$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xkyvFIP78K8V2cdNZa9NS72LUKo.roa File: xkyvFIP78K8V2cdNZa9NS72LUKo.roa (raw, json) Hash identifier: f4G6chqwM1vVf5OHIpv9wIdcK/m9y+jYw99BkL1pVs0= Subject key identifier: C6:4C:AF:14:83:FB:F0:AF:15:D9:C7:4D:65:AF:4D:4B:BD:8B:50:AA Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3A00 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xkyvFIP78K8V2cdNZa9NS72LUKo.roa Signing time: Fri 22 Aug 2025 08:46:54 +0000 ROA not before: Fri 22 Aug 2025 08:46:54 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 211.76.123.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14848 (0x3a00) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:54 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=C64CAF1483FBF0AF15D9C74D65AF4D4BBD8B50AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4b:5f:2a:7a:50:78:cc:b3:be:7d:9b:46:81: 52:3b:fa:a7:ea:a3:93:62:14:33:c3:9e:90:c7:ae: 50:cf:1c:47:54:2e:0b:1d:9c:78:c3:81:46:3d:44: 92:36:6e:54:db:da:dd:f6:ba:1e:49:a1:05:50:b6: 90:53:78:f9:76:ff:9c:a6:60:21:be:bf:d8:76:bf: 20:20:33:c0:52:ae:85:cb:05:a4:05:f1:85:93:ac: de:2c:78:50:5c:6f:48:72:77:74:b4:ec:5b:ed:14: c3:e0:20:4f:24:b7:d5:ed:3e:a0:eb:62:50:45:b4: 1e:49:86:df:bf:a9:aa:2a:61:4d:96:07:b0:0f:b6: 8b:10:87:ba:35:02:37:9b:01:71:88:30:79:24:e4: 5b:3d:8b:3c:fb:40:0a:b8:96:54:a3:18:4b:dc:82: 8f:98:cc:2d:11:47:b1:a5:5f:b4:da:1a:a4:dd:e5: 17:a7:22:8e:62:a3:5e:9c:57:89:49:9a:4b:ae:d2: 0e:ac:d3:33:bd:67:cb:f2:16:ce:a0:3d:ed:88:a2: 90:35:5c:da:50:47:fb:b0:85:09:ea:d2:9e:93:8d: 34:b6:a2:9c:2f:34:da:d2:6b:0b:ee:f3:ba:b9:7f: 71:7b:09:cc:cd:ce:0b:3e:18:53:69:3c:fc:ac:bc: 5a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:4C:AF:14:83:FB:F0:AF:15:D9:C7:4D:65:AF:4D:4B:BD:8B:50:AA X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xkyvFIP78K8V2cdNZa9NS72LUKo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.123.128/25 Signature Algorithm: sha256WithRSAEncryption 32:a7:ca:82:d1:39:86:3c:c8:88:0c:8d:14:a0:c7:a7:f9:da: 94:56:04:c4:eb:e7:65:8c:5e:ed:3c:86:6f:3e:0b:f1:5e:9a: 77:19:00:a1:27:4f:ea:cf:57:3d:7a:58:2c:b0:cb:d2:df:3c: 01:7a:dc:e7:03:cf:83:4b:c7:57:32:12:60:bf:0c:b6:3c:62: 60:18:2a:36:41:e1:83:e2:09:76:1c:8b:58:ae:37:bc:fd:8f: c9:cd:ad:ec:22:46:47:71:dd:20:4d:25:f8:b6:1d:fe:5b:b2: 5a:21:3b:f6:2b:c6:31:0f:85:21:d6:cd:7d:00:73:b7:06:a4: f0:4e:7c:37:f7:be:4b:72:45:34:eb:c0:9b:3e:01:f2:68:3b: 75:97:fe:96:5f:e3:ac:39:db:3c:ca:8b:60:3c:01:3e:9d:ad: d1:0a:0c:69:d7:a2:0c:0a:a7:b8:a0:b8:fd:41:b0:df:92:ea: 90:9f:a2:33:ce:d1:12:73:ce:cd:82:cb:f9:53:a5:16:95:7d: b4:a8:ad:1a:b1:31:db:0d:ba:1b:3a:cc:a7:76:20:2b:f6:4f: d4:2b:48:d6:a7:43:65:9d:0e:92:2f:9e:6a:ed:05:3d:0a:e8: 5e:92:b6:41:55:d9:d7:14:57:ca:a5:b2:0e:62:43:3e:a5:a8: ac:32:7f:28 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICOgAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2NTRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEM2NENBRjE0ODNGQkYw QUYxNUQ5Qzc0RDY1QUY0RDRCQkQ4QjUwQUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4S18qelB4zLO+fZtGgVI7+qfqo5NiFDPDnpDHrlDPHEdULgsd nHjDgUY9RJI2blTb2t32uh5JoQVQtpBTePl2/5ymYCG+v9h2vyAgM8BSroXLBaQF 8YWTrN4seFBcb0hyd3S07FvtFMPgIE8kt9XtPqDrYlBFtB5Jht+/qaoqYU2WB7AP tosQh7o1AjebAXGIMHkk5Fs9izz7QAq4llSjGEvcgo+YzC0RR7GlX7TaGqTd5Ren Io5io16cV4lJmkuu0g6s0zO9Z8vyFs6gPe2IopA1XNpQR/uwhQnq0p6TjTS2opwv NNrSawvu87q5f3F7CczNzgs+GFNpPPysvFoTAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUxkyvFIP78K8V2cdNZa9NS72LUKowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3hreXZGSVA3OEs4VjJjZE5a YTlOUzcyTFVLby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQfT THuAMA0GCSqGSIb3DQEBCwUAA4IBAQAyp8qC0TmGPMiIDI0UoMen+dqUVgTE6+dl jF7tPIZvPgvxXpp3GQChJ0/qz1c9elgssMvS3zwBetznA8+DS8dXMhJgvwy2PGJg GCo2QeGD4gl2HItYrje8/Y/Jza3sIkZHcd0gTSX4th3+W7JaITv2K8YxD4Uh1s19 AHO3BqTwTnw3975LckU068CbPgHyaDt1l/6WX+OsOds8yotgPAE+na3RCgxp16IM Cqe4oLj9QbDfkuqQn6IzztESc87Ngsv5U6UWlX20qK0asTHbDbobOsyndiAr9k/U K0jWp0NlnQ6SL55q7QU9CuhekrZBVdnXFFfKpbIOYkM+paisMn8o -----END CERTIFICATE-----Generated at Sun Aug 24 07:26:36 2025 by rpki-client