$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sKKZNOD1ykxqNAUiZiKP75eQvSE.roa File: sKKZNOD1ykxqNAUiZiKP75eQvSE.roa (raw, json) Hash identifier: wR4e45inJ1y2Wb31lylZQZe4LUnNnInYhc2ELRxUMz4= Subject key identifier: B0:A2:99:34:E0:F5:CA:4C:6A:34:05:22:66:22:8F:EF:97:90:BD:21 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3957 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sKKZNOD1ykxqNAUiZiKP75eQvSE.roa Signing time: Fri 22 Aug 2025 08:46:12 +0000 ROA not before: Fri 22 Aug 2025 08:46:12 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 118.233.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14679 (0x3957) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:12 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=B0A29934E0F5CA4C6A34052266228FEF9790BD21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:bf:d0:40:d9:c8:48:9d:e9:5c:5c:5f:9e:68: 99:02:33:29:e4:fd:8e:1b:a4:9e:c5:d4:11:1e:c6: 27:1b:82:6d:a9:62:e9:3a:db:1a:a9:fc:a7:8d:14: 0d:e9:df:c1:80:7f:79:49:b8:19:d2:35:57:c6:d8: 30:cc:f1:5f:c4:af:06:f9:8d:a0:43:6f:f4:0c:e5: 4a:10:40:e2:03:46:2b:62:f1:34:3b:12:da:8e:99: 89:9b:5d:29:a8:9e:f5:34:44:6c:4a:a6:3b:84:aa: 79:d3:d3:1e:5e:dd:c0:a4:cc:c4:51:5e:91:7f:19: fe:2b:38:57:21:51:84:14:87:c4:05:e1:bd:10:41: 57:08:ed:25:71:7e:79:80:65:ac:08:b1:e8:12:f1: 8e:7c:77:dd:be:03:a2:5f:81:a0:99:56:05:b2:22: 26:b1:6f:d7:50:47:c2:d1:8c:65:b2:64:d8:d1:2a: 9a:e8:91:e7:af:60:7b:48:7c:6c:b0:5a:d9:fd:56: f1:fd:b9:3d:d8:ac:97:7b:b2:fc:2b:6d:cf:5b:1c: b0:1d:0d:ca:cc:42:e9:c7:63:c2:4e:d0:01:b3:19: 67:fc:2c:42:8a:5c:81:e0:cd:85:b7:65:d5:49:50: 94:05:6e:b0:e7:70:32:ff:4d:b0:7c:93:e7:5d:f2: 6b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:A2:99:34:E0:F5:CA:4C:6A:34:05:22:66:22:8F:EF:97:90:BD:21 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sKKZNOD1ykxqNAUiZiKP75eQvSE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.168.0/21 Signature Algorithm: sha256WithRSAEncryption 27:9e:c3:23:c9:f1:a5:46:67:58:81:77:5c:63:4e:9f:9b:dd: ae:9d:17:48:cb:87:2e:e4:6f:77:3e:05:2f:3d:43:e3:7a:f7: 21:32:97:5a:e1:bb:c7:74:3b:ec:f5:cb:c9:0a:a4:71:1a:a3: a1:4d:f7:40:b4:2c:76:6a:07:41:6a:40:42:40:3b:23:ce:10: 28:3e:7e:f3:1f:0b:0c:fc:0d:a6:9e:31:40:73:db:9e:0b:cb: e1:21:94:f0:e0:f8:33:57:2d:e9:00:ae:95:01:b1:28:a5:3e: 55:a3:5f:4a:01:e1:fd:57:2f:f5:c8:d3:ec:d3:ab:83:71:15: 49:ac:76:2b:68:84:33:ff:6b:fe:8c:c7:0e:8a:7d:3e:4c:23: 94:2a:89:f8:f0:94:47:31:9f:1c:7a:8f:f6:6f:32:0e:b2:46: c6:78:c8:1c:09:17:3e:0c:7f:52:4f:c8:46:e9:98:4b:d9:87: 20:c6:98:3f:f1:ed:d1:da:d7:3b:aa:c9:df:b7:cc:5f:7c:43: 60:1d:3d:9e:ce:7e:d9:3f:3c:de:61:83:70:9b:97:a6:a6:b7: 92:62:fa:6c:c3:11:c0:7b:08:74:1e:16:c7:6c:26:0b:5f:53: 54:b6:43:59:50:40:5a:a0:39:ab:70:9e:6c:fe:00:a2:17:6c: 3a:2f:6c:1e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOVcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2MTJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEIwQTI5OTM0RTBGNUNB NEM2QTM0MDUyMjY2MjI4RkVGOTc5MEJEMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEv9BA2chInelcXF+eaJkCMynk/Y4bpJ7F1BEexicbgm2pYuk6 2xqp/KeNFA3p38GAf3lJuBnSNVfG2DDM8V/Erwb5jaBDb/QM5UoQQOIDRiti8TQ7 EtqOmYmbXSmonvU0RGxKpjuEqnnT0x5e3cCkzMRRXpF/Gf4rOFchUYQUh8QF4b0Q QVcI7SVxfnmAZawIsegS8Y58d92+A6JfgaCZVgWyIiaxb9dQR8LRjGWyZNjRKpro keevYHtIfGywWtn9VvH9uT3YrJd7svwrbc9bHLAdDcrMQunHY8JO0AGzGWf8LEKK XIHgzYW3ZdVJUJQFbrDncDL/TbB8k+dd8mvpAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUsKKZNOD1ykxqNAUiZiKP75eQvSEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3NLS1pOT0QxeWt4cU5BVWla aUtQNzVlUXZTRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2 6agwDQYJKoZIhvcNAQELBQADggEBACeewyPJ8aVGZ1iBd1xjTp+b3a6dF0jLhy7k b3c+BS89Q+N69yEyl1rhu8d0O+z1y8kKpHEao6FN90C0LHZqB0FqQEJAOyPOECg+ fvMfCwz8DaaeMUBz254Ly+EhlPDg+DNXLekArpUBsSilPlWjX0oB4f1XL/XI0+zT q4NxFUmsditohDP/a/6Mxw6KfT5MI5QqifjwlEcxnxx6j/ZvMg6yRsZ4yBwJFz4M f1JPyEbpmEvZhyDGmD/x7dHa1zuqyd+3zF98Q2AdPZ7Oftk/PN5hg3Cbl6amt5Ji +mzDEcB7CHQeFsdsJgtfU1S2Q1lQQFqgOatwnmz+AKIXbDovbB4= -----END CERTIFICATE-----Generated at Sun Aug 24 07:25:23 2025 by rpki-client