$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pOvwGLvUHTpaAaXhDd2T9640m0c.roa File: pOvwGLvUHTpaAaXhDd2T9640m0c.roa (raw, json) Hash identifier: 9VHwaV5B5Rzn5TER71U09nfJmL6tJ1fMOguPtNYlvLA= Subject key identifier: A4:EB:F0:18:BB:D4:1D:3A:5A:01:A5:E1:0D:DD:93:F7:AE:34:9B:47 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3925 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pOvwGLvUHTpaAaXhDd2T9640m0c.roa Signing time: Fri 22 Aug 2025 08:46:01 +0000 ROA not before: Fri 22 Aug 2025 08:46:01 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 118.233.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14629 (0x3925) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:01 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=A4EBF018BBD41D3A5A01A5E10DDD93F7AE349B47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f5:4e:90:b6:b6:74:af:70:1e:71:ca:32:78: 7a:1e:4a:0d:8b:da:aa:88:ae:41:87:98:2b:6c:17: 63:69:09:9e:73:f3:58:f6:63:8d:00:58:42:2d:d0: 9e:7b:78:b9:be:5e:c2:f0:20:47:24:2a:de:b5:85: 25:4a:29:37:6e:97:25:93:e7:55:8e:99:cf:c3:55: c7:25:ab:dd:be:4b:db:66:90:11:08:a6:c4:1b:86: de:df:b1:52:47:ad:69:67:3a:15:bd:39:39:29:aa: 1d:38:6c:59:7e:1d:39:b5:19:ec:a0:8a:a1:32:cd: 07:84:70:4d:2f:2a:d6:8a:3a:e2:4e:50:40:34:97: 64:51:b2:e2:66:ec:f9:01:37:53:fb:81:89:6a:f9: 2f:12:31:e3:f7:50:32:31:e8:de:e9:de:46:93:20: 5c:18:15:07:74:7c:5a:72:a8:65:bf:60:0d:8e:cf: de:51:64:28:b1:c5:eb:5b:62:c7:25:ed:97:ec:46: 46:26:0b:c2:2a:23:7e:53:82:c4:44:5b:cd:be:dc: a3:0e:34:05:13:34:cc:9b:11:c4:68:f6:be:74:92: 8e:23:1c:ee:6e:59:31:f1:d4:57:96:c8:55:06:1f: bb:b5:69:4b:7d:50:c4:c5:b5:11:2b:27:2c:34:69: 99:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:EB:F0:18:BB:D4:1D:3A:5A:01:A5:E1:0D:DD:93:F7:AE:34:9B:47 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pOvwGLvUHTpaAaXhDd2T9640m0c.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.152.0/22 Signature Algorithm: sha256WithRSAEncryption 37:b0:b3:0b:7f:99:c6:3b:34:39:99:7c:e2:77:4f:87:5f:11: fa:86:13:6b:2d:eb:e6:a1:76:fd:14:98:01:61:3d:0f:b6:e9: 99:6c:b4:99:b3:f3:7e:01:89:72:7d:29:97:26:9f:f3:84:8b: 16:81:2c:bc:cf:d8:cc:ca:7f:f1:ea:fe:5c:76:0b:fc:31:b7: 92:59:f8:e3:03:a3:c5:b6:9b:46:db:3c:e5:a2:21:6d:32:01: 70:8f:9c:e4:ea:d5:73:f3:21:4e:09:fa:40:7d:5a:95:b3:2a: 31:fc:03:e4:53:3e:75:a9:05:d5:dd:16:2b:1d:f9:8a:3b:ec: ca:d5:ad:c3:cf:26:6b:dd:09:b0:00:73:d2:15:b8:72:3b:97: a0:1e:ee:3d:3c:7a:2d:e6:41:30:a3:34:1d:d9:7c:a9:0f:a8: 57:06:23:49:ec:51:bb:ca:4d:e3:7d:6c:6a:2b:03:71:ac:a5: cd:21:f3:6d:57:1d:8d:47:3c:e9:8c:e1:16:74:ec:67:ab:cb: 9d:83:b4:bf:91:20:53:cd:50:d1:53:38:a5:db:5f:e1:3d:9b: 6d:bd:e5:c8:38:e8:4c:56:d5:a9:ae:36:a7:1f:94:c7:8b:45: 95:2a:88:f6:ac:aa:65:d3:f3:a9:85:30:39:3b:6f:9b:0f:5b: c0:f2:45:70 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOSUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2MDFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEE0RUJGMDE4QkJENDFE M0E1QTAxQTVFMTBEREQ5M0Y3QUUzNDlCNDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC19U6QtrZ0r3AeccoyeHoeSg2L2qqIrkGHmCtsF2NpCZ5z81j2 Y40AWEIt0J57eLm+XsLwIEckKt61hSVKKTdulyWT51WOmc/DVcclq92+S9tmkBEI psQbht7fsVJHrWlnOhW9OTkpqh04bFl+HTm1GeygiqEyzQeEcE0vKtaKOuJOUEA0 l2RRsuJm7PkBN1P7gYlq+S8SMeP3UDIx6N7p3kaTIFwYFQd0fFpyqGW/YA2Oz95R ZCixxetbYscl7ZfsRkYmC8IqI35TgsREW82+3KMONAUTNMybEcRo9r50ko4jHO5u WTHx1FeWyFUGH7u1aUt9UMTFtRErJyw0aZmlAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUpOvwGLvUHTpaAaXhDd2T9640m0cwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3BPdndHTHZVSFRwYUFhWGhE ZDJUOTY0MG0wYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6ZgwDQYJKoZIhvcNAQELBQADggEBADewswt/mcY7NDmZfOJ3T4dfEfqGE2st6+ah dv0UmAFhPQ+26ZlstJmz834BiXJ9KZcmn/OEixaBLLzP2MzKf/Hq/lx2C/wxt5JZ +OMDo8W2m0bbPOWiIW0yAXCPnOTq1XPzIU4J+kB9WpWzKjH8A+RTPnWpBdXdFisd +Yo77MrVrcPPJmvdCbAAc9IVuHI7l6Ae7j08ei3mQTCjNB3ZfKkPqFcGI0nsUbvK TeN9bGorA3Gspc0h821XHY1HPOmM4RZ07Gery52DtL+RIFPNUNFTOKXbX+E9m229 5cg46ExW1amuNqcflMeLRZUqiPasqmXT86mFMDk7b5sPW8DyRXA= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:59 2025 by rpki-client