$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qg8xUN72ltDVE39WjTIFu_zE8Iw.roa File: qg8xUN72ltDVE39WjTIFu_zE8Iw.roa (raw, json) Hash identifier: 8eT34YAEphPxdZA732TdlFu2KNkjPfB3TfpfgZcvZL0= Subject key identifier: AA:0F:31:50:DE:F6:96:D0:D5:13:7F:56:8D:32:05:BB:FC:C4:F0:8C Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 37DC Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qg8xUN72ltDVE39WjTIFu_zE8Iw.roa Signing time: Fri 22 Aug 2025 08:44:43 +0000 ROA not before: Fri 22 Aug 2025 08:44:43 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.194.16.0/20 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14300 (0x37dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:44:43 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=AA0F3150DEF696D0D5137F568D3205BBFCC4F08C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c0:f5:44:5d:c8:18:15:35:7e:34:75:1d:dc: 31:08:c1:7a:71:f0:cb:7a:06:ae:98:83:3d:59:3f: 5d:e0:ca:0f:46:9c:c1:16:59:a1:7f:1e:8c:52:e1: c6:56:fe:54:19:da:d3:91:d5:0c:de:fe:67:70:c2: 4f:0e:98:5b:2e:10:a7:65:bd:37:4d:00:a2:a2:df: 44:8a:21:6c:0c:30:3d:9d:69:aa:ad:ed:52:98:37: 15:fc:6c:db:1f:f6:01:f0:f9:c5:3b:f8:9e:ac:d0: e4:f1:8f:f6:81:48:93:8f:e8:9f:c5:3b:e5:73:bb: 7c:aa:08:ce:a5:2b:84:41:c5:7d:6e:eb:32:c6:e3: 5d:f8:75:95:c8:c1:e5:c9:74:39:ff:41:ed:5e:a9: 4e:b8:2a:e9:9d:ef:70:98:1b:37:d8:bb:6e:b5:d8: 16:a6:99:77:80:85:f9:ed:00:85:3e:36:c0:ff:d3: 4b:68:fa:cc:4a:43:58:2e:0b:ba:5d:1c:71:7c:65: 17:7b:3f:4a:f8:38:e7:e0:c2:6b:73:a2:3d:f8:c3: ce:19:3f:2a:b8:00:06:84:99:a9:0f:09:49:15:f1: b0:d5:ed:96:4f:9d:9c:e5:b7:32:0c:01:dd:b8:ab: 71:9e:59:7b:e1:2f:4f:60:3a:0d:fd:41:88:64:2c: 0d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:0F:31:50:DE:F6:96:D0:D5:13:7F:56:8D:32:05:BB:FC:C4:F0:8C X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qg8xUN72ltDVE39WjTIFu_zE8Iw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.16.0/20 Signature Algorithm: sha256WithRSAEncryption a9:38:88:89:74:3c:5e:c2:b3:96:e3:8a:ae:4b:c2:d5:ca:a6: 6d:13:38:2e:6d:56:62:61:3b:fd:e9:38:58:8c:a0:38:53:38: c4:00:3c:6a:dc:d7:36:04:00:af:fa:f2:8e:13:1e:85:96:0b: d6:83:e8:40:c5:7e:11:6b:d2:d0:28:cf:c4:00:1f:cb:25:9c: 25:41:5d:59:86:59:51:04:07:45:2a:00:2b:da:b8:d1:3d:71: 5a:bb:48:94:b6:a8:d5:c1:da:ce:80:40:11:2d:25:91:2e:fa: 00:87:8a:e9:a7:a6:44:0d:72:0c:f0:31:a7:6f:fb:48:e4:90: c8:61:2a:9f:c3:dc:d8:8a:ce:fe:54:c4:68:54:b9:06:09:55: e2:88:4b:3e:af:5b:bf:b3:66:fe:2e:97:b1:c0:4c:2d:10:ba: 5c:01:4a:3b:49:34:32:33:5c:ba:3e:2d:48:90:36:05:0e:71: b2:85:0d:ce:d3:42:32:7f:a3:eb:93:f5:cc:95:c6:81:7e:bc: 7c:66:fb:a0:84:fa:05:29:e8:23:eb:3c:28:33:eb:8c:85:07: 30:a5:53:f9:a2:f5:8e:22:00:f3:82:11:c7:af:ea:93:a2:79: 38:10:8d:5d:a9:0a:84:cf:8f:da:40:b8:22:0f:e6:67:6b:34: 62:7e:ee:0c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICN9wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ0NDNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEFBMEYzMTUwREVGNjk2 RDBENTEzN0Y1NjhEMzIwNUJCRkNDNEYwOEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGwPVEXcgYFTV+NHUd3DEIwXpx8Mt6Bq6Ygz1ZP13gyg9GnMEW WaF/HoxS4cZW/lQZ2tOR1Qze/mdwwk8OmFsuEKdlvTdNAKKi30SKIWwMMD2daaqt 7VKYNxX8bNsf9gHw+cU7+J6s0OTxj/aBSJOP6J/FO+Vzu3yqCM6lK4RBxX1u6zLG 4134dZXIweXJdDn/Qe1eqU64Kumd73CYGzfYu2612BammXeAhfntAIU+NsD/00to +sxKQ1guC7pdHHF8ZRd7P0r4OOfgwmtzoj34w84ZPyq4AAaEmakPCUkV8bDV7ZZP nZzltzIMAd24q3GeWXvhL09gOg39QYhkLA0tAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUqg8xUN72ltDVE39WjTIFu/zE8IwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3FnOHhVTjcybHREVkUzOVdq VElGdV96RThJdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR7 whAwDQYJKoZIhvcNAQELBQADggEBAKk4iIl0PF7Cs5bjiq5LwtXKpm0TOC5tVmJh O/3pOFiMoDhTOMQAPGrc1zYEAK/68o4THoWWC9aD6EDFfhFr0tAoz8QAH8slnCVB XVmGWVEEB0UqACvauNE9cVq7SJS2qNXB2s6AQBEtJZEu+gCHiumnpkQNcgzwMadv +0jkkMhhKp/D3NiKzv5UxGhUuQYJVeKISz6vW7+zZv4ul7HATC0QulwBSjtJNDIz XLo+LUiQNgUOcbKFDc7TQjJ/o+uT9cyVxoF+vHxm+6CE+gUp6CPrPCgz64yFBzCl U/mi9Y4iAPOCEcev6pOieTgQjV2pCoTPj9pAuCIP5mdrNGJ+7gw= -----END CERTIFICATE-----Generated at Sun Aug 24 07:28:26 2025 by rpki-client