$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1vtyGYiHwiL6aD5_H-i22QERas4.roa File: 1vtyGYiHwiL6aD5_H-i22QERas4.roa (raw, json) Hash identifier: 10X2qMG8EDWocHFgyW1ffGxmnLaWEhwxHTHg5Y42AZY= Subject key identifier: D6:FB:72:19:88:87:C2:22:FA:68:3E:7F:1F:E8:B6:D9:01:11:6A:CE Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3AEE Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1vtyGYiHwiL6aD5_H-i22QERas4.roa Signing time: Fri 22 Aug 2025 08:47:54 +0000 ROA not before: Fri 22 Aug 2025 08:47:54 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 118.232.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15086 (0x3aee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:54 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=D6FB72198887C222FA683E7F1FE8B6D901116ACE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0f:76:f0:dd:12:20:d3:1b:25:2b:98:a6:f9: 77:c3:7a:c0:8c:61:b7:3e:d3:25:57:cd:a4:b7:f7: ae:7c:10:e5:5f:16:b7:f6:d7:06:5f:4e:6c:ce:75: af:a9:13:84:a2:24:cc:d7:fc:f8:b5:99:a8:d7:90: 11:23:1f:a4:78:69:66:55:e0:3f:6f:f3:72:8d:34: ec:b4:06:da:8c:9f:46:5b:e4:02:41:15:ef:d5:98: d6:5c:3b:cc:a1:ff:ed:85:90:d4:97:db:ab:33:b6: 38:cf:e5:bd:50:97:ba:e8:11:36:37:00:5b:77:e5: ef:d0:5a:81:bd:a6:16:3f:d3:4f:fe:6a:54:2b:63: 19:42:21:48:2b:37:ff:b3:1e:00:4a:39:7a:04:f9: df:ca:13:e5:6e:21:ef:f8:60:41:04:ae:8d:a0:36: 27:ea:62:55:24:6b:55:da:ef:66:8c:7e:29:7f:c0: 78:36:d2:c0:33:d6:2d:51:0b:7d:76:0e:46:3b:da: 6e:1f:cd:57:8b:b0:e1:d1:e1:c3:b9:21:4c:94:d8: 06:ca:b8:c8:f3:8c:96:00:ca:4f:80:b9:5a:26:f8: 3e:02:7e:64:80:af:97:b1:75:33:a8:d4:c4:65:35: be:d1:5e:79:98:9c:5f:be:45:1b:50:b6:0e:ce:6c: cd:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:FB:72:19:88:87:C2:22:FA:68:3E:7F:1F:E8:B6:D9:01:11:6A:CE X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1vtyGYiHwiL6aD5_H-i22QERas4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.112.0/22 Signature Algorithm: sha256WithRSAEncryption 46:fa:ee:d4:f6:fe:50:c2:14:a0:0c:a5:79:77:c0:43:e9:65: 90:a3:a0:98:45:b5:8b:1e:db:97:67:26:cd:f8:78:13:4e:cf: 18:ec:aa:cd:92:35:c8:64:23:90:47:1d:59:ba:ba:ce:e8:32: 78:d7:3d:85:d4:46:8f:af:d5:ce:b5:ec:3b:f6:83:81:87:55: 42:58:30:a8:c7:34:ec:91:04:07:69:00:5b:40:d8:c3:42:70: db:b8:bc:31:5e:e4:c0:20:9f:c1:c4:b5:26:4a:e3:b6:76:0a: e2:05:0c:22:f7:f6:f9:de:6d:4f:36:c4:b0:7f:83:d4:d7:b3: bf:da:73:88:c2:75:98:42:d9:df:9b:46:28:30:d1:2e:0e:33: b0:09:3a:da:70:64:12:28:e1:cd:29:ad:f9:8e:15:16:1e:5f: 15:42:04:c8:33:40:7b:a2:df:d5:75:f6:c6:08:57:d4:d9:b5: d9:1b:7a:c1:f3:08:a6:0c:f8:83:b3:8b:e4:fc:b2:86:f1:b5: 3d:f2:9a:29:de:70:79:f1:a6:88:82:77:79:c2:25:6d:2f:61: 52:4b:a6:fe:24:f1:ec:f1:9f:5d:b3:99:02:a4:24:61:89:56: b5:7e:d2:e4:29:45:5f:9b:31:02:0b:a3:fe:eb:9a:14:0d:f0: 0b:9b:e8:b1 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOu4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3NTRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEQ2RkI3MjE5ODg4N0My MjJGQTY4M0U3RjFGRThCNkQ5MDExMTZBQ0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuD3bw3RIg0xslK5im+XfDesCMYbc+0yVXzaS39658EOVfFrf2 1wZfTmzOda+pE4SiJMzX/Pi1majXkBEjH6R4aWZV4D9v83KNNOy0BtqMn0Zb5AJB Fe/VmNZcO8yh/+2FkNSX26sztjjP5b1Ql7roETY3AFt35e/QWoG9phY/00/+alQr YxlCIUgrN/+zHgBKOXoE+d/KE+VuIe/4YEEEro2gNifqYlUka1Xa72aMfil/wHg2 0sAz1i1RC312DkY72m4fzVeLsOHR4cO5IUyU2AbKuMjzjJYAyk+AuVom+D4CfmSA r5exdTOo1MRlNb7RXnmYnF++RRtQtg7ObM2fAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU1vtyGYiHwiL6aD5/H+i22QERas4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzF2dHlHWWlId2lMNmFENV9I LWkyMlFFUmFzNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6HAwDQYJKoZIhvcNAQELBQADggEBAEb67tT2/lDCFKAMpXl3wEPpZZCjoJhFtYse 25dnJs34eBNOzxjsqs2SNchkI5BHHVm6us7oMnjXPYXURo+v1c617Dv2g4GHVUJY MKjHNOyRBAdpAFtA2MNCcNu4vDFe5MAgn8HEtSZK47Z2CuIFDCL39vnebU82xLB/ g9TXs7/ac4jCdZhC2d+bRigw0S4OM7AJOtpwZBIo4c0prfmOFRYeXxVCBMgzQHui 39V19sYIV9TZtdkbesHzCKYM+IOzi+T8sobxtT3yminecHnxpoiCd3nCJW0vYVJL pv4k8ezxn12zmQKkJGGJVrV+0uQpRV+bMQILo/7rmhQN8Aub6LE= -----END CERTIFICATE-----Generated at Fri Oct 24 19:27:42 2025 by rpki-client