$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nl0kKUTVoQgD2UtJZS3WnZhL-js.roa File: nl0kKUTVoQgD2UtJZS3WnZhL-js.roa (raw, json) Hash identifier: UQ7sJGRmoiQudciHUoeqBtZLTG/h/nFzb3khMTvbdAQ= Subject key identifier: 9E:5D:24:29:44:D5:A1:08:03:D9:4B:49:65:2D:D6:9D:98:4B:FA:3B Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3939 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nl0kKUTVoQgD2UtJZS3WnZhL-js.roa Signing time: Fri 22 Aug 2025 08:46:05 +0000 ROA not before: Fri 22 Aug 2025 08:46:05 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 103.224.192.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14649 (0x3939) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:05 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=9E5D242944D5A10803D94B49652DD69D984BFA3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:db:db:68:3c:95:d4:4e:15:20:94:4f:b6:3b: a0:0e:db:67:47:26:e0:09:7a:65:66:02:6b:1c:29: e4:a3:e1:ff:d3:8b:3a:96:fc:a0:22:7b:0f:a9:ba: b6:83:e1:50:f0:9c:fc:50:67:e1:f6:4b:06:ab:d3: 4f:51:ab:a4:e5:3c:be:53:d5:9a:1a:b0:ce:c8:ad: 91:78:4e:5e:33:fe:10:f2:31:4c:3d:0c:db:0d:3a: 96:e6:57:dd:c1:d3:89:36:e1:04:0f:79:0e:b5:86: 72:14:88:44:d5:8e:8e:c8:4f:5e:c4:3d:8e:27:b4: c1:0d:18:cb:d5:82:a3:64:7f:ad:23:0b:b3:b6:a6: f9:99:8a:bc:8d:d2:97:91:bc:d9:cc:65:41:6e:57: b0:0f:34:e7:7a:98:00:24:8d:5c:bb:84:a2:38:f6: d0:59:e2:1d:ca:ac:08:a1:b1:fb:08:9d:83:0a:e8: dd:94:94:f2:de:4c:6e:8c:65:f0:27:9a:83:87:34: cc:31:70:66:55:d0:6e:54:12:99:12:0f:a6:3c:0b: d7:44:84:d0:ea:26:d3:74:90:11:e8:ca:c3:38:4a: 18:1e:4b:09:f5:14:a9:80:56:95:28:c6:39:95:ad: 07:94:91:ea:9f:36:de:56:b8:63:bb:fe:18:32:1f: 02:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:5D:24:29:44:D5:A1:08:03:D9:4B:49:65:2D:D6:9D:98:4B:FA:3B X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nl0kKUTVoQgD2UtJZS3WnZhL-js.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.224.192.0/23 Signature Algorithm: sha256WithRSAEncryption 65:e6:d0:1c:43:dc:51:5a:62:85:69:d7:4f:65:ef:ba:ca:cb: e5:fc:52:cf:eb:bd:b3:5e:cf:45:ca:32:89:9c:7c:d1:a1:13: 06:a7:aa:00:ad:b7:93:a2:07:b3:78:4e:3d:29:c9:07:d9:03: 73:cc:8f:de:e1:0d:98:d7:8f:90:cd:d8:6a:57:a5:a5:fe:a2: 8e:c6:2b:b0:fd:27:68:8d:a2:ad:96:e6:e3:a5:c1:6c:1b:83: 58:8b:3c:fc:9f:bf:48:2a:65:80:dd:d4:b6:2c:11:69:3f:72: 17:46:31:d3:ba:fd:18:08:b2:fe:81:3f:1a:33:b2:d8:27:35: 9c:d0:f6:bb:0f:f0:db:f1:35:60:e5:e1:f8:72:16:9b:c3:66: 77:71:1d:15:70:e1:6c:9d:98:28:f8:5a:a7:f8:5b:e5:ec:92: a0:64:65:a2:56:25:13:b3:24:0c:c5:24:aa:c8:0d:6f:12:99: 31:2d:4d:b6:73:1f:18:fa:cf:6e:37:96:f0:69:24:99:dc:fe: 89:06:a9:14:84:b7:08:0f:0c:c5:be:95:b6:8d:fb:e8:8c:91: 32:11:12:94:b9:e6:80:d6:39:e4:85:66:94:b1:5e:8c:ba:8f: ad:3c:e6:0e:a0:33:6f:cc:75:ab:34:c8:a9:65:dc:d6:38:24: a4:aa:78:d5 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOTkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2MDVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDlFNUQyNDI5NDRENUEx MDgwM0Q5NEI0OTY1MkRENjlEOTg0QkZBM0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC329toPJXUThUglE+2O6AO22dHJuAJemVmAmscKeSj4f/TizqW /KAiew+puraD4VDwnPxQZ+H2Swar009Rq6TlPL5T1ZoasM7IrZF4Tl4z/hDyMUw9 DNsNOpbmV93B04k24QQPeQ61hnIUiETVjo7IT17EPY4ntMENGMvVgqNkf60jC7O2 pvmZiryN0peRvNnMZUFuV7APNOd6mAAkjVy7hKI49tBZ4h3KrAihsfsInYMK6N2U lPLeTG6MZfAnmoOHNMwxcGZV0G5UEpkSD6Y8C9dEhNDqJtN0kBHoysM4ShgeSwn1 FKmAVpUoxjmVrQeUkeqfNt5WuGO7/hgyHwJLAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUnl0kKUTVoQgD2UtJZS3WnZhL+jswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL25sMGtLVVRWb1FnRDJVdEpa UzNXblpoTC1qcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFn 4MAwDQYJKoZIhvcNAQELBQADggEBAGXm0BxD3FFaYoVp109l77rKy+X8Us/rvbNe z0XKMomcfNGhEwanqgCtt5OiB7N4Tj0pyQfZA3PMj97hDZjXj5DN2GpXpaX+oo7G K7D9J2iNoq2W5uOlwWwbg1iLPPyfv0gqZYDd1LYsEWk/chdGMdO6/RgIsv6BPxoz stgnNZzQ9rsP8NvxNWDl4fhyFpvDZndxHRVw4WydmCj4Wqf4W+XskqBkZaJWJROz JAzFJKrIDW8SmTEtTbZzHxj6z243lvBpJJnc/okGqRSEtwgPDMW+lbaN++iMkTIR EpS55oDWOeSFZpSxXoy6j6085g6gM2/Mdas0yKll3NY4JKSqeNU= -----END CERTIFICATE-----Generated at Sun Aug 24 05:32:17 2025 by rpki-client