$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qPyX4HLhA0_bJZiN5BhKnNBVf4U.roa File: qPyX4HLhA0_bJZiN5BhKnNBVf4U.roa (raw, json) Hash identifier: AMBx2ITPnlkpCtQvlEb5LN06q5BvVegFdY9BIPRf10s= Subject key identifier: A8:FC:97:E0:72:E1:03:4F:DB:25:98:8D:E4:18:4A:9C:D0:55:7F:85 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3B34 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qPyX4HLhA0_bJZiN5BhKnNBVf4U.roa Signing time: Fri 22 Aug 2025 08:48:10 +0000 ROA not before: Fri 22 Aug 2025 08:48:10 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.194.204.64/27 maxlen: 27 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15156 (0x3b34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:48:10 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=A8FC97E072E1034FDB25988DE4184A9CD0557F85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c5:be:2c:94:e7:49:eb:3c:37:db:1b:c6:d5: 6b:e8:4f:52:ac:0b:91:c7:0c:16:4e:bf:a3:1e:9a: 72:79:0f:50:1b:ad:26:86:47:a3:85:68:71:1e:75: fc:e8:73:dd:d2:ad:56:15:ee:5a:58:93:4c:79:b2: a5:c1:97:83:be:8d:ca:a3:f2:44:ac:cf:90:86:09: 4e:bb:1d:fb:ba:44:12:4a:5d:1a:53:d7:df:a2:96: 58:0d:9f:b8:ef:86:b7:dc:35:64:52:35:45:ca:81: 42:a0:ec:ae:22:37:54:b1:8b:78:3f:f3:59:1e:f0: 21:da:1a:ff:71:88:bb:68:94:5c:8e:3a:14:13:68: 61:89:18:38:29:8b:3d:b3:3f:f9:c0:0b:ad:8d:c1: b6:ba:bf:c2:45:44:ac:b6:91:30:8c:97:c0:f2:82: b6:d4:55:4c:5e:37:35:64:9d:ff:d2:c2:c2:f8:14: 96:3c:61:88:0a:ef:aa:57:9d:b6:04:0e:ae:16:3d: 42:7b:ba:61:64:63:89:c6:9e:41:e9:d8:f2:a5:2f: 44:7d:3d:7c:86:fc:35:c6:e9:5f:f6:c5:13:4f:ec: 83:4f:25:01:bb:d5:44:6d:a6:04:97:38:72:26:7f: 38:db:a6:9f:29:f1:b6:03:5e:00:83:7d:c1:3d:26: ff:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:FC:97:E0:72:E1:03:4F:DB:25:98:8D:E4:18:4A:9C:D0:55:7F:85 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qPyX4HLhA0_bJZiN5BhKnNBVf4U.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.204.64/27 Signature Algorithm: sha256WithRSAEncryption 81:ed:5a:e7:88:03:93:80:c9:4b:05:c1:df:3a:32:a8:15:6f: e7:ea:7c:bd:8f:44:03:13:3d:8d:8b:a5:62:86:1b:07:40:7a: a3:9e:64:b9:bc:f1:e3:7f:06:2b:1e:27:51:39:83:db:a7:ac: 4e:36:ab:08:79:0a:e1:48:d4:f3:33:7d:da:b4:86:92:8a:d6: 09:1e:57:2b:b8:d5:11:6b:5e:6e:9a:f7:4c:01:ef:8e:4a:7f: d7:7a:b9:33:f2:84:6b:5d:83:75:88:f3:7f:d5:b1:5e:4a:03: 7f:44:f4:32:e5:63:67:8e:be:d5:41:6e:5f:dd:bd:cd:4f:5c: e3:af:c2:0c:fa:f8:5b:7d:c7:dd:ad:98:92:ee:14:4a:ab:40: 61:4c:34:f5:3c:95:bb:05:04:5e:de:41:03:aa:ab:af:9d:b3: e4:7a:d8:db:ff:02:68:44:7e:69:f6:4d:e8:fe:9a:ad:f4:cc: 17:e9:94:61:65:c4:11:ca:f7:17:80:e3:a4:52:90:72:33:1c: 18:23:7d:7c:15:e9:3d:96:84:55:82:67:b5:e3:cc:5f:52:b3: bd:cc:6c:21:74:64:44:28:48:8b:44:ff:08:79:24:d2:9e:f4: db:9b:dc:9a:e1:58:12:cd:77:43:91:c7:97:78:03:b7:9c:a9: 87:a6:1a:d8 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICOzQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ4MTBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEE4RkM5N0UwNzJFMTAz NEZEQjI1OTg4REU0MTg0QTlDRDA1NTdGODUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2xb4slOdJ6zw32xvG1WvoT1KsC5HHDBZOv6MemnJ5D1AbrSaG R6OFaHEedfzoc93SrVYV7lpYk0x5sqXBl4O+jcqj8kSsz5CGCU67Hfu6RBJKXRpT 19+illgNn7jvhrfcNWRSNUXKgUKg7K4iN1Sxi3g/81ke8CHaGv9xiLtolFyOOhQT aGGJGDgpiz2zP/nAC62Nwba6v8JFRKy2kTCMl8DygrbUVUxeNzVknf/SwsL4FJY8 YYgK76pXnbYEDq4WPUJ7umFkY4nGnkHp2PKlL0R9PXyG/DXG6V/2xRNP7INPJQG7 1URtpgSXOHImfzjbpp8p8bYDXgCDfcE9Jv+DAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUqPyX4HLhA0/bJZiN5BhKnNBVf4UwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3FQeVg0SExoQTBfYkpaaU41 QmhLbk5CVmY0VS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQV7 wsxAMA0GCSqGSIb3DQEBCwUAA4IBAQCB7VrniAOTgMlLBcHfOjKoFW/n6ny9j0QD Ez2Ni6VihhsHQHqjnmS5vPHjfwYrHidROYPbp6xONqsIeQrhSNTzM33atIaSitYJ HlcruNURa15umvdMAe+OSn/Xerkz8oRrXYN1iPN/1bFeSgN/RPQy5WNnjr7VQW5f 3b3NT1zjr8IM+vhbfcfdrZiS7hRKq0BhTDT1PJW7BQRe3kEDqquvnbPketjb/wJo RH5p9k3o/pqt9MwX6ZRhZcQRyvcXgOOkUpByMxwYI318Fek9loRVgme148xfUrO9 zGwhdGREKEiLRP8IeSTSnvTbm9ya4VgSzXdDkceXeAO3nKmHphrY -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:39 2025 by rpki-client