$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yXiIyqXhC1S1NLzHXTiNor--L8A.roa File: yXiIyqXhC1S1NLzHXTiNor--L8A.roa (raw, json) Hash identifier: uRBqHuaP6Y8iQ2HxdasZVGV6gpVOD3JDg//yM6UWMUo= Subject key identifier: C9:78:88:CA:A5:E1:0B:54:B5:34:BC:C7:5D:38:8D:A2:BF:BE:2F:C0 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3884 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yXiIyqXhC1S1NLzHXTiNor--L8A.roa Signing time: Fri 22 Aug 2025 08:45:22 +0000 ROA not before: Fri 22 Aug 2025 08:45:22 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9924 IP address blocks: 118.232.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14468 (0x3884) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:22 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=C97888CAA5E10B54B534BCC75D388DA2BFBE2FC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f5:e0:ff:11:4f:44:28:9b:30:b9:ff:56:d4: fb:5f:2a:61:c1:e3:80:10:48:17:93:74:c9:c5:cb: ec:60:19:c1:28:7e:b4:21:0a:3f:3e:6d:cd:4a:b0: 82:b1:f1:5b:84:65:21:e1:c0:3e:24:68:d7:89:cb: 2a:06:ee:05:22:01:b6:bf:be:43:16:64:c5:f5:e4: cb:83:58:3a:ea:1e:80:25:dc:8a:d2:21:b0:f4:14: 3e:f6:29:91:ad:1b:c7:6b:77:06:89:07:f7:db:2e: e9:95:df:65:ca:61:bb:f0:e0:90:30:dd:37:28:40: ca:20:2b:93:f6:4c:ba:a1:c9:59:d8:93:45:0f:f7: 17:2e:2f:03:b4:00:fa:eb:a8:38:19:7e:78:6d:4d: a4:f6:5a:2c:5e:b1:07:3a:bc:e8:2e:83:f8:af:9c: db:bb:08:c0:ba:54:28:7d:bc:79:a7:ea:d7:cc:d7: 45:a6:ae:30:6e:2d:f9:ad:a7:e1:35:ba:c8:04:1f: a5:55:91:f2:bc:8d:a7:c7:0e:6d:b0:9c:09:69:f9: 4b:ef:c0:f6:4b:d4:96:4e:08:30:f8:34:12:83:8f: 55:52:1b:ce:d5:fc:e1:a0:bd:3f:fd:fa:40:78:99: c0:cd:b6:5e:13:92:6d:b8:20:19:ce:b2:e7:e7:f7: fe:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:78:88:CA:A5:E1:0B:54:B5:34:BC:C7:5D:38:8D:A2:BF:BE:2F:C0 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yXiIyqXhC1S1NLzHXTiNor--L8A.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.192.0/19 Signature Algorithm: sha256WithRSAEncryption 34:ad:bd:25:d1:f3:8f:1f:a2:de:d9:f4:73:41:1d:cf:32:11: e0:fe:51:52:b0:a4:87:e6:51:0b:93:a8:98:ea:97:9c:53:00: 25:f1:76:f6:2b:8f:54:7d:38:9a:ac:00:2e:60:20:e0:0b:87: ca:12:13:98:cb:03:5d:f7:86:ea:29:60:f2:c4:7d:73:70:42: fd:04:37:cb:9e:7f:1f:b3:97:1a:38:44:29:59:05:07:54:9c: 19:91:58:dd:71:0a:75:e7:2d:35:66:3e:a9:2d:c7:39:fc:be: c0:d7:5d:a0:04:25:c1:3c:42:cd:f4:40:66:12:1e:7b:77:31: 20:e9:de:2a:64:85:2a:4c:11:ba:2e:cc:83:b4:b9:89:72:ac: 5c:5e:cd:c4:a9:ce:da:a4:f8:56:5d:58:03:3c:33:c1:34:c3: 98:49:11:8f:b6:f4:cf:a2:48:db:12:04:f5:fb:1a:85:7c:f1: 61:41:4f:e5:11:8a:a1:66:d4:2e:35:14:4c:68:ba:1c:22:77: 84:b5:ca:b0:80:44:62:61:94:bf:78:7a:54:25:c8:00:9f:6f: 4e:c4:a1:c6:53:5b:ee:bd:d6:67:f7:18:aa:de:5d:44:b1:0f: b1:a3:ab:34:96:8b:d4:5b:e9:f9:9d:e4:2f:81:e8:70:42:32: 6f:2d:02:3c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOIQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1MjJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEM5Nzg4OENBQTVFMTBC NTRCNTM0QkNDNzVEMzg4REEyQkZCRTJGQzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCx9eD/EU9EKJswuf9W1PtfKmHB44AQSBeTdMnFy+xgGcEofrQh Cj8+bc1KsIKx8VuEZSHhwD4kaNeJyyoG7gUiAba/vkMWZMX15MuDWDrqHoAl3IrS IbD0FD72KZGtG8drdwaJB/fbLumV32XKYbvw4JAw3TcoQMogK5P2TLqhyVnYk0UP 9xcuLwO0APrrqDgZfnhtTaT2WixesQc6vOgug/ivnNu7CMC6VCh9vHmn6tfM10Wm rjBuLfmtp+E1usgEH6VVkfK8jafHDm2wnAlp+UvvwPZL1JZOCDD4NBKDj1VSG87V /OGgvT/9+kB4mcDNtl4Tkm24IBnOsufn9/6FAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUyXiIyqXhC1S1NLzHXTiNor++L8AwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3lYaUl5cVhoQzFTMU5MekhY VGlOb3ItLUw4QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV2 6MAwDQYJKoZIhvcNAQELBQADggEBADStvSXR848fot7Z9HNBHc8yEeD+UVKwpIfm UQuTqJjql5xTACXxdvYrj1R9OJqsAC5gIOALh8oSE5jLA133huopYPLEfXNwQv0E N8uefx+zlxo4RClZBQdUnBmRWN1xCnXnLTVmPqktxzn8vsDXXaAEJcE8Qs30QGYS Hnt3MSDp3ipkhSpMEbouzIO0uYlyrFxezcSpztqk+FZdWAM8M8E0w5hJEY+29M+i SNsSBPX7GoV88WFBT+URiqFm1C41FExouhwid4S1yrCARGJhlL94elQlyACfb07E ocZTW+691mf3GKreXUSxD7GjqzSWi9Rb6fmd5C+B6HBCMm8tAjw= -----END CERTIFICATE-----Generated at Sun Aug 24 07:33:18 2025 by rpki-client