$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vMNkbVKnzz8Q070Ulol0xmDJv2s.roa File: vMNkbVKnzz8Q070Ulol0xmDJv2s.roa (raw, json) Hash identifier: s0Ax/AHyLZzZO2nosSh5rVhYeRiav8GkTpZlDff1Vhs= Subject key identifier: BC:C3:64:6D:52:A7:CF:3F:10:D3:BD:14:96:89:74:C6:60:C9:BF:6B Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3A03 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vMNkbVKnzz8Q070Ulol0xmDJv2s.roa Signing time: Fri 22 Aug 2025 08:46:55 +0000 ROA not before: Fri 22 Aug 2025 08:46:55 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9924 IP address blocks: 123.195.24.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14851 (0x3a03) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:55 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=BCC3646D52A7CF3F10D3BD14968974C660C9BF6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e7:bf:36:e7:29:e3:eb:24:c8:4e:f4:f9:64: d7:f5:a9:a9:bf:0e:8c:58:4a:83:59:73:64:48:78: 9b:c2:65:3a:09:72:5d:d3:d8:44:38:60:fb:bc:e9: 6c:56:79:ee:d2:75:4e:1e:fe:5c:5a:1d:25:ef:c3: 86:58:f3:6e:29:64:2c:03:da:a2:8e:40:3c:96:5b: 42:e0:ab:c3:9a:2b:76:09:21:72:e5:24:41:e7:62: 9a:4e:cf:3f:ec:b0:a6:78:69:9d:31:b7:ad:3c:de: c6:84:32:3a:e7:73:0e:bf:ee:93:9d:bb:0a:6b:ba: 7e:57:54:ec:a4:07:53:65:65:ba:66:7c:9d:0f:89: 04:60:32:79:dd:30:fc:66:b0:bb:a0:16:7a:0a:b8: 73:9a:64:80:9d:af:75:41:87:17:7c:0f:dd:00:a7: f2:94:48:34:c6:a7:12:0a:87:fd:de:f2:2d:e0:c9: 4d:50:ea:9f:ec:ad:39:72:5f:d6:f2:00:30:7b:99: a8:41:00:0a:b2:35:db:aa:9b:cd:0a:ee:c0:ab:cc: c4:8e:88:96:9b:19:fa:10:10:32:01:9a:fd:98:6d: 1e:b8:bb:43:e0:48:36:2e:30:d9:92:e8:66:f2:30: 83:e8:18:39:e7:07:4e:35:24:89:23:2c:9b:3f:89: 82:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:C3:64:6D:52:A7:CF:3F:10:D3:BD:14:96:89:74:C6:60:C9:BF:6B X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vMNkbVKnzz8Q070Ulol0xmDJv2s.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.24.0/21 Signature Algorithm: sha256WithRSAEncryption 1d:34:fc:9d:89:12:83:6a:45:e6:9c:3a:a3:c3:0e:ad:9d:e4: c5:2d:6f:c0:21:65:ca:c7:88:79:75:b0:04:ab:c1:93:00:77: 40:59:58:52:12:b2:df:6f:7b:4c:f4:b7:f5:ff:36:58:26:63: 56:62:6a:f2:df:d0:ef:8f:2d:67:30:5a:2c:56:a1:d6:91:92: 43:7e:64:0c:11:24:67:a0:17:49:df:83:b4:d5:06:cc:7d:61: 92:f6:31:9a:9b:b9:ff:e3:57:ec:fa:62:27:1d:22:35:d1:f1: 1d:a2:a5:4c:51:cf:fc:11:74:a8:f8:e6:32:c8:cc:9e:b8:e1: d2:ee:79:11:1d:16:73:ba:db:d1:ce:34:33:1d:1f:9f:eb:de: 58:97:72:b9:de:60:e9:c5:35:a0:e4:ef:27:25:95:a4:80:e5: 0c:dc:50:7c:d4:8b:c8:e7:e8:d4:58:b3:bb:31:05:2e:85:0e: 1d:a1:e8:90:5d:7e:74:7f:b3:a5:b7:9b:4d:ea:80:c0:56:80: 46:10:85:a1:59:f9:e5:2a:52:e4:a2:4d:da:7e:e7:81:78:b7: 3e:94:d1:86:88:d1:10:75:d0:97:8d:a2:50:59:89:7d:2e:71: ac:ff:07:c3:61:b7:17:bd:74:b6:f8:15:98:0f:47:0b:4c:62: a8:d4:c5:67 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOgMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2NTVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEJDQzM2NDZENTJBN0NG M0YxMEQzQkQxNDk2ODk3NEM2NjBDOUJGNkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDd57825ynj6yTITvT5ZNf1qam/DoxYSoNZc2RIeJvCZToJcl3T 2EQ4YPu86WxWee7SdU4e/lxaHSXvw4ZY824pZCwD2qKOQDyWW0Lgq8OaK3YJIXLl JEHnYppOzz/ssKZ4aZ0xt6083saEMjrncw6/7pOduwprun5XVOykB1NlZbpmfJ0P iQRgMnndMPxmsLugFnoKuHOaZICdr3VBhxd8D90Ap/KUSDTGpxIKh/3e8i3gyU1Q 6p/srTlyX9byADB7mahBAAqyNduqm80K7sCrzMSOiJabGfoQEDIBmv2YbR64u0Pg SDYuMNmS6GbyMIPoGDnnB041JIkjLJs/iYKTAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUvMNkbVKnzz8Q070Ulol0xmDJv2swHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3ZNTmtiVktueno4UTA3MFVs b2wweG1ESnYycy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wxgwDQYJKoZIhvcNAQELBQADggEBAB00/J2JEoNqReacOqPDDq2d5MUtb8AhZcrH iHl1sASrwZMAd0BZWFISst9ve0z0t/X/NlgmY1ZiavLf0O+PLWcwWixWodaRkkN+ ZAwRJGegF0nfg7TVBsx9YZL2MZqbuf/jV+z6YicdIjXR8R2ipUxRz/wRdKj45jLI zJ644dLueREdFnO629HONDMdH5/r3liXcrneYOnFNaDk7ycllaSA5QzcUHzUi8jn 6NRYs7sxBS6FDh2h6JBdfnR/s6W3m03qgMBWgEYQhaFZ+eUqUuSiTdp+54F4tz6U 0YaI0RB10JeNolBZiX0ucaz/B8Nhtxe9dLb4FZgPRwtMYqjUxWc= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:26 2025 by rpki-client