$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xT_SitSPHStMEeEZdMwFWKWV0Ic.roa File: xT_SitSPHStMEeEZdMwFWKWV0Ic.roa (raw, json) Hash identifier: fBf0k1Bx6aQA3ZCOdPEIQj2RC6lgNHGbV9wkSMr+sfw= Subject key identifier: C5:3F:D2:8A:D4:8F:1D:2B:4C:11:E1:19:74:CC:05:58:A5:95:D0:87 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 37DE Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xT_SitSPHStMEeEZdMwFWKWV0Ic.roa Signing time: Fri 22 Aug 2025 08:44:44 +0000 ROA not before: Fri 22 Aug 2025 08:44:43 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 118.232.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14302 (0x37de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:44:43 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=C53FD28AD48F1D2B4C11E11974CC0558A595D087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:15:6f:f9:0f:19:37:99:24:56:30:34:29:c4: 47:9a:72:fe:2c:db:b7:97:e5:9b:57:ee:49:ce:c7: aa:4c:c0:55:d7:a9:ed:8e:05:5a:a9:b3:97:17:f5: 2f:a1:ac:50:3c:40:8d:0c:c6:ed:3c:41:fc:f5:5a: b2:eb:75:9a:a7:62:31:88:df:eb:f3:58:5c:38:43: 9f:5e:8b:07:cf:b3:27:4b:c9:59:9b:55:45:31:1f: 93:9a:62:60:4f:58:45:95:f7:aa:e5:38:61:33:23: 1d:89:f5:36:b0:7b:34:9f:81:f2:b2:07:d2:51:d0: 95:d9:9f:3d:9b:be:08:42:04:fe:45:11:56:2a:35: df:5f:5a:96:da:3e:59:87:43:25:65:0d:20:64:a9: f6:71:b0:d0:a5:cf:3c:ec:71:f1:b0:11:9a:db:c7: 48:c4:6f:06:88:07:b8:4e:bd:b6:b9:27:af:57:01: d5:48:12:19:37:9a:b9:6e:b9:92:b6:b1:8f:a2:ae: ee:e9:d9:83:36:90:36:8e:46:b2:7e:8b:95:a9:5f: 58:5e:3d:e4:b4:9b:d7:5a:29:f4:83:79:cd:2e:44: d7:27:8c:d2:32:09:fc:87:6d:97:0d:ef:99:a3:29: f2:27:c6:6a:5b:9c:38:0b:61:52:10:a9:d2:4f:69: 34:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:3F:D2:8A:D4:8F:1D:2B:4C:11:E1:19:74:CC:05:58:A5:95:D0:87 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xT_SitSPHStMEeEZdMwFWKWV0Ic.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.152.0/21 Signature Algorithm: sha256WithRSAEncryption 34:d7:58:48:0e:53:17:e1:df:30:93:44:e3:77:cb:f0:13:2e: 0c:e7:26:06:15:bb:aa:c1:4c:22:35:b3:be:78:33:fb:56:d2: c1:6b:28:af:66:e7:23:f7:91:b2:a4:4e:49:8e:4c:ed:7d:bb: 39:cb:57:9b:f4:78:5f:68:66:6c:9b:7c:f9:49:aa:ff:41:3f: e2:6e:8c:63:be:45:81:88:97:a4:5c:9d:96:6f:1d:87:9e:40: 48:d6:bc:8a:b3:8d:77:14:31:d6:ba:5d:59:25:ea:ea:97:13: 47:e8:eb:a3:72:6d:c2:b4:0f:77:5f:9b:b1:fa:ee:b9:97:39: 1d:d9:c3:49:cd:8e:ad:e4:64:8d:70:5a:33:48:bd:9e:d4:4d: e7:e4:d7:66:b5:66:ba:46:94:cf:3a:24:55:9a:fb:87:8e:ac: 8b:b7:c4:a2:b1:5d:61:45:ae:39:f3:c2:76:dd:a5:5f:a9:76: d5:73:06:ae:41:01:76:12:e3:db:35:83:bf:52:1c:e0:04:61: f4:05:1d:bc:bb:32:31:98:c6:e8:62:22:90:7a:fb:2f:1e:b8: 58:e4:ff:43:b7:dc:d6:a1:ed:cd:f6:68:5d:60:4d:20:fb:b0: e1:88:9e:a5:4a:f3:32:9a:2b:74:8a:5f:a0:7c:e1:aa:45:95: a6:e5:91:29 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICN94wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ0NDNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEM1M0ZEMjhBRDQ4RjFE MkI0QzExRTExOTc0Q0MwNTU4QTU5NUQwODcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVFW/5Dxk3mSRWMDQpxEeacv4s27eX5ZtX7knOx6pMwFXXqe2O BVqps5cX9S+hrFA8QI0Mxu08Qfz1WrLrdZqnYjGI3+vzWFw4Q59eiwfPsydLyVmb VUUxH5OaYmBPWEWV96rlOGEzIx2J9TawezSfgfKyB9JR0JXZnz2bvghCBP5FEVYq Nd9fWpbaPlmHQyVlDSBkqfZxsNClzzzscfGwEZrbx0jEbwaIB7hOvba5J69XAdVI Ehk3mrluuZK2sY+iru7p2YM2kDaORrJ+i5WpX1hePeS0m9daKfSDec0uRNcnjNIy CfyHbZcN75mjKfInxmpbnDgLYVIQqdJPaTRRAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUxT/SitSPHStMEeEZdMwFWKWV0IcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3hUX1NpdFNQSFN0TUVlRVpk TXdGV0tXVjBJYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2 6JgwDQYJKoZIhvcNAQELBQADggEBADTXWEgOUxfh3zCTRON3y/ATLgznJgYVu6rB TCI1s754M/tW0sFrKK9m5yP3kbKkTkmOTO19uznLV5v0eF9oZmybfPlJqv9BP+Ju jGO+RYGIl6RcnZZvHYeeQEjWvIqzjXcUMda6XVkl6uqXE0fo66NybcK0D3dfm7H6 7rmXOR3Zw0nNjq3kZI1wWjNIvZ7UTefk12a1ZrpGlM86JFWa+4eOrIu3xKKxXWFF rjnzwnbdpV+pdtVzBq5BAXYS49s1g79SHOAEYfQFHby7MjGYxuhiIpB6+y8euFjk /0O33Nah7c32aF1gTSD7sOGInqVK8zKaK3SKX6B84apFlablkSk= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:35 2025 by rpki-client