$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/k5ws5vsy3omcIxn8Uq_leZ5eAwI.roa File: k5ws5vsy3omcIxn8Uq_leZ5eAwI.roa (raw, json) Hash identifier: FyFNmSok812wtDQ4l6emeYdVSi0VCqsgwmz2rx73diw= Subject key identifier: 93:9C:2C:E6:FB:32:DE:89:9C:23:19:FC:52:AF:E5:79:9E:5E:03:02 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 37FE Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/k5ws5vsy3omcIxn8Uq_leZ5eAwI.roa Signing time: Fri 22 Aug 2025 08:44:51 +0000 ROA not before: Fri 22 Aug 2025 08:44:51 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 118.232.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14334 (0x37fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:44:51 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=939C2CE6FB32DE899C2319FC52AFE5799E5E0302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:02:d5:1f:6f:26:04:c5:6d:c6:cc:03:79:6c: ff:a0:9e:9e:6d:7e:a5:60:b3:13:48:f9:3b:0e:39: 87:a7:3e:f0:da:4a:30:48:a0:67:5d:eb:5f:54:27: a6:23:ed:99:f4:af:9a:47:58:32:7c:d6:2e:bc:c9: d1:dc:4e:6e:d1:e8:b6:c7:2f:16:ee:c1:c4:e2:1b: e4:18:36:0d:1c:96:8d:0f:43:a7:99:d8:e9:ee:94: 75:f8:55:02:5b:c7:07:3e:16:c6:84:d3:3b:ce:25: 93:31:af:fb:c1:7c:c0:60:64:51:03:20:22:55:49: 41:96:25:f1:60:c6:71:13:89:c8:cb:aa:b1:97:b9: a4:4d:ae:a8:12:2f:8b:d0:ae:16:da:0b:e2:f3:d3: 9b:2a:31:ce:e8:6d:c3:95:06:00:cd:40:29:06:cd: 20:37:05:27:26:2a:11:a3:40:9b:a7:67:35:d3:09: 6e:ea:21:68:62:0d:40:f4:90:ba:d6:37:66:29:04: 8c:52:53:f9:51:50:3d:7e:3b:e6:b4:ab:7f:86:eb: 9d:52:d7:ba:2b:1a:b8:a5:6d:ed:79:e4:7d:7c:3b: 53:eb:f7:fe:ea:b7:05:67:8f:91:d8:3c:3e:ef:15: e8:cd:04:15:72:4c:42:9e:26:b8:79:e3:11:2c:50: d4:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:9C:2C:E6:FB:32:DE:89:9C:23:19:FC:52:AF:E5:79:9E:5E:03:02 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/k5ws5vsy3omcIxn8Uq_leZ5eAwI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.120.0/22 Signature Algorithm: sha256WithRSAEncryption 61:cd:db:dc:70:94:3c:e4:66:2e:e5:93:78:6f:b6:a2:1a:c1: 53:56:9b:53:fb:b4:51:a6:0b:c2:c0:fd:e3:53:60:31:dc:79: 8d:f7:e4:61:8c:13:44:4d:25:95:7d:fc:6d:f4:f3:d4:c9:ce: 2a:3a:5f:9d:8c:60:03:27:a7:74:52:6b:90:4b:cf:e8:e5:de: ce:92:9a:ae:76:44:b5:51:9c:f7:3b:3e:f3:a9:95:84:7d:bb: 74:07:1c:4b:f4:76:49:56:d6:5d:11:8a:82:69:91:17:cd:d0: 91:f8:58:b2:ba:9a:f6:24:7c:d3:25:69:25:47:db:a7:8d:d9: b6:77:0f:4d:da:66:54:87:5e:a3:92:2e:53:eb:d6:e3:77:b1: 00:0b:36:2c:4c:61:c6:7e:33:d7:e8:8f:6f:ec:cb:d1:9d:1d: 30:74:d4:b7:06:0c:1a:10:39:bb:68:ba:e5:5d:48:9c:57:26: 1f:03:c3:21:06:10:05:77:1a:6d:8e:56:a2:60:8c:4f:8e:a3: 11:43:41:0b:c4:b9:a1:98:6b:4d:37:a1:7c:86:d7:3e:db:89: 96:87:c9:a9:d0:76:93:79:d2:b1:ee:7a:84:12:e3:cd:98:fa: 31:30:be:4d:c3:f1:3b:f5:e1:31:f8:94:88:e1:3c:25:3c:f5: 46:0b:c6:63 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICN/4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ0NTFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDkzOUMyQ0U2RkIzMkRF ODk5QzIzMTlGQzUyQUZFNTc5OUU1RTAzMDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/AtUfbyYExW3GzAN5bP+gnp5tfqVgsxNI+TsOOYenPvDaSjBI oGdd619UJ6Yj7Zn0r5pHWDJ81i68ydHcTm7R6LbHLxbuwcTiG+QYNg0clo0PQ6eZ 2OnulHX4VQJbxwc+FsaE0zvOJZMxr/vBfMBgZFEDICJVSUGWJfFgxnETicjLqrGX uaRNrqgSL4vQrhbaC+Lz05sqMc7obcOVBgDNQCkGzSA3BScmKhGjQJunZzXTCW7q IWhiDUD0kLrWN2YpBIxSU/lRUD1+O+a0q3+G651S17orGrilbe155H18O1Pr9/7q twVnj5HYPD7vFejNBBVyTEKeJrh54xEsUNRrAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUk5ws5vsy3omcIxn8Uq/leZ5eAwIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2s1d3M1dnN5M29tY0l4bjhV cV9sZVo1ZUF3SS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6HgwDQYJKoZIhvcNAQELBQADggEBAGHN29xwlDzkZi7lk3hvtqIawVNWm1P7tFGm C8LA/eNTYDHceY335GGME0RNJZV9/G3089TJzio6X52MYAMnp3RSa5BLz+jl3s6S mq52RLVRnPc7PvOplYR9u3QHHEv0dklW1l0RioJpkRfN0JH4WLK6mvYkfNMlaSVH 26eN2bZ3D03aZlSHXqOSLlPr1uN3sQALNixMYcZ+M9foj2/sy9GdHTB01LcGDBoQ ObtouuVdSJxXJh8DwyEGEAV3Gm2OVqJgjE+OoxFDQQvEuaGYa003oXyG1z7biZaH yanQdpN50rHueoQS482Y+jEwvk3D8Tv14TH4lIjhPCU89UYLxmM= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:51 2025 by rpki-client