$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rw9GUaClWwQYANRddSOVk6DDyro.roa File: rw9GUaClWwQYANRddSOVk6DDyro.roa (raw, json) Hash identifier: HCuQIQEcKsG82bdtPON8Qaid2KnuQu1u/zqc48liBOQ= Subject key identifier: AF:0F:46:51:A0:A5:5B:04:18:00:D4:5D:75:23:95:93:A0:C3:CA:BA Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3A86 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rw9GUaClWwQYANRddSOVk6DDyro.roa Signing time: Fri 22 Aug 2025 08:47:27 +0000 ROA not before: Fri 22 Aug 2025 08:47:27 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 118.233.246.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14982 (0x3a86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:27 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=AF0F4651A0A55B041800D45D75239593A0C3CABA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:6f:dd:cc:7c:52:83:21:f9:55:6b:67:ec:71: 41:0c:15:49:e7:1a:b4:6c:7d:43:76:bf:27:59:b9: 4c:36:35:57:fc:40:4a:3f:ee:73:c4:dd:58:c5:65: f4:60:a4:77:35:79:03:09:8f:1f:eb:fc:50:58:0b: 59:92:be:d7:42:a7:e2:30:66:fc:04:02:15:08:1f: 45:df:6a:3f:92:62:28:49:41:59:1e:d5:c6:65:59: 23:62:8e:f5:23:69:2e:f2:22:86:79:11:a4:d7:0f: 02:ab:0a:33:8b:cf:ae:07:3d:fa:45:6c:f1:39:e7: 3c:2b:dd:d1:12:4f:4b:cb:5d:49:48:6d:d0:e4:22: 3d:f4:d1:f9:28:e9:1c:b7:8e:07:b0:a0:35:f4:86: 24:ba:4b:0f:7f:3b:ce:c8:d5:50:22:84:b8:7e:c5: bb:4b:58:8a:36:c7:0e:6e:75:7d:86:38:8f:fd:e7: 94:ab:3b:5b:10:24:6c:13:68:13:8d:c3:f4:ae:0a: be:6b:57:54:50:6a:77:b4:b7:26:f7:15:6c:9a:4f: d3:90:3a:75:2a:7a:94:c1:61:fe:e6:61:5c:33:a3: cd:48:e0:e1:d8:a7:f6:51:29:de:80:f1:9d:65:68: 56:b4:85:01:20:b9:2e:8a:31:c2:4d:01:68:da:5b: b2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:0F:46:51:A0:A5:5B:04:18:00:D4:5D:75:23:95:93:A0:C3:CA:BA X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rw9GUaClWwQYANRddSOVk6DDyro.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.246.0/23 Signature Algorithm: sha256WithRSAEncryption 23:6b:e2:1d:3f:f4:4b:b0:78:a7:e5:12:c4:79:2b:1f:68:3e: 97:fb:48:aa:d4:76:d9:73:da:24:30:00:b2:51:b9:8e:2d:d5: 83:7a:64:13:a6:8e:1d:b4:1f:a6:bd:94:c6:df:ac:08:98:fe: f6:c3:2e:04:62:81:6a:c0:87:56:2c:6b:18:26:e9:39:80:c3: 04:2e:c2:f8:e6:5f:80:ec:ca:91:85:de:29:ec:eb:67:f8:5b: 4a:33:14:89:db:52:a6:2c:6b:f7:15:f0:99:26:fe:be:ab:fc: 4a:17:e6:69:b0:1a:68:75:e2:70:a6:5f:8f:44:c6:38:21:44: ea:61:8c:5c:35:1b:a6:e6:28:4c:f2:e7:0b:23:09:6b:49:02: 1d:d5:b0:b9:92:81:83:1b:c0:39:17:59:d3:6d:8f:c3:a7:dc: 7c:fd:b3:39:c9:fe:2a:be:49:c0:a7:bd:6f:44:71:12:66:c0: 72:ca:8d:9a:19:7c:07:7a:60:1b:77:14:95:35:94:fd:99:7e: a3:83:85:9f:3e:be:19:88:0e:83:7c:03:2a:71:c1:3c:61:60: d6:35:8e:80:f9:c4:c3:f0:08:15:5a:f9:d9:75:39:f1:f0:c3: 1b:33:75:b0:bb:60:03:86:b6:9f:8d:ad:ab:04:0d:4e:d7:08: e7:3a:b4:0b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOoYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3MjdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEFGMEY0NjUxQTBBNTVC MDQxODAwRDQ1RDc1MjM5NTkzQTBDM0NBQkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDqb93MfFKDIflVa2fscUEMFUnnGrRsfUN2vydZuUw2NVf8QEo/ 7nPE3VjFZfRgpHc1eQMJjx/r/FBYC1mSvtdCp+IwZvwEAhUIH0Xfaj+SYihJQVke 1cZlWSNijvUjaS7yIoZ5EaTXDwKrCjOLz64HPfpFbPE55zwr3dEST0vLXUlIbdDk Ij300fko6Ry3jgewoDX0hiS6Sw9/O87I1VAihLh+xbtLWIo2xw5udX2GOI/955Sr O1sQJGwTaBONw/SuCr5rV1RQane0tyb3FWyaT9OQOnUqepTBYf7mYVwzo81I4OHY p/ZRKd6A8Z1laFa0hQEguS6KMcJNAWjaW7IZAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUrw9GUaClWwQYANRddSOVk6DDyrowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3J3OUdVYUNsV3dRWUFOUmRk U09WazZERHlyby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF2 6fYwDQYJKoZIhvcNAQELBQADggEBACNr4h0/9EuweKflEsR5Kx9oPpf7SKrUdtlz 2iQwALJRuY4t1YN6ZBOmjh20H6a9lMbfrAiY/vbDLgRigWrAh1Ysaxgm6TmAwwQu wvjmX4DsypGF3ins62f4W0ozFInbUqYsa/cV8Jkm/r6r/EoX5mmwGmh14nCmX49E xjghROphjFw1G6bmKEzy5wsjCWtJAh3VsLmSgYMbwDkXWdNtj8On3Hz9sznJ/iq+ ScCnvW9EcRJmwHLKjZoZfAd6YBt3FJU1lP2ZfqODhZ8+vhmIDoN8AypxwTxhYNY1 joD5xMPwCBVa+dl1OfHwwxszdbC7YAOGtp+NrasEDU7XCOc6tAs= -----END CERTIFICATE-----Generated at Sun Aug 24 07:24:08 2025 by rpki-client