$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lWdjB7OH-4swvUEuRBllbaSUcGc.roa File: lWdjB7OH-4swvUEuRBllbaSUcGc.roa (raw, json) Hash identifier: AAx/4czXswIcbfQFEByOS4lMyLeCml6BnLVTTim8zNI= Subject key identifier: 95:67:63:07:B3:87:FB:8B:30:BD:41:2E:44:19:65:6D:A4:94:70:67 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3A43 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lWdjB7OH-4swvUEuRBllbaSUcGc.roa Signing time: Fri 22 Aug 2025 08:47:11 +0000 ROA not before: Fri 22 Aug 2025 08:47:11 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.194.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14915 (0x3a43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:11 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=95676307B387FB8B30BD412E4419656DA4947067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d9:1e:b5:31:77:26:7b:b2:1b:ba:70:65:98: 7e:42:84:90:5d:66:f0:b0:36:24:5e:fc:47:70:86: cf:5a:a0:b9:89:a5:6e:7b:47:22:94:78:73:6a:da: 2a:d8:1b:b6:72:9b:d0:06:39:a8:02:4e:9f:be:fc: 75:ff:0b:ab:ed:8b:ad:e6:7b:9b:2e:86:35:5d:70: dd:b8:56:13:40:24:26:81:03:e2:fa:1b:be:87:15: a1:26:38:ee:9e:6b:cc:c2:b2:0c:a1:7c:f1:0a:a2: 7d:da:92:94:8b:17:3b:fe:06:78:05:ef:3c:6e:07: 11:5f:1b:3d:11:dd:c1:6c:e2:10:98:92:48:17:59: 8e:05:f1:17:a7:30:30:0a:90:52:1e:0f:59:2b:4e: 09:5b:c2:37:4b:30:27:2f:3c:28:90:db:34:26:51: 73:1b:79:80:6f:78:fc:6f:99:a9:25:c4:66:ed:5e: 78:ef:bd:21:48:4e:00:07:c4:9b:a4:4e:80:80:5b: e1:4d:b4:fa:17:96:0c:8f:c8:6b:70:2f:7a:41:16: af:67:37:69:f8:df:92:59:93:1f:34:01:e0:6e:47: 55:39:76:c6:5e:49:62:72:9c:f4:c1:2b:ee:4d:65: 9c:1a:f7:a2:f2:aa:b2:3e:1d:aa:01:31:ff:a3:dc: 2f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:67:63:07:B3:87:FB:8B:30:BD:41:2E:44:19:65:6D:A4:94:70:67 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lWdjB7OH-4swvUEuRBllbaSUcGc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.232.0/21 Signature Algorithm: sha256WithRSAEncryption 91:21:26:2d:8b:0e:ba:35:3b:0e:6b:e9:29:14:c0:88:29:ba: 9e:6d:2d:36:b0:ed:fd:89:a6:2e:2e:0c:ec:31:8d:7a:ab:9f: e5:b0:2e:a8:1e:d9:c2:87:88:d1:3e:5d:cb:d0:fc:4a:4c:c3: 2e:8c:d7:fc:0c:ca:6d:78:72:ad:21:5c:24:ca:6a:8f:79:3b: 43:a8:99:c6:f1:91:5c:4d:5b:c0:9f:01:0d:f0:83:9f:30:9a: 1c:94:fa:b6:90:fc:d0:b3:a5:1a:93:69:6c:44:8f:7b:64:29: e4:0b:17:80:2d:04:65:66:b5:b7:d7:c5:d4:54:7a:fd:69:80: e2:1f:e7:91:66:8b:1f:d5:ba:4e:5a:a8:2c:95:11:f1:3d:5e: 05:eb:4d:34:42:1c:ba:0d:47:88:23:98:80:ba:7b:ee:2c:8d: 91:18:30:c3:99:9e:9d:8f:88:01:f5:36:c1:4b:c0:13:a4:c6: 74:5e:32:c5:50:c0:da:09:00:a5:4a:70:9e:a8:f1:ae:46:b1: 03:a5:67:39:b0:c7:31:a3:26:69:d1:4d:7c:cd:5d:b1:36:f5: 96:af:c0:20:7b:5b:bf:64:09:2e:d9:db:30:af:4e:c0:bf:35: e9:5f:32:06:f0:6b:9b:98:62:23:6f:ac:32:c7:c4:0f:75:27: f6:9f:f1:fc -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOkMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3MTFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDk1Njc2MzA3QjM4N0ZC OEIzMEJENDEyRTQ0MTk2NTZEQTQ5NDcwNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCy2R61MXcme7IbunBlmH5ChJBdZvCwNiRe/Edwhs9aoLmJpW57 RyKUeHNq2irYG7Zym9AGOagCTp++/HX/C6vti63me5suhjVdcN24VhNAJCaBA+L6 G76HFaEmOO6ea8zCsgyhfPEKon3akpSLFzv+BngF7zxuBxFfGz0R3cFs4hCYkkgX WY4F8RenMDAKkFIeD1krTglbwjdLMCcvPCiQ2zQmUXMbeYBvePxvmaklxGbtXnjv vSFITgAHxJukToCAW+FNtPoXlgyPyGtwL3pBFq9nN2n435JZkx80AeBuR1U5dsZe SWJynPTBK+5NZZwa96LyqrI+HaoBMf+j3C8XAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUlWdjB7OH+4swvUEuRBllbaSUcGcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2xXZGpCN09ILTRzd3ZVRXVS QmxsYmFTVWNHYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wugwDQYJKoZIhvcNAQELBQADggEBAJEhJi2LDro1Ow5r6SkUwIgpup5tLTaw7f2J pi4uDOwxjXqrn+WwLqge2cKHiNE+XcvQ/EpMwy6M1/wMym14cq0hXCTKao95O0Oo mcbxkVxNW8CfAQ3wg58wmhyU+raQ/NCzpRqTaWxEj3tkKeQLF4AtBGVmtbfXxdRU ev1pgOIf55Fmix/Vuk5aqCyVEfE9XgXrTTRCHLoNR4gjmIC6e+4sjZEYMMOZnp2P iAH1NsFLwBOkxnReMsVQwNoJAKVKcJ6o8a5GsQOlZzmwxzGjJmnRTXzNXbE29Zav wCB7W79kCS7Z2zCvTsC/NelfMgbwa5uYYiNvrDLHxA91J/af8fw= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:17 2025 by rpki-client