$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pRWANvfnqHU_8_ZYPlfmehZbQzk.roa File: pRWANvfnqHU_8_ZYPlfmehZbQzk.roa (raw, json) Hash identifier: wU92RYHT8uY8O0THS27yPFvzaXbA+9zNx274EkWujzU= Subject key identifier: A5:15:80:36:F7:E7:A8:75:3F:F3:F6:58:3E:57:E6:7A:16:5B:43:39 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3949 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pRWANvfnqHU_8_ZYPlfmehZbQzk.roa Signing time: Fri 22 Aug 2025 08:46:09 +0000 ROA not before: Fri 22 Aug 2025 08:46:09 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.194.205.128/28 maxlen: 28 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14665 (0x3949) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:09 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=A5158036F7E7A8753FF3F6583E57E67A165B4339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:81:d2:80:4d:b6:f1:80:dc:e9:3e:60:ea:05: a0:13:12:e5:04:64:08:bf:77:5f:6a:c2:b4:fc:41: 4c:77:f6:38:78:a9:ee:20:3b:1a:c0:bf:93:d2:17: 3c:e1:30:dd:ee:49:66:15:30:78:88:b3:45:fc:ca: a7:35:22:3e:3e:2d:52:1d:f5:82:92:66:d3:f7:69: 26:77:85:4f:56:fc:11:3e:c9:47:b0:35:13:b2:9c: 5d:4d:cc:3f:c7:b3:60:79:95:14:96:f6:85:6c:71: 2e:c6:f5:cd:6f:f0:38:e3:07:6c:b2:c2:d3:c9:a5: 3a:33:34:9d:a2:59:5d:47:b2:e8:c0:b2:8c:89:0c: 5c:67:53:bf:ef:6d:36:92:f1:04:bf:84:ab:09:6c: 1b:3f:3d:da:cc:c5:a3:02:6a:6f:c9:fb:46:79:40: 18:40:b3:2e:2e:98:b1:78:2b:d4:71:4d:f1:91:dc: c2:4d:83:68:59:a8:14:d0:a1:01:bb:23:29:f3:45: 94:7d:2b:21:d9:e5:94:6a:20:f4:0b:f8:11:20:d8: 85:1a:1c:2f:b7:45:10:dd:2c:62:ff:ec:9c:04:f4: 0a:eb:3c:31:ba:92:96:19:de:e3:da:0e:6d:3c:9e: 88:74:42:0f:e4:0e:36:db:aa:77:f8:c5:ab:a8:74: f7:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:15:80:36:F7:E7:A8:75:3F:F3:F6:58:3E:57:E6:7A:16:5B:43:39 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pRWANvfnqHU_8_ZYPlfmehZbQzk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.205.128/28 Signature Algorithm: sha256WithRSAEncryption 54:84:ef:99:f2:6d:38:e0:19:17:f5:70:12:ec:45:25:88:bf: 6b:2e:02:2f:34:b4:43:a7:16:80:8d:51:25:f3:3e:24:cc:61: c6:e6:16:7c:ca:90:d9:e3:57:c3:11:cd:45:bd:62:a9:d4:46: cd:ea:96:9d:3f:f0:41:84:a3:4c:16:68:53:a5:cf:65:5d:f7: eb:28:b7:5a:85:b2:a0:51:24:10:6d:f1:1e:cf:fb:18:72:80: 18:c2:9f:c5:a5:7b:7f:7e:f1:f7:da:8b:8e:90:fb:4f:24:77: 08:ba:03:20:aa:39:e8:1f:5b:f4:b1:39:a8:55:d8:cb:f3:f1: b7:bd:29:12:2a:8b:9d:80:c0:e4:c1:f4:8c:ea:f7:f6:cb:75: 83:74:81:56:73:ef:17:b1:eb:6b:24:2e:bb:f2:37:c5:07:22: 4a:b2:b8:cd:a1:24:e2:fb:92:b0:ae:5f:5d:14:26:18:b9:bc: 66:19:00:ce:a3:09:68:cc:ef:40:55:b8:fe:1b:a4:74:de:bb: ba:20:bf:8a:df:62:a3:dd:fc:d5:e9:f0:74:2b:cc:d4:ec:58: 6d:30:be:03:8c:66:6c:91:8f:a2:db:f5:f1:f2:08:e1:05:ed: a5:32:3e:1d:0d:76:98:4c:a9:9f:29:0d:62:8f:10:47:0b:a9: ee:da:e8:d6 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICOUkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2MDlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEE1MTU4MDM2RjdFN0E4 NzUzRkYzRjY1ODNFNTdFNjdBMTY1QjQzMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCygdKATbbxgNzpPmDqBaATEuUEZAi/d19qwrT8QUx39jh4qe4g OxrAv5PSFzzhMN3uSWYVMHiIs0X8yqc1Ij4+LVId9YKSZtP3aSZ3hU9W/BE+yUew NROynF1NzD/Hs2B5lRSW9oVscS7G9c1v8DjjB2yywtPJpTozNJ2iWV1HsujAsoyJ DFxnU7/vbTaS8QS/hKsJbBs/PdrMxaMCam/J+0Z5QBhAsy4umLF4K9RxTfGR3MJN g2hZqBTQoQG7IynzRZR9KyHZ5ZRqIPQL+BEg2IUaHC+3RRDdLGL/7JwE9ArrPDG6 kpYZ3uPaDm08noh0Qg/kDjbbqnf4xauodPc5AgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUpRWANvfnqHU/8/ZYPlfmehZbQzkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3BSV0FOdmZucUhVXzhfWllQ bGZtZWhaYlF6ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQR7 ws2AMA0GCSqGSIb3DQEBCwUAA4IBAQBUhO+Z8m044BkX9XAS7EUliL9rLgIvNLRD pxaAjVEl8z4kzGHG5hZ8ypDZ41fDEc1FvWKp1EbN6padP/BBhKNMFmhTpc9lXffr KLdahbKgUSQQbfEez/sYcoAYwp/FpXt/fvH32ouOkPtPJHcIugMgqjnoH1v0sTmo VdjL8/G3vSkSKoudgMDkwfSM6vf2y3WDdIFWc+8XsetrJC678jfFByJKsrjNoSTi +5Kwrl9dFCYYubxmGQDOowlozO9AVbj+G6R03ru6IL+K32Kj3fzV6fB0K8zU7Fht ML4DjGZskY+i2/Xx8gjhBe2lMj4dDXaYTKmfKQ1ijxBHC6nu2ujW -----END CERTIFICATE-----Generated at Sun Aug 24 05:32:07 2025 by rpki-client