$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2FVCfcGpFsgWuiee-gv2or-Pryg.roa File: 2FVCfcGpFsgWuiee-gv2or-Pryg.roa (raw, json) Hash identifier: VrDRd6YGD9QHKPdeyNyd7C35r6NCVh+xemjraa4Itpw= Subject key identifier: D8:55:42:7D:C1:A9:16:C8:16:BA:27:9E:FA:0B:F6:A2:BF:8F:AF:28 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3A5B Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2FVCfcGpFsgWuiee-gv2or-Pryg.roa Signing time: Fri 22 Aug 2025 08:47:16 +0000 ROA not before: Fri 22 Aug 2025 08:47:16 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 118.233.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14939 (0x3a5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:16 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=D855427DC1A916C816BA279EFA0BF6A2BF8FAF28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:bd:e1:10:22:de:44:ce:cf:00:a6:8b:5c:b9: 12:11:8a:b7:ee:c4:03:fa:d2:83:3a:3d:63:db:d2: 0a:21:f7:ba:ab:26:ec:65:e7:57:fe:10:7b:f1:f1: 83:7d:27:d0:07:e7:49:58:32:56:eb:3f:4a:ce:eb: 9f:ff:fa:c5:1e:01:c2:63:67:fa:57:6b:0b:48:b4: 11:d6:db:c1:b7:62:3f:42:5e:82:0e:4b:a2:02:ce: 19:93:dd:ee:52:9b:f6:8a:fd:12:e8:03:f4:08:27: fd:77:6b:7e:aa:2c:0a:7d:5c:22:c1:f9:a7:a0:05: 4f:2f:da:b8:0d:d7:65:f3:ed:92:eb:19:83:33:36: 56:42:59:67:ca:97:f0:41:23:00:d2:a2:cd:cf:b8: 3b:ea:e3:f7:af:79:7d:7c:cf:c4:ac:01:21:2b:84: a4:fa:6e:17:29:5d:5a:ad:78:58:40:4c:64:c2:62: ae:06:98:1c:c8:8b:26:35:9a:0b:70:df:14:c8:74: 8d:d1:6f:8b:b0:a6:7a:30:ea:54:60:90:18:bb:95: cd:ba:f2:59:30:bf:f0:cf:da:89:bb:32:e1:fb:dc: de:ea:04:54:01:84:fb:a0:19:f0:2d:c5:26:37:bb: 15:ab:9e:75:c5:06:e8:50:85:d3:c1:0e:d1:98:c5: 19:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:55:42:7D:C1:A9:16:C8:16:BA:27:9E:FA:0B:F6:A2:BF:8F:AF:28 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2FVCfcGpFsgWuiee-gv2or-Pryg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.224.0/22 Signature Algorithm: sha256WithRSAEncryption 7d:84:01:ba:6f:d0:31:ae:36:04:ae:1a:46:5f:8e:f5:93:88: c3:96:8a:44:49:fb:f6:ca:03:19:f0:c7:73:2d:e1:d8:31:d4: 94:c6:55:25:76:d9:88:8f:e6:4f:23:94:49:78:6e:0b:0b:53: 5b:30:9e:9f:66:d7:3b:a4:44:d8:77:f1:d0:80:46:6f:32:90: 01:a6:8c:8c:52:c7:46:3e:e6:78:e2:96:b1:c3:9e:72:92:92: f0:a4:96:62:0f:56:f4:1a:8f:b4:3b:d2:a4:4f:6f:ef:43:aa: 39:6a:af:cc:6a:f4:01:5d:2b:9c:38:b1:36:bd:4f:17:0d:5b: a9:88:4c:13:4c:1b:3f:e5:fe:7e:af:52:0d:50:26:ba:aa:91: c5:48:45:8f:15:a6:35:bf:68:29:ba:26:ea:13:3d:bc:25:6c: 4a:1a:72:f9:9e:af:ca:17:c2:23:5a:f6:4b:08:61:9f:21:2d: da:f4:8c:b1:03:c6:5e:c0:7b:79:64:42:20:c8:f6:79:6f:4f: 3d:96:f0:6c:5e:77:06:1a:17:85:4d:21:1c:7a:ff:76:7a:a4: a7:45:59:61:89:6c:c9:70:4b:8e:88:78:9c:af:68:5a:ec:e9: 90:1b:72:d8:06:29:f6:7b:1f:d6:e5:6f:53:2f:55:b7:82:2b: 59:e3:25:90 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOlswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3MTZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEQ4NTU0MjdEQzFBOTE2 QzgxNkJBMjc5RUZBMEJGNkEyQkY4RkFGMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCZveEQIt5Ezs8ApotcuRIRirfuxAP60oM6PWPb0goh97qrJuxl 51f+EHvx8YN9J9AH50lYMlbrP0rO65//+sUeAcJjZ/pXawtItBHW28G3Yj9CXoIO S6ICzhmT3e5Sm/aK/RLoA/QIJ/13a36qLAp9XCLB+aegBU8v2rgN12Xz7ZLrGYMz NlZCWWfKl/BBIwDSos3PuDvq4/eveX18z8SsASErhKT6bhcpXVqteFhATGTCYq4G mBzIiyY1mgtw3xTIdI3Rb4uwpnow6lRgkBi7lc268lkwv/DP2om7MuH73N7qBFQB hPugGfAtxSY3uxWrnnXFBuhQhdPBDtGYxRlHAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU2FVCfcGpFsgWuiee+gv2or+PrygwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzJGVkNmY0dwRnNnV3VpZWUt Z3Yyb3ItUHJ5Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6eAwDQYJKoZIhvcNAQELBQADggEBAH2EAbpv0DGuNgSuGkZfjvWTiMOWikRJ+/bK Axnwx3Mt4dgx1JTGVSV22YiP5k8jlEl4bgsLU1swnp9m1zukRNh38dCARm8ykAGm jIxSx0Y+5njilrHDnnKSkvCklmIPVvQaj7Q70qRPb+9Dqjlqr8xq9AFdK5w4sTa9 TxcNW6mITBNMGz/l/n6vUg1QJrqqkcVIRY8VpjW/aCm6JuoTPbwlbEoacvmer8oX wiNa9ksIYZ8hLdr0jLEDxl7Ae3lkQiDI9nlvTz2W8GxedwYaF4VNIRx6/3Z6pKdF WWGJbMlwS46IeJyvaFrs6ZAbctgGKfZ7H9blb1MvVbeCK1njJZA= -----END CERTIFICATE-----Generated at Fri Oct 24 19:18:37 2025 by rpki-client