$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uh8uZPWGBtzV6vgrzuCNlwOKCMg.roa File: uh8uZPWGBtzV6vgrzuCNlwOKCMg.roa (raw, json) Hash identifier: 8ThL1V8q+FoURtR/hlBWy5LrB+q32Nc14SkBbiR1qhs= Subject key identifier: BA:1F:2E:64:F5:86:06:DC:D5:EA:F8:2B:CE:E0:8D:97:03:8A:08:C8 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 385E Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uh8uZPWGBtzV6vgrzuCNlwOKCMg.roa Signing time: Fri 22 Aug 2025 08:45:13 +0000 ROA not before: Fri 22 Aug 2025 08:45:13 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 45.64.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14430 (0x385e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:13 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=BA1F2E64F58606DCD5EAF82BCEE08D97038A08C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ed:f3:5b:c7:04:fe:98:00:95:53:47:72:50: 5d:0d:49:d7:60:13:56:d0:1a:f3:2e:97:8e:1a:60: e1:5a:3a:fe:68:f1:e1:23:67:23:d2:85:ba:5e:18: 7b:e7:cb:76:b6:f8:13:07:9e:15:61:8c:f1:b7:95: 22:ed:78:8d:21:b3:ce:8d:86:07:5b:ad:39:88:28: a4:01:d8:a5:ab:f5:ad:c6:03:8c:e9:7e:16:9a:2a: dc:c0:b1:f4:c3:4c:64:06:18:df:fa:7f:33:3f:5a: aa:63:32:1b:32:85:1d:c4:37:c6:76:f5:c4:0e:a4: 4d:13:73:e5:3f:b0:31:a9:84:1b:b6:22:64:3f:3e: f2:04:86:2a:c4:d6:bb:f6:a5:6e:48:5b:74:cc:8d: e0:d8:e6:10:26:12:73:01:51:b9:45:f4:b5:05:d7: f0:2d:52:6a:ba:21:d8:2e:19:9e:7e:76:15:4d:76: bd:08:55:25:a8:d8:1f:57:f6:fe:4e:67:7e:d9:be: 72:50:cb:bb:78:08:64:c6:53:44:d6:0c:bc:c7:77: d1:fa:4a:72:b9:b1:a2:1f:c6:47:a9:0a:5f:86:ec: 26:81:c2:70:b6:17:03:ce:a6:dd:6b:95:9d:c5:5c: 86:e2:4f:90:ca:4a:fc:e2:f4:97:89:d8:32:d9:74: 38:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:1F:2E:64:F5:86:06:DC:D5:EA:F8:2B:CE:E0:8D:97:03:8A:08:C8 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uh8uZPWGBtzV6vgrzuCNlwOKCMg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.64.28.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:6b:6e:56:32:fe:1f:9e:57:a2:15:93:c8:54:ce:50:ea:23: 7b:19:f9:9c:6c:80:69:48:80:08:53:3f:8a:be:00:52:8c:84: ae:be:55:7f:5f:cd:7a:92:32:a3:c0:11:1d:a4:72:a5:f2:fd: 5a:06:9c:2c:26:2d:54:d2:6e:67:b4:b6:2c:19:c9:0e:8a:9d: 08:ae:5b:f4:8c:f5:31:23:1e:da:5d:a9:02:63:b7:61:03:c3: cc:a6:f7:7f:a9:4e:37:98:58:10:0a:c6:c3:14:cf:0c:58:74: 3f:80:67:4c:f1:60:2e:b0:ef:28:eb:74:e1:59:c5:33:ce:4c: 53:6e:f5:7b:62:90:a8:ed:6b:9c:6d:4f:0c:06:4d:3f:be:9f: 6d:5c:53:e8:bf:6c:bf:b0:95:40:f2:71:53:20:47:f4:2c:b9: db:48:0e:2b:ba:3f:0b:b3:69:96:03:f4:3f:91:34:5f:f8:72: 91:67:88:56:cd:8b:0a:ab:64:44:8c:24:43:8c:4e:61:88:ee: a2:96:dc:ef:a9:58:8f:27:cc:fc:52:12:8d:e9:10:00:ee:04: 0e:b6:94:f1:ea:78:22:02:10:71:59:e5:38:b7:2e:2f:ea:e9: a3:8c:60:4e:57:e3:3a:ae:c1:3e:fb:fd:ad:75:4b:41:ed:03: a9:49:29:a3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOF4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1MTNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEJBMUYyRTY0RjU4NjA2 RENENUVBRjgyQkNFRTA4RDk3MDM4QTA4QzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDH7fNbxwT+mACVU0dyUF0NSddgE1bQGvMul44aYOFaOv5o8eEj ZyPShbpeGHvny3a2+BMHnhVhjPG3lSLteI0hs86NhgdbrTmIKKQB2KWr9a3GA4zp fhaaKtzAsfTDTGQGGN/6fzM/WqpjMhsyhR3EN8Z29cQOpE0Tc+U/sDGphBu2ImQ/ PvIEhirE1rv2pW5IW3TMjeDY5hAmEnMBUblF9LUF1/AtUmq6IdguGZ5+dhVNdr0I VSWo2B9X9v5OZ37ZvnJQy7t4CGTGU0TWDLzHd9H6SnK5saIfxkepCl+G7CaBwnC2 FwPOpt1rlZ3FXIbiT5DKSvzi9JeJ2DLZdDifAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUuh8uZPWGBtzV6vgrzuCNlwOKCMgwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3VoOHVaUFdHQnR6VjZ2Z3J6 dUNObHdPS0NNZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAt QBwwDQYJKoZIhvcNAQELBQADggEBAHprblYy/h+eV6IVk8hUzlDqI3sZ+ZxsgGlI gAhTP4q+AFKMhK6+VX9fzXqSMqPAER2kcqXy/VoGnCwmLVTSbme0tiwZyQ6KnQiu W/SM9TEjHtpdqQJjt2EDw8ym93+pTjeYWBAKxsMUzwxYdD+AZ0zxYC6w7yjrdOFZ xTPOTFNu9XtikKjta5xtTwwGTT++n21cU+i/bL+wlUDycVMgR/QsudtIDiu6Pwuz aZYD9D+RNF/4cpFniFbNiwqrZESMJEOMTmGI7qKW3O+pWI8nzPxSEo3pEADuBA62 lPHqeCICEHFZ5Ti3Li/q6aOMYE5X4zquwT77/a11S0HtA6lJKaM= -----END CERTIFICATE-----Generated at Sun Aug 24 07:33:19 2025 by rpki-client