$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/x6zG852UBhLYQ_8c07kPjkR70-I.roa File: x6zG852UBhLYQ_8c07kPjkR70-I.roa (raw, json) Hash identifier: 5jDmPutaOSTk7pAM+cqizn3XEWKIEVvTA4SQJn4IB4o= Subject key identifier: C7:AC:C6:F3:9D:94:06:12:D8:43:FF:1C:D3:B9:0F:8E:44:7B:D3:E2 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3A17 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/x6zG852UBhLYQ_8c07kPjkR70-I.roa Signing time: Fri 22 Aug 2025 08:46:59 +0000 ROA not before: Fri 22 Aug 2025 08:46:59 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.195.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14871 (0x3a17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:59 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=C7ACC6F39D940612D843FF1CD3B90F8E447BD3E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:35:aa:67:d3:77:51:29:1b:3e:01:5c:17:48: 2b:8a:3e:72:8c:4b:c7:de:7e:99:e7:84:14:00:6e: b4:a2:52:15:eb:84:ea:77:b5:1f:b5:e2:0e:36:90: 4a:e9:01:e2:e0:da:22:08:a2:fc:05:f7:f5:95:5b: 79:7b:54:bd:2d:cd:ea:96:04:b3:fd:10:dc:31:f8: 7e:c0:b6:e7:85:eb:94:1c:d1:e6:dd:43:bb:75:af: 77:68:3f:86:94:29:17:ba:7e:b7:7f:18:e6:87:66: 8f:37:06:22:40:27:20:15:51:29:77:14:c0:9c:e2: c1:e5:e3:d5:97:1b:e2:f2:53:f2:27:7b:b8:29:8a: 38:70:b3:c9:0b:0a:63:2e:80:6d:3e:cd:6f:75:13: eb:09:67:83:fb:72:3b:94:64:2b:d2:b3:c5:1d:a4: 54:b7:7e:ff:32:1b:d4:e0:f9:51:4b:f5:49:47:f6: 37:4e:68:67:f4:82:49:b5:87:86:68:95:6b:e0:c7: 85:df:79:ef:df:d9:98:fe:9e:10:04:ed:5a:50:21: ac:cc:6e:6c:30:54:56:97:f1:07:b1:a6:cc:85:eb: 74:24:2f:e0:67:af:c7:88:89:1c:9b:58:44:6f:19: 9e:43:e8:8d:98:e9:cb:34:70:cc:60:9b:b1:7f:5e: 72:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:AC:C6:F3:9D:94:06:12:D8:43:FF:1C:D3:B9:0F:8E:44:7B:D3:E2 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/x6zG852UBhLYQ_8c07kPjkR70-I.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.72.0/22 Signature Algorithm: sha256WithRSAEncryption 3a:d6:a8:fc:82:a4:60:b6:d7:6c:9c:15:29:87:1a:b1:b7:9a: d0:63:ab:2c:31:d1:90:fe:c3:f2:67:78:77:78:ba:66:a7:32: 82:bc:47:cc:1d:96:62:51:66:e7:57:d1:0c:a0:09:6d:ff:e3: c4:cd:45:fd:41:d4:0b:34:5b:f7:05:50:c5:8b:c1:ae:8a:94: 87:e7:68:20:4f:06:b4:3e:dd:7b:46:da:38:9a:6c:3d:5d:97: ce:5d:17:95:05:b9:52:08:4c:b9:a2:85:76:c5:ff:cd:99:13: fe:e9:dc:57:fd:0e:07:5e:25:49:0f:41:96:2c:fb:32:a2:bf: f4:ec:8b:a3:89:3b:67:86:eb:fe:9c:19:01:0f:5c:39:ce:a1: 43:ef:ad:87:01:ec:e0:d5:01:87:54:27:02:3d:83:f6:9d:f2: 7e:21:28:db:26:54:ac:c8:99:ba:3a:dc:d7:7d:f0:dc:81:85: fe:61:e9:21:26:fa:96:fd:72:c4:d4:d0:09:af:a1:0c:79:9a: b5:ca:78:f2:fb:83:ce:09:33:ed:4d:50:5c:9f:c3:97:7d:28: 3e:02:4d:e1:59:e5:83:67:14:54:07:e6:26:2f:97:f4:d9:3e: 2c:59:18:67:38:ad:ca:f6:ed:84:09:c1:47:a0:f7:8d:28:9e: 60:88:54:64 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOhcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2NTlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEM3QUNDNkYzOUQ5NDA2 MTJEODQzRkYxQ0QzQjkwRjhFNDQ3QkQzRTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDmNapn03dRKRs+AVwXSCuKPnKMS8fefpnnhBQAbrSiUhXrhOp3 tR+14g42kErpAeLg2iIIovwF9/WVW3l7VL0tzeqWBLP9ENwx+H7AtueF65Qc0ebd Q7t1r3doP4aUKRe6frd/GOaHZo83BiJAJyAVUSl3FMCc4sHl49WXG+LyU/Ine7gp ijhws8kLCmMugG0+zW91E+sJZ4P7cjuUZCvSs8UdpFS3fv8yG9Tg+VFL9UlH9jdO aGf0gkm1h4ZolWvgx4Xfee/f2Zj+nhAE7VpQIazMbmwwVFaX8QexpsyF63QkL+Bn r8eIiRybWERvGZ5D6I2Y6cs0cMxgm7F/XnLdAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUx6zG852UBhLYQ/8c07kPjkR70+IwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3g2ekc4NTJVQmhMWVFfOGMw N2tQamtSNzAtSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 w0gwDQYJKoZIhvcNAQELBQADggEBADrWqPyCpGC212ycFSmHGrG3mtBjqywx0ZD+ w/JneHd4umanMoK8R8wdlmJRZudX0QygCW3/48TNRf1B1As0W/cFUMWLwa6KlIfn aCBPBrQ+3XtG2jiabD1dl85dF5UFuVIITLmihXbF/82ZE/7p3Ff9DgdeJUkPQZYs +zKiv/Tsi6OJO2eG6/6cGQEPXDnOoUPvrYcB7ODVAYdUJwI9g/ad8n4hKNsmVKzI mbo63Nd98NyBhf5h6SEm+pb9csTU0AmvoQx5mrXKePL7g84JM+1NUFyfw5d9KD4C TeFZ5YNnFFQH5iYvl/TZPixZGGc4rcr27YQJwUeg940onmCIVGQ= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:57 2025 by rpki-client