$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xKG4ThYPmMeJlLceImLUs5t7Y8E.roa File: xKG4ThYPmMeJlLceImLUs5t7Y8E.roa (raw, json) Hash identifier: pYi+2pU9nTmiP0xq6QGzvaJWyAwyAk3HdIbx6MlsJhI= Subject key identifier: C4:A1:B8:4E:16:0F:98:C7:89:94:B7:1E:22:62:D4:B3:9B:7B:63:C1 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3B13 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xKG4ThYPmMeJlLceImLUs5t7Y8E.roa Signing time: Fri 22 Aug 2025 08:48:02 +0000 ROA not before: Fri 22 Aug 2025 08:48:02 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 118.233.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15123 (0x3b13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:48:02 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=C4A1B84E160F98C78994B71E2262D4B39B7B63C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:5e:e7:40:11:67:d4:8f:12:65:f7:db:08:38: f3:0d:9c:4a:7f:ef:42:8e:f6:13:cf:9b:44:1a:d1: 91:fe:9c:45:ca:08:72:92:7a:38:ca:c6:25:67:ac: cf:d5:d1:d4:47:6c:36:a4:35:87:36:a3:5f:b7:c6: 5f:88:8c:d5:5b:14:54:19:3d:11:87:1f:70:87:01: b4:b2:35:c9:26:06:b4:ae:1b:4a:1e:0d:41:f3:1c: e3:92:9c:ee:5e:89:9b:31:85:82:a9:b4:a1:2c:f2: bc:d1:dc:6d:06:7b:a8:41:8e:ee:11:12:0b:56:58: 31:b1:bd:64:7a:8f:a5:59:11:7f:e3:6a:1e:b0:71: 0c:75:bf:db:fe:2a:f0:2c:00:33:26:41:40:74:a2: 7f:c3:cd:68:3d:fb:72:a4:ea:51:0c:82:6b:0d:83: fa:cc:9c:9c:44:11:87:eb:96:ef:1e:da:80:a6:6a: 8e:d1:67:ef:4d:51:9d:9d:22:d1:24:d1:78:8c:53: a2:73:b2:99:82:3a:55:37:d7:8e:78:31:cd:6d:c9: d1:52:d9:61:b8:98:ad:dd:78:59:fa:5d:93:25:04: 76:fc:62:03:19:0f:8f:5c:3f:08:20:22:24:d4:fe: 6e:17:98:71:18:c9:04:03:2e:05:8a:f3:e1:1b:08: 36:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:A1:B8:4E:16:0F:98:C7:89:94:B7:1E:22:62:D4:B3:9B:7B:63:C1 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xKG4ThYPmMeJlLceImLUs5t7Y8E.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.64.0/20 Signature Algorithm: sha256WithRSAEncryption 14:67:c0:33:9e:2d:bb:91:0f:bb:42:14:89:cf:d9:93:50:0d: c4:4a:e5:fa:30:70:33:58:b9:73:57:d8:53:e7:05:ad:82:22: a5:b8:52:8e:64:1f:b6:99:57:49:e6:f2:82:95:03:84:d9:75: d0:b2:8b:f6:2f:c0:c9:50:ff:70:9c:1c:c5:5d:43:cc:a6:09: 15:97:df:d2:5f:4f:bb:ce:3a:c2:12:04:aa:bc:b2:5d:2f:ca: c6:c7:08:55:e1:3d:0a:35:b8:81:02:eb:2f:9a:f0:66:4e:04: 84:0d:6e:52:34:c1:8f:3a:02:0d:c3:6b:7b:ce:ea:74:58:53: 4b:ec:4f:10:bb:b6:bf:ba:99:71:ff:b9:2b:9e:f9:62:47:2c: f1:5d:27:1b:68:02:63:3b:43:3d:32:77:41:b9:01:91:73:48: da:fe:d5:74:1d:2d:56:f4:4b:17:cd:fc:6b:51:dc:b7:8e:52: d0:06:7e:60:b2:2d:b3:49:d9:45:0f:1a:e0:c5:57:03:18:bc: da:eb:fd:ef:40:60:9f:01:6b:7b:eb:49:c0:ea:35:1d:bf:28: 5e:7b:10:49:95:2a:49:06:84:50:49:54:e6:ce:1f:03:86:55: c4:21:e0:19:ee:80:20:c1:54:e6:86:34:b9:8d:ed:3e:df:52: 8f:42:56:4c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOxMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ4MDJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEM0QTFCODRFMTYwRjk4 Qzc4OTk0QjcxRTIyNjJENEIzOUI3QjYzQzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD5XudAEWfUjxJl99sIOPMNnEp/70KO9hPPm0Qa0ZH+nEXKCHKS ejjKxiVnrM/V0dRHbDakNYc2o1+3xl+IjNVbFFQZPRGHH3CHAbSyNckmBrSuG0oe DUHzHOOSnO5eiZsxhYKptKEs8rzR3G0Ge6hBju4REgtWWDGxvWR6j6VZEX/jah6w cQx1v9v+KvAsADMmQUB0on/DzWg9+3Kk6lEMgmsNg/rMnJxEEYfrlu8e2oCmao7R Z+9NUZ2dItEk0XiMU6JzspmCOlU31454Mc1tydFS2WG4mK3deFn6XZMlBHb8YgMZ D49cPwggIiTU/m4XmHEYyQQDLgWK8+EbCDZlAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUxKG4ThYPmMeJlLceImLUs5t7Y8EwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3hLRzRUaFlQbU1lSmxMY2VJ bUxVczV0N1k4RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR2 6UAwDQYJKoZIhvcNAQELBQADggEBABRnwDOeLbuRD7tCFInP2ZNQDcRK5fowcDNY uXNX2FPnBa2CIqW4Uo5kH7aZV0nm8oKVA4TZddCyi/YvwMlQ/3CcHMVdQ8ymCRWX 39JfT7vOOsISBKq8sl0vysbHCFXhPQo1uIEC6y+a8GZOBIQNblI0wY86Ag3Da3vO 6nRYU0vsTxC7tr+6mXH/uSue+WJHLPFdJxtoAmM7Qz0yd0G5AZFzSNr+1XQdLVb0 SxfN/GtR3LeOUtAGfmCyLbNJ2UUPGuDFVwMYvNrr/e9AYJ8Ba3vrScDqNR2/KF57 EEmVKkkGhFBJVObOHwOGVcQh4BnugCDBVOaGNLmN7T7fUo9CVkw= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:21 2025 by rpki-client