$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/taPRY2rI3RuHRJtV8mS9XdE-kkk.roa File: taPRY2rI3RuHRJtV8mS9XdE-kkk.roa (raw, json) Hash identifier: QhDFxSZX8qgIVDHUNvbmPOLkUGE1/nocLij+d1nYZO8= Subject key identifier: B5:A3:D1:63:6A:C8:DD:1B:87:44:9B:55:F2:64:BD:5D:D1:3E:92:49 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 37F3 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/taPRY2rI3RuHRJtV8mS9XdE-kkk.roa Signing time: Fri 22 Aug 2025 08:44:49 +0000 ROA not before: Fri 22 Aug 2025 08:44:49 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.194.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14323 (0x37f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:44:49 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=B5A3D1636AC8DD1B87449B55F264BD5DD13E9249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:3d:2e:a3:c7:38:ca:f3:77:44:d4:25:84:0e: 6d:4c:95:3b:9f:c2:10:0a:af:49:47:05:28:cf:0e: 40:a3:3a:58:6e:d6:ca:9e:52:0d:5c:b1:7e:84:a3: 0f:db:7e:89:6b:7b:cb:c7:6e:7c:6c:77:85:c6:51: 82:8e:08:d6:1c:50:e8:4e:e8:1f:aa:c7:c5:a0:d0: 7f:8f:1d:62:47:20:1f:b9:d4:e9:0e:12:cb:b6:ca: 56:88:0b:3b:10:bd:4c:c6:3a:3f:63:8c:02:14:c4: 98:de:f4:01:cd:f8:10:4f:17:0c:cf:e1:c9:97:f6: 52:56:6e:bc:c9:b2:a4:60:d1:a6:e1:e0:29:d6:50: 28:1b:1a:d6:06:de:ba:0e:35:0e:6c:82:82:6a:ee: 47:bd:8d:60:88:8f:12:0c:02:14:ba:9b:ce:cc:33: bb:86:a2:9b:a7:3b:41:95:a2:df:79:78:13:86:45: 0f:87:f8:f0:7b:64:d3:98:c4:5a:e3:f4:a4:2e:c5: 36:5b:c9:b6:33:c2:f9:0a:bc:58:57:93:48:1f:c5: 72:da:80:a2:b4:8e:e5:a9:7e:fc:93:e5:ae:6c:3e: e3:51:6b:cf:c7:bb:78:ec:b7:97:e7:90:b6:4a:62: 8b:79:2e:b8:41:29:62:df:14:a9:7f:42:8b:40:2b: 93:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:A3:D1:63:6A:C8:DD:1B:87:44:9B:55:F2:64:BD:5D:D1:3E:92:49 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/taPRY2rI3RuHRJtV8mS9XdE-kkk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.224.0/22 Signature Algorithm: sha256WithRSAEncryption 13:a9:85:c7:21:6c:64:90:ff:7a:77:07:44:ca:70:0a:8d:f0: 7f:e3:61:a0:15:2f:73:da:0e:77:e6:72:5b:cb:2a:fb:bd:4c: 9e:00:96:79:95:6f:30:4a:9d:20:fa:05:be:e8:5d:8c:c1:f6: 95:57:4e:01:e5:5a:5c:3c:6c:22:f1:4c:ed:a5:b1:e8:42:20: f5:b5:f5:7e:b7:65:cf:6f:49:3a:06:8b:9e:21:ce:d6:81:40: 11:ca:38:c7:d4:0a:82:5e:c3:ec:ec:dc:d7:65:32:39:4c:e3: 47:66:2e:70:76:af:46:fe:2d:fa:d9:5f:e5:24:b6:9e:03:74: 98:fd:e1:39:49:87:56:7f:a6:8a:58:a9:05:46:0f:ae:96:cf: 5b:e9:83:1d:c0:80:4b:3e:f6:93:59:e0:87:58:15:57:f3:24: a8:30:ae:a5:9c:01:f9:e4:f2:c9:0f:b3:5d:70:c3:15:1a:7c: 26:34:b4:eb:6d:38:0a:0a:96:d4:c6:dc:cb:80:ea:be:e6:00: 84:29:6a:34:65:d6:9a:c3:be:61:37:16:09:c4:9c:59:e7:0c: 55:9b:3c:a4:ae:fe:c0:84:5d:2a:48:93:0e:5b:c9:55:ad:5e: c9:4d:d5:5c:04:17:6e:15:36:6c:db:85:2f:ab:86:6b:e4:a7: 23:e5:e6:60 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICN/MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ0NDlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEI1QTNEMTYzNkFDOERE MUI4NzQ0OUI1NUYyNjRCRDVERDEzRTkyNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDgPS6jxzjK83dE1CWEDm1MlTufwhAKr0lHBSjPDkCjOlhu1sqe Ug1csX6Eow/bfolre8vHbnxsd4XGUYKOCNYcUOhO6B+qx8Wg0H+PHWJHIB+51OkO Esu2ylaICzsQvUzGOj9jjAIUxJje9AHN+BBPFwzP4cmX9lJWbrzJsqRg0abh4CnW UCgbGtYG3roONQ5sgoJq7ke9jWCIjxIMAhS6m87MM7uGopunO0GVot95eBOGRQ+H +PB7ZNOYxFrj9KQuxTZbybYzwvkKvFhXk0gfxXLagKK0juWpfvyT5a5sPuNRa8/H u3jst5fnkLZKYot5LrhBKWLfFKl/QotAK5MXAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUtaPRY2rI3RuHRJtV8mS9XdE+kkkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3RhUFJZMnJJM1J1SFJKdFY4 bVM5WGRFLWtray5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wuAwDQYJKoZIhvcNAQELBQADggEBABOphcchbGSQ/3p3B0TKcAqN8H/jYaAVL3Pa DnfmclvLKvu9TJ4AlnmVbzBKnSD6Bb7oXYzB9pVXTgHlWlw8bCLxTO2lsehCIPW1 9X63Zc9vSToGi54hztaBQBHKOMfUCoJew+zs3NdlMjlM40dmLnB2r0b+LfrZX+Uk tp4DdJj94TlJh1Z/popYqQVGD66Wz1vpgx3AgEs+9pNZ4IdYFVfzJKgwrqWcAfnk 8skPs11wwxUafCY0tOttOAoKltTG3MuA6r7mAIQpajRl1prDvmE3FgnEnFnnDFWb PKSu/sCEXSpIkw5byVWtXslN1VwEF24VNmzbhS+rhmvkpyPl5mA= -----END CERTIFICATE-----Generated at Sun Aug 24 07:28:20 2025 by rpki-client