$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kpZs2_xckZy2BRjOlFjFuuLrIa0.roa File: kpZs2_xckZy2BRjOlFjFuuLrIa0.roa (raw, json) Hash identifier: ytOIJaREdmYomDgEvltmO0TnUXkSMtfwXYRzFzcCUkM= Subject key identifier: 92:96:6C:DB:FC:5C:91:9C:B6:05:18:CE:94:58:C5:BA:E2:EB:21:AD Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 39B1 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kpZs2_xckZy2BRjOlFjFuuLrIa0.roa Signing time: Fri 22 Aug 2025 08:46:34 +0000 ROA not before: Fri 22 Aug 2025 08:46:34 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.193.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14769 (0x39b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:34 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=92966CDBFC5C919CB60518CE9458C5BAE2EB21AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b7:2c:9f:1c:1f:a0:57:7b:95:13:cb:a8:a7: e6:aa:9f:6f:38:e4:2e:e0:07:88:cc:e7:f6:51:49: aa:e9:4c:ef:f9:2e:e6:a3:c9:f5:4c:66:13:08:91: bc:f5:b2:a1:28:15:57:74:cb:84:47:52:c0:e1:bc: 0e:08:e6:0d:b7:e5:1a:ec:ac:89:5a:a5:d1:2c:7e: 7d:86:42:75:26:3b:6c:7f:db:e0:81:7d:8c:7d:ee: 58:28:48:65:2c:92:18:e8:3f:4e:f9:34:ba:bb:57: 7a:7e:17:9b:77:e6:c2:20:d5:9a:91:ae:01:f8:70: 66:95:82:b1:00:15:55:a2:67:c6:5a:eb:9a:7d:33: a2:b8:d5:8d:3b:c8:f2:74:ab:d7:1f:34:ca:b1:aa: f2:a6:01:21:f4:11:69:74:c4:69:1f:2b:0f:07:e2: 51:4a:f8:03:74:a1:4e:c4:f1:43:88:a1:bf:b2:bc: 08:eb:16:ce:cc:e2:ca:89:c3:2b:1c:50:e1:d5:b2: ac:8e:8b:b2:a5:fb:86:71:d5:8a:1b:ed:5d:93:32: f5:03:e1:57:3f:c3:5c:68:fe:e8:48:2e:be:c9:15: 5e:37:8a:c8:0a:04:ee:52:f8:2e:74:93:c7:bd:6c: 25:94:83:19:75:0c:41:5c:82:b7:d8:b1:81:3c:18: 13:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:96:6C:DB:FC:5C:91:9C:B6:05:18:CE:94:58:C5:BA:E2:EB:21:AD X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kpZs2_xckZy2BRjOlFjFuuLrIa0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.40.0/21 Signature Algorithm: sha256WithRSAEncryption 7a:76:30:b8:c7:f2:17:ac:ec:fe:ec:5e:d5:2c:b4:76:91:3f: 85:8e:c5:15:69:de:8b:fa:83:97:91:28:bf:bd:12:68:ef:96: b4:10:a2:eb:f6:d3:7c:6f:b0:aa:5e:24:89:97:5a:74:2c:3b: c3:39:b7:5a:18:a4:42:e2:b9:ab:df:c7:1c:f9:7a:e1:bf:1f: 71:63:5e:a7:56:46:26:e1:6a:c9:25:2d:55:68:4d:63:56:bd: fc:0b:f1:44:24:91:e4:a4:74:d0:d4:05:4c:8a:d6:3b:fc:62: 20:0e:4b:52:f0:2e:1f:d2:d0:37:9b:e9:1b:f4:d9:b4:a7:2c: 9d:56:ee:69:b7:05:73:2e:70:2f:5c:ab:5d:5d:2d:15:14:c2: 2f:9a:95:19:6f:9b:84:db:65:d9:ce:7f:1b:cf:ad:cf:c0:a7: 7e:ae:5a:2d:fb:9c:82:d4:82:35:6f:f0:ff:59:8b:37:6a:32: 3a:b7:5b:5e:d4:9a:77:61:62:08:b6:35:03:40:36:12:fe:75: 7a:e3:f8:22:8d:7e:95:2c:54:0f:4b:1e:81:c0:9d:1e:ba:a5: 4f:cd:54:96:1d:09:f8:8d:18:c0:db:f1:38:0e:29:c6:b8:f3: 45:8f:de:d7:85:5a:1d:79:e7:a7:5a:18:2e:90:27:97:9b:8d: f6:a1:27:c5 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICObEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2MzRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDkyOTY2Q0RCRkM1Qzkx OUNCNjA1MThDRTk0NThDNUJBRTJFQjIxQUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDStyyfHB+gV3uVE8uop+aqn2845C7gB4jM5/ZRSarpTO/5Luaj yfVMZhMIkbz1sqEoFVd0y4RHUsDhvA4I5g235RrsrIlapdEsfn2GQnUmO2x/2+CB fYx97lgoSGUskhjoP075NLq7V3p+F5t35sIg1ZqRrgH4cGaVgrEAFVWiZ8Za65p9 M6K41Y07yPJ0q9cfNMqxqvKmASH0EWl0xGkfKw8H4lFK+AN0oU7E8UOIob+yvAjr Fs7M4sqJwyscUOHVsqyOi7Kl+4Zx1Yob7V2TMvUD4Vc/w1xo/uhILr7JFV43isgK BO5S+C50k8e9bCWUgxl1DEFcgrfYsYE8GBM1AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUkpZs2/xckZy2BRjOlFjFuuLrIa0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2twWnMyX3hja1p5MkJSak9s RmpGdXVMcklhMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wSgwDQYJKoZIhvcNAQELBQADggEBAHp2MLjH8hes7P7sXtUstHaRP4WOxRVp3ov6 g5eRKL+9EmjvlrQQouv203xvsKpeJImXWnQsO8M5t1oYpELiuavfxxz5euG/H3Fj XqdWRibhasklLVVoTWNWvfwL8UQkkeSkdNDUBUyK1jv8YiAOS1LwLh/S0Deb6Rv0 2bSnLJ1W7mm3BXMucC9cq11dLRUUwi+alRlvm4TbZdnOfxvPrc/Ap36uWi37nILU gjVv8P9ZizdqMjq3W17UmndhYgi2NQNANhL+dXrj+CKNfpUsVA9LHoHAnR66pU/N VJYdCfiNGMDb8TgOKca480WP3teFWh1556daGC6QJ5ebjfahJ8U= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:49 2025 by rpki-client