$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lalLJ43eksLq7mkPhjpMy4VlRNs.roa File: lalLJ43eksLq7mkPhjpMy4VlRNs.roa (raw, json) Hash identifier: d878nyeHFa9sjGhTB57ZP4SRceeiDDkbdKZlVRXtvUk= Subject key identifier: 95:A9:4B:27:8D:DE:92:C2:EA:EE:69:0F:86:3A:4C:CB:85:65:44:DB Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 39A0 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lalLJ43eksLq7mkPhjpMy4VlRNs.roa Signing time: Fri 22 Aug 2025 08:46:29 +0000 ROA not before: Fri 22 Aug 2025 08:46:29 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 106.1.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14752 (0x39a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:29 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=95A94B278DDE92C2EAEE690F863A4CCB856544DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c2:1e:cd:62:a4:10:d3:61:c9:38:ea:b2:8c: fa:ee:f3:b1:16:ea:a3:3d:3e:c0:80:e0:44:cb:f1: 90:14:18:c2:f2:98:7f:66:a1:a7:b7:c1:01:3e:ed: c7:a9:9f:67:f1:40:c9:e3:2d:f5:94:ef:b8:0f:49: c6:0f:61:5a:0c:c2:1d:32:b2:f7:70:9c:03:18:7d: 09:7d:f3:30:44:b1:53:14:da:f7:52:fb:51:2a:25: 11:ad:2e:ab:ca:b5:de:bf:98:15:e9:ed:66:54:fb: 63:6f:92:da:d9:2e:0e:0b:20:a9:d9:29:1d:50:a8: 42:18:58:76:7a:28:12:80:92:07:4f:88:08:2b:82: 5f:fb:91:d7:b6:21:30:c3:7c:da:4f:22:b4:61:4e: 84:40:38:95:8f:c4:63:63:ee:d8:e4:64:be:db:2c: d5:0c:db:31:83:09:a2:0e:eb:80:85:9d:21:18:cf: 07:77:09:bd:a1:6c:45:ba:a9:92:71:bf:89:5a:f6: 1e:69:c1:a5:39:c6:ff:c6:ee:b1:13:79:d6:13:30: da:c7:e4:51:8d:bb:ce:61:d8:69:6b:60:17:4a:b2: 8b:51:33:da:fb:1f:43:57:56:0f:44:25:e6:b7:80: c6:0f:e8:ca:39:bf:ba:e0:f1:a3:e9:34:4c:d8:27: 1c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:A9:4B:27:8D:DE:92:C2:EA:EE:69:0F:86:3A:4C:CB:85:65:44:DB X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lalLJ43eksLq7mkPhjpMy4VlRNs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.148.0/23 Signature Algorithm: sha256WithRSAEncryption 00:9d:c0:ff:4f:81:92:82:30:0c:7d:c2:2d:8a:7e:11:39:e4: ff:8c:9f:ad:f3:f4:83:ed:af:e5:ae:53:76:72:af:b0:98:82: 58:f7:14:b0:77:68:b6:3b:b0:99:90:04:b7:f9:1b:72:20:47: 30:7c:2c:aa:ad:cc:a1:fb:72:94:d5:6c:08:d7:01:1c:4b:1b: 68:b2:a3:af:6e:4d:b6:8b:ca:85:d5:48:be:d5:ae:7e:e7:b6: 84:1b:32:d9:39:d0:2c:64:e7:8b:72:09:e4:d5:7f:6b:6e:14: 78:88:43:ca:00:ec:bc:2f:cd:ec:47:4b:04:d3:45:ce:5f:c9: 32:25:54:75:4e:56:0f:8d:08:ac:1a:7b:80:5d:a2:94:7b:b3: 35:6c:2f:f1:11:e3:19:ac:f2:73:94:97:11:2a:2d:1f:c2:d3: a1:27:3b:42:04:2b:9e:02:eb:40:b0:b0:ae:34:db:60:9c:8f: c9:1e:e0:22:17:27:ff:ab:83:ce:f5:c0:7e:8d:1d:d5:af:80: e4:ad:9e:7d:c0:8e:39:8f:2d:25:cb:bb:e1:8b:6b:e0:f3:d3: 25:21:84:f2:eb:df:ba:75:21:a5:00:03:d7:68:1c:79:b1:24: 9a:ff:a2:1e:15:10:fb:4a:6d:69:44:12:d1:37:36:8c:40:03: 42:07:0e:35 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOaAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2MjlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDk1QTk0QjI3OERERTky QzJFQUVFNjkwRjg2M0E0Q0NCODU2NTQ0REIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzwh7NYqQQ02HJOOqyjPru87EW6qM9PsCA4ETL8ZAUGMLymH9m oae3wQE+7cepn2fxQMnjLfWU77gPScYPYVoMwh0ysvdwnAMYfQl98zBEsVMU2vdS +1EqJRGtLqvKtd6/mBXp7WZU+2NvktrZLg4LIKnZKR1QqEIYWHZ6KBKAkgdPiAgr gl/7kde2ITDDfNpPIrRhToRAOJWPxGNj7tjkZL7bLNUM2zGDCaIO64CFnSEYzwd3 Cb2hbEW6qZJxv4la9h5pwaU5xv/G7rETedYTMNrH5FGNu85h2GlrYBdKsotRM9r7 H0NXVg9EJea3gMYP6Mo5v7rg8aPpNEzYJxzrAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUlalLJ43eksLq7mkPhjpMy4VlRNswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2xhbExKNDNla3NMcTdta1Bo anBNeTRWbFJOcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFq AZQwDQYJKoZIhvcNAQELBQADggEBAACdwP9PgZKCMAx9wi2KfhE55P+Mn63z9IPt r+WuU3Zyr7CYglj3FLB3aLY7sJmQBLf5G3IgRzB8LKqtzKH7cpTVbAjXARxLG2iy o69uTbaLyoXVSL7Vrn7ntoQbMtk50Cxk54tyCeTVf2tuFHiIQ8oA7LwvzexHSwTT Rc5fyTIlVHVOVg+NCKwae4BdopR7szVsL/ER4xms8nOUlxEqLR/C06EnO0IEK54C 60CwsK4022Ccj8ke4CIXJ/+rg871wH6NHdWvgOStnn3AjjmPLSXLu+GLa+Dz0yUh hPLr37p1IaUAA9doHHmxJJr/oh4VEPtKbWlEEtE3NoxAA0IHDjU= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:54 2025 by rpki-client