$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qpqzDmvr4ChooMj6Y5qHQfr6dJ8.roa File: qpqzDmvr4ChooMj6Y5qHQfr6dJ8.roa (raw, json) Hash identifier: /lxoAlvtcg9Lbh2XhNc78lSUNYSc1aP8fAuVE/QYG0o= Subject key identifier: AA:9A:B3:0E:6B:EB:E0:28:68:A0:C8:FA:63:9A:87:41:FA:FA:74:9F Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3905 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qpqzDmvr4ChooMj6Y5qHQfr6dJ8.roa Signing time: Fri 22 Aug 2025 08:45:52 +0000 ROA not before: Fri 22 Aug 2025 08:45:52 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 118.232.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14597 (0x3905) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:52 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=AA9AB30E6BEBE02868A0C8FA639A8741FAFA749F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:7c:72:7a:1f:b8:6d:63:bb:d7:e5:4e:d0:40: 4c:91:8a:6b:62:e9:5f:f9:13:5d:91:8b:82:ed:1a: 38:ac:05:1f:aa:08:96:df:72:90:00:02:ac:f4:03: 7d:df:a6:18:2b:33:c5:ae:1c:fa:de:bd:6d:17:b3: 59:9f:62:e3:75:02:cf:ed:24:bf:cb:eb:da:4d:57: 12:4e:1b:9a:8c:2f:d2:a9:7e:7a:57:0e:30:ad:4c: e0:a5:a8:ab:67:d5:65:c3:a2:e2:a9:13:6e:45:a2: 92:7c:58:10:36:b1:db:b8:e2:ee:6c:53:90:8d:c5: 35:28:fa:cc:70:6b:f9:01:ca:c7:f5:af:5c:f3:49: 95:8a:4c:9b:db:2a:bb:c8:12:c0:da:a6:b5:d4:92: 13:5e:0f:4f:7b:a4:56:03:0c:3a:3c:ef:ec:72:af: 12:dd:0e:82:35:1a:c7:96:f2:a4:d3:08:a0:54:84: 45:76:b5:91:ca:04:43:32:19:9b:3b:cf:71:ce:92: 84:e3:73:fd:4c:d6:e3:62:47:57:26:ca:5f:ee:26: 68:a1:c0:db:97:6e:74:26:52:fb:2a:19:c1:ba:b8: 84:e4:14:71:b2:a6:44:a0:91:ea:c9:f2:81:c5:ca: 19:27:2f:a6:4c:75:c6:7a:6b:cb:fc:5b:7b:c2:31: 33:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:9A:B3:0E:6B:EB:E0:28:68:A0:C8:FA:63:9A:87:41:FA:FA:74:9F X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qpqzDmvr4ChooMj6Y5qHQfr6dJ8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.32.0/22 Signature Algorithm: sha256WithRSAEncryption 87:ff:d2:9a:9b:22:f7:f2:cf:65:ae:28:0c:3f:0d:e9:64:d2: f5:28:bb:97:35:33:05:7b:ec:49:a0:b5:07:d1:5a:c5:62:ed: 04:42:03:f5:e8:7f:02:e5:87:c0:b9:8c:55:b5:9b:77:76:c6: 2c:bd:4e:a3:e5:68:5b:73:12:a0:67:c3:ce:30:c4:24:d7:86: 0a:ac:07:c9:97:81:c4:6d:a0:50:96:fd:32:27:c4:4b:e8:8a: 8c:5d:b1:ab:26:1e:2c:b4:b8:17:f2:a6:eb:0d:66:68:bb:19: f7:8c:19:f6:0b:b1:2f:4d:fa:55:1d:c7:ea:0c:d2:35:73:82: f4:f1:73:f6:7f:8f:c6:e1:14:5a:9e:ae:08:ae:83:1c:ae:b0: 6c:57:59:70:da:49:34:1f:76:84:f5:31:bd:ab:27:7d:33:a3: b5:83:26:90:e4:2c:12:b1:78:80:d3:51:95:bb:17:50:ce:dc: 31:ca:c7:74:c7:88:3d:b4:ff:ce:e8:e1:ca:ee:0f:52:c2:a7: 7e:0b:72:99:bd:cb:97:2e:99:67:6d:d3:4c:b5:da:83:d7:39: a5:ca:c8:a1:dc:48:b3:eb:83:cb:29:86:7b:b4:98:be:6a:27: 45:f0:0b:08:25:be:f2:d3:f2:02:4d:64:d6:f7:25:fc:4a:b1: 92:42:05:18 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOQUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1NTJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEFBOUFCMzBFNkJFQkUw Mjg2OEEwQzhGQTYzOUE4NzQxRkFGQTc0OUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRfHJ6H7htY7vX5U7QQEyRimti6V/5E12Ri4LtGjisBR+qCJbf cpAAAqz0A33fphgrM8WuHPrevW0Xs1mfYuN1As/tJL/L69pNVxJOG5qML9KpfnpX DjCtTOClqKtn1WXDouKpE25FopJ8WBA2sdu44u5sU5CNxTUo+sxwa/kBysf1r1zz SZWKTJvbKrvIEsDaprXUkhNeD097pFYDDDo87+xyrxLdDoI1GseW8qTTCKBUhEV2 tZHKBEMyGZs7z3HOkoTjc/1M1uNiR1cmyl/uJmihwNuXbnQmUvsqGcG6uITkFHGy pkSgkerJ8oHFyhknL6ZMdcZ6a8v8W3vCMTObAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUqpqzDmvr4ChooMj6Y5qHQfr6dJ8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3FwcXpEbXZyNENob29NajZZ NXFIUWZyNmRKOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6CAwDQYJKoZIhvcNAQELBQADggEBAIf/0pqbIvfyz2WuKAw/Delk0vUou5c1MwV7 7EmgtQfRWsVi7QRCA/XofwLlh8C5jFW1m3d2xiy9TqPlaFtzEqBnw84wxCTXhgqs B8mXgcRtoFCW/TInxEvoioxdsasmHiy0uBfypusNZmi7GfeMGfYLsS9N+lUdx+oM 0jVzgvTxc/Z/j8bhFFqergiugxyusGxXWXDaSTQfdoT1Mb2rJ30zo7WDJpDkLBKx eIDTUZW7F1DO3DHKx3THiD20/87o4cruD1LCp34Lcpm9y5cumWdt00y12oPXOaXK yKHcSLPrg8sphnu0mL5qJ0XwCwglvvLT8gJNZNb3JfxKsZJCBRg= -----END CERTIFICATE-----Generated at Sun Aug 24 07:31:59 2025 by rpki-client