$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/28EK58MkXaJblK1K90yS_jLFBxY.roa File: 28EK58MkXaJblK1K90yS_jLFBxY.roa (raw, json) Hash identifier: I+B144LLPbNnYc8SWCz27JSBfotCUug/G6NIXoQSdtk= Subject key identifier: DB:C1:0A:E7:C3:24:5D:A2:5B:94:AD:4A:F7:4C:92:FE:32:C5:07:16 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 393B Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/28EK58MkXaJblK1K90yS_jLFBxY.roa Signing time: Fri 22 Aug 2025 08:46:06 +0000 ROA not before: Fri 22 Aug 2025 08:46:06 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 106.1.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14651 (0x393b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:06 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=DBC10AE7C3245DA25B94AD4AF74C92FE32C50716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e1:32:a0:43:c2:6e:75:4c:77:45:44:17:2f: f2:be:8a:f4:ef:49:07:64:b2:8a:e4:4a:3d:da:30: 7a:7f:a0:20:b2:e5:d8:5b:20:99:4c:7c:23:9c:5d: 24:24:67:95:9a:90:9f:5e:cb:b1:a9:99:05:e4:70: 06:7e:e7:73:3f:0f:a6:a5:c0:56:57:c2:4c:8a:86: 3d:2e:be:76:db:f8:82:65:8d:66:88:5b:b3:05:5a: 8a:bc:56:4e:fd:71:f5:82:f3:a9:6d:2e:5f:0b:d1: 59:1c:74:06:17:10:50:3a:e5:81:56:ad:6e:64:2d: 80:f9:d5:d7:e5:dd:b2:67:77:3a:81:40:bc:ff:7b: 8d:70:e9:58:18:26:32:fa:b3:57:fb:ac:1c:00:98: 11:3c:9b:83:5f:54:e8:5a:77:76:26:4f:72:fe:31: 9d:3e:2d:d6:44:8b:3d:b7:33:59:5b:4d:76:e2:34: 8a:fc:76:4d:9c:93:ad:96:b7:22:53:38:03:97:e6: a5:3f:db:60:ad:99:66:6a:73:4d:6f:9a:ed:4b:1d: 2c:35:6d:c3:5d:5a:a6:f2:da:18:17:ed:07:db:ce: 5b:4f:f0:e5:83:36:53:59:f2:0f:87:67:58:49:5b: 9a:a7:37:d7:aa:2d:10:45:b3:b4:58:84:43:37:ed: 98:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:C1:0A:E7:C3:24:5D:A2:5B:94:AD:4A:F7:4C:92:FE:32:C5:07:16 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/28EK58MkXaJblK1K90yS_jLFBxY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.206.0/24 Signature Algorithm: sha256WithRSAEncryption a8:97:31:10:8f:6b:8f:e2:fa:5d:13:6c:90:45:0d:19:2b:59: e8:73:bc:ce:30:fb:02:0d:fb:cd:7c:d4:56:0d:e4:b3:1d:70: 2c:a3:a3:5c:13:68:9a:95:de:9c:fe:cb:5f:07:9d:f6:68:1f: d2:75:ce:b7:76:f8:05:76:1a:55:4d:64:4b:9c:cf:26:0c:86: d4:ae:28:de:dd:d3:74:4b:cb:d4:70:35:11:93:bc:0e:06:1d: 3c:7b:19:57:c9:cd:b9:7c:20:87:35:90:16:41:dc:ff:79:14: 85:59:08:60:23:d5:37:71:d7:e8:6e:c9:f8:ce:3d:ed:7b:cc: 5b:47:00:8a:ce:70:32:d3:d3:de:95:1b:11:26:99:e1:f6:fd: 79:68:94:06:03:15:34:6d:19:5b:af:31:64:70:3f:62:c1:96: b3:61:53:e5:34:f4:4d:8b:2b:e2:f2:59:08:fe:37:f0:3c:e6: 48:76:0e:56:04:e6:2f:4f:b7:1b:5d:ed:3b:99:af:2a:0e:c4: c7:47:14:c3:b4:45:bf:b0:28:31:67:bb:68:0b:66:05:90:6c: b7:a9:6b:57:87:a2:07:da:dc:51:7f:6a:07:0e:e9:d2:1f:f3: 53:01:3b:03:28:15:aa:0c:70:f7:e3:9c:d1:f6:d1:a9:65:e5: 19:e5:3b:17 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOTswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2MDZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKERCQzEwQUU3QzMyNDVE QTI1Qjk0QUQ0QUY3NEM5MkZFMzJDNTA3MTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC04TKgQ8JudUx3RUQXL/K+ivTvSQdksorkSj3aMHp/oCCy5dhb IJlMfCOcXSQkZ5WakJ9ey7GpmQXkcAZ+53M/D6alwFZXwkyKhj0uvnbb+IJljWaI W7MFWoq8Vk79cfWC86ltLl8L0VkcdAYXEFA65YFWrW5kLYD51dfl3bJndzqBQLz/ e41w6VgYJjL6s1f7rBwAmBE8m4NfVOhad3YmT3L+MZ0+LdZEiz23M1lbTXbiNIr8 dk2ck62WtyJTOAOX5qU/22CtmWZqc01vmu1LHSw1bcNdWqby2hgX7QfbzltP8OWD NlNZ8g+HZ1hJW5qnN9eqLRBFs7RYhEM37ZihAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU28EK58MkXaJblK1K90yS/jLFBxYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzI4RUs1OE1rWGFKYmxLMUs5 MHlTX2pMRkJ4WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq Ac4wDQYJKoZIhvcNAQELBQADggEBAKiXMRCPa4/i+l0TbJBFDRkrWehzvM4w+wIN +8181FYN5LMdcCyjo1wTaJqV3pz+y18HnfZoH9J1zrd2+AV2GlVNZEuczyYMhtSu KN7d03RLy9RwNRGTvA4GHTx7GVfJzbl8IIc1kBZB3P95FIVZCGAj1Tdx1+huyfjO Pe17zFtHAIrOcDLT096VGxEmmeH2/XlolAYDFTRtGVuvMWRwP2LBlrNhU+U09E2L K+LyWQj+N/A85kh2DlYE5i9Ptxtd7TuZryoOxMdHFMO0Rb+wKDFnu2gLZgWQbLep a1eHogfa3FF/agcO6dIf81MBOwMoFaoMcPfjnNH20all5RnlOxc= -----END CERTIFICATE-----Generated at Fri Oct 24 19:24:31 2025 by rpki-client