA8lSlOlM2d3+64124OXJK+zPYq29H8o44NzCzdHteAzfA099ogsyq fuzkCigr+oBCLJtO26DeeP1dtovSUiCHrxj2wJs9/gaXgCqfmT3JQAXKV/vI/u0E 5ZEg2EtQTyyVZGYmvW7DuwoLnxjCa7L6zgDXE8CdS63f0LtrcS4= -----END CERTIFICATE-----Generated at Sun Aug 24 07:31:04 2025 by rpki-client