$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/l_h4HEdEVFm6zTRcuMACuL4xdXU.roa File: l_h4HEdEVFm6zTRcuMACuL4xdXU.roa (raw, json) Hash identifier: KYjJgKUU2UO6zam6x8qbbGf0F/Ia1LG1Xi4UzQ4GjVE= Subject key identifier: 97:F8:78:1C:47:44:54:59:BA:CD:34:5C:B8:C0:02:B8:BE:31:75:75 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3858 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/l_h4HEdEVFm6zTRcuMACuL4xdXU.roa Signing time: Fri 22 Aug 2025 08:45:12 +0000 ROA not before: Fri 22 Aug 2025 08:45:12 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 106.1.0.0/16 maxlen: 17 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14424 (0x3858) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:12 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=97F8781C47445459BACD345CB8C002B8BE317575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6c:24:73:54:5d:40:a6:f0:64:7a:0d:7e:c9: d5:c9:4f:f1:98:a1:af:a7:c6:18:16:da:55:89:bb: 7f:08:f0:93:ce:6c:3e:fa:59:a3:15:1d:3e:4e:03: f5:5d:eb:8b:04:dd:a0:7a:2e:50:aa:1d:e4:01:9d: fe:98:ba:27:64:b2:a7:5c:4a:e4:c2:ce:60:1d:5e: ff:07:8e:3b:9c:90:7a:bb:9a:7c:1c:f3:33:39:14: d8:c7:48:53:71:04:6e:d7:a8:24:10:c5:cc:28:f2: 10:d4:70:12:2e:a9:60:40:e9:1f:6e:be:cf:86:fe: 23:b1:60:8e:da:e5:bb:82:b1:d6:28:b7:4b:a9:af: 1b:73:b3:c2:25:08:4e:d7:d0:29:91:e5:49:44:f8: a5:2c:b3:2a:cd:b1:24:8e:b2:f1:5c:b5:1e:e4:b2: df:c2:b0:2f:1d:28:70:e1:d1:1c:7a:fe:6d:ec:f7: a2:6b:57:f2:10:0d:70:71:40:bd:2a:e5:f0:36:44: 36:c7:23:f6:7d:6e:92:c6:4c:5c:2e:1f:e2:b1:56: e8:19:57:00:e4:0f:60:7d:c6:e7:de:5e:2e:2f:ba: 47:7f:32:1b:d6:a2:e5:3b:a8:3c:3f:e7:2f:0a:0e: f6:38:8c:4c:15:c3:23:76:db:da:a3:09:91:e6:f5: fe:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:F8:78:1C:47:44:54:59:BA:CD:34:5C:B8:C0:02:B8:BE:31:75:75 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/l_h4HEdEVFm6zTRcuMACuL4xdXU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.0.0/16 Signature Algorithm: sha256WithRSAEncryption 56:5e:4c:0b:63:ae:c5:b4:b2:ff:85:0f:4e:65:54:09:e4:aa: 00:b6:c0:48:d5:db:ed:fc:71:e0:3d:d3:f3:ac:0b:27:1d:0a: 9b:f0:be:fd:1b:41:f1:bc:35:d4:70:08:cb:c7:6b:1b:6e:d5: e2:a0:9c:09:3c:3a:2a:2e:a3:72:a4:49:bc:30:61:dc:c4:35: 0b:ab:9a:5e:76:32:a1:a2:68:ff:04:d6:a9:9e:36:11:e5:bd: c9:2d:18:ac:c2:d1:55:a2:7b:84:ad:ca:11:e0:84:74:22:0e: 3c:5f:dc:8a:0b:34:76:55:ac:f6:99:3e:69:13:03:57:d0:4c: 5a:80:08:be:d2:d6:6f:e6:07:be:12:2f:fe:4b:0c:db:b9:d8: f2:59:7c:9b:14:c9:99:13:68:bd:59:f7:38:fd:f5:8d:b6:70: 89:8d:9f:5d:23:31:8b:39:30:f2:c6:30:c5:d7:72:b5:8d:82: 7a:09:55:54:e8:e9:40:cb:30:7f:c1:30:96:7f:93:47:87:c8: 9f:66:66:0b:2b:54:3b:be:1e:7e:c3:49:c8:0b:5b:54:a0:a5: fd:7d:02:ad:37:f9:65:e1:d0:ea:2e:7a:7a:72:36:a0:8a:31: cf:4a:41:fc:82:da:7c:b8:8e:99:43:d2:5f:70:4e:50:39:35: e9:85:c0:0f -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICOFgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1MTJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDk3Rjg3ODFDNDc0NDU0 NTlCQUNEMzQ1Q0I4QzAwMkI4QkUzMTc1NzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQChbCRzVF1ApvBkeg1+ydXJT/GYoa+nxhgW2lWJu38I8JPObD76 WaMVHT5OA/Vd64sE3aB6LlCqHeQBnf6YuidksqdcSuTCzmAdXv8HjjuckHq7mnwc 8zM5FNjHSFNxBG7XqCQQxcwo8hDUcBIuqWBA6R9uvs+G/iOxYI7a5buCsdYot0up rxtzs8IlCE7X0CmR5UlE+KUssyrNsSSOsvFctR7kst/CsC8dKHDh0Rx6/m3s96Jr V/IQDXBxQL0q5fA2RDbHI/Z9bpLGTFwuH+KxVugZVwDkD2B9xufeXi4vukd/MhvW ouU7qDw/5y8KDvY4jEwVwyN229qjCZHm9f6BAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUl/h4HEdEVFm6zTRcuMACuL4xdXUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2xfaDRIRWRFVkZtNnpUUmN1 TUFDdUw0eGRYVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwBq ATANBgkqhkiG9w0BAQsFAAOCAQEAVl5MC2OuxbSy/4UPTmVUCeSqALbASNXb7fxx 4D3T86wLJx0Km/C+/RtB8bw11HAIy8drG27V4qCcCTw6Ki6jcqRJvDBh3MQ1C6ua XnYyoaJo/wTWqZ42EeW9yS0YrMLRVaJ7hK3KEeCEdCIOPF/cigs0dlWs9pk+aRMD V9BMWoAIvtLWb+YHvhIv/ksM27nY8ll8mxTJmRNovVn3OP31jbZwiY2fXSMxizkw 8sYwxddytY2CeglVVOjpQMswf8Ewln+TR4fIn2ZmCytUO74efsNJyAtbVKCl/X0C rTf5ZeHQ6i56enI2oIoxz0pB/ILafLiOmUPSX3BOUDk16YXADw== -----END CERTIFICATE-----Generated at Sun Aug 24 05:32:07 2025 by rpki-client