$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/y737MSl31cY2jbJiT7BbXiTcrsA.roa File: y737MSl31cY2jbJiT7BbXiTcrsA.roa (raw, json) Hash identifier: 78PT2u1XDsCyL9aaLPVJY64xjiCo00yvcASWvt7ykzo= Subject key identifier: CB:BD:FB:31:29:77:D5:C6:36:8D:B2:62:4F:B0:5B:5E:24:DC:AE:C0 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 381C Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/y737MSl31cY2jbJiT7BbXiTcrsA.roa Signing time: Fri 22 Aug 2025 08:44:58 +0000 ROA not before: Fri 22 Aug 2025 08:44:58 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 118.233.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14364 (0x381c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:44:58 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=CBBDFB312977D5C6368DB2624FB05B5E24DCAEC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:94:e1:f5:26:b7:1c:4f:77:3d:47:1d:bb:7b: 5b:74:4b:62:8a:a6:1e:f3:63:bf:dc:de:18:e3:29: 48:5a:22:a8:c6:1b:4a:92:7e:fc:34:af:9a:69:a0: f5:49:6a:b2:e3:a3:5f:fb:f9:2b:0f:aa:81:c4:50: 53:ee:98:f4:8b:9d:ef:3e:07:0b:8f:17:96:6f:ef: 83:46:2c:a3:f3:27:ca:69:15:6f:ac:9f:48:cc:0c: c6:ea:7b:6f:2c:79:45:73:d1:3b:f6:4a:0f:7b:90: e9:b2:3f:a0:f3:17:d8:b3:37:45:b9:71:19:44:1d: e1:05:a1:05:23:17:0a:4f:45:1c:c0:e6:a6:c5:e9: 14:2b:11:50:90:2d:75:e3:e7:dc:23:a4:9e:5d:c3: 14:95:a8:c2:39:81:6f:5c:cf:07:be:77:67:e9:7f: d2:82:3c:d4:63:d5:d2:8b:46:2b:e8:a6:c9:fa:de: 43:0f:aa:86:b1:d5:83:50:e2:d7:ea:de:e7:ea:b3: b8:b9:e6:f9:75:ba:80:43:bc:3e:f7:53:95:0f:23: 24:55:a3:a8:80:42:8e:00:b6:fe:ea:b6:76:84:1e: 00:7c:02:84:b1:ba:fb:8e:88:98:4c:98:14:d4:24: 43:2b:f9:d8:4a:e4:d5:81:ca:15:9d:a4:16:17:bf: 5d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:BD:FB:31:29:77:D5:C6:36:8D:B2:62:4F:B0:5B:5E:24:DC:AE:C0 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/y737MSl31cY2jbJiT7BbXiTcrsA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.118.0/24 Signature Algorithm: sha256WithRSAEncryption 30:b9:6b:89:b3:c1:82:36:20:3f:07:ce:94:2a:c4:d2:e9:9c: 66:64:21:a4:01:53:01:c0:92:57:12:99:33:e1:68:1f:7c:0a: 52:13:91:de:a9:94:64:98:e5:4c:86:aa:b4:3d:60:be:33:f5: b0:2a:2e:d3:5b:5d:09:b9:47:8a:24:6e:bb:21:f2:3d:b1:9d: 3f:7b:90:54:77:13:b9:3f:87:62:b6:c9:39:3f:76:9b:a4:b3: f6:a2:4b:49:53:c0:33:6f:2c:11:7c:ae:f9:5c:3b:5b:29:62: 5a:f8:2c:ec:bb:f3:43:d4:15:fd:ac:50:04:24:ec:32:ec:30: cd:4b:c0:7e:24:dc:7b:91:85:1e:0b:d8:9e:f9:c6:8e:b5:19: 52:ae:d0:b9:08:97:a1:b3:8d:a1:45:d8:c0:24:4c:8f:08:59: 51:0c:d1:ba:06:11:03:ae:7b:95:60:52:d6:6e:03:b7:cb:e3: 02:1b:ed:e3:4f:a4:fc:aa:c5:ee:95:73:b7:5f:a1:a8:41:45: 06:31:54:03:59:89:c9:34:a0:1a:6e:cb:ae:02:7b:f6:e0:cb: fb:ac:c0:e9:19:47:ca:64:b1:e8:91:31:dc:62:eb:cc:4b:37: 6f:df:a3:1b:0e:b0:d7:50:39:6f:16:af:02:3d:b3:97:3a:a2: ad:48:78:65 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOBwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ0NThaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKENCQkRGQjMxMjk3N0Q1 QzYzNjhEQjI2MjRGQjA1QjVFMjREQ0FFQzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7lOH1JrccT3c9Rx27e1t0S2KKph7zY7/c3hjjKUhaIqjGG0qS fvw0r5ppoPVJarLjo1/7+SsPqoHEUFPumPSLne8+BwuPF5Zv74NGLKPzJ8ppFW+s n0jMDMbqe28seUVz0Tv2Sg97kOmyP6DzF9izN0W5cRlEHeEFoQUjFwpPRRzA5qbF 6RQrEVCQLXXj59wjpJ5dwxSVqMI5gW9czwe+d2fpf9KCPNRj1dKLRivopsn63kMP qoax1YNQ4tfq3ufqs7i55vl1uoBDvD73U5UPIyRVo6iAQo4Atv7qtnaEHgB8AoSx uvuOiJhMmBTUJEMr+dhK5NWByhWdpBYXv11TAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUy737MSl31cY2jbJiT7BbXiTcrsAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3k3MzdNU2wzMWNZMmpiSmlU N0JiWGlUY3JzQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB2 6XYwDQYJKoZIhvcNAQELBQADggEBADC5a4mzwYI2ID8HzpQqxNLpnGZkIaQBUwHA klcSmTPhaB98ClITkd6plGSY5UyGqrQ9YL4z9bAqLtNbXQm5R4okbrsh8j2xnT97 kFR3E7k/h2K2yTk/dpuks/aiS0lTwDNvLBF8rvlcO1spYlr4LOy780PUFf2sUAQk 7DLsMM1LwH4k3HuRhR4L2J75xo61GVKu0LkIl6GzjaFF2MAkTI8IWVEM0boGEQOu e5VgUtZuA7fL4wIb7eNPpPyqxe6Vc7dfoahBRQYxVANZick0oBpuy64Ce/bgy/us wOkZR8pkseiRMdxi68xLN2/foxsOsNdQOW8WrwI9s5c6oq1IeGU= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:46 2025 by rpki-client