$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ksYQf3s4ij8DL0lhdaX0gJ_kuaY.roa File: ksYQf3s4ij8DL0lhdaX0gJ_kuaY.roa (raw, json) Hash identifier: YoDG2RGrzojGI7/sWQp/e3F+YS40Xvl8bTH9B7deDQs= Subject key identifier: 92:C6:10:7F:7B:38:8A:3F:03:2F:49:61:75:A5:F4:80:9F:E4:B9:A6 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3885 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ksYQf3s4ij8DL0lhdaX0gJ_kuaY.roa Signing time: Fri 22 Aug 2025 08:45:22 +0000 ROA not before: Fri 22 Aug 2025 08:45:22 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 118.232.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14469 (0x3885) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:22 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=92C6107F7B388A3F032F496175A5F4809FE4B9A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b4:f2:1b:62:17:d2:e5:4b:99:7d:47:a1:cc: 64:d8:b5:20:d0:eb:de:ad:33:d3:78:80:92:08:61: 36:41:27:22:7b:09:64:e7:aa:67:9e:ba:d9:dc:c6: 33:60:48:bc:1a:73:63:17:d4:03:85:b4:c9:24:f0: 52:e0:6b:59:14:45:5d:da:87:f4:fa:7d:07:83:28: cf:6b:10:45:7c:b6:55:a6:7f:db:5c:b5:09:c6:95: 4b:79:c4:ca:e3:69:b5:5b:b7:de:0f:02:46:2b:02: b4:b9:3a:c5:9c:13:18:a6:a0:8d:a0:a2:8f:1f:7f: dd:2a:a5:0e:9a:35:e0:64:4c:fa:70:5f:5e:14:ea: 7f:de:31:91:33:07:fe:4f:73:df:40:99:7a:2d:2b: 9f:2d:cf:7f:f6:ae:3d:1c:80:58:63:32:f2:55:01: f4:55:a9:e2:1d:28:cf:c3:58:ed:9b:27:b3:a2:fd: b0:79:25:f3:e4:d8:0e:46:5c:3a:e3:7d:d0:03:b5: 13:2f:f3:15:c1:e0:48:a1:84:d6:cf:53:0c:12:6f: 67:a5:8b:da:49:be:2d:10:6d:6e:a8:b0:74:a8:62: d6:6a:af:7d:24:1c:65:70:83:9d:96:2f:f7:7c:aa: 49:6d:06:03:b6:c4:c8:3c:f7:91:7e:05:18:67:ec: 48:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:C6:10:7F:7B:38:8A:3F:03:2F:49:61:75:A5:F4:80:9F:E4:B9:A6 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ksYQf3s4ij8DL0lhdaX0gJ_kuaY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.20.0/22 Signature Algorithm: sha256WithRSAEncryption 6e:35:f1:95:9d:f8:19:37:67:e4:65:37:b1:8d:e2:fe:eb:e8: 3d:3e:ee:00:6c:e9:39:6c:38:8f:b2:7b:57:8f:49:1f:93:d1: ea:79:04:b7:3c:3c:f7:74:e0:7d:52:1f:8a:5a:2f:d0:b7:c3: 31:e2:2a:78:d9:03:3d:20:5a:6f:c3:84:c1:eb:af:22:8e:7f: c8:37:6d:ba:42:92:0d:41:38:86:87:08:8d:74:64:12:d7:5c: ca:c5:53:d4:7b:e2:0e:8b:3f:6b:84:b2:b4:49:6b:49:07:36: 72:49:df:bb:12:26:14:3c:01:6d:ba:ae:9c:67:82:70:66:b8: bd:1d:ed:6d:5f:9d:6d:bc:0f:ac:2f:06:23:63:c9:9f:4c:a4: c8:f6:f5:24:f1:e3:17:07:22:0d:d6:e9:9b:40:76:56:42:a2: 00:1b:4c:25:f2:8c:f8:5b:72:1c:27:56:79:f6:2c:94:e4:41: db:27:46:56:67:be:6d:69:c6:27:86:1e:14:fa:c3:ce:18:7c: 46:d1:97:e4:59:d9:53:16:6f:42:2b:3d:57:cb:31:2d:79:c7: 0e:42:a3:1e:22:a8:dc:9d:ac:74:36:5b:22:a8:d4:b6:2d:b6: c4:28:8c:2d:e7:c7:ad:e8:1d:a8:d4:f2:4b:76:04:cb:14:a3: bc:21:de:ec -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOIUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1MjJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDkyQzYxMDdGN0IzODhB M0YwMzJGNDk2MTc1QTVGNDgwOUZFNEI5QTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCztPIbYhfS5UuZfUehzGTYtSDQ696tM9N4gJIIYTZBJyJ7CWTn qmeeutncxjNgSLwac2MX1AOFtMkk8FLga1kURV3ah/T6fQeDKM9rEEV8tlWmf9tc tQnGlUt5xMrjabVbt94PAkYrArS5OsWcEximoI2goo8ff90qpQ6aNeBkTPpwX14U 6n/eMZEzB/5Pc99AmXotK58tz3/2rj0cgFhjMvJVAfRVqeIdKM/DWO2bJ7Oi/bB5 JfPk2A5GXDrjfdADtRMv8xXB4EihhNbPUwwSb2eli9pJvi0QbW6osHSoYtZqr30k HGVwg52WL/d8qkltBgO2xMg895F+BRhn7EizAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUksYQf3s4ij8DL0lhdaX0gJ/kuaYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2tzWVFmM3M0aWo4REwwbGhk YVgwZ0pfa3VhWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6BQwDQYJKoZIhvcNAQELBQADggEBAG418ZWd+Bk3Z+RlN7GN4v7r6D0+7gBs6Tls OI+ye1ePSR+T0ep5BLc8PPd04H1SH4paL9C3wzHiKnjZAz0gWm/DhMHrryKOf8g3 bbpCkg1BOIaHCI10ZBLXXMrFU9R74g6LP2uEsrRJa0kHNnJJ37sSJhQ8AW26rpxn gnBmuL0d7W1fnW28D6wvBiNjyZ9MpMj29STx4xcHIg3W6ZtAdlZCogAbTCXyjPhb chwnVnn2LJTkQdsnRlZnvm1pxieGHhT6w84YfEbRl+RZ2VMWb0IrPVfLMS15xw5C ox4iqNydrHQ2WyKo1LYttsQojC3nx63oHajU8kt2BMsUo7wh3uw= -----END CERTIFICATE-----Generated at Sun Aug 24 07:31:58 2025 by rpki-client