$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rUM8HrM8D3wu-w24eN9yZnqN1-M.roa File: rUM8HrM8D3wu-w24eN9yZnqN1-M.roa (raw, json) Hash identifier: JabnJ1r6b9YTQz13VKivC/GNkJXOVG0E3a5RzDjzJRo= Subject key identifier: AD:43:3C:1E:B3:3C:0F:7C:2E:FB:0D:B8:78:DF:72:66:7A:8D:D7:E3 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 37E7 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rUM8HrM8D3wu-w24eN9yZnqN1-M.roa Signing time: Fri 22 Aug 2025 08:44:45 +0000 ROA not before: Fri 22 Aug 2025 08:44:45 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.194.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14311 (0x37e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:44:45 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=AD433C1EB33C0F7C2EFB0DB878DF72667A8DD7E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:cb:ab:21:4b:74:95:8f:4d:b6:c2:1d:9f:33: 35:cb:fc:c0:a1:04:66:b8:a4:0f:64:b0:3e:9d:55: 26:4b:81:72:8b:d4:24:2d:92:d0:a1:92:af:32:0b: 4e:c3:40:23:01:65:90:2b:ff:bc:2a:74:dd:53:91: 19:1e:dd:9c:3c:f7:db:6f:e2:3f:9a:43:c7:18:3f: 5f:27:50:eb:f1:aa:1a:62:13:ad:b7:82:b2:e2:59: bd:31:59:a0:4c:44:9f:50:ea:a5:08:f8:f2:4d:1c: 0a:e1:b8:6b:9d:0a:21:d6:c9:50:6c:3a:93:73:b8: 5c:fd:f5:5a:ba:a0:e3:fc:2f:92:19:1c:63:1d:6a: db:21:d5:53:8e:aa:aa:5f:7e:90:5b:aa:b3:72:6b: 28:9d:d7:c6:f2:fb:23:9f:ff:e5:98:69:c5:f5:a5: 14:84:43:1d:4e:a1:5c:9b:f9:9f:63:2e:1b:59:f0: d4:88:0f:2d:4a:c9:04:e1:86:48:0b:38:51:49:87: 76:13:f6:d0:b9:a5:bd:ef:70:49:9f:ad:04:9b:d8: 43:01:75:7a:f8:47:15:10:d5:c5:4f:29:4b:2d:c6: a6:a1:6e:6d:6d:a4:ca:e1:ab:88:08:55:08:d5:1f: 62:0b:4b:05:36:94:81:96:6f:2c:20:d2:a7:29:b9: b5:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:43:3C:1E:B3:3C:0F:7C:2E:FB:0D:B8:78:DF:72:66:7A:8D:D7:E3 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rUM8HrM8D3wu-w24eN9yZnqN1-M.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.64.0/21 Signature Algorithm: sha256WithRSAEncryption 20:e2:39:2f:ad:3a:64:23:cc:23:4c:d4:14:6e:44:1f:1f:73: 99:bd:56:c5:2f:4c:92:41:80:71:b2:30:c2:89:7c:b2:0f:23: e4:b4:3f:53:05:b0:79:a2:d5:b7:40:ee:5e:8c:f4:10:5f:a8: d5:02:b9:24:0a:c2:1f:46:13:9a:00:d0:2c:b9:3a:3e:f8:95: 3a:66:1f:2d:b8:37:bd:ef:bf:b2:c1:75:c3:cc:59:02:e6:b0: bd:06:04:b2:81:27:0e:89:f0:04:1d:8a:67:f4:a6:82:83:12: a4:99:18:3c:6e:85:8b:3b:f1:08:38:2d:cc:0d:46:58:ba:ca: 15:ec:bb:e4:c5:a5:fa:2b:d1:d9:fc:45:f8:b4:2c:ac:2f:95: 32:2e:f4:3b:6a:31:8a:6b:cb:42:82:71:0a:15:f2:91:c1:8b: 30:af:9e:7c:e4:1b:f8:50:7d:4b:b8:a3:7a:88:35:67:d4:be: 53:87:4c:d7:08:9a:79:98:2e:7c:e6:c6:44:d1:58:70:f1:31: 94:34:5a:7e:d3:a6:97:fb:a2:90:62:9e:b5:bf:6f:11:1f:66: aa:d1:3d:15:2b:93:96:90:48:eb:fa:5a:f6:15:84:ac:fb:f8: bd:4e:c8:14:ee:87:50:d7:09:ee:c4:d7:32:14:41:4a:72:cc: 96:b5:98:25 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICN+cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ0NDVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEFENDMzQzFFQjMzQzBG N0MyRUZCMERCODc4REY3MjY2N0E4REQ3RTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDwy6shS3SVj022wh2fMzXL/MChBGa4pA9ksD6dVSZLgXKL1CQt ktChkq8yC07DQCMBZZAr/7wqdN1TkRke3Zw899tv4j+aQ8cYP18nUOvxqhpiE623 grLiWb0xWaBMRJ9Q6qUI+PJNHArhuGudCiHWyVBsOpNzuFz99Vq6oOP8L5IZHGMd atsh1VOOqqpffpBbqrNyayid18by+yOf/+WYacX1pRSEQx1OoVyb+Z9jLhtZ8NSI Dy1KyQThhkgLOFFJh3YT9tC5pb3vcEmfrQSb2EMBdXr4RxUQ1cVPKUstxqahbm1t pMrhq4gIVQjVH2ILSwU2lIGWbywg0qcpubWjAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUrUM8HrM8D3wu+w24eN9yZnqN1+MwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3JVTThIck04RDN3dS13MjRl Tjl5Wm5xTjEtTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wkAwDQYJKoZIhvcNAQELBQADggEBACDiOS+tOmQjzCNM1BRuRB8fc5m9VsUvTJJB gHGyMMKJfLIPI+S0P1MFsHmi1bdA7l6M9BBfqNUCuSQKwh9GE5oA0Cy5Oj74lTpm Hy24N73vv7LBdcPMWQLmsL0GBLKBJw6J8AQdimf0poKDEqSZGDxuhYs78Qg4LcwN Rli6yhXsu+TFpfor0dn8Rfi0LKwvlTIu9DtqMYpry0KCcQoV8pHBizCvnnzkG/hQ fUu4o3qINWfUvlOHTNcImnmYLnzmxkTRWHDxMZQ0Wn7Tppf7opBinrW/bxEfZqrR PRUrk5aQSOv6WvYVhKz7+L1OyBTuh1DXCe7E1zIUQUpyzJa1mCU= -----END CERTIFICATE-----Generated at Sun Aug 24 05:34:03 2025 by rpki-client