$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/plDL9ZUXVZFdojnUZ81QG0ZfWJ0.roa File: plDL9ZUXVZFdojnUZ81QG0ZfWJ0.roa (raw, json) Hash identifier: KNdmunFWwOc1PkcOxSPFmC26eS6g5fNqqlHZ4A9jGPE= Subject key identifier: A6:50:CB:F5:95:17:55:91:5D:A2:39:D4:67:CD:50:1B:46:5F:58:9D Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 37D4 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/plDL9ZUXVZFdojnUZ81QG0ZfWJ0.roa Signing time: Fri 22 Aug 2025 08:44:41 +0000 ROA not before: Fri 22 Aug 2025 08:44:41 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.195.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14292 (0x37d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:44:41 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=A650CBF5951755915DA239D467CD501B465F589D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:31:2b:16:4b:b4:16:4a:c4:29:c6:d5:e5:95: 62:0e:f8:d0:6b:8f:ea:4d:e8:82:51:62:f7:62:02: 51:4f:b8:f9:cb:9d:e9:c2:fe:e6:9f:38:43:8e:1c: f2:78:95:5e:25:13:d2:3f:30:73:d3:38:bb:89:7b: 8b:73:05:aa:78:b3:59:9f:20:b4:af:ec:2c:4f:b1: 7e:7b:3f:97:b0:6c:64:55:6b:3f:cf:b2:8b:06:20: 54:11:74:99:ae:17:96:32:7f:74:f3:e8:62:26:95: 27:b7:38:a2:c2:ed:59:d3:0a:63:7a:14:81:48:a3: 00:8a:5e:ff:d9:c2:34:5c:5f:16:9c:24:d6:7a:bd: 3a:0f:89:df:3c:42:e9:c6:1d:de:95:a8:eb:12:24: 7f:fe:db:ca:36:76:2c:ee:37:e0:85:53:ca:eb:c3: 1a:67:52:f6:29:33:3c:cc:9b:6d:8e:c1:9f:73:a2: 8d:d7:3a:73:25:bb:89:b7:74:86:ee:c2:7d:0a:2a: 4b:2e:b9:74:e1:c4:13:1f:69:c2:fd:2c:b1:ab:9a: 3f:75:f6:04:46:ee:b9:95:bc:bd:a2:16:aa:31:9a: 50:d5:48:30:b3:a4:e2:17:e2:bc:cd:ca:ff:c9:1d: 79:cc:84:ac:fd:07:f2:18:fb:9c:d8:3d:74:13:c9: 6e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:50:CB:F5:95:17:55:91:5D:A2:39:D4:67:CD:50:1B:46:5F:58:9D X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/plDL9ZUXVZFdojnUZ81QG0ZfWJ0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.200.0/21 Signature Algorithm: sha256WithRSAEncryption 74:b3:00:b4:f6:c8:72:21:93:3e:c8:f8:86:fa:63:89:3a:fe: c5:fc:8d:c5:47:a1:ef:6e:f7:40:e7:34:59:7d:ac:4c:f8:28: bd:a5:d1:0d:05:c0:ed:48:b6:ba:b1:b3:a0:32:41:2b:ed:89: 49:b6:bf:32:78:e1:aa:96:ce:48:6d:5b:ed:97:c7:5e:ef:cc: 02:07:56:7a:fa:9e:ec:bb:15:88:72:50:d6:39:ad:d5:e7:98: 14:ed:80:72:eb:51:77:f8:5c:31:b7:90:39:4f:ba:67:b1:bd: 0d:57:98:37:4e:f0:0e:45:63:a5:21:93:17:bc:01:25:8b:a6: ae:c3:48:dd:fc:26:ea:5c:cf:8b:9b:30:4e:ac:6b:67:89:4c: 55:af:74:29:c2:4d:fc:84:aa:06:9c:d5:0b:16:df:50:1c:ae: 4d:4a:e5:d9:e7:98:9d:0f:5d:94:10:bf:bb:21:d4:77:19:e8: 3d:28:df:ae:23:ab:4c:16:68:97:c9:86:11:a9:68:ce:93:dc: cc:27:11:81:e6:ee:6a:f5:c5:61:b1:57:79:de:e5:3b:cc:07: 56:3d:b7:e1:68:a4:84:59:62:1d:69:cd:7a:60:4f:17:ce:51: 41:e3:c9:7e:82:e0:99:22:e6:8a:c6:20:0b:3f:7b:a1:22:27: 0b:cc:1c:84 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICN9QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ0NDFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEE2NTBDQkY1OTUxNzU1 OTE1REEyMzlENDY3Q0Q1MDFCNDY1RjU4OUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpMSsWS7QWSsQpxtXllWIO+NBrj+pN6IJRYvdiAlFPuPnLnenC /uafOEOOHPJ4lV4lE9I/MHPTOLuJe4tzBap4s1mfILSv7CxPsX57P5ewbGRVaz/P sosGIFQRdJmuF5Yyf3Tz6GImlSe3OKLC7VnTCmN6FIFIowCKXv/ZwjRcXxacJNZ6 vToPid88QunGHd6VqOsSJH/+28o2dizuN+CFU8rrwxpnUvYpMzzMm22OwZ9zoo3X OnMlu4m3dIbuwn0KKksuuXThxBMfacL9LLGrmj919gRG7rmVvL2iFqoxmlDVSDCz pOIX4rzNyv/JHXnMhKz9B/IY+5zYPXQTyW6dAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUplDL9ZUXVZFdojnUZ81QG0ZfWJ0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3BsREw5WlVYVlpGZG9qblVa ODFRRzBaZldKMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 w8gwDQYJKoZIhvcNAQELBQADggEBAHSzALT2yHIhkz7I+Ib6Y4k6/sX8jcVHoe9u 90DnNFl9rEz4KL2l0Q0FwO1Itrqxs6AyQSvtiUm2vzJ44aqWzkhtW+2Xx17vzAIH Vnr6nuy7FYhyUNY5rdXnmBTtgHLrUXf4XDG3kDlPumexvQ1XmDdO8A5FY6Uhkxe8 ASWLpq7DSN38Jupcz4ubME6sa2eJTFWvdCnCTfyEqgac1QsW31Acrk1K5dnnmJ0P XZQQv7sh1HcZ6D0o364jq0wWaJfJhhGpaM6T3MwnEYHm7mr1xWGxV3ne5TvMB1Y9 t+FopIRZYh1pzXpgTxfOUUHjyX6C4Jki5orGIAs/e6EiJwvMHIQ= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:28 2025 by rpki-client