$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zhiCsqBop7EIh4FUJ_wUkb0oJ0k.roa File: zhiCsqBop7EIh4FUJ_wUkb0oJ0k.roa (raw, json) Hash identifier: SAomziS0a6pS9Wl0h7Q8MdVxD9GM8zuMboD6LkaL1HE= Subject key identifier: CE:18:82:B2:A0:68:A7:B1:08:87:81:54:27:FC:14:91:BD:28:27:49 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 38CB Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zhiCsqBop7EIh4FUJ_wUkb0oJ0k.roa Signing time: Fri 22 Aug 2025 08:45:38 +0000 ROA not before: Fri 22 Aug 2025 08:45:38 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.195.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14539 (0x38cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:38 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=CE1882B2A068A7B10887815427FC1491BD282749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fc:06:7e:b5:11:8e:7c:a4:f9:9f:22:59:c8: 03:62:d4:09:be:be:d0:84:f3:a8:ef:87:17:f0:8e: ef:90:7d:c7:f4:38:b4:5c:12:c5:00:b3:42:e3:d9: 48:d2:a9:a4:24:72:3b:4e:ea:0a:5c:13:c9:7f:d6: 6e:ae:77:f9:22:f7:7b:a4:cf:37:aa:18:b5:2e:16: ba:ee:da:94:f6:1a:f7:c3:39:88:c5:63:23:01:5c: bf:54:41:4c:2e:6a:06:27:87:8e:bd:81:8a:52:d3: f3:91:c0:55:e6:99:b7:a7:92:3e:82:9d:6e:38:8c: 8d:61:f0:81:8d:d0:81:f2:da:ba:55:68:e4:3c:2f: c6:ab:fa:13:3e:4b:54:79:73:53:3e:40:ed:e7:20: d3:9d:40:b3:1a:76:f0:20:77:04:b6:5b:b2:f8:15: 24:00:df:40:95:aa:20:54:9a:68:44:b0:e3:eb:0e: 8f:cf:28:2c:a2:87:8e:3a:9b:15:89:dd:93:0d:22: c6:2c:dd:3f:44:a9:80:72:54:ea:b8:ce:a4:ff:5e: cc:64:69:ac:1a:54:18:9c:73:39:98:33:f4:ef:b9: 27:b3:6f:73:59:fa:9e:53:ad:c1:ad:8f:90:67:f9: 48:a0:23:6a:4e:59:55:22:c0:d5:2e:a8:52:49:7e: c3:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:18:82:B2:A0:68:A7:B1:08:87:81:54:27:FC:14:91:BD:28:27:49 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zhiCsqBop7EIh4FUJ_wUkb0oJ0k.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.224.0/22 Signature Algorithm: sha256WithRSAEncryption aa:ef:78:13:67:3e:88:fe:82:93:45:41:8f:b5:5f:7e:7a:19: f6:cb:35:0b:62:a0:b2:28:a9:3a:ac:48:19:05:37:46:47:d7: 9e:70:16:be:1b:21:1a:67:a0:95:6b:93:84:67:01:41:bb:db: ee:14:d4:00:9e:85:8c:9b:fd:33:5b:e3:8f:be:9b:23:ac:bd: f8:ca:41:76:b1:e0:28:f0:f6:aa:30:ae:6a:d0:c0:85:b5:b6: 01:ed:72:29:b6:1a:72:68:07:58:f5:41:ce:05:a2:41:c8:14: ff:21:4e:bf:72:31:e0:80:ca:79:0c:62:3c:7d:b4:e2:ee:6f: 85:e2:2a:27:f9:1e:0c:be:d5:f4:bf:23:a6:a9:4b:13:9c:40: 57:23:6d:d4:07:0a:7d:85:b6:bd:32:8b:ed:09:f1:49:9f:3d: 56:58:1e:cb:db:00:bf:70:8e:df:c0:dc:c3:25:af:06:1d:8b: 8a:71:9b:78:12:4d:5c:72:8a:ea:0d:dd:19:f7:73:37:79:86: 1f:bd:4e:34:bc:97:7f:7f:54:fc:27:59:8c:ad:e1:94:84:db: 66:4e:85:b1:bb:b4:35:b1:68:4e:4c:60:3b:3d:d5:f0:33:e6: 5f:35:3c:0d:98:92:43:45:31:f5:70:a4:e1:a8:2e:26:a1:97: d9:7a:5d:48 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOMswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1MzhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKENFMTg4MkIyQTA2OEE3 QjEwODg3ODE1NDI3RkMxNDkxQkQyODI3NDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4/AZ+tRGOfKT5nyJZyANi1Am+vtCE86jvhxfwju+Qfcf0OLRc EsUAs0Lj2UjSqaQkcjtO6gpcE8l/1m6ud/ki93ukzzeqGLUuFrru2pT2GvfDOYjF YyMBXL9UQUwuagYnh469gYpS0/ORwFXmmbenkj6CnW44jI1h8IGN0IHy2rpVaOQ8 L8ar+hM+S1R5c1M+QO3nINOdQLMadvAgdwS2W7L4FSQA30CVqiBUmmhEsOPrDo/P KCyih446mxWJ3ZMNIsYs3T9EqYByVOq4zqT/XsxkaawaVBicczmYM/TvuSezb3NZ +p5TrcGtj5Bn+UigI2pOWVUiwNUuqFJJfsN1AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUzhiCsqBop7EIh4FUJ/wUkb0oJ0kwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3poaUNzcUJvcDdFSWg0RlVK X3dVa2Iwb0oway5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 w+AwDQYJKoZIhvcNAQELBQADggEBAKrveBNnPoj+gpNFQY+1X356GfbLNQtioLIo qTqsSBkFN0ZH155wFr4bIRpnoJVrk4RnAUG72+4U1ACehYyb/TNb44++myOsvfjK QXax4Cjw9qowrmrQwIW1tgHtcim2GnJoB1j1Qc4FokHIFP8hTr9yMeCAynkMYjx9 tOLub4XiKif5Hgy+1fS/I6apSxOcQFcjbdQHCn2Ftr0yi+0J8UmfPVZYHsvbAL9w jt/A3MMlrwYdi4pxm3gSTVxyiuoN3Rn3czd5hh+9TjS8l39/VPwnWYyt4ZSE22ZO hbG7tDWxaE5MYDs91fAz5l81PA2YkkNFMfVwpOGoLiahl9l6XUg= -----END CERTIFICATE-----Generated at Sun Aug 24 07:24:14 2025 by rpki-client