$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kP4XszW6_JTqEsqP4qUmWxthf78.roa File: kP4XszW6_JTqEsqP4qUmWxthf78.roa (raw, json) Hash identifier: cwULpxgbZ6SBLFr7x6bdMfGsDvjwZ9pxbnbtz3ypPhc= Subject key identifier: 90:FE:17:B3:35:BA:FC:94:EA:12:CA:8F:E2:A5:26:5B:1B:61:7F:BF Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3AF1 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kP4XszW6_JTqEsqP4qUmWxthf78.roa Signing time: Fri 22 Aug 2025 08:47:54 +0000 ROA not before: Fri 22 Aug 2025 08:47:54 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.194.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15089 (0x3af1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:54 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=90FE17B335BAFC94EA12CA8FE2A5265B1B617FBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:71:58:00:9f:fd:d7:1f:f4:55:dd:5f:b1:2a: 5f:35:ee:97:1e:67:4a:c8:7f:6c:53:ec:71:c7:57: db:02:cd:f2:b7:5a:56:6f:82:da:17:4f:67:a6:e5: 52:b4:1f:d2:9a:86:8e:ea:bd:40:65:4d:67:8f:48: 25:c2:93:43:93:fc:58:75:16:5e:92:1d:07:73:cd: 78:dd:95:0b:bf:7e:2b:c1:66:05:08:8b:46:d4:f6: e5:6b:b5:90:d6:20:03:59:24:32:f4:3b:17:1f:da: e7:86:e6:76:7a:10:f9:5a:19:10:7c:d8:18:12:0d: 00:93:24:82:4d:ed:00:ea:20:ce:fa:85:2c:9b:15: 8c:1b:a3:dc:e2:52:26:94:61:25:eb:8a:8b:2f:c1: f5:8a:a7:58:56:8a:64:a9:3c:a3:ca:58:65:1a:a4: ca:31:63:f8:36:6f:b8:b4:19:53:60:ce:ba:3a:49: 56:6e:14:cf:10:31:5a:af:97:9f:b7:d9:b3:19:94: 99:9f:3a:4f:84:b7:4c:b3:34:45:3c:5c:c3:36:67: ac:f7:d8:c0:11:e2:2c:ed:51:81:3f:32:a0:c3:ed: eb:a5:29:36:14:ab:ad:41:b8:af:fc:48:7e:d7:e3: 65:36:f4:d9:1c:80:59:b2:37:26:78:28:5b:d9:9a: 75:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:FE:17:B3:35:BA:FC:94:EA:12:CA:8F:E2:A5:26:5B:1B:61:7F:BF X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kP4XszW6_JTqEsqP4qUmWxthf78.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.224.0/21 Signature Algorithm: sha256WithRSAEncryption 2c:5a:d9:65:8a:b1:ee:a0:a3:60:56:30:75:00:4f:f7:9c:e3: db:d7:8e:68:a1:74:4a:a7:28:5d:af:84:ad:1e:f9:6d:72:42: 39:12:89:5e:2f:59:0e:8a:d1:59:e1:1b:e1:9c:f6:9f:79:c6: fd:45:c4:58:00:8b:95:ec:c1:3a:00:10:59:4a:8d:48:23:c1: 49:97:42:ea:9b:c0:19:48:50:3c:42:52:b2:3c:06:ef:e5:7e: d8:cc:64:5c:08:6f:cf:da:45:ee:76:3d:9f:b1:af:f0:33:cc: 37:5b:fd:ca:f8:c2:a1:11:21:34:3b:f6:1c:3e:90:d6:33:ff: b5:c7:bc:61:7a:31:9e:05:03:9c:57:dd:dc:83:59:17:1b:22: cd:8a:87:fa:36:e8:37:d0:0d:e6:0f:90:9f:5b:cd:6f:ab:0b: 9f:1e:22:e4:af:a4:80:aa:da:18:f0:d5:a6:3f:1f:dc:65:c6: a5:27:73:57:51:86:22:43:a5:90:f3:24:95:8f:bb:6a:a7:bd: 6f:ff:ee:44:65:40:a2:75:85:b6:0a:ca:7d:14:77:b2:e3:7b: 56:af:ab:3b:f9:d6:04:42:a6:0d:45:b2:35:29:38:50:6b:70: 00:8a:0f:80:8d:70:be:fb:e0:5e:d4:df:76:df:ab:90:30:03: 10:72:00:b5 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOvEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3NTRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDkwRkUxN0IzMzVCQUZD OTRFQTEyQ0E4RkUyQTUyNjVCMUI2MTdGQkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRcVgAn/3XH/RV3V+xKl817pceZ0rIf2xT7HHHV9sCzfK3WlZv gtoXT2em5VK0H9Kaho7qvUBlTWePSCXCk0OT/Fh1Fl6SHQdzzXjdlQu/fivBZgUI i0bU9uVrtZDWIANZJDL0Oxcf2ueG5nZ6EPlaGRB82BgSDQCTJIJN7QDqIM76hSyb FYwbo9ziUiaUYSXriosvwfWKp1hWimSpPKPKWGUapMoxY/g2b7i0GVNgzro6SVZu FM8QMVqvl5+32bMZlJmfOk+Et0yzNEU8XMM2Z6z32MAR4iztUYE/MqDD7eulKTYU q61BuK/8SH7X42U29NkcgFmyNyZ4KFvZmnXZAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUkP4XszW6/JTqEsqP4qUmWxthf78wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2tQNFhzelc2X0pUcUVzcVA0 cVVtV3h0aGY3OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wuAwDQYJKoZIhvcNAQELBQADggEBACxa2WWKse6go2BWMHUAT/ec49vXjmihdEqn KF2vhK0e+W1yQjkSiV4vWQ6K0VnhG+Gc9p95xv1FxFgAi5XswToAEFlKjUgjwUmX QuqbwBlIUDxCUrI8Bu/lftjMZFwIb8/aRe52PZ+xr/AzzDdb/cr4wqERITQ79hw+ kNYz/7XHvGF6MZ4FA5xX3dyDWRcbIs2Kh/o26DfQDeYPkJ9bzW+rC58eIuSvpICq 2hjw1aY/H9xlxqUnc1dRhiJDpZDzJJWPu2qnvW//7kRlQKJ1hbYKyn0Ud7Lje1av qzv51gRCpg1FsjUpOFBrcACKD4CNcL774F7U33bfq5AwAxByALU= -----END CERTIFICATE-----Generated at Sun Aug 24 07:28:23 2025 by rpki-client