$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pSUTxaJMdhL2xsAWhRj9RmSTWtY.roa File: pSUTxaJMdhL2xsAWhRj9RmSTWtY.roa (raw, json) Hash identifier: iwBQ0YGKLypqrip8CsoTFPGMVbFY42z51jBmerFpGgE= Subject key identifier: A5:25:13:C5:A2:4C:76:12:F6:C6:C0:16:85:18:FD:46:64:93:5A:D6 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 38FF Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pSUTxaJMdhL2xsAWhRj9RmSTWtY.roa Signing time: Fri 22 Aug 2025 08:45:51 +0000 ROA not before: Fri 22 Aug 2025 08:45:51 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.195.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14591 (0x38ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:51 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=A52513C5A24C7612F6C6C0168518FD4664935AD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:53:80:5d:45:56:f9:da:01:f6:d4:c6:78:7e: b5:96:80:28:bf:94:c8:7c:fd:b9:0a:5f:e7:b1:c0: da:eb:81:c3:39:06:60:b2:68:f4:0a:9b:e6:b0:4e: 07:c8:d8:c4:75:0d:c0:fd:5e:3b:15:2b:1f:3f:66: 41:d0:55:67:b2:de:bc:fb:88:a0:a8:67:bd:15:8e: ec:c5:9e:3e:03:4b:17:15:94:0c:3f:9f:eb:9f:a2: 9b:d9:f5:08:a6:1d:79:a7:13:cf:f5:5e:80:ca:8c: 01:5b:e2:c2:2d:ff:c1:a7:bd:47:ab:60:4d:dc:56: f5:cc:13:7e:2b:84:10:5b:62:54:b3:1f:6f:7e:de: 28:00:68:fe:24:71:99:22:6e:d5:45:9c:b1:98:39: 52:6c:f2:7a:ed:2d:8a:41:52:54:f6:47:82:5d:92: 60:f0:4d:d5:0e:67:af:3c:f3:d5:17:af:c9:48:ec: 86:3b:f6:b0:ca:8f:c5:3e:bf:40:ed:6d:b5:45:35: 93:40:26:44:14:43:da:22:72:b7:93:41:a6:b5:f8: ed:02:80:17:5b:60:84:a9:47:4a:91:16:9b:08:34: e5:9e:fb:79:e3:e2:95:f4:d3:da:a7:b0:77:53:8a: 70:d8:d5:9b:7b:f4:89:1a:a4:62:71:c7:95:b2:2d: c9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:25:13:C5:A2:4C:76:12:F6:C6:C0:16:85:18:FD:46:64:93:5A:D6 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pSUTxaJMdhL2xsAWhRj9RmSTWtY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.183.0/24 Signature Algorithm: sha256WithRSAEncryption 84:d8:0c:77:ba:79:d9:01:43:ea:e7:7b:0a:7e:26:52:74:ca: 68:b0:65:64:5e:9a:68:9a:0b:ce:c3:e9:82:cc:88:38:72:94: 74:34:da:66:56:a6:fa:41:e6:35:69:1a:40:e2:10:47:07:7e: f0:62:ba:25:6d:2f:7e:a7:89:cb:7c:af:a7:40:35:23:98:ff: 90:e2:ed:bb:65:c7:66:ba:e5:18:17:88:71:0a:34:5e:98:e3: 4f:09:6f:c0:b6:ef:be:97:3a:95:d7:2d:3c:9e:1b:c7:e0:a4: c1:71:ea:ba:88:54:8a:a4:4c:97:da:3c:76:f0:fb:b2:09:38: 31:85:9a:83:12:96:49:92:dc:e7:a6:53:13:5e:11:be:b5:6a: 40:9b:dc:f8:a5:61:1a:a3:a0:f2:60:1a:85:e3:20:c4:d6:28: 37:81:ba:88:c7:33:4e:37:aa:20:af:65:01:00:f4:d2:91:80: f3:9d:83:28:f6:51:40:c8:58:03:66:56:f2:0d:80:47:57:7e: 0c:bf:73:5a:dc:93:98:0b:6f:62:4f:de:6b:d3:22:1d:fc:4d: 3e:2b:a3:00:2a:3c:81:8a:d9:c4:b3:a3:9b:49:17:e2:0b:b3: 80:36:2b:60:5d:9b:dc:ce:3c:68:5f:dd:bf:fb:37:93:7c:de: 33:70:45:58 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOP8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1NTFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEE1MjUxM0M1QTI0Qzc2 MTJGNkM2QzAxNjg1MThGRDQ2NjQ5MzVBRDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBU4BdRVb52gH21MZ4frWWgCi/lMh8/bkKX+exwNrrgcM5BmCy aPQKm+awTgfI2MR1DcD9XjsVKx8/ZkHQVWey3rz7iKCoZ70VjuzFnj4DSxcVlAw/ n+ufopvZ9QimHXmnE8/1XoDKjAFb4sIt/8GnvUerYE3cVvXME34rhBBbYlSzH29+ 3igAaP4kcZkibtVFnLGYOVJs8nrtLYpBUlT2R4JdkmDwTdUOZ68889UXr8lI7IY7 9rDKj8U+v0DtbbVFNZNAJkQUQ9oicreTQaa1+O0CgBdbYISpR0qRFpsINOWe+3nj 4pX009qnsHdTinDY1Zt79IkapGJxx5WyLcm/AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUpSUTxaJMdhL2xsAWhRj9RmSTWtYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3BTVVR4YUpNZGhMMnhzQVdo Umo5Um1TVFd0WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7 w7cwDQYJKoZIhvcNAQELBQADggEBAITYDHe6edkBQ+rnewp+JlJ0ymiwZWRemmia C87D6YLMiDhylHQ02mZWpvpB5jVpGkDiEEcHfvBiuiVtL36nict8r6dANSOY/5Di 7btlx2a65RgXiHEKNF6Y408Jb8C2776XOpXXLTyeG8fgpMFx6rqIVIqkTJfaPHbw +7IJODGFmoMSlkmS3OemUxNeEb61akCb3PilYRqjoPJgGoXjIMTWKDeBuojHM043 qiCvZQEA9NKRgPOdgyj2UUDIWANmVvINgEdXfgy/c1rck5gLb2JP3mvTIh38TT4r owAqPIGK2cSzo5tJF+ILs4A2K2Bdm9zOPGhf3b/7N5N83jNwRVg= -----END CERTIFICATE-----Generated at Sun Aug 24 07:24:14 2025 by rpki-client