$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pAGLm6eD0l2egziOU9w3921DVrQ.roa File: pAGLm6eD0l2egziOU9w3921DVrQ.roa (raw, json) Hash identifier: msNmfdDPsxsnlR+CjpN8zqWPLxs12hEz/fgHrilHE0I= Subject key identifier: A4:01:8B:9B:A7:83:D2:5D:9E:83:38:8E:53:DC:37:F7:6D:43:56:B4 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3B1D Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pAGLm6eD0l2egziOU9w3921DVrQ.roa Signing time: Fri 22 Aug 2025 08:48:05 +0000 ROA not before: Fri 22 Aug 2025 08:48:05 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9924 IP address blocks: 118.232.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15133 (0x3b1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:48:05 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=A4018B9BA783D25D9E83388E53DC37F76D4356B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:fc:3d:11:9f:dc:8b:ef:90:6f:b4:f0:1c:67: ee:f1:17:01:6d:ff:f4:37:6a:05:22:42:b0:d1:78: 48:2b:9f:d3:45:b4:c9:8f:10:c4:b1:52:45:ec:88: 82:e4:79:9a:48:95:fe:54:29:b8:bc:5f:24:77:3a: 66:85:bb:ec:64:b4:71:07:92:67:98:7c:6e:51:60: c4:0c:32:9c:49:08:9e:96:09:10:0d:22:f1:89:bb: 2e:81:31:26:47:e5:e9:b1:46:20:a6:64:c0:8a:68: 76:ba:86:49:24:55:4a:3c:1a:6d:5c:51:87:eb:5e: e4:46:90:2a:46:9f:ba:f7:6a:45:14:3b:17:bd:30: ea:c7:49:63:4c:3f:d9:b2:34:51:d9:f0:95:8e:3a: 5e:f3:80:a5:46:6a:fa:5b:e8:d2:0d:33:8f:d9:57: f2:8a:bd:81:03:b5:ae:f8:9e:73:00:b7:b8:f9:2d: 8e:02:c3:e2:f9:6e:80:28:71:11:58:08:b7:48:fc: b9:34:bb:48:52:74:b2:57:eb:ad:a7:0d:2d:7a:fc: dd:c5:30:a2:53:98:01:05:57:7f:77:9c:8d:70:ef: ac:ee:6f:6f:3d:7c:f7:96:1f:be:ea:70:93:c0:d4: 78:34:76:84:9f:c2:2e:77:2b:a3:2d:2b:0d:eb:9c: 06:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:01:8B:9B:A7:83:D2:5D:9E:83:38:8E:53:DC:37:F7:6D:43:56:B4 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pAGLm6eD0l2egziOU9w3921DVrQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.244.0/22 Signature Algorithm: sha256WithRSAEncryption 4f:17:01:a4:e1:97:4f:04:a7:ec:b8:0f:bc:08:ae:7e:01:e3: 10:ba:ca:34:ea:de:73:66:05:3a:b5:ad:78:48:73:a1:e4:21: 39:c5:7e:1f:f9:3f:c9:d0:de:ea:75:bc:19:b5:b0:e7:e8:22: fe:97:39:f1:c1:97:4b:ce:70:2f:af:02:25:21:db:c3:e4:72: 4c:e1:76:94:91:89:f6:e3:68:56:a5:2c:11:01:2a:4f:bf:20: a0:c4:2d:ee:45:90:a0:96:98:54:26:74:2b:98:0f:d6:d8:f4: 3d:9f:93:c6:2f:03:3f:ce:cf:d0:13:16:72:cd:43:b0:a4:cc: 5e:fc:67:64:80:50:1a:4d:f3:e9:bc:da:ac:01:7a:45:e8:55: dc:96:3e:c2:c0:47:1f:df:65:5a:88:09:75:21:6c:07:3b:67: fe:eb:d9:6e:69:47:13:17:75:2d:7e:48:0a:6c:17:fb:94:47: d2:2e:5e:77:c8:b8:7a:0f:fb:6a:50:53:c4:b2:66:dd:d7:36: d1:f0:e1:71:f4:0c:5b:bd:46:11:5d:f4:e0:30:24:d1:b8:f0: 9f:26:31:24:23:88:3c:94:e7:64:aa:45:55:50:33:4e:87:6c: 8b:04:a7:ea:9d:4f:6f:31:ca:b0:d7:5d:2e:6b:3c:39:1e:37: 4a:86:c6:b7 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOx0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ4MDVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEE0MDE4QjlCQTc4M0Qy NUQ5RTgzMzg4RTUzREMzN0Y3NkQ0MzU2QjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDu/D0Rn9yL75BvtPAcZ+7xFwFt//Q3agUiQrDReEgrn9NFtMmP EMSxUkXsiILkeZpIlf5UKbi8XyR3OmaFu+xktHEHkmeYfG5RYMQMMpxJCJ6WCRAN IvGJuy6BMSZH5emxRiCmZMCKaHa6hkkkVUo8Gm1cUYfrXuRGkCpGn7r3akUUOxe9 MOrHSWNMP9myNFHZ8JWOOl7zgKVGavpb6NINM4/ZV/KKvYEDta74nnMAt7j5LY4C w+L5boAocRFYCLdI/Lk0u0hSdLJX662nDS16/N3FMKJTmAEFV393nI1w76zub289 fPeWH77qcJPA1Hg0doSfwi53K6MtKw3rnAbXAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUpAGLm6eD0l2egziOU9w3921DVrQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3BBR0xtNmVEMGwyZWd6aU9V OXczOTIxRFZyUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6PQwDQYJKoZIhvcNAQELBQADggEBAE8XAaThl08Ep+y4D7wIrn4B4xC6yjTq3nNm BTq1rXhIc6HkITnFfh/5P8nQ3up1vBm1sOfoIv6XOfHBl0vOcC+vAiUh28Pkckzh dpSRifbjaFalLBEBKk+/IKDELe5FkKCWmFQmdCuYD9bY9D2fk8YvAz/Oz9ATFnLN Q7CkzF78Z2SAUBpN8+m82qwBekXoVdyWPsLARx/fZVqICXUhbAc7Z/7r2W5pRxMX dS1+SApsF/uUR9IuXnfIuHoP+2pQU8SyZt3XNtHw4XH0DFu9RhFd9OAwJNG48J8m MSQjiDyU52SqRVVQM06HbIsEp+qdT28xyrDXXS5rPDkeN0qGxrc= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:15 2025 by rpki-client