$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wmG84KFlNlkF-Uwi9TYgH1YfT3Q.roa File: wmG84KFlNlkF-Uwi9TYgH1YfT3Q.roa (raw, json) Hash identifier: O5BYOtH/uI7lltJJgfZqtCyCks4+6DNYSil6rOVSc7w= Subject key identifier: C2:61:BC:E0:A1:65:36:59:05:F9:4C:22:F5:36:20:1F:56:1F:4F:74 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3AB5 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wmG84KFlNlkF-Uwi9TYgH1YfT3Q.roa Signing time: Fri 22 Aug 2025 08:47:40 +0000 ROA not before: Fri 22 Aug 2025 08:47:40 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 211.76.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15029 (0x3ab5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:40 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=C261BCE0A165365905F94C22F536201F561F4F74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:cf:6f:63:5d:f5:75:85:eb:f9:05:7f:3e:3b: d5:90:e4:10:09:34:5e:01:ff:0f:34:83:3f:22:36: ea:39:d5:ad:3c:45:c2:30:3c:12:bb:3c:3d:fd:00: 98:7d:63:39:a6:21:75:fb:70:d7:85:14:15:3d:da: 10:c8:0c:4c:60:4f:15:d0:51:d7:f4:d7:6e:5a:9d: 88:8b:b5:b9:5c:ab:8a:01:e8:cd:69:d6:a0:32:3f: d3:5a:f1:82:53:04:04:45:20:96:6e:fa:cd:b2:ec: 1e:15:75:8b:f5:b2:6d:4b:f7:7a:f1:5e:17:1a:a6: 0d:c3:8a:15:08:8a:4f:0e:6e:32:d3:3f:5f:11:bb: fc:0d:a9:9e:7e:1b:c2:10:a8:09:cd:b4:a2:c6:65: 82:d3:95:75:fe:e9:04:d4:8c:27:d8:5d:d6:4e:9f: f2:32:62:74:36:c3:b3:e3:a6:7b:f0:f7:49:4e:19: 84:32:a0:46:4c:b6:22:8a:17:d6:35:38:0e:36:b0: ab:ff:dc:ff:77:17:05:47:fb:ec:6e:3f:8c:2e:5a: ac:e6:dd:03:2d:c9:94:40:f6:87:13:66:ae:a0:9b: c5:09:9a:36:c5:50:a7:92:39:c3:94:90:f3:15:bc: 3e:51:58:e1:c6:70:91:66:b1:a4:08:6f:e5:4d:5a: be:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:61:BC:E0:A1:65:36:59:05:F9:4C:22:F5:36:20:1F:56:1F:4F:74 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wmG84KFlNlkF-Uwi9TYgH1YfT3Q.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.119.0/24 Signature Algorithm: sha256WithRSAEncryption 81:fc:e8:d3:d5:c4:97:55:0c:e3:60:55:ef:17:e5:b1:98:4b: bb:73:0b:4a:94:c6:c2:2d:2b:21:65:f7:c3:9f:92:cb:da:88: fd:49:39:b2:ff:10:0f:46:14:58:bf:d2:ba:a2:ad:95:38:da: 8e:b6:61:ae:02:a3:b3:f3:d2:b7:ab:6c:f6:91:60:cb:48:cf: d7:bf:ba:ba:7a:7a:11:62:e9:aa:fe:be:ea:01:da:25:7b:d5: 1f:c3:bb:0d:58:82:d5:e6:c4:3e:77:e2:9c:05:55:30:2d:98: c7:c2:71:a6:d5:84:4d:f4:44:5c:2a:fd:50:b2:ad:ec:68:45: 5b:19:d9:88:41:4f:0f:77:d6:6a:06:9b:82:b5:8b:f8:48:64: e8:76:ea:e4:f3:0a:56:5d:0c:b3:2f:fc:40:a6:a6:fa:f0:d3: cf:1c:c2:89:5e:18:3c:84:17:be:90:79:47:44:bc:bf:89:c5: fb:33:64:29:2b:23:15:c3:56:b2:97:bd:b3:38:6b:c5:01:0b: c9:f4:80:0e:96:e5:04:e4:84:60:73:11:e6:3d:88:25:47:5e: 17:5b:6a:86:34:57:cf:e4:96:f9:e3:fa:4f:8a:ec:9e:81:06: 5c:4f:20:0f:9c:41:ad:94:29:f8:9e:82:b0:e7:98:97:93:79: bd:f9:70:8e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOrUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3NDBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEMyNjFCQ0UwQTE2NTM2 NTkwNUY5NEMyMkY1MzYyMDFGNTYxRjRGNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVz29jXfV1hev5BX8+O9WQ5BAJNF4B/w80gz8iNuo51a08RcIw PBK7PD39AJh9YzmmIXX7cNeFFBU92hDIDExgTxXQUdf0125anYiLtblcq4oB6M1p 1qAyP9Na8YJTBARFIJZu+s2y7B4VdYv1sm1L93rxXhcapg3DihUIik8ObjLTP18R u/wNqZ5+G8IQqAnNtKLGZYLTlXX+6QTUjCfYXdZOn/IyYnQ2w7Pjpnvw90lOGYQy oEZMtiKKF9Y1OA42sKv/3P93FwVH++xuP4wuWqzm3QMtyZRA9ocTZq6gm8UJmjbF UKeSOcOUkPMVvD5RWOHGcJFmsaQIb+VNWr7PAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUwmG84KFlNlkF+Uwi9TYgH1YfT3QwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3dtRzg0S0ZsTmxrRi1Vd2k5 VFlnSDFZZlQzUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADT THcwDQYJKoZIhvcNAQELBQADggEBAIH86NPVxJdVDONgVe8X5bGYS7tzC0qUxsIt KyFl98OfksvaiP1JObL/EA9GFFi/0rqirZU42o62Ya4Co7Pz0rerbPaRYMtIz9e/ urp6ehFi6ar+vuoB2iV71R/Duw1YgtXmxD534pwFVTAtmMfCcabVhE30RFwq/VCy rexoRVsZ2YhBTw931moGm4K1i/hIZOh26uTzClZdDLMv/ECmpvrw088cwoleGDyE F76QeUdEvL+JxfszZCkrIxXDVrKXvbM4a8UBC8n0gA6W5QTkhGBzEeY9iCVHXhdb aoY0V8/klvnj+k+K7J6BBlxPIA+cQa2UKfiegrDnmJeTeb35cI4= -----END CERTIFICATE-----Generated at Sun Aug 24 07:23:15 2025 by rpki-client