$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zUHC5V0Bq3o3XMs9SpywRDxFAWI.roa File: zUHC5V0Bq3o3XMs9SpywRDxFAWI.roa (raw, json) Hash identifier: kf0iuyKTEe26HZe5+zBi2ghKj3d6wr+MEJSRtC4dg/A= Subject key identifier: CD:41:C2:E5:5D:01:AB:7A:37:5C:CB:3D:4A:9C:B0:44:3C:45:01:62 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 38FE Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zUHC5V0Bq3o3XMs9SpywRDxFAWI.roa Signing time: Fri 22 Aug 2025 08:45:50 +0000 ROA not before: Fri 22 Aug 2025 08:45:50 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.193.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14590 (0x38fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:50 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=CD41C2E55D01AB7A375CCB3D4A9CB0443C450162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:99:72:34:dc:20:69:57:80:6d:6b:44:e1:f4: 42:7e:fd:49:64:92:73:2c:1e:c2:f5:9b:0e:4b:c9: ad:ec:fe:25:a9:81:24:34:80:10:18:68:fe:83:7b: f4:5f:c1:0f:77:81:f8:7b:24:09:35:4d:f8:fa:75: c7:16:18:3b:54:53:81:19:14:72:62:d6:d5:f3:44: bf:03:9b:00:b8:3e:db:b5:c8:a9:23:5b:9d:34:a0: b1:c6:68:04:ec:f8:ad:fb:16:85:22:85:84:20:45: 5f:2d:2b:07:f1:55:30:7c:90:23:6a:eb:f0:95:41: be:2d:0f:a1:79:37:59:9c:15:d3:9f:2c:b3:71:92: f7:b9:6f:37:ad:dc:47:9b:29:24:01:57:39:a3:06: 89:1a:89:7f:21:9c:11:e2:19:43:f8:20:56:58:aa: 87:e6:3b:5b:1d:c3:f3:d0:57:f2:76:37:bf:bc:f4: e5:95:22:83:8b:df:6a:fd:57:a0:b9:c9:bd:42:ad: 01:94:41:5b:87:21:22:2f:b2:a6:b3:ed:55:ab:77: f0:c4:90:b9:2d:8f:1b:a5:f8:2e:24:15:b3:51:7f: 1a:2e:d9:dc:31:db:40:65:48:b0:a3:b9:49:94:17: b4:ee:0b:71:8b:77:ca:50:e4:83:b9:0d:31:f2:00: 3a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:41:C2:E5:5D:01:AB:7A:37:5C:CB:3D:4A:9C:B0:44:3C:45:01:62 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zUHC5V0Bq3o3XMs9SpywRDxFAWI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.252.0/22 Signature Algorithm: sha256WithRSAEncryption 44:18:91:fd:08:67:65:c9:7b:42:21:98:b4:84:a3:bd:fd:97: 7b:14:e4:ea:0a:35:4c:02:92:a0:0f:a0:7c:a5:c3:92:9f:df: 73:05:a9:a3:84:5d:17:04:b3:f6:5f:37:b8:4d:c3:10:99:74: d1:67:80:7a:1f:66:ed:0f:da:55:c4:14:8c:73:e4:ad:fd:f9: b0:b3:0b:f7:d2:82:3b:bb:da:98:74:74:92:5e:6b:ba:7a:d5: 62:9f:7c:a9:85:e8:f1:a6:c4:b7:20:38:2b:10:12:1b:49:32: 97:e1:23:25:da:a1:73:fa:fd:63:10:25:3a:a2:96:87:c1:30: 88:17:b2:e3:79:ef:9d:02:e6:3f:4e:f0:40:2c:04:a1:a6:2f: d7:9d:f6:16:e9:92:27:f9:72:4c:64:cc:78:ba:a2:0a:05:52: bb:7d:29:96:fa:12:5c:0a:7a:14:f3:a8:54:0e:df:4e:b9:dd: cc:e4:47:c4:b2:97:1d:8e:2c:de:a4:04:7e:58:1b:37:3d:c1: 54:d7:25:ab:9c:0a:5e:c2:56:8e:15:b3:03:ef:23:d4:4e:f2: f1:90:92:e4:a6:f7:80:78:83:33:5c:13:da:54:55:09:ba:24: 5b:b8:4a:23:71:9c:8b:00:81:7c:92:f8:78:41:df:b7:d1:08: 11:4a:e1:00 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOP4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1NTBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKENENDFDMkU1NUQwMUFC N0EzNzVDQ0IzRDRBOUNCMDQ0M0M0NTAxNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvmXI03CBpV4Bta0Th9EJ+/UlkknMsHsL1mw5Lya3s/iWpgSQ0 gBAYaP6De/RfwQ93gfh7JAk1Tfj6dccWGDtUU4EZFHJi1tXzRL8DmwC4Ptu1yKkj W500oLHGaATs+K37FoUihYQgRV8tKwfxVTB8kCNq6/CVQb4tD6F5N1mcFdOfLLNx kve5bzet3EebKSQBVzmjBokaiX8hnBHiGUP4IFZYqofmO1sdw/PQV/J2N7+89OWV IoOL32r9V6C5yb1CrQGUQVuHISIvsqaz7VWrd/DEkLktjxul+C4kFbNRfxou2dwx 20BlSLCjuUmUF7TuC3GLd8pQ5IO5DTHyADorAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUzUHC5V0Bq3o3XMs9SpywRDxFAWIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3pVSEM1VjBCcTNvM1hNczlT cHl3UkR4RkFXSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wfwwDQYJKoZIhvcNAQELBQADggEBAEQYkf0IZ2XJe0IhmLSEo739l3sU5OoKNUwC kqAPoHylw5Kf33MFqaOEXRcEs/ZfN7hNwxCZdNFngHofZu0P2lXEFIxz5K39+bCz C/fSgju72ph0dJJea7p61WKffKmF6PGmxLcgOCsQEhtJMpfhIyXaoXP6/WMQJTqi lofBMIgXsuN5750C5j9O8EAsBKGmL9ed9hbpkif5ckxkzHi6ogoFUrt9KZb6ElwK ehTzqFQO30653czkR8Sylx2OLN6kBH5YGzc9wVTXJaucCl7CVo4VswPvI9RO8vGQ kuSm94B4gzNcE9pUVQm6JFu4SiNxnIsAgXyS+HhB37fRCBFK4QA= -----END CERTIFICATE-----Generated at Sun Aug 24 07:25:27 2025 by rpki-client