$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pZAh-jts8hvPWI93LuwPG5iPp-Y.roa File: pZAh-jts8hvPWI93LuwPG5iPp-Y.roa (raw, json) Hash identifier: 4tDv8CHM/uBdwnuQM6cmyv5HYEMhLWuZK79kOjOx/G4= Subject key identifier: A5:90:21:FA:3B:6C:F2:1B:CF:58:8F:77:2E:EC:0F:1B:98:8F:A7:E6 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3A3A Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pZAh-jts8hvPWI93LuwPG5iPp-Y.roa Signing time: Fri 22 Aug 2025 08:47:08 +0000 ROA not before: Fri 22 Aug 2025 08:47:08 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 106.1.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14906 (0x3a3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:08 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=A59021FA3B6CF21BCF588F772EEC0F1B988FA7E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:cd:7e:0a:78:ad:f3:f4:dd:e4:31:a0:3d:06: f6:1d:bb:31:ee:9d:c2:fc:47:46:af:51:8a:a7:03: 1e:1a:eb:a6:3a:8f:63:51:80:7f:cb:e8:1c:57:6c: 7f:8e:8b:15:46:52:ef:a0:b6:92:d9:c1:36:93:31: bb:ec:2c:22:b6:1b:6f:9f:ad:32:f1:33:cb:91:b0: 63:11:f6:ff:d5:73:ec:6f:3f:d7:c0:88:56:cf:08: 36:4c:7b:7e:6a:e6:1e:f1:2e:aa:23:40:8d:ed:38: b3:c8:c9:98:f6:b4:b1:a2:cc:d9:15:87:0c:a2:fc: ef:ac:74:06:6d:cb:8c:2b:02:85:df:9e:69:da:78: fe:c4:78:77:b8:bb:eb:22:8e:07:17:96:f5:e3:5a: 0d:75:f7:58:78:52:dc:be:0a:1d:45:22:de:3c:8b: 72:30:90:30:5a:49:cf:ed:01:bb:a3:4c:f8:54:cd: 86:fc:a5:2f:48:e2:e4:2b:61:9d:a4:dc:fc:4f:e8: fb:50:01:49:65:2b:7e:6e:5a:ad:83:dc:4c:e0:54: 64:97:a7:1d:78:4d:b9:ac:84:8c:ea:9d:5c:8e:52: 7a:f9:5a:0c:0d:41:a5:36:16:80:ef:c1:c1:31:7d: cb:7f:cb:e0:a2:e6:a3:b6:2e:84:13:1b:57:0a:c6: 9c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:90:21:FA:3B:6C:F2:1B:CF:58:8F:77:2E:EC:0F:1B:98:8F:A7:E6 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pZAh-jts8hvPWI93LuwPG5iPp-Y.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.36.0/22 Signature Algorithm: sha256WithRSAEncryption bb:1f:68:56:fa:a3:48:fd:73:47:7c:cf:20:83:e4:aa:5f:b3: cd:6b:75:5a:da:b3:fb:44:08:19:c1:53:8f:ec:6b:53:13:99: d2:ac:5f:b9:3a:03:4b:ae:e8:c5:8b:83:9d:7e:ec:0f:27:18: 4f:7b:13:4f:3f:72:9e:f3:6f:c4:be:c7:8f:fa:70:19:4e:2d: 9f:c1:70:e5:bf:27:8a:c9:cb:b1:12:39:a5:25:f1:d5:74:12: 63:5c:5a:d1:52:36:d1:f9:06:e4:88:82:48:42:6d:92:99:eb: ae:e3:9a:50:6d:97:10:c2:41:a5:03:8d:fc:97:02:f9:2a:f7: 9c:fa:1d:f7:45:a9:8f:ce:16:55:80:90:9e:59:af:13:22:88: 84:97:2a:98:2f:11:bf:41:69:6a:1a:e5:97:0e:58:0e:de:c6: 7a:3f:80:a1:6f:bc:61:3f:fa:a0:61:be:ae:2d:ef:7d:53:b5: dd:98:73:67:aa:8b:02:0c:43:81:6f:b0:f9:d7:92:70:b1:37: a4:b4:07:a3:87:93:42:f3:97:d3:f8:fc:96:d9:68:7e:8e:46: f6:12:97:c1:f2:02:71:27:33:6a:14:56:4d:73:c4:47:aa:44: 57:74:b6:b0:b7:39:b7:ce:5d:15:d9:a3:42:6b:3b:e0:2c:06: 10:2c:3c:75 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOjowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3MDhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEE1OTAyMUZBM0I2Q0Yy MUJDRjU4OEY3NzJFRUMwRjFCOTg4RkE3RTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqzX4KeK3z9N3kMaA9BvYduzHuncL8R0avUYqnAx4a66Y6j2NR gH/L6BxXbH+OixVGUu+gtpLZwTaTMbvsLCK2G2+frTLxM8uRsGMR9v/Vc+xvP9fA iFbPCDZMe35q5h7xLqojQI3tOLPIyZj2tLGizNkVhwyi/O+sdAZty4wrAoXfnmna eP7EeHe4u+sijgcXlvXjWg1191h4Uty+Ch1FIt48i3IwkDBaSc/tAbujTPhUzYb8 pS9I4uQrYZ2k3PxP6PtQAUllK35uWq2D3EzgVGSXpx14TbmshIzqnVyOUnr5WgwN QaU2FoDvwcExfct/y+Ci5qO2LoQTG1cKxpx/AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUpZAh+jts8hvPWI93LuwPG5iPp+YwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3BaQWgtanRzOGh2UFdJOTNM dXdQRzVpUHAtWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq ASQwDQYJKoZIhvcNAQELBQADggEBALsfaFb6o0j9c0d8zyCD5Kpfs81rdVras/tE CBnBU4/sa1MTmdKsX7k6A0uu6MWLg51+7A8nGE97E08/cp7zb8S+x4/6cBlOLZ/B cOW/J4rJy7ESOaUl8dV0EmNcWtFSNtH5BuSIgkhCbZKZ667jmlBtlxDCQaUDjfyX Avkq95z6HfdFqY/OFlWAkJ5ZrxMiiISXKpgvEb9BaWoa5ZcOWA7exno/gKFvvGE/ +qBhvq4t731Ttd2Yc2eqiwIMQ4FvsPnXknCxN6S0B6OHk0Lzl9P4/JbZaH6ORvYS l8HyAnEnM2oUVk1zxEeqRFd0trC3ObfOXRXZo0JrO+AsBhAsPHU= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:20 2025 by rpki-client