$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/p8qUahSRkGzulvfbyhJJDN9XKZc.roa File: p8qUahSRkGzulvfbyhJJDN9XKZc.roa (raw, json) Hash identifier: TZy1vTYIKb159WiDr5efFQgOvRQH3YXexkTjagfv32Q= Subject key identifier: A7:CA:94:6A:14:91:90:6C:EE:96:F7:DB:CA:12:49:0C:DF:57:29:97 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3A2E Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/p8qUahSRkGzulvfbyhJJDN9XKZc.roa Signing time: Fri 22 Aug 2025 08:47:06 +0000 ROA not before: Fri 22 Aug 2025 08:47:06 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.193.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14894 (0x3a2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:06 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=A7CA946A1491906CEE96F7DBCA12490CDF572997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:89:27:07:8d:17:b3:0e:a1:33:1d:06:db:b9: c9:c8:dc:da:ff:77:88:82:ea:47:48:43:47:6c:e9: e8:c7:80:88:56:6d:2b:8c:a9:bb:09:de:e8:82:9c: c7:3d:1f:34:dc:0c:bb:b1:08:03:5a:71:7e:c4:2b: e7:fa:a6:8f:b3:ff:55:b9:b9:11:88:44:cf:c9:be: 9d:b3:fb:80:bd:2c:02:b9:fa:f4:38:25:eb:1e:e3: a4:12:ce:6f:b3:9e:c2:64:49:17:c4:8d:ef:b2:b8: 40:eb:42:47:ba:79:be:f3:72:02:48:63:4c:83:be: bd:c9:4a:76:7a:17:27:f2:43:e1:e6:9c:6e:da:35: f8:31:ee:a9:04:b0:2d:a3:84:4c:bc:cd:6a:4f:c0: 27:ec:4d:6e:16:25:c1:67:a0:da:ec:2f:d6:06:04: 19:a7:bc:ea:87:69:b8:14:5c:a6:e0:e5:8b:03:99: 34:83:3b:82:49:11:48:e2:06:4e:d5:9c:3e:28:90: 0d:85:ca:c0:97:56:92:c0:57:39:e6:41:7c:ec:07: 6d:ce:d7:fe:d6:ab:bb:e8:fc:19:7e:b9:22:6b:6d: fc:57:57:74:41:df:10:71:5c:7f:c3:52:35:35:15: 66:0e:5c:06:5d:93:7e:f9:eb:5a:e4:bf:bc:da:ae: 9a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:CA:94:6A:14:91:90:6C:EE:96:F7:DB:CA:12:49:0C:DF:57:29:97 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/p8qUahSRkGzulvfbyhJJDN9XKZc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.144.0/21 Signature Algorithm: sha256WithRSAEncryption 77:8a:1c:60:47:31:e3:59:f9:41:57:cb:7f:6f:2e:f1:17:79: ae:72:01:d6:0d:f4:90:24:bf:69:4d:07:f5:b9:af:86:d9:ca: c8:00:14:25:85:e9:34:93:4c:2b:e3:7e:05:1b:87:49:ec:2e: ba:7a:2a:93:f7:9c:3b:c6:aa:4c:da:85:c1:27:17:a3:d5:cc: 2a:3c:a2:60:7e:aa:ab:f1:69:89:53:15:65:b1:f5:e9:1d:45: 4f:98:53:97:b1:0b:62:35:6b:fd:7b:f2:bc:92:15:91:e6:38: 98:b3:6c:5a:9a:ff:43:43:cf:3c:b6:8a:b8:21:4a:66:b0:f9: f8:a6:dd:27:cf:b6:c7:9b:67:94:da:45:92:88:0b:55:15:6f: 74:b1:49:5c:06:7d:31:45:be:c2:58:08:47:cb:a5:f5:6d:35: 34:0e:fe:59:38:1f:b9:fa:4a:ac:27:5c:d4:3b:3b:54:a0:64: 18:c2:b9:5b:67:2f:27:47:b3:95:91:81:6d:5a:2e:93:aa:51: 3f:3a:6f:81:e4:14:e2:5f:f2:53:bc:01:a4:64:83:18:21:cb: d9:1a:2e:5b:b6:63:95:fd:74:5c:b8:e5:15:e4:ae:fb:62:a9: e2:35:4f:66:fa:15:2e:83:10:93:ba:e7:cd:fa:84:54:3c:d4: db:20:46:3e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOi4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3MDZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEE3Q0E5NDZBMTQ5MTkw NkNFRTk2RjdEQkNBMTI0OTBDREY1NzI5OTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCyiScHjRezDqEzHQbbucnI3Nr/d4iC6kdIQ0ds6ejHgIhWbSuM qbsJ3uiCnMc9HzTcDLuxCANacX7EK+f6po+z/1W5uRGIRM/Jvp2z+4C9LAK5+vQ4 Jese46QSzm+znsJkSRfEje+yuEDrQke6eb7zcgJIY0yDvr3JSnZ6FyfyQ+HmnG7a Nfgx7qkEsC2jhEy8zWpPwCfsTW4WJcFnoNrsL9YGBBmnvOqHabgUXKbg5YsDmTSD O4JJEUjiBk7VnD4okA2FysCXVpLAVznmQXzsB23O1/7Wq7vo/Bl+uSJrbfxXV3RB 3xBxXH/DUjU1FWYOXAZdk37561rkv7zarpqJAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUp8qUahSRkGzulvfbyhJJDN9XKZcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3A4cVVhaFNSa0d6dWx2ZmJ5 aEpKRE45WEtaYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wZAwDQYJKoZIhvcNAQELBQADggEBAHeKHGBHMeNZ+UFXy39vLvEXea5yAdYN9JAk v2lNB/W5r4bZysgAFCWF6TSTTCvjfgUbh0nsLrp6KpP3nDvGqkzahcEnF6PVzCo8 omB+qqvxaYlTFWWx9ekdRU+YU5exC2I1a/178rySFZHmOJizbFqa/0NDzzy2irgh Smaw+fim3SfPtsebZ5TaRZKIC1UVb3SxSVwGfTFFvsJYCEfLpfVtNTQO/lk4H7n6 SqwnXNQ7O1SgZBjCuVtnLydHs5WRgW1aLpOqUT86b4HkFOJf8lO8AaRkgxghy9ka Llu2Y5X9dFy45RXkrvtiqeI1T2b6FS6DEJO65836hFQ81NsgRj4= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:20 2025 by rpki-client