$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wizdFq5w5dAYCPxChRzdS5ejYJE.roa File: wizdFq5w5dAYCPxChRzdS5ejYJE.roa (raw, json) Hash identifier: ze5sc0zFInMe2w2mIoHIAVVxRv95JCI063Y9bjG6XVo= Subject key identifier: C2:2C:DD:16:AE:70:E5:D0:18:08:FC:42:85:1C:DD:4B:97:A3:60:91 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3A81 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wizdFq5w5dAYCPxChRzdS5ejYJE.roa Signing time: Fri 22 Aug 2025 08:47:26 +0000 ROA not before: Fri 22 Aug 2025 08:47:26 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 118.233.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14977 (0x3a81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:26 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=C22CDD16AE70E5D01808FC42851CDD4B97A36091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:be:82:6b:5d:34:dc:8c:3c:27:a0:b7:b3:f9: 4a:3e:ea:52:3b:cb:fa:68:e4:d9:f7:72:23:ce:b8: d8:ce:fe:c2:dc:54:c5:fb:7a:a0:98:86:ea:e7:1f: 59:02:14:fb:90:88:4a:69:cd:13:b8:d8:bd:89:b4: 87:73:80:e3:ce:ac:2e:4a:e0:f6:1c:97:79:43:aa: 3b:5b:f2:5b:2d:27:95:10:82:60:2d:52:a2:73:28: ca:5e:8e:61:ea:15:3f:30:d5:75:80:b9:a1:bc:12: 1d:17:c5:21:21:8d:3d:2b:19:44:f8:00:7f:06:ea: b3:4c:cc:c4:6f:8c:2c:6a:dc:04:0a:57:b8:0d:2e: 19:20:63:fa:a7:b2:91:ac:64:cb:29:1b:a9:d7:40: 8a:29:d1:eb:8c:99:3d:f1:03:60:60:db:10:d3:3d: 89:aa:46:4d:68:6b:62:cf:4a:44:f0:c5:b5:5a:4e: c9:40:e9:8c:1e:e6:4b:25:c7:26:f1:c8:bd:dc:67: 8f:67:2b:1c:39:bc:38:5c:d3:20:40:bc:2d:53:89: 38:4b:ca:d5:18:dc:45:08:51:6f:b7:6d:3e:19:76: 86:2a:28:c9:a4:06:48:1f:25:63:cc:32:0e:ee:53: 63:d5:46:d2:63:ab:a7:64:88:ce:29:a4:59:e8:a4: 53:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:2C:DD:16:AE:70:E5:D0:18:08:FC:42:85:1C:DD:4B:97:A3:60:91 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wizdFq5w5dAYCPxChRzdS5ejYJE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.60.0/22 Signature Algorithm: sha256WithRSAEncryption a8:88:21:e9:ec:e8:4a:30:9f:c3:a2:12:2f:1b:9d:44:73:85: 41:4a:68:2a:22:3a:bc:61:c0:11:dc:95:06:71:9f:dc:10:3b: 53:71:5f:93:01:fd:62:a5:76:c4:e5:32:ea:dd:c2:6c:8d:95: 76:f8:cc:f1:ae:53:ad:db:b7:fa:e7:e0:b6:29:54:2d:96:72: 3e:d8:a8:99:b6:48:75:b3:2e:b2:75:9b:de:1c:49:2b:85:86: 18:38:40:93:04:d7:9a:35:ec:9b:d8:44:53:08:f7:99:da:f5: 1a:65:f1:84:da:74:8a:6d:26:97:2c:18:7a:71:67:8c:3d:38: e0:00:03:8f:15:ec:aa:03:2a:20:ec:2d:14:f9:b9:cf:c2:11: 3d:98:37:53:f8:90:ae:ec:3c:b0:5c:6b:fb:96:11:67:66:04: b1:fb:0d:8e:59:88:43:53:47:b0:f9:ae:54:52:21:1a:b6:d1: 8b:36:4b:38:ca:c7:f0:4f:ca:34:77:7b:19:97:90:e9:bc:37: 16:96:7f:b5:f9:71:23:56:1f:d5:0b:27:ff:83:ef:67:d9:db: 80:b5:ef:93:d0:1e:e6:81:3c:d8:e6:2d:21:8c:20:dc:f2:4a: 2c:af:46:32:8f:bb:ab:e5:7b:1d:57:98:03:3e:17:17:8d:bc: b3:f3:4c:1b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOoEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3MjZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEMyMkNERDE2QUU3MEU1 RDAxODA4RkM0Mjg1MUNERDRCOTdBMzYwOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFvoJrXTTcjDwnoLez+Uo+6lI7y/po5Nn3ciPOuNjO/sLcVMX7 eqCYhurnH1kCFPuQiEppzRO42L2JtIdzgOPOrC5K4PYcl3lDqjtb8lstJ5UQgmAt UqJzKMpejmHqFT8w1XWAuaG8Eh0XxSEhjT0rGUT4AH8G6rNMzMRvjCxq3AQKV7gN LhkgY/qnspGsZMspG6nXQIop0euMmT3xA2Bg2xDTPYmqRk1oa2LPSkTwxbVaTslA 6Ywe5kslxybxyL3cZ49nKxw5vDhc0yBAvC1TiThLytUY3EUIUW+3bT4ZdoYqKMmk BkgfJWPMMg7uU2PVRtJjq6dkiM4ppFnopFO7AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUwizdFq5w5dAYCPxChRzdS5ejYJEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3dpemRGcTV3NWRBWUNQeENo UnpkUzVlallKRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6TwwDQYJKoZIhvcNAQELBQADggEBAKiIIens6Eown8OiEi8bnURzhUFKaCoiOrxh wBHclQZxn9wQO1NxX5MB/WKldsTlMurdwmyNlXb4zPGuU63bt/rn4LYpVC2Wcj7Y qJm2SHWzLrJ1m94cSSuFhhg4QJME15o17JvYRFMI95na9Rpl8YTadIptJpcsGHpx Z4w9OOAAA48V7KoDKiDsLRT5uc/CET2YN1P4kK7sPLBca/uWEWdmBLH7DY5ZiENT R7D5rlRSIRq20Ys2SzjKx/BPyjR3exmXkOm8NxaWf7X5cSNWH9ULJ/+D72fZ24C1 75PQHuaBPNjmLSGMINzySiyvRjKPu6vlex1XmAM+FxeNvLPzTBs= -----END CERTIFICATE-----Generated at Sun Aug 24 05:32:09 2025 by rpki-client