$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wIgv_YioCo-RetCtwN_xKN-lJuo.roa File: wIgv_YioCo-RetCtwN_xKN-lJuo.roa (raw, json) Hash identifier: 5Yshk9q5E8elqPEolXNg67LqIESYG2SwUFxijb9ffbs= Subject key identifier: C0:88:2F:FD:88:A8:0A:8F:91:7A:D0:AD:C0:DF:F1:28:DF:A5:26:EA Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3828 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wIgv_YioCo-RetCtwN_xKN-lJuo.roa Signing time: Fri 22 Aug 2025 08:45:00 +0000 ROA not before: Fri 22 Aug 2025 08:45:00 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.192.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14376 (0x3828) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:00 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=C0882FFD88A80A8F917AD0ADC0DFF128DFA526EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:6d:f3:d8:c5:ca:ed:af:96:72:0f:d8:b6:f6: be:28:b0:45:a0:87:14:eb:d1:5c:85:f8:06:79:92: cf:05:5b:b6:56:50:57:7a:64:08:01:fd:44:df:ca: ab:31:a1:db:1b:b6:05:fd:8c:4e:71:c3:d3:d9:5b: 63:07:f7:58:68:b9:fb:ca:ae:f7:ca:19:88:f9:bf: 7a:df:07:67:c9:8c:b0:19:cd:37:d1:b8:5e:4d:2d: ec:34:5d:6f:2e:3e:a3:ee:43:f1:93:e0:08:40:42: 7d:87:1f:88:32:1b:09:ab:25:e2:0b:04:7c:eb:8e: a4:37:e4:6e:9c:fd:2f:ea:b4:86:e8:35:33:8a:a1: d5:ed:9f:a4:0c:bd:1d:63:93:ac:a6:84:9b:ae:10: 0d:ba:d3:c6:4d:f1:a8:e7:38:33:7d:0b:8f:a2:76: 3f:40:c2:61:75:4e:a0:20:55:cd:29:2e:6d:40:10: 2b:05:84:86:27:ed:61:2d:ee:23:00:32:20:67:dd: e8:2a:a5:94:fb:02:29:c6:53:7b:b0:51:b1:9b:5c: 1f:8c:9e:b0:15:eb:fd:71:3f:3c:55:9e:48:46:61: ea:7a:e1:9c:3e:12:cb:93:4e:9d:66:81:97:91:6b: 8c:58:54:9f:6b:d9:d9:97:63:c1:4e:c7:73:ef:45: 07:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:88:2F:FD:88:A8:0A:8F:91:7A:D0:AD:C0:DF:F1:28:DF:A5:26:EA X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wIgv_YioCo-RetCtwN_xKN-lJuo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.64.0/20 Signature Algorithm: sha256WithRSAEncryption 38:63:b9:12:8b:8e:51:c5:24:30:f2:97:c3:20:57:91:0e:55: 5c:58:43:a0:ab:13:44:54:1a:06:b0:57:e0:0b:8d:d9:3b:63: 71:d2:70:c6:ed:3b:b9:a8:d0:6a:ff:a6:56:e9:3e:b7:98:c8: 2b:f3:af:17:53:53:f3:8e:0a:61:79:6b:27:53:82:43:67:74: b7:10:ea:7f:91:18:b5:51:5b:61:d0:9f:24:bd:11:5e:bf:e4: b8:40:c9:95:bd:e5:af:c1:ff:02:04:da:7d:6d:39:6a:f5:a8: 15:b8:07:54:30:44:8b:d9:3a:c0:b6:09:e3:78:8a:94:9f:79: a1:e7:68:83:93:b0:b5:2f:3e:eb:55:f6:8d:2e:bd:09:81:6c: b2:96:80:cd:5d:9f:a6:c3:92:ba:13:95:e6:bc:93:1f:eb:96: 48:98:9e:4a:99:50:ce:f2:22:be:9c:ce:e4:a3:89:81:4d:53: 75:79:c5:5f:a9:c6:0d:33:95:5f:5f:c1:c3:39:6b:66:0c:c5: 36:82:43:02:3b:51:70:b6:5d:2d:ef:cf:ee:3b:92:7f:60:93: 26:fe:a5:0e:3f:24:26:4b:54:8e:0a:3c:56:c1:fc:be:8d:39: bf:66:1a:3e:74:ed:3a:e0:a1:28:fc:ef:b9:bb:d4:38:4f:67: eb:78:6e:04 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOCgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1MDBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEMwODgyRkZEODhBODBB OEY5MTdBRDBBREMwREZGMTI4REZBNTI2RUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDsbfPYxcrtr5ZyD9i29r4osEWghxTr0VyF+AZ5ks8FW7ZWUFd6 ZAgB/UTfyqsxodsbtgX9jE5xw9PZW2MH91houfvKrvfKGYj5v3rfB2fJjLAZzTfR uF5NLew0XW8uPqPuQ/GT4AhAQn2HH4gyGwmrJeILBHzrjqQ35G6c/S/qtIboNTOK odXtn6QMvR1jk6ymhJuuEA2608ZN8ajnODN9C4+idj9AwmF1TqAgVc0pLm1AECsF hIYn7WEt7iMAMiBn3egqpZT7AinGU3uwUbGbXB+MnrAV6/1xPzxVnkhGYep64Zw+ EsuTTp1mgZeRa4xYVJ9r2dmXY8FOx3PvRQetAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUwIgv/YioCo+RetCtwN/xKN+lJuowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3dJZ3ZfWWlvQ28tUmV0Q3R3 Tl94S04tbEp1by5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR7 wEAwDQYJKoZIhvcNAQELBQADggEBADhjuRKLjlHFJDDyl8MgV5EOVVxYQ6CrE0RU GgawV+ALjdk7Y3HScMbtO7mo0Gr/plbpPreYyCvzrxdTU/OOCmF5aydTgkNndLcQ 6n+RGLVRW2HQnyS9EV6/5LhAyZW95a/B/wIE2n1tOWr1qBW4B1QwRIvZOsC2CeN4 ipSfeaHnaIOTsLUvPutV9o0uvQmBbLKWgM1dn6bDkroTlea8kx/rlkiYnkqZUM7y Ir6czuSjiYFNU3V5xV+pxg0zlV9fwcM5a2YMxTaCQwI7UXC2XS3vz+47kn9gkyb+ pQ4/JCZLVI4KPFbB/L6NOb9mGj507TrgoSj877m71DhPZ+t4bgQ= -----END CERTIFICATE-----Generated at Sun Aug 24 07:25:25 2025 by rpki-client