$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ywNJuZn7smJTNFJBohlKER9E07w.roa File: ywNJuZn7smJTNFJBohlKER9E07w.roa (raw, json) Hash identifier: do+WvLsiOjpCu4OJgwYd/RqSzrnMCFiL878sEmqoqY8= Subject key identifier: CB:03:49:B9:99:FB:B2:62:53:34:52:41:A2:19:4A:11:1F:44:D3:BC Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3820 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ywNJuZn7smJTNFJBohlKER9E07w.roa Signing time: Fri 22 Aug 2025 08:44:59 +0000 ROA not before: Fri 22 Aug 2025 08:44:59 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 106.1.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14368 (0x3820) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:44:59 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=CB0349B999FBB26253345241A2194A111F44D3BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:70:fb:d5:19:35:d1:1e:73:f7:57:28:bc:bf: 6b:8e:c1:1e:b3:c1:66:66:8f:d0:30:02:12:0b:e4: 13:da:03:de:35:06:32:2d:4e:e2:19:7b:ba:13:3f: dd:80:b2:9d:6c:89:0e:e7:af:30:c7:68:d3:fd:dd: 09:61:a9:f4:ad:ed:55:f3:d2:30:a6:c4:f7:2e:3b: 93:39:08:53:24:d3:13:b1:a5:21:5e:63:72:05:3d: 92:1f:5c:fd:2f:e2:df:0b:d8:2d:c3:fd:5a:fc:1c: 30:03:e9:1c:c8:cc:6b:fd:fa:e6:0e:5a:4b:f9:35: eb:b2:ac:db:c6:8f:39:bf:17:87:36:7f:d2:e0:be: 2d:ae:84:82:f6:8f:5a:ac:ce:8f:56:3d:fe:6a:f3: b1:ac:f4:f6:43:04:0c:b5:53:65:6e:5e:fc:88:bf: 4c:fa:6b:61:40:f5:78:0e:5d:ea:95:eb:f3:a2:04: f7:65:23:e2:10:68:c9:b3:30:d3:b0:ab:6b:db:4d: 96:52:c4:07:b1:bb:73:85:9e:0d:00:69:1f:99:14: 1c:6c:33:f7:fa:d5:53:aa:ff:5a:85:de:eb:47:b9: 9f:98:cf:f6:2b:72:d9:00:ef:be:35:b7:a2:70:28: b8:6d:cc:e3:d4:29:70:e4:af:ff:38:8f:a5:ee:37: 5a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:03:49:B9:99:FB:B2:62:53:34:52:41:A2:19:4A:11:1F:44:D3:BC X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ywNJuZn7smJTNFJBohlKER9E07w.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.236.0/24 Signature Algorithm: sha256WithRSAEncryption 66:00:e4:7e:5c:a3:73:36:00:b7:5d:cf:91:95:51:55:1b:19: ee:36:49:b0:bc:6d:d2:06:b6:e0:7b:36:a3:a8:6b:40:0d:49: 65:35:df:fb:08:4f:8d:be:40:09:4c:f3:5b:81:d1:b3:bb:43: d3:bd:c1:7a:2b:25:55:0e:2c:c3:e4:1a:b5:c3:1f:1c:66:c6: 5b:4e:e1:2a:67:1f:b9:b8:48:7c:ff:fc:f9:e2:ca:00:26:d3: 7e:5d:b1:79:12:34:3f:f8:4a:9a:46:53:80:65:01:e6:c4:c6: 8e:22:0c:74:9e:8a:3e:22:e1:90:43:ba:7d:4a:ac:e2:1a:74: ae:b4:16:dd:fb:08:b1:3c:81:ad:d8:be:da:45:ed:32:1d:22: ea:a4:7e:d1:16:6a:f9:9f:f2:b3:f3:fb:25:e9:87:54:a9:7c: 5f:1f:71:e1:b0:72:d5:50:47:8a:d7:ae:19:af:2d:35:ad:6a: 75:8e:30:60:ac:a6:e3:dc:1f:17:08:e8:18:88:17:f8:33:14: d4:c6:2d:28:39:9b:e2:62:65:f6:2c:41:14:94:df:ab:ca:72: d8:3f:ba:0b:f6:db:63:53:c4:a3:9e:14:e7:28:79:5a:49:dc: e4:34:00:3d:c1:0a:ae:5d:9f:91:2a:aa:6b:51:17:e7:45:5a: 7d:b8:35:c8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOCAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ0NTlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKENCMDM0OUI5OTlGQkIy NjI1MzM0NTI0MUEyMTk0QTExMUY0NEQzQkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDscPvVGTXRHnP3Vyi8v2uOwR6zwWZmj9AwAhIL5BPaA941BjIt TuIZe7oTP92Asp1siQ7nrzDHaNP93QlhqfSt7VXz0jCmxPcuO5M5CFMk0xOxpSFe Y3IFPZIfXP0v4t8L2C3D/Vr8HDAD6RzIzGv9+uYOWkv5NeuyrNvGjzm/F4c2f9Lg vi2uhIL2j1qszo9WPf5q87Gs9PZDBAy1U2VuXvyIv0z6a2FA9XgOXeqV6/OiBPdl I+IQaMmzMNOwq2vbTZZSxAexu3OFng0AaR+ZFBxsM/f61VOq/1qF3utHuZ+Yz/Yr ctkA7741t6JwKLhtzOPUKXDkr/84j6XuN1p9AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUywNJuZn7smJTNFJBohlKER9E07wwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3l3Tkp1Wm43c21KVE5GSkJv aGxLRVI5RTA3dy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq AewwDQYJKoZIhvcNAQELBQADggEBAGYA5H5co3M2ALddz5GVUVUbGe42SbC8bdIG tuB7NqOoa0ANSWU13/sIT42+QAlM81uB0bO7Q9O9wXorJVUOLMPkGrXDHxxmxltO 4SpnH7m4SHz//PniygAm035dsXkSND/4SppGU4BlAebExo4iDHSeij4i4ZBDun1K rOIadK60Ft37CLE8ga3YvtpF7TIdIuqkftEWavmf8rPz+yXph1SpfF8fceGwctVQ R4rXrhmvLTWtanWOMGCspuPcHxcI6BiIF/gzFNTGLSg5m+JiZfYsQRSU36vKctg/ ugv222NTxKOeFOcoeVpJ3OQ0AD3BCq5dn5EqqmtRF+dFWn24Ncg= -----END CERTIFICATE-----Generated at Sun Aug 24 07:26:33 2025 by rpki-client