$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/x_fM8bO4OFt4uWq6pSK4vGEFxF8.roa File: x_fM8bO4OFt4uWq6pSK4vGEFxF8.roa (raw, json) Hash identifier: O1fgPxWC5Yyu7Uu0pRvmq24nE9CF49lS7/o6RMqeNKU= Subject key identifier: C7:F7:CC:F1:B3:B8:38:5B:78:B9:6A:BA:A5:22:B8:BC:61:05:C4:5F Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3AC3 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/x_fM8bO4OFt4uWq6pSK4vGEFxF8.roa Signing time: Fri 22 Aug 2025 08:47:44 +0000 ROA not before: Fri 22 Aug 2025 08:47:44 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 106.1.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15043 (0x3ac3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:44 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=C7F7CCF1B3B8385B78B96ABAA522B8BC6105C45F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e7:0c:30:3d:2b:78:5d:c3:88:88:f5:7d:14: f0:d9:6e:2a:65:f2:60:d8:ee:8a:62:a1:32:5c:ad: 63:ae:28:1e:09:70:ab:c7:18:a4:9b:5b:d2:e6:71: d2:56:1f:fd:2d:87:7a:73:90:fd:30:5d:44:44:b8: 8f:3c:29:cb:9b:c1:66:9b:d8:38:06:78:4a:87:0f: 22:3e:7f:2b:5e:b2:f7:4a:05:7c:bd:52:82:c3:cb: 34:86:9f:c9:31:e8:dc:22:35:5c:96:e6:39:47:2b: e2:73:29:d1:9c:1f:d8:0d:e8:6d:c7:56:e2:f3:58: fd:e4:f6:03:f2:4d:1b:1c:a6:fb:f5:9f:d2:0f:60: f1:10:49:5f:32:01:a1:cf:4b:eb:32:63:7d:92:60: 8d:ae:b7:99:c4:99:69:75:88:af:e5:6b:13:28:e6: c2:a4:29:25:1e:e5:a8:92:47:94:8f:cb:42:f2:57: f6:66:eb:d8:bc:5e:6e:04:e6:f4:22:33:3e:e5:1c: 26:54:53:1a:66:5d:24:6f:f4:eb:c4:7f:fc:65:86: e7:60:53:4b:1d:35:5c:e1:db:51:d8:ca:13:86:97: 90:7f:6d:b1:ad:bd:ec:1e:30:6e:f3:dd:00:d5:a8: d1:60:f6:77:55:1f:1e:c1:46:e3:28:02:7c:cd:38: 4e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:F7:CC:F1:B3:B8:38:5B:78:B9:6A:BA:A5:22:B8:BC:61:05:C4:5F X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/x_fM8bO4OFt4uWq6pSK4vGEFxF8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.232.0/22 Signature Algorithm: sha256WithRSAEncryption 60:e1:18:d1:79:c1:f0:6a:f8:11:12:86:90:e2:5c:7e:52:f0: ea:56:79:93:55:78:95:5d:6e:c4:fc:66:f7:2e:df:5e:46:ec: 3f:6e:57:a6:0c:e4:96:56:71:be:73:0b:65:bb:d1:60:2b:50: 8f:cb:25:fc:8f:57:f8:5b:6d:f2:7d:5a:6c:cb:55:aa:c7:a5: e8:9e:d2:cc:41:37:13:23:d6:e6:30:33:26:f7:99:37:dd:b9: 51:ae:dc:02:58:b1:da:4b:5e:0c:51:79:aa:37:7c:d5:0a:2c: 96:5e:d6:c9:ec:91:4a:c1:e2:85:ef:6d:39:cf:86:a1:d9:92: eb:38:7f:2a:8f:d0:7e:fb:f8:3e:10:dd:fc:6f:ad:83:44:38: ca:1f:75:51:59:11:8e:9d:ca:a5:01:86:15:10:e0:05:81:03: 82:5d:0b:3d:1b:84:cf:c4:09:3c:b3:b1:b9:16:ca:06:b6:9c: 39:5f:cc:7d:f3:75:fc:d0:7e:c9:ec:73:b9:25:3d:ec:1b:fb: 93:a6:4b:6f:ab:48:53:57:1d:e1:41:8d:16:4c:9c:72:8f:4e: 92:aa:7a:ac:81:a6:4d:b8:a3:26:c9:1c:0d:ef:40:f6:90:3d: ae:61:58:d9:64:8f:37:14:4c:9d:1a:b0:bf:ab:65:69:8f:ad: bc:33:a8:92 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOsMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3NDRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEM3RjdDQ0YxQjNCODM4 NUI3OEI5NkFCQUE1MjJCOEJDNjEwNUM0NUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC05wwwPSt4XcOIiPV9FPDZbipl8mDY7opioTJcrWOuKB4JcKvH GKSbW9LmcdJWH/0th3pzkP0wXUREuI88KcubwWab2DgGeEqHDyI+fytesvdKBXy9 UoLDyzSGn8kx6NwiNVyW5jlHK+JzKdGcH9gN6G3HVuLzWP3k9gPyTRscpvv1n9IP YPEQSV8yAaHPS+syY32SYI2ut5nEmWl1iK/laxMo5sKkKSUe5aiSR5SPy0LyV/Zm 69i8Xm4E5vQiMz7lHCZUUxpmXSRv9OvEf/xlhudgU0sdNVzh21HYyhOGl5B/bbGt veweMG7z3QDVqNFg9ndVHx7BRuMoAnzNOE5NAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUx/fM8bO4OFt4uWq6pSK4vGEFxF8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3hfZk04Yk80T0Z0NHVXcTZw U0s0dkdFRnhGOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq AegwDQYJKoZIhvcNAQELBQADggEBAGDhGNF5wfBq+BEShpDiXH5S8OpWeZNVeJVd bsT8Zvcu315G7D9uV6YM5JZWcb5zC2W70WArUI/LJfyPV/hbbfJ9WmzLVarHpeie 0sxBNxMj1uYwMyb3mTfduVGu3AJYsdpLXgxReao3fNUKLJZe1snskUrB4oXvbTnP hqHZkus4fyqP0H77+D4Q3fxvrYNEOMofdVFZEY6dyqUBhhUQ4AWBA4JdCz0bhM/E CTyzsbkWyga2nDlfzH3zdfzQfsnsc7klPewb+5OmS2+rSFNXHeFBjRZMnHKPTpKq eqyBpk24oybJHA3vQPaQPa5hWNlkjzcUTJ0asL+rZWmPrbwzqJI= -----END CERTIFICATE-----Generated at Sun Aug 24 07:28:24 2025 by rpki-client