$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lP5IzIQBT9jueJ5dkvHoc3vWOIc.roa File: lP5IzIQBT9jueJ5dkvHoc3vWOIc.roa (raw, json) Hash identifier: Cep+BgrqRpWksC3Vl+XbxBLumiaU84alf6PgCFUtnlQ= Subject key identifier: 94:FE:48:CC:84:01:4F:D8:EE:78:9E:5D:92:F1:E8:73:7B:D6:38:87 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 390C Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lP5IzIQBT9jueJ5dkvHoc3vWOIc.roa Signing time: Fri 22 Aug 2025 08:45:54 +0000 ROA not before: Fri 22 Aug 2025 08:45:54 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 118.233.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14604 (0x390c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:54 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=94FE48CC84014FD8EE789E5D92F1E8737BD63887 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ed:5b:82:ab:6a:80:30:73:6d:67:39:74:e3: cc:c7:b5:13:2a:2b:56:b9:1e:36:71:e5:36:5d:37: 48:d7:28:cc:3b:6f:ea:af:0d:47:13:e6:c7:56:8f: 21:96:d5:d2:15:5e:fb:c4:fa:b8:56:58:a8:79:00: c3:69:a8:3a:17:25:7a:e2:b2:32:cf:e9:85:53:d9: 97:f6:fd:ea:9b:a3:fc:49:50:ef:a9:3c:87:a3:93: 03:25:c8:b5:3e:a0:38:0b:fc:a5:fc:97:1e:d5:90: a9:14:bf:2a:09:d3:b2:c9:3f:62:da:59:eb:59:31: 74:3e:2c:37:97:2c:0d:6f:f6:4b:67:63:f1:7a:23: 5a:c1:c5:50:5a:b4:bf:bf:b4:17:37:5c:b2:67:4d: 86:bc:eb:75:9e:4d:68:28:cf:83:f4:b0:a8:2e:8d: ee:fe:26:b3:4d:7f:84:a2:9e:38:2f:93:8c:98:99: 09:c2:60:6b:97:5a:c7:78:26:fa:68:01:06:18:fd: 6f:ee:40:f5:38:04:99:d4:f6:a1:02:fd:9e:48:59: 99:af:d1:d7:e9:88:26:bf:77:7d:b5:94:77:47:a5: e5:84:d6:ea:28:d1:59:80:4a:e0:8d:09:9f:b8:b4: 60:cc:19:ae:18:93:b1:1b:4b:01:7f:28:49:32:8e: e2:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:FE:48:CC:84:01:4F:D8:EE:78:9E:5D:92:F1:E8:73:7B:D6:38:87 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lP5IzIQBT9jueJ5dkvHoc3vWOIc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.36.0/22 Signature Algorithm: sha256WithRSAEncryption 43:c5:8d:23:bc:7d:37:40:25:f7:f3:b5:43:c2:a0:c7:b8:ac: 72:08:d8:80:bf:90:3f:f8:f6:a1:84:1f:30:eb:de:79:48:35: 85:07:e4:ef:6e:02:0f:b4:8b:21:c0:d6:c3:df:17:4c:8a:31: 9f:aa:3a:4f:bb:7d:09:de:5d:16:33:71:58:d9:c5:c0:ee:23: 79:7f:d8:01:f7:c4:7a:af:c4:76:16:7b:1c:86:d0:82:de:6a: b1:c3:14:87:14:f1:63:dd:b0:38:b0:03:e2:0d:40:7d:28:1b: a0:ed:a9:71:a0:6a:78:a7:4e:d2:d2:fc:13:a0:29:35:ad:b5: b7:e8:2a:3c:c7:d7:03:68:bb:36:8b:b3:6e:a5:f1:4d:56:63: 38:de:72:de:10:48:34:c3:23:d1:82:14:6a:f4:d3:9e:db:08: 1c:e7:9a:f6:b2:bd:79:d7:c8:57:07:e6:01:8d:e3:b1:6d:a2: 86:fa:48:59:07:cf:ad:6f:4b:ed:f7:d0:74:b6:83:2c:27:44: bb:7a:b7:f2:1d:f0:cc:18:58:81:66:bc:a1:01:6a:d0:04:ad: 66:41:9a:41:4c:66:f6:64:89:50:c3:0b:b4:d3:9f:19:d2:24: c8:9f:e3:52:93:f2:10:53:73:1d:b7:1b:2f:86:7c:9f:e2:d7: 99:87:6c:d1 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOQwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1NTRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDk0RkU0OENDODQwMTRG RDhFRTc4OUU1RDkyRjFFODczN0JENjM4ODcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCe7VuCq2qAMHNtZzl048zHtRMqK1a5HjZx5TZdN0jXKMw7b+qv DUcT5sdWjyGW1dIVXvvE+rhWWKh5AMNpqDoXJXrisjLP6YVT2Zf2/eqbo/xJUO+p PIejkwMlyLU+oDgL/KX8lx7VkKkUvyoJ07LJP2LaWetZMXQ+LDeXLA1v9ktnY/F6 I1rBxVBatL+/tBc3XLJnTYa863WeTWgoz4P0sKguje7+JrNNf4Sinjgvk4yYmQnC YGuXWsd4JvpoAQYY/W/uQPU4BJnU9qEC/Z5IWZmv0dfpiCa/d321lHdHpeWE1uoo 0VmASuCNCZ+4tGDMGa4Yk7EbSwF/KEkyjuLtAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUlP5IzIQBT9jueJ5dkvHoc3vWOIcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2xQNUl6SVFCVDlqdWVKNWRr dkhvYzN2V09JYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6SQwDQYJKoZIhvcNAQELBQADggEBAEPFjSO8fTdAJffztUPCoMe4rHII2IC/kD/4 9qGEHzDr3nlINYUH5O9uAg+0iyHA1sPfF0yKMZ+qOk+7fQneXRYzcVjZxcDuI3l/ 2AH3xHqvxHYWexyG0ILearHDFIcU8WPdsDiwA+INQH0oG6DtqXGganinTtLS/BOg KTWttbfoKjzH1wNouzaLs26l8U1WYzject4QSDTDI9GCFGr0057bCBznmvayvXnX yFcH5gGN47Ftoob6SFkHz61vS+330HS2gywnRLt6t/Id8MwYWIFmvKEBatAErWZB mkFMZvZkiVDDC7TTnxnSJMif41KT8hBTcx23Gy+GfJ/i15mHbNE= -----END CERTIFICATE-----Generated at Sun Aug 24 05:34:02 2025 by rpki-client