$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/y4TLLQlC8LY1AgrB6bUq3TRSFh0.roa File: y4TLLQlC8LY1AgrB6bUq3TRSFh0.roa (raw, json) Hash identifier: JCb5WPFxWajZFZp0VSG+G+4tDHmB+UTKQ1uP6Ui65Fk= Subject key identifier: CB:84:CB:2D:09:42:F0:B6:35:02:0A:C1:E9:B5:2A:DD:34:52:16:1D Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3B09 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/y4TLLQlC8LY1AgrB6bUq3TRSFh0.roa Signing time: Fri 22 Aug 2025 08:48:00 +0000 ROA not before: Fri 22 Aug 2025 08:48:00 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.195.238.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15113 (0x3b09) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:48:00 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=CB84CB2D0942F0B635020AC1E9B52ADD3452161D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d0:2f:16:d7:97:98:e3:8c:e5:52:81:f1:1f: 5c:06:97:aa:5b:33:7f:2d:a6:1b:0e:2f:3c:98:bb: bd:53:96:a1:5e:19:bc:fc:58:ea:da:b9:3d:e9:b4: 4d:f4:f2:9b:2a:0b:9f:e9:ba:5f:ab:91:de:6e:f8: f2:98:9d:36:60:1a:91:5f:3b:ce:86:6c:8c:cb:60: bc:6c:66:41:f1:04:af:19:44:4b:fe:85:72:31:54: 56:53:89:69:92:9f:91:a5:ba:28:00:e0:11:3d:a8: 06:ee:cc:72:33:28:31:6c:76:83:c7:ab:68:57:dd: 6e:0c:48:d1:ea:c2:5e:fc:34:2a:0c:18:2f:0e:4e: 8d:cd:be:e3:61:af:28:04:98:02:3b:20:e4:2a:2f: 34:a1:fd:5e:8c:96:ce:d2:73:5f:65:35:e1:db:64: b6:f7:07:83:2e:54:f0:67:9d:50:34:8e:d5:33:46: 79:e2:b4:1b:65:00:62:83:8c:2c:7b:00:25:64:01: 4b:15:23:fa:ae:ce:05:ac:7d:9f:be:4f:ce:58:39: 96:bf:a0:81:67:ed:52:72:69:4b:7b:ce:3a:ae:fe: 55:a1:6a:d9:e1:c7:d0:7c:fc:7b:9a:c4:79:7f:0b: 5e:84:96:34:eb:dc:d3:9e:78:2c:4e:af:37:eb:de: 9e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:84:CB:2D:09:42:F0:B6:35:02:0A:C1:E9:B5:2A:DD:34:52:16:1D X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/y4TLLQlC8LY1AgrB6bUq3TRSFh0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.238.128/25 Signature Algorithm: sha256WithRSAEncryption 3a:58:7b:90:6f:de:0e:22:74:1a:59:fd:54:76:90:cc:fe:21: bb:d5:ce:fe:c1:c1:1e:65:1e:ba:7d:2c:10:79:df:c9:0b:df: 6a:6b:5e:55:f2:39:a8:ee:48:4e:61:fb:a8:eb:28:60:ff:a2: d7:ca:8c:0c:4b:b6:c2:76:c4:63:39:3c:a8:c2:19:43:2b:f4: 2e:de:51:b4:c5:69:b4:e6:47:7a:8a:68:d0:74:a4:12:5c:c0: dc:9e:7e:ed:e2:d7:22:58:18:b0:b0:74:12:15:dc:2d:b4:59: 49:d1:ff:ef:1c:a7:f3:47:3a:ae:91:e1:83:cd:39:e4:96:b6: 57:71:99:05:07:f0:3a:4a:d3:63:7b:05:b4:83:33:c2:fd:77: 23:d3:db:d2:88:30:9b:9d:72:a0:a9:3c:15:c1:54:e8:c1:e0: bd:37:07:aa:1b:93:de:6b:98:e8:22:2e:41:e1:ed:a4:c2:27: 7a:13:d1:c8:19:de:da:7b:22:97:8b:08:6f:00:24:04:57:9e: 67:8b:1d:f4:03:ee:48:35:21:9a:6c:23:39:3e:da:fd:99:b4: cf:c7:a9:74:d8:0e:72:f4:bf:3a:99:25:de:25:41:5e:f1:39: ce:52:9c:f1:cd:83:da:75:df:b9:36:b9:56:3a:86:ef:ad:7e: 41:6a:a5:3b -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICOwkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ4MDBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKENCODRDQjJEMDk0MkYw QjYzNTAyMEFDMUU5QjUyQUREMzQ1MjE2MUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC00C8W15eY44zlUoHxH1wGl6pbM38tphsOLzyYu71TlqFeGbz8 WOrauT3ptE308psqC5/pul+rkd5u+PKYnTZgGpFfO86GbIzLYLxsZkHxBK8ZREv+ hXIxVFZTiWmSn5GluigA4BE9qAbuzHIzKDFsdoPHq2hX3W4MSNHqwl78NCoMGC8O To3NvuNhrygEmAI7IOQqLzSh/V6Mls7Sc19lNeHbZLb3B4MuVPBnnVA0jtUzRnni tBtlAGKDjCx7ACVkAUsVI/quzgWsfZ++T85YOZa/oIFn7VJyaUt7zjqu/lWhatnh x9B8/HuaxHl/C16EljTr3NOeeCxOrzfr3p4rAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUy4TLLQlC8LY1AgrB6bUq3TRSFh0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3k0VExMUWxDOExZMUFnckI2 YlVxM1RSU0ZoMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQd7 w+6AMA0GCSqGSIb3DQEBCwUAA4IBAQA6WHuQb94OInQaWf1UdpDM/iG71c7+wcEe ZR66fSwQed/JC99qa15V8jmo7khOYfuo6yhg/6LXyowMS7bCdsRjOTyowhlDK/Qu 3lG0xWm05kd6imjQdKQSXMDcnn7t4tciWBiwsHQSFdwttFlJ0f/vHKfzRzqukeGD zTnklrZXcZkFB/A6StNjewW0gzPC/Xcj09vSiDCbnXKgqTwVwVToweC9NweqG5Pe a5joIi5B4e2kwid6E9HIGd7aeyKXiwhvACQEV55nix30A+5INSGabCM5Ptr9mbTP x6l02A5y9L86mSXeJUFe8TnOUpzxzYPadd+5NrlWOobvrX5BaqU7 -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:38 2025 by rpki-client