$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/l9WMsbaPLNFRD0Z3iryIkyLNQ_s.roa File: l9WMsbaPLNFRD0Z3iryIkyLNQ_s.roa (raw, json) Hash identifier: 1VQfWVyWV01QxUhGpFGshschjNfwmAHBF9o1mj6d/bE= Subject key identifier: 97:D5:8C:B1:B6:8F:2C:D1:51:0F:46:77:8A:BC:88:93:22:CD:43:FB Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 38D0 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/l9WMsbaPLNFRD0Z3iryIkyLNQ_s.roa Signing time: Fri 22 Aug 2025 08:45:40 +0000 ROA not before: Fri 22 Aug 2025 08:45:40 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.193.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14544 (0x38d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:40 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=97D58CB1B68F2CD1510F46778ABC889322CD43FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:81:55:3b:a7:7e:68:c5:98:3a:c1:cc:d3:bf: 44:96:5f:71:3c:d6:b4:51:8d:5c:2d:54:79:60:70: dd:ee:e9:02:5d:73:eb:41:ae:27:1a:4b:53:99:20: 3f:a3:46:46:cf:26:29:ac:ff:12:c0:68:f1:ef:ba: b6:83:38:e8:9e:0c:24:ea:42:d0:14:03:48:6e:86: 2a:29:91:d1:25:f1:8a:f0:97:30:b1:6f:49:93:1c: 5a:3a:b3:6f:8f:61:f2:6e:a5:c8:6e:14:66:ea:25: 2a:0b:e5:10:47:fb:d7:51:1f:14:9b:1a:6c:ec:63: dc:14:11:5f:10:40:a7:8b:e3:f8:86:37:c6:a7:23: 51:b6:c9:16:9f:67:ca:c4:ac:95:eb:30:38:a2:19: a3:1b:c9:c7:a3:82:96:60:80:c0:9e:b9:a9:7a:00: bd:13:89:c2:0d:ec:7e:41:29:f2:85:8b:13:d4:50: ca:81:12:bc:83:d1:d5:85:91:47:f3:68:e4:6e:94: c0:e2:35:b0:c0:71:d0:79:3c:0f:1c:ea:69:8e:46: 19:e4:05:da:a6:a8:a5:76:07:e8:92:1e:bf:09:ea: 9b:6e:05:9f:a3:d5:85:ee:b5:67:26:0b:10:46:dc: 77:41:a6:94:61:bd:2c:5c:aa:59:bf:ff:e2:3c:3a: 87:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:D5:8C:B1:B6:8F:2C:D1:51:0F:46:77:8A:BC:88:93:22:CD:43:FB X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/l9WMsbaPLNFRD0Z3iryIkyLNQ_s.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.106.0/24 Signature Algorithm: sha256WithRSAEncryption 57:3e:b2:1d:d4:f9:0a:77:d6:c4:df:e5:50:48:6c:49:fa:da: 67:c9:0e:ad:bb:6c:5f:55:45:40:c9:03:e0:5d:58:bf:d3:c0: d6:55:53:9d:15:ac:f5:90:6f:df:f0:da:05:ec:81:31:cd:30: 76:73:07:27:8c:2c:5f:3b:50:3b:a2:e8:05:5c:35:f3:80:3f: e5:d3:21:4b:25:ef:67:c8:4a:bc:18:7d:96:16:e4:80:31:6e: 71:a4:70:05:e4:86:3f:7f:0a:5e:ab:f6:2c:44:0f:76:8a:78: 4a:62:ce:8f:d9:5f:ac:ba:9c:4e:cf:ca:d4:f8:e1:99:5e:5a: 9c:df:c7:5b:cf:d2:bb:f7:62:1a:e6:a1:d0:96:cf:ea:6a:5f: 9b:43:a0:7d:be:17:f7:37:1d:9d:ef:79:e1:04:f8:44:50:11: de:ac:7d:9c:9b:22:f1:e5:9d:71:61:3b:d2:30:f5:dd:68:4c: 94:09:40:04:4f:3a:bd:4e:ad:2e:10:9f:8f:af:05:29:85:af: e8:0b:11:66:99:c7:9d:65:5a:16:73:b7:3f:46:05:55:f3:b7: 50:f8:53:13:82:d4:4b:66:fa:9e:72:38:18:64:01:04:17:c8: 15:8e:aa:5b:d2:5a:fd:06:7e:99:fb:ae:ba:7c:30:5c:7c:61: 15:99:f7:8a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICONAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1NDBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDk3RDU4Q0IxQjY4RjJD RDE1MTBGNDY3NzhBQkM4ODkzMjJDRDQzRkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD0gVU7p35oxZg6wczTv0SWX3E81rRRjVwtVHlgcN3u6QJdc+tB ricaS1OZID+jRkbPJims/xLAaPHvuraDOOieDCTqQtAUA0huhiopkdEl8YrwlzCx b0mTHFo6s2+PYfJupchuFGbqJSoL5RBH+9dRHxSbGmzsY9wUEV8QQKeL4/iGN8an I1G2yRafZ8rErJXrMDiiGaMbycejgpZggMCeual6AL0TicIN7H5BKfKFixPUUMqB EryD0dWFkUfzaORulMDiNbDAcdB5PA8c6mmORhnkBdqmqKV2B+iSHr8J6ptuBZ+j 1YXutWcmCxBG3HdBppRhvSxcqlm//+I8OofJAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUl9WMsbaPLNFRD0Z3iryIkyLNQ/swHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2w5V01zYmFQTE5GUkQwWjNp cnlJa3lMTlFfcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7 wWowDQYJKoZIhvcNAQELBQADggEBAFc+sh3U+Qp31sTf5VBIbEn62mfJDq27bF9V RUDJA+BdWL/TwNZVU50VrPWQb9/w2gXsgTHNMHZzByeMLF87UDui6AVcNfOAP+XT IUsl72fISrwYfZYW5IAxbnGkcAXkhj9/Cl6r9ixED3aKeEpizo/ZX6y6nE7PytT4 4ZleWpzfx1vP0rv3YhrmodCWz+pqX5tDoH2+F/c3HZ3veeEE+ERQEd6sfZybIvHl nXFhO9Iw9d1oTJQJQARPOr1OrS4Qn4+vBSmFr+gLEWaZx51lWhZztz9GBVXzt1D4 UxOC1Etm+p5yOBhkAQQXyBWOqlvSWv0Gfpn7rrp8MFx8YRWZ94o= -----END CERTIFICATE-----Generated at Sun Aug 24 05:34:01 2025 by rpki-client