$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w1RejteELrzYZQiHYiqotPuIBpw.roa File: w1RejteELrzYZQiHYiqotPuIBpw.roa (raw, json) Hash identifier: ob+v+m1Wo0CpgXLQG1UaBoy3z8PPW5l7fvEc9vc4dnI= Subject key identifier: C3:54:5E:8E:D7:84:2E:BC:D8:65:08:87:62:2A:A8:B4:FB:88:06:9C Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 37D6 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w1RejteELrzYZQiHYiqotPuIBpw.roa Signing time: Fri 22 Aug 2025 08:44:42 +0000 ROA not before: Fri 22 Aug 2025 08:44:42 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 118.233.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14294 (0x37d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:44:42 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=C3545E8ED7842EBCD8650887622AA8B4FB88069C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:de:42:86:70:3e:3b:1e:71:4e:7a:c0:00:e6: df:06:77:28:a6:4e:47:7b:f8:f7:d2:25:67:2c:f2: 09:56:ed:fe:01:f0:0d:69:b6:02:68:11:88:f9:e3: b5:e4:da:1a:f3:1d:7c:5c:f3:f9:58:81:a6:a8:e2: a6:08:6d:70:91:8c:69:a7:49:06:08:9f:4a:cf:4d: 5a:9e:0f:7a:48:e7:99:f1:9c:3f:60:65:05:00:50: 70:61:72:4a:37:4a:99:79:7e:fc:bd:b9:5c:04:ab: f7:71:cd:32:7f:eb:cb:e4:d4:9f:86:55:1d:79:59: 22:70:c9:49:da:38:90:fd:2a:fa:31:86:65:6f:94: 2f:74:e5:0e:96:24:78:f4:95:fe:95:6e:85:76:3f: 1e:24:d9:87:39:95:ad:97:7b:c2:43:1f:0e:53:23: a6:d0:05:54:dc:3a:c4:61:29:42:e2:e3:7c:28:78: d4:51:22:48:e2:f6:b6:10:03:61:41:f0:5a:73:61: 81:b1:33:b6:8e:ff:b4:a5:bb:32:a3:bf:10:d5:76: 78:7f:c1:ab:8b:36:0e:b0:c9:5a:71:d4:21:32:50: cf:f4:8e:81:e5:4a:eb:d4:bd:11:40:20:1d:fe:33: 1e:4a:39:84:e2:9f:8c:04:f5:e0:70:63:d0:87:9e: 69:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:54:5E:8E:D7:84:2E:BC:D8:65:08:87:62:2A:A8:B4:FB:88:06:9C X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w1RejteELrzYZQiHYiqotPuIBpw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.178.0/24 Signature Algorithm: sha256WithRSAEncryption 14:5f:04:93:93:66:da:53:3d:b5:f1:f2:17:37:19:09:5e:2d: be:08:f8:a2:14:4c:ef:68:d0:17:58:b8:9e:e2:22:4b:5a:a5: 64:06:1e:33:0a:38:66:3f:00:df:03:c2:33:89:42:47:7e:dd: 01:78:8c:37:05:6f:2e:2f:4b:ce:57:0b:66:57:4f:27:54:8d: 29:54:86:a4:a8:bd:78:9c:11:fb:80:ad:65:e7:21:3e:05:07: 5d:25:1e:16:e9:79:be:24:d4:a7:6e:66:8c:d8:e3:9b:55:e8: 94:a2:d9:8b:2a:54:50:13:07:94:4c:ac:33:5c:07:f6:7e:75: 16:38:a5:9b:26:f0:5e:62:55:dd:c2:61:4d:c6:18:d8:a4:9f: f9:ae:ec:f6:36:00:43:88:f7:00:52:00:24:1d:83:f0:ea:37: fb:5f:d8:f7:fa:55:34:aa:66:c0:b5:44:66:25:28:06:cf:dd: fe:49:56:ff:95:5a:eb:2f:0e:a3:93:7a:9c:b9:f3:f2:5d:2c: a5:98:77:19:f6:92:6d:ae:bd:54:4f:38:02:4f:91:b9:62:68: ae:af:e0:a5:98:bd:3c:7d:90:5e:61:21:5e:0c:dc:a7:f3:fa: e4:36:89:e4:6a:52:1c:80:8b:c9:7e:40:9a:b2:1c:20:a2:62: b6:e0:eb:9b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICN9YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ0NDJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEMzNTQ1RThFRDc4NDJF QkNEODY1MDg4NzYyMkFBOEI0RkI4ODA2OUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDI3kKGcD47HnFOesAA5t8GdyimTkd7+PfSJWcs8glW7f4B8A1p tgJoEYj547Xk2hrzHXxc8/lYgaao4qYIbXCRjGmnSQYIn0rPTVqeD3pI55nxnD9g ZQUAUHBhcko3Spl5fvy9uVwEq/dxzTJ/68vk1J+GVR15WSJwyUnaOJD9KvoxhmVv lC905Q6WJHj0lf6VboV2Px4k2Yc5la2Xe8JDHw5TI6bQBVTcOsRhKULi43woeNRR Ikji9rYQA2FB8FpzYYGxM7aO/7SluzKjvxDVdnh/wauLNg6wyVpx1CEyUM/0joHl SuvUvRFAIB3+Mx5KOYTin4wE9eBwY9CHnmm7AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUw1RejteELrzYZQiHYiqotPuIBpwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3cxUmVqdGVFTHJ6WVpRaUhZ aXFvdFB1SUJwdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB2 6bIwDQYJKoZIhvcNAQELBQADggEBABRfBJOTZtpTPbXx8hc3GQleLb4I+KIUTO9o 0BdYuJ7iIktapWQGHjMKOGY/AN8DwjOJQkd+3QF4jDcFby4vS85XC2ZXTydUjSlU hqSovXicEfuArWXnIT4FB10lHhbpeb4k1KduZozY45tV6JSi2YsqVFATB5RMrDNc B/Z+dRY4pZsm8F5iVd3CYU3GGNikn/mu7PY2AEOI9wBSACQdg/DqN/tf2Pf6VTSq ZsC1RGYlKAbP3f5JVv+VWusvDqOTepy58/JdLKWYdxn2km2uvVRPOAJPkbliaK6v 4KWYvTx9kF5hIV4M3Kfz+uQ2ieRqUhyAi8l+QJqyHCCiYrbg65s= -----END CERTIFICATE-----Generated at Sun Aug 24 07:25:25 2025 by rpki-client