$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sII6NRGBOmpYO69Izcj8AtbdBxw.roa File: sII6NRGBOmpYO69Izcj8AtbdBxw.roa (raw, json) Hash identifier: mJKAGOurHKXqrewGnyFh6oaYVqTxVGbkN9VY7AlnYS0= Subject key identifier: B0:82:3A:35:11:81:3A:6A:58:3B:AF:48:CD:C8:FC:02:D6:DD:07:1C Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 381A Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sII6NRGBOmpYO69Izcj8AtbdBxw.roa Signing time: Fri 22 Aug 2025 08:44:57 +0000 ROA not before: Fri 22 Aug 2025 08:44:57 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.194.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14362 (0x381a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:44:57 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=B0823A3511813A6A583BAF48CDC8FC02D6DD071C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:66:0a:ee:92:0a:b0:d0:25:48:ce:bc:12:0f: d1:e8:ef:dd:2d:d4:65:41:02:e9:b2:31:28:d6:fb: 0b:ab:86:45:ea:df:4a:4a:3f:97:07:0d:99:a2:9a: 5d:74:54:fd:29:10:64:17:f9:ac:95:d7:a7:56:3b: 3e:9e:ba:9e:65:29:bf:57:ba:0e:c9:7d:62:b8:8b: 3e:1f:a0:3d:a2:41:5a:e5:2d:34:20:d8:79:0a:71: 16:0a:f2:d7:0d:95:fb:c8:74:f2:8f:14:84:a4:8b: c2:ab:db:c0:b2:a8:b3:ac:6c:5e:39:fd:8c:25:06: a1:84:0d:86:4c:aa:4c:8e:d6:dd:39:5f:a2:12:9c: 20:a6:cc:79:ee:e9:01:35:a0:22:59:68:13:fd:e9: 47:2d:ab:fe:11:c8:17:14:24:b6:aa:9d:b6:9b:a5: 17:58:29:53:f5:8e:81:cf:e4:2d:ec:79:1f:0b:a5: 38:19:78:9f:38:7f:c0:e3:a8:ec:61:c9:e8:c1:ab: 49:a4:ea:ae:da:27:ba:9e:6c:6e:dd:41:0c:b6:0f: a6:12:91:b3:3f:d0:1e:18:d1:46:0b:01:e1:f4:e1: 9f:35:d9:79:19:f2:8f:51:20:0c:bf:0a:f7:ec:56: 6e:e1:32:e3:bb:1f:b4:7b:d2:10:e8:6f:67:d1:75: 92:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:82:3A:35:11:81:3A:6A:58:3B:AF:48:CD:C8:FC:02:D6:DD:07:1C X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sII6NRGBOmpYO69Izcj8AtbdBxw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.200.0/22 Signature Algorithm: sha256WithRSAEncryption 3c:e8:ce:a3:23:16:3c:cf:bc:a1:93:84:9d:2a:37:31:29:39: cd:8f:51:89:11:d0:c9:4b:1b:7d:b1:86:11:cd:70:78:7a:5e: ac:19:f3:3f:38:ff:b4:91:24:b9:c9:52:b2:e6:88:35:61:40: ae:b7:73:c4:58:a0:71:2f:e8:2b:42:bf:18:b2:13:03:99:ec: 57:4b:43:60:c2:4c:86:05:05:37:d2:ae:bf:29:2a:4a:5b:9b: 96:7f:68:7f:8e:fc:eb:9e:8a:ac:27:ef:5c:35:32:1a:d7:f6: a2:76:20:64:a2:a9:a0:b3:87:02:98:b8:09:81:a9:9e:8f:c2: c9:71:4d:c5:a8:dc:b3:5a:e9:4b:81:06:f4:dd:2d:08:82:ef: 33:41:e8:39:e4:2c:c5:ba:9e:da:dc:ce:64:a1:4c:f1:82:d2: 24:17:37:f0:d6:a0:29:cf:ef:5e:c7:5a:2e:7f:76:e1:d1:8b: f4:be:41:b5:69:24:e3:09:95:bb:3a:44:c3:50:3f:59:c9:10: 30:3e:a3:72:7e:74:19:3c:b1:93:aa:3f:c2:90:d2:9c:34:98: 52:27:1f:04:68:50:40:0a:4e:e6:ac:27:7c:51:9a:a2:22:21: 97:e2:3c:64:59:82:67:e1:44:aa:4d:c8:28:58:86:cb:b2:6e: 7c:26:02:bb -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOBowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ0NTdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEIwODIzQTM1MTE4MTNB NkE1ODNCQUY0OENEQzhGQzAyRDZERDA3MUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHZgrukgqw0CVIzrwSD9Ho790t1GVBAumyMSjW+wurhkXq30pK P5cHDZmiml10VP0pEGQX+ayV16dWOz6eup5lKb9Xug7JfWK4iz4foD2iQVrlLTQg 2HkKcRYK8tcNlfvIdPKPFISki8Kr28CyqLOsbF45/YwlBqGEDYZMqkyO1t05X6IS nCCmzHnu6QE1oCJZaBP96Uctq/4RyBcUJLaqnbabpRdYKVP1joHP5C3seR8LpTgZ eJ84f8DjqOxhyejBq0mk6q7aJ7qebG7dQQy2D6YSkbM/0B4Y0UYLAeH04Z812XkZ 8o9RIAy/CvfsVm7hMuO7H7R70hDob2fRdZIJAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUsII6NRGBOmpYO69Izcj8AtbdBxwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3NJSTZOUkdCT21wWU82OUl6 Y2o4QXRiZEJ4dy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wsgwDQYJKoZIhvcNAQELBQADggEBADzozqMjFjzPvKGThJ0qNzEpOc2PUYkR0MlL G32xhhHNcHh6XqwZ8z84/7SRJLnJUrLmiDVhQK63c8RYoHEv6CtCvxiyEwOZ7FdL Q2DCTIYFBTfSrr8pKkpbm5Z/aH+O/Oueiqwn71w1MhrX9qJ2IGSiqaCzhwKYuAmB qZ6PwslxTcWo3LNa6UuBBvTdLQiC7zNB6DnkLMW6ntrczmShTPGC0iQXN/DWoCnP 717HWi5/duHRi/S+QbVpJOMJlbs6RMNQP1nJEDA+o3J+dBk8sZOqP8KQ0pw0mFIn HwRoUEAKTuasJ3xRmqIiIZfiPGRZgmfhRKpNyChYhsuybnwmArs= -----END CERTIFICATE-----Generated at Sun Aug 24 07:29:34 2025 by rpki-client