$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vNuruVZf0cjuXVtCuOnvvSKRhdU.roa File: vNuruVZf0cjuXVtCuOnvvSKRhdU.roa (raw, json) Hash identifier: ihnkvXUMrLLWLY18/7hJkf4ULF6zTlCBclADOpq+yfo= Subject key identifier: BC:DB:AB:B9:56:5F:D1:C8:EE:5D:5B:42:B8:E9:EF:BD:22:91:85:D5 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 399D Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vNuruVZf0cjuXVtCuOnvvSKRhdU.roa Signing time: Fri 22 Aug 2025 08:46:28 +0000 ROA not before: Fri 22 Aug 2025 08:46:28 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.195.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14749 (0x399d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:28 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=BCDBABB9565FD1C8EE5D5B42B8E9EFBD229185D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:37:22:8e:03:72:ab:64:a4:d2:cd:c8:90:5d: 73:3a:ce:67:bd:b3:db:93:d6:31:25:42:ad:90:32: 34:df:0e:b1:1a:51:1d:c1:31:f7:5c:5e:1c:ca:24: a7:bb:64:80:b8:a2:fc:d9:61:f5:66:57:7f:9b:2d: 50:49:dd:52:c8:82:8a:f0:94:e2:8f:45:b1:d4:ab: 69:85:cc:56:60:40:1d:ba:64:e0:f5:6c:4a:1c:7e: 9d:d6:46:ed:96:20:c0:12:b3:6c:b0:ae:d0:63:11: 4f:ac:ab:5e:0a:18:82:82:c2:a9:47:b4:83:c7:a1: 93:8e:4b:95:b3:fe:7e:68:86:78:9f:d3:b8:a9:0f: 77:f6:29:42:8e:fd:44:9d:4a:2a:85:1f:04:14:5b: cc:e3:40:09:be:99:4a:11:66:d2:08:12:1e:10:a0: da:7f:73:c8:96:a4:fc:58:22:3a:77:e1:a0:2f:79: 2e:e7:ee:23:4b:6c:9f:ee:81:75:a8:bf:cd:b9:dc: b6:ca:ed:a2:de:36:35:73:a5:d5:71:53:54:86:1c: b6:5e:f2:56:5d:6a:f3:93:6c:d6:69:a7:b3:94:97: 45:0d:be:6c:8b:98:d9:63:55:15:99:14:80:f7:36: f8:c6:6b:0e:e2:78:b3:3d:0a:8a:87:ff:56:88:a3: f5:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:DB:AB:B9:56:5F:D1:C8:EE:5D:5B:42:B8:E9:EF:BD:22:91:85:D5 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vNuruVZf0cjuXVtCuOnvvSKRhdU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.4.0/22 Signature Algorithm: sha256WithRSAEncryption 8a:0a:a1:9f:06:82:c8:27:3c:10:42:a2:33:4d:b1:57:93:1d: bd:30:d1:f5:c1:e4:c3:2e:6c:b2:1d:30:e0:0a:0d:f2:06:93: 4b:21:85:af:74:9a:c3:61:54:67:39:56:f6:2e:f6:f9:8a:6e: 23:34:2c:a4:17:87:ad:8a:18:f0:3b:ae:4e:0d:2e:a9:97:3b: 3f:24:69:34:30:8a:6b:b7:a4:68:c4:95:8e:90:e1:48:89:7d: aa:aa:ea:4b:d6:98:79:42:81:06:aa:19:69:03:25:f4:fc:92: 13:8e:55:d0:7d:cd:40:c0:d2:91:e8:e2:69:6c:89:9a:08:a6: 55:1c:c8:06:7e:a3:66:75:77:90:a4:0f:94:fb:af:fa:3e:75: 9f:4a:28:11:60:64:be:01:4f:a6:2d:b9:80:a8:94:51:89:3d: 09:a4:3d:a5:81:66:12:af:83:6f:c0:6c:4d:69:b8:29:39:58: 0d:e9:27:17:5f:4b:ad:e7:e8:f6:db:a5:48:00:77:3b:c8:d1: 64:3f:18:32:28:95:2b:c5:48:62:0a:c1:44:b4:b0:93:ee:98: b7:ab:be:d0:a2:d1:4c:83:6f:1b:02:65:d4:53:54:9b:ac:c5: c7:a6:24:59:99:3b:e8:70:a6:ef:eb:7a:01:6f:c0:52:67:11: eb:ff:07:a0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOZ0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2MjhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEJDREJBQkI5NTY1RkQx QzhFRTVENUI0MkI4RTlFRkJEMjI5MTg1RDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCcNyKOA3KrZKTSzciQXXM6zme9s9uT1jElQq2QMjTfDrEaUR3B MfdcXhzKJKe7ZIC4ovzZYfVmV3+bLVBJ3VLIgorwlOKPRbHUq2mFzFZgQB26ZOD1 bEocfp3WRu2WIMASs2ywrtBjEU+sq14KGIKCwqlHtIPHoZOOS5Wz/n5ohnif07ip D3f2KUKO/USdSiqFHwQUW8zjQAm+mUoRZtIIEh4QoNp/c8iWpPxYIjp34aAveS7n 7iNLbJ/ugXWov8253LbK7aLeNjVzpdVxU1SGHLZe8lZdavOTbNZpp7OUl0UNvmyL mNljVRWZFID3NvjGaw7ieLM9CoqH/1aIo/WfAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUvNuruVZf0cjuXVtCuOnvvSKRhdUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3ZOdXJ1VlpmMGNqdVhWdEN1 T252dlNLUmhkVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wwQwDQYJKoZIhvcNAQELBQADggEBAIoKoZ8GgsgnPBBCojNNsVeTHb0w0fXB5MMu bLIdMOAKDfIGk0shha90msNhVGc5VvYu9vmKbiM0LKQXh62KGPA7rk4NLqmXOz8k aTQwimu3pGjElY6Q4UiJfaqq6kvWmHlCgQaqGWkDJfT8khOOVdB9zUDA0pHo4mls iZoIplUcyAZ+o2Z1d5CkD5T7r/o+dZ9KKBFgZL4BT6YtuYColFGJPQmkPaWBZhKv g2/AbE1puCk5WA3pJxdfS63n6PbbpUgAdzvI0WQ/GDIolSvFSGIKwUS0sJPumLer vtCi0UyDbxsCZdRTVJusxcemJFmZO+hwpu/regFvwFJnEev/B6A= -----END CERTIFICATE-----Generated at Sun Aug 24 07:28:23 2025 by rpki-client