$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tof5a2sqpf73aPf51WHyqtzDgwo.roa File: tof5a2sqpf73aPf51WHyqtzDgwo.roa (raw, json) Hash identifier: xCp2wfIpzjv89g3dRzd/OtR7NkIFQg5/Py/VKniCHXY= Subject key identifier: B6:87:F9:6B:6B:2A:A5:FE:F7:68:F7:F9:D5:61:F2:AA:DC:C3:83:0A Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 37DF Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tof5a2sqpf73aPf51WHyqtzDgwo.roa Signing time: Fri 22 Aug 2025 08:44:44 +0000 ROA not before: Fri 22 Aug 2025 08:44:44 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 106.1.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14303 (0x37df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:44:44 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=B687F96B6B2AA5FEF768F7F9D561F2AADCC3830A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:64:52:da:49:78:0c:82:cc:ea:7a:e6:2e:ef: 0b:71:6d:9c:16:28:c1:2c:1f:1d:0e:3f:b7:a0:05: c5:3b:55:d4:be:42:34:45:c2:2c:09:64:29:92:67: 6f:ef:1b:eb:c8:bb:d6:7c:95:90:ea:2d:b7:96:82: 7d:00:ff:7f:e3:6e:09:44:97:07:cc:2a:19:cf:5b: b4:af:21:04:d6:ac:f2:0f:15:a1:6d:c4:ef:c6:48: 74:34:2f:b1:a1:a8:05:76:68:b0:4f:9e:2c:c0:59: 41:f0:67:dc:82:44:5f:2f:8e:2a:37:ef:d5:6b:a7: 78:64:e9:11:c2:01:1d:00:a8:94:17:f4:bc:75:28: 85:02:d6:75:42:bc:c0:c3:d0:c9:25:74:cd:6d:2e: c6:c4:99:95:a6:e8:72:4e:6b:cc:49:bb:6d:79:ee: e1:36:65:7c:d2:14:82:d0:c1:4b:7f:56:44:c5:a0: 0a:4e:b3:7a:66:ad:62:d9:4c:9d:7a:38:fd:7c:e7: 4b:b5:df:b3:45:c8:57:0e:a3:bb:d3:f7:f5:9b:65: 49:ed:1e:fa:f8:6f:28:88:31:d6:1f:00:5b:3d:36: 5a:a7:77:bd:26:95:b3:cf:89:9c:5a:76:e1:17:81: f0:d0:18:99:05:6b:e8:91:0d:3f:a7:7c:88:92:e0: 78:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:87:F9:6B:6B:2A:A5:FE:F7:68:F7:F9:D5:61:F2:AA:DC:C3:83:0A X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tof5a2sqpf73aPf51WHyqtzDgwo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.167.0/24 Signature Algorithm: sha256WithRSAEncryption 19:0d:45:c0:0d:b7:1d:c1:d4:d6:22:85:40:6b:ab:b2:83:30: 30:8c:0c:82:55:43:0b:d3:67:21:08:14:a7:97:82:bd:5b:68: d4:28:c0:ec:08:f0:50:d5:68:1f:8f:ac:76:51:92:f4:77:48: 65:7a:d7:f8:b3:97:53:28:a9:6e:b3:68:ea:cd:bc:40:b9:a8: cd:dc:4d:f4:b7:47:c3:38:6a:a1:8f:63:06:dd:b7:50:52:bb: 36:76:ec:74:73:27:40:17:cf:0c:cb:57:ad:ce:e0:31:d5:22: 14:03:44:34:94:2f:ad:39:96:d6:b9:79:8f:04:d4:2a:b3:57: 3d:94:a0:d7:a0:85:bb:0a:11:92:25:04:58:45:43:42:5e:67: 10:22:5f:9f:a1:e7:5b:f5:1d:1f:a6:20:bf:93:f2:c6:37:31: 53:ec:b3:dd:f8:f8:ce:e3:99:1c:d4:8e:88:35:47:41:6d:82: bf:ae:90:66:6a:64:38:14:f3:ea:3c:87:b8:8d:8b:7f:0a:92: 8d:aa:fe:11:aa:1c:7b:f4:ac:72:e6:c6:d4:13:50:8b:c2:a8: de:1f:04:5d:c3:17:06:33:04:43:50:cc:27:9c:fb:84:64:b7: d8:2d:0e:d3:33:44:00:50:6f:4a:05:77:36:6f:c7:ed:ad:30: 90:3d:9c:10 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICN98wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ0NDRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEI2ODdGOTZCNkIyQUE1 RkVGNzY4RjdGOUQ1NjFGMkFBRENDMzgzMEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDeZFLaSXgMgszqeuYu7wtxbZwWKMEsHx0OP7egBcU7VdS+QjRF wiwJZCmSZ2/vG+vIu9Z8lZDqLbeWgn0A/3/jbglElwfMKhnPW7SvIQTWrPIPFaFt xO/GSHQ0L7GhqAV2aLBPnizAWUHwZ9yCRF8vjio379Vrp3hk6RHCAR0AqJQX9Lx1 KIUC1nVCvMDD0MkldM1tLsbEmZWm6HJOa8xJu2157uE2ZXzSFILQwUt/VkTFoApO s3pmrWLZTJ16OP1850u137NFyFcOo7vT9/WbZUntHvr4byiIMdYfAFs9Nlqnd70m lbPPiZxaduEXgfDQGJkFa+iRDT+nfIiS4HjPAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUtof5a2sqpf73aPf51WHyqtzDgwowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3RvZjVhMnNxcGY3M2FQZjUx V0h5cXR6RGd3by5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq AacwDQYJKoZIhvcNAQELBQADggEBABkNRcANtx3B1NYihUBrq7KDMDCMDIJVQwvT ZyEIFKeXgr1baNQowOwI8FDVaB+PrHZRkvR3SGV61/izl1MoqW6zaOrNvEC5qM3c TfS3R8M4aqGPYwbdt1BSuzZ27HRzJ0AXzwzLV63O4DHVIhQDRDSUL605lta5eY8E 1CqzVz2UoNeghbsKEZIlBFhFQ0JeZxAiX5+h51v1HR+mIL+T8sY3MVPss934+M7j mRzUjog1R0Ftgr+ukGZqZDgU8+o8h7iNi38Kko2q/hGqHHv0rHLmxtQTUIvCqN4f BF3DFwYzBENQzCec+4Rkt9gtDtMzRABQb0oFdzZvx+2tMJA9nBA= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:20 2025 by rpki-client