$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lMeKDkllCtc6WFpidRZkbMZDrKA.roa File: lMeKDkllCtc6WFpidRZkbMZDrKA.roa (raw, json) Hash identifier: k1cWry5nI9Bgnvt6zLC6zhcbIPT/fXSb0hyssoKxbsE= Subject key identifier: 94:C7:8A:0E:49:65:0A:D7:3A:58:5A:62:75:16:64:6C:C6:43:AC:A0 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 384C Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lMeKDkllCtc6WFpidRZkbMZDrKA.roa Signing time: Fri 22 Aug 2025 08:45:09 +0000 ROA not before: Fri 22 Aug 2025 08:45:09 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 2407:4d00:ff00::/44 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14412 (0x384c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:09 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=94C78A0E49650AD73A585A627516646CC643ACA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b6:f4:96:7c:0d:d5:3c:a8:41:aa:88:9c:ab: 25:79:c4:fa:26:c1:7f:dd:0b:42:d8:0c:9c:43:7c: de:30:de:a6:b6:66:4a:9e:8b:10:a1:f2:db:89:d5: c2:5d:84:05:26:27:4f:f5:86:68:3a:f1:99:e7:67: d4:17:44:af:ec:cd:fb:84:7c:a4:cb:e8:f1:99:c4: 5f:fa:24:c8:81:dc:c2:f4:9f:7a:2d:43:8f:85:ea: 9b:14:3b:d8:34:40:dd:ee:6d:0b:f0:b7:4e:4f:3c: 17:95:dd:df:ce:b9:a2:42:53:72:75:4d:40:41:56: cf:b7:36:c5:bd:45:c5:a3:98:74:28:8c:2c:85:8e: 66:36:a4:c2:52:30:c9:c2:12:09:57:d5:35:9e:b8: d2:a0:b3:c9:20:ff:e7:27:3f:34:49:0c:9d:78:aa: bb:e2:64:e5:63:f9:04:61:67:26:7e:13:19:d4:cf: 1d:30:10:82:4d:05:ab:d2:97:92:f4:12:a7:da:63: ca:d8:b5:ac:a9:61:ae:9c:8a:e1:64:f5:32:17:37: 15:d3:9e:cc:d1:d5:66:60:ea:89:32:c4:2a:a2:d1: 4d:6d:6e:1b:a6:ac:7a:54:6c:a9:f8:90:a7:d4:00: 70:97:a8:7e:2a:7e:cd:46:70:02:20:15:f9:cd:25: df:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:C7:8A:0E:49:65:0A:D7:3A:58:5A:62:75:16:64:6C:C6:43:AC:A0 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lMeKDkllCtc6WFpidRZkbMZDrKA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:4d00:ff00::/44 Signature Algorithm: sha256WithRSAEncryption 51:c5:e5:c0:6b:92:43:82:f5:4b:34:9d:0a:f1:56:84:66:fb: 44:1c:4c:38:bf:6f:25:8b:93:39:fd:8b:f2:34:a5:18:bb:18: 1f:c2:c3:34:4b:cb:7f:3c:93:c4:0e:69:86:98:c3:9b:96:2e: 53:a4:e9:fb:b7:d5:97:29:d5:94:bc:08:29:67:2b:ed:9f:13: a7:5a:93:fb:56:36:45:dd:4f:71:f2:57:99:9b:7c:2e:ec:e4: 2a:f7:3e:3f:4d:d8:a3:f4:d4:b7:78:b7:06:f0:08:80:88:d4: ca:05:17:0e:1e:9d:58:20:2b:f5:7b:e1:b2:ff:f7:b9:60:14: 0d:a4:47:6a:f3:49:0d:ee:67:62:d7:db:0d:93:4b:c0:38:74: b8:d0:a4:15:91:39:5d:d9:b5:48:16:3d:d9:22:e0:84:2c:06: 08:6e:b6:c0:06:17:72:ed:00:22:4a:38:9c:75:bc:4c:b0:ee: ee:f0:f9:cc:d7:ce:fc:67:c5:dd:f3:1d:45:98:f7:16:c0:7a: a6:25:fd:cf:a6:02:65:b5:b6:5b:33:fa:e9:92:ab:65:a0:6e: b2:c5:4e:03:70:39:03:8d:0f:56:38:80:b2:cc:1c:dc:13:47: 8f:a5:73:b0:9f:46:ae:ee:7e:52:29:78:a5:ca:59:d4:b5:90: 2e:49:1d:e6 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICOEwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1MDlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDk0Qzc4QTBFNDk2NTBB RDczQTU4NUE2Mjc1MTY2NDZDQzY0M0FDQTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFtvSWfA3VPKhBqoicqyV5xPomwX/dC0LYDJxDfN4w3qa2Zkqe ixCh8tuJ1cJdhAUmJ0/1hmg68ZnnZ9QXRK/szfuEfKTL6PGZxF/6JMiB3ML0n3ot Q4+F6psUO9g0QN3ubQvwt05PPBeV3d/OuaJCU3J1TUBBVs+3NsW9RcWjmHQojCyF jmY2pMJSMMnCEglX1TWeuNKgs8kg/+cnPzRJDJ14qrviZOVj+QRhZyZ+ExnUzx0w EIJNBavSl5L0EqfaY8rYtaypYa6ciuFk9TIXNxXTnszR1WZg6okyxCqi0U1tbhum rHpUbKn4kKfUAHCXqH4qfs1GcAIgFfnNJd9vAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUlMeKDkllCtc6WFpidRZkbMZDrKAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2xNZUtEa2xsQ3RjNldGcGlk UlprYk1aRHJLQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQk B00A/wAwDQYJKoZIhvcNAQELBQADggEBAFHF5cBrkkOC9Us0nQrxVoRm+0QcTDi/ byWLkzn9i/I0pRi7GB/CwzRLy388k8QOaYaYw5uWLlOk6fu31Zcp1ZS8CClnK+2f E6dak/tWNkXdT3HyV5mbfC7s5Cr3Pj9N2KP01Ld4twbwCICI1MoFFw4enVggK/V7 4bL/97lgFA2kR2rzSQ3uZ2LX2w2TS8A4dLjQpBWROV3ZtUgWPdki4IQsBghutsAG F3LtACJKOJx1vEyw7u7w+czXzvxnxd3zHUWY9xbAeqYl/c+mAmW1tlsz+umSq2Wg brLFTgNwOQOND1Y4gLLMHNwTR4+lc7CfRq7uflIpeKXKWdS1kC5JHeY= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:28 2025 by rpki-client