$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pJMxjCXup3ACKHXnZGz09ecmCxA.roa File: pJMxjCXup3ACKHXnZGz09ecmCxA.roa (raw, json) Hash identifier: /ZsSS01U4IrvcRVmiDEdgNwEL0klUvBWd2/gQPXj3bw= Subject key identifier: A4:93:31:8C:25:EE:A7:70:02:28:75:E7:64:6C:F4:F5:E7:26:0B:10 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3A6C Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pJMxjCXup3ACKHXnZGz09ecmCxA.roa Signing time: Fri 22 Aug 2025 08:47:20 +0000 ROA not before: Fri 22 Aug 2025 08:47:20 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 118.233.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14956 (0x3a6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:20 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=A493318C25EEA770022875E7646CF4F5E7260B10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:79:e6:5e:5d:30:40:e3:60:a4:1f:3c:92:94: 1b:d1:b6:fe:21:bb:cc:06:5c:17:2a:1d:ae:fb:63: 23:b9:75:a8:83:54:55:90:50:5f:20:1b:58:46:3f: d4:c4:ed:58:6b:29:01:38:1b:05:1e:df:c3:b1:d4: 5e:6b:f1:63:3c:bd:fd:32:ff:db:bf:2d:77:4c:8e: f5:f1:a9:5a:cf:21:73:dc:9c:4e:f4:69:e8:17:de: b7:21:4e:76:e8:88:7c:b2:08:71:25:c4:3d:8e:69: fb:42:bc:77:c5:58:41:ec:d1:cd:cf:e1:2a:fd:02: 88:da:c2:e7:0d:4e:86:4e:12:6a:48:64:01:85:24: d7:d3:aa:4e:7d:cd:ae:d5:fc:db:a3:4b:95:67:c6: df:8b:e3:86:04:7a:4c:1e:78:52:e8:a3:d7:6a:93: 9a:8b:ea:0c:26:7f:e3:09:39:33:e0:08:07:b5:b5: 25:fa:98:fe:0e:34:42:3c:a2:92:f5:f2:4a:53:c2: 61:2d:2f:e8:3e:0a:78:cd:2c:35:af:1e:b4:91:c5: 2e:23:ab:03:cf:3e:d2:f5:f0:ef:90:b9:a2:49:59: 5b:49:62:70:d3:12:ba:8d:dc:a3:18:e1:21:62:bc: e4:03:b2:66:db:6f:02:20:0a:cd:9a:d0:81:24:35: 3a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:93:31:8C:25:EE:A7:70:02:28:75:E7:64:6C:F4:F5:E7:26:0B:10 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pJMxjCXup3ACKHXnZGz09ecmCxA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.236.0/22 Signature Algorithm: sha256WithRSAEncryption ac:f3:eb:f2:da:e9:d1:2a:a9:52:45:ef:9c:d9:06:5c:10:41: 82:49:ce:07:27:a5:03:a4:03:76:6c:51:14:07:db:70:e0:df: 5f:e2:bf:e3:34:a3:d0:eb:b6:70:6f:54:28:d7:8b:b9:d7:a5: 57:e6:21:c5:63:5b:40:c6:8c:e8:75:da:3f:69:f6:b6:1f:4b: 6d:87:b7:58:e9:09:09:43:8b:90:e6:21:ba:5c:8f:4c:2b:a7: 8e:1e:ee:4a:82:76:52:9c:19:a5:13:de:32:1f:19:2d:d1:0b: 43:03:d6:f7:d7:73:4b:d0:3c:be:e7:c9:f8:83:14:42:4d:b8: 10:c7:91:6b:5b:06:f0:b4:58:6c:6c:b0:71:50:f0:3c:c2:c5: e1:aa:7d:d6:5e:32:08:ca:28:0c:55:3d:6f:90:d7:60:f4:92: 1e:90:bb:23:3a:46:8b:46:96:a7:0a:f1:93:3c:8c:bf:aa:ff: 8b:46:57:1e:0c:c0:3c:6b:c8:2a:ba:ff:d4:0c:ab:d5:e5:8c: 23:73:a6:17:c9:7a:ed:ef:07:e5:67:8e:37:c2:22:6a:3b:b9: 51:0e:53:02:4a:81:ca:26:d7:5a:2b:94:67:56:a5:20:5e:2b: 5b:98:16:e6:67:28:ec:36:41:a4:5c:10:67:b8:cb:b3:e3:4f: 6a:79:e4:5d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOmwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3MjBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEE0OTMzMThDMjVFRUE3 NzAwMjI4NzVFNzY0NkNGNEY1RTcyNjBCMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDaeeZeXTBA42CkHzySlBvRtv4hu8wGXBcqHa77YyO5daiDVFWQ UF8gG1hGP9TE7VhrKQE4GwUe38Ox1F5r8WM8vf0y/9u/LXdMjvXxqVrPIXPcnE70 aegX3rchTnboiHyyCHElxD2OaftCvHfFWEHs0c3P4Sr9AojawucNToZOEmpIZAGF JNfTqk59za7V/NujS5Vnxt+L44YEekweeFLoo9dqk5qL6gwmf+MJOTPgCAe1tSX6 mP4ONEI8opL18kpTwmEtL+g+CnjNLDWvHrSRxS4jqwPPPtL18O+QuaJJWVtJYnDT ErqN3KMY4SFivOQDsmbbbwIgCs2a0IEkNTr7AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUpJMxjCXup3ACKHXnZGz09ecmCxAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3BKTXhqQ1h1cDNBQ0tIWG5a R3owOWVjbUN4QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6ewwDQYJKoZIhvcNAQELBQADggEBAKzz6/La6dEqqVJF75zZBlwQQYJJzgcnpQOk A3ZsURQH23Dg31/iv+M0o9DrtnBvVCjXi7nXpVfmIcVjW0DGjOh12j9p9rYfS22H t1jpCQlDi5DmIbpcj0wrp44e7kqCdlKcGaUT3jIfGS3RC0MD1vfXc0vQPL7nyfiD FEJNuBDHkWtbBvC0WGxssHFQ8DzCxeGqfdZeMgjKKAxVPW+Q12D0kh6QuyM6RotG lqcK8ZM8jL+q/4tGVx4MwDxryCq6/9QMq9XljCNzphfJeu3vB+VnjjfCImo7uVEO UwJKgcom11orlGdWpSBeK1uYFuZnKOw2QaRcEGe4y7PjT2p55F0= -----END CERTIFICATE-----Generated at Sun Aug 24 07:26:35 2025 by rpki-client