$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mCurhF-Bb3u45QCe0IR6bST-rr4.roa File: mCurhF-Bb3u45QCe0IR6bST-rr4.roa (raw, json) Hash identifier: WtZBQoP8Hgaol/Wg2TSDrzUy25D/6VE8L05DJfVDWP0= Subject key identifier: 98:2B:AB:84:5F:81:6F:7B:B8:E5:00:9E:D0:84:7A:6D:24:FE:AE:BE Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 38AF Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mCurhF-Bb3u45QCe0IR6bST-rr4.roa Signing time: Fri 22 Aug 2025 08:45:31 +0000 ROA not before: Fri 22 Aug 2025 08:45:31 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.193.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14511 (0x38af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:31 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=982BAB845F816F7BB8E5009ED0847A6D24FEAEBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:23:15:15:e5:41:22:d8:9e:7a:8b:5b:79:07: e3:15:29:d8:3e:c1:94:2c:4d:3c:19:6a:b0:d3:83: 00:02:e9:21:01:13:47:43:b6:c8:25:0b:cb:01:a3: 14:ab:14:0a:48:88:bc:d5:de:5c:cc:ee:45:8d:94: 79:21:67:db:2a:b9:ba:96:0d:d1:c5:b0:43:f1:ae: 35:1b:0f:09:16:a8:b5:a2:0a:00:92:61:34:b2:a5: 37:fa:2e:08:0a:8b:f9:89:d9:8f:34:be:65:19:de: 4f:35:a0:98:15:07:75:99:33:26:22:f1:a8:9b:a8: 7d:62:d1:5b:fd:5b:30:b5:19:d4:ff:c3:d0:77:b5: 6c:2f:74:80:f6:73:7e:1a:1f:99:0c:da:3c:a7:a0: 19:45:a8:64:71:fb:68:c8:74:cb:6a:f8:35:48:19: 70:4e:94:30:a4:8b:aa:30:d1:cb:9a:61:49:69:76: cd:02:d2:5a:f7:62:45:8f:62:de:14:e6:76:be:d4: 7c:20:4c:fb:c4:7e:a0:18:6b:16:6a:1d:ee:26:6e: 6d:10:16:8e:1e:d2:b3:b7:dd:fc:3b:a0:2e:16:79: 95:e0:58:cd:56:1c:c1:3c:56:1b:b5:91:49:36:b1: 6d:37:03:2a:65:17:e9:f9:2c:80:e0:86:a1:7b:b1: 9d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:2B:AB:84:5F:81:6F:7B:B8:E5:00:9E:D0:84:7A:6D:24:FE:AE:BE X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mCurhF-Bb3u45QCe0IR6bST-rr4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.246.0/24 Signature Algorithm: sha256WithRSAEncryption b7:c0:66:3f:7f:8a:57:24:d3:03:c6:9f:cb:67:8f:4c:39:1f: e1:f0:37:ea:22:a7:84:e3:5d:8d:4a:93:55:bf:34:b5:a8:c8: e7:65:7e:02:c6:b4:d5:66:a4:36:d9:4e:fc:dc:fc:8f:29:81: 01:34:77:31:19:c1:33:7b:d0:f8:ca:82:fa:0e:d9:27:4c:62: 09:3d:87:cd:fc:31:86:43:6d:39:62:ab:b8:5a:30:db:9e:6f: 72:1c:61:83:d2:bb:b9:38:d9:17:0f:89:c5:26:0d:22:06:e5: 5f:86:70:25:04:2b:60:cc:40:23:0f:9b:37:83:ac:a5:35:df: 80:98:09:6d:c9:61:e7:d9:f1:2e:98:3f:f4:03:1e:89:cb:e9: fc:52:84:38:d7:79:91:39:44:b3:81:1d:31:ea:c7:9f:c4:a7: 81:e6:e7:6f:0e:6f:bb:d5:e1:ba:35:b4:96:c7:34:bd:e3:94: 56:8f:5c:b9:57:d9:fb:19:a2:4e:87:fe:eb:25:76:fc:d7:03: e9:8c:86:bb:52:bf:02:2a:12:98:b4:7f:f4:43:21:3f:75:bb: 19:ac:9d:cb:47:57:58:01:94:e4:65:0d:6e:ab:93:00:a3:f6: ab:09:71:45:a9:db:2d:52:8e:af:6d:9b:b4:57:79:d2:f1:ec: d3:71:1e:a6 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOK8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1MzFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDk4MkJBQjg0NUY4MTZG N0JCOEU1MDA5RUQwODQ3QTZEMjRGRUFFQkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIIxUV5UEi2J56i1t5B+MVKdg+wZQsTTwZarDTgwAC6SEBE0dD tsglC8sBoxSrFApIiLzV3lzM7kWNlHkhZ9squbqWDdHFsEPxrjUbDwkWqLWiCgCS YTSypTf6LggKi/mJ2Y80vmUZ3k81oJgVB3WZMyYi8aibqH1i0Vv9WzC1GdT/w9B3 tWwvdID2c34aH5kM2jynoBlFqGRx+2jIdMtq+DVIGXBOlDCki6ow0cuaYUlpds0C 0lr3YkWPYt4U5na+1HwgTPvEfqAYaxZqHe4mbm0QFo4e0rO33fw7oC4WeZXgWM1W HME8Vhu1kUk2sW03AyplF+n5LIDghqF7sZ0jAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUmCurhF+Bb3u45QCe0IR6bST+rr4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL21DdXJoRi1CYjN1NDVRQ2Uw SVI2YlNULXJyNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7 wfYwDQYJKoZIhvcNAQELBQADggEBALfAZj9/ilck0wPGn8tnj0w5H+HwN+oip4Tj XY1Kk1W/NLWoyOdlfgLGtNVmpDbZTvzc/I8pgQE0dzEZwTN70PjKgvoO2SdMYgk9 h838MYZDbTliq7haMNueb3IcYYPSu7k42RcPicUmDSIG5V+GcCUEK2DMQCMPmzeD rKU134CYCW3JYefZ8S6YP/QDHonL6fxShDjXeZE5RLOBHTHqx5/Ep4Hm528Ob7vV 4bo1tJbHNL3jlFaPXLlX2fsZok6H/usldvzXA+mMhrtSvwIqEpi0f/RDIT91uxms nctHV1gBlORlDW6rkwCj9qsJcUWp2y1Sjq9tm7RXedLx7NNxHqY= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:32 2025 by rpki-client