$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/38s05X8qpq8WjbySowjf0Sw9fH4.roa File: 38s05X8qpq8WjbySowjf0Sw9fH4.roa (raw, json) Hash identifier: dYo4PRuK6xZWtvNPKdDapU7COehzzT1MNo3xsLPqPIc= Subject key identifier: DF:CB:34:E5:7F:2A:A6:AF:16:8D:BC:92:A3:08:DF:D1:2C:3D:7C:7E Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3A16 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/38s05X8qpq8WjbySowjf0Sw9fH4.roa Signing time: Fri 22 Aug 2025 08:46:59 +0000 ROA not before: Fri 22 Aug 2025 08:46:59 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.192.0.0/14 maxlen: 15 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14870 (0x3a16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:59 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=DFCB34E57F2AA6AF168DBC92A308DFD12C3D7C7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:18:9b:8b:06:2e:c8:e7:a9:2d:09:88:40:85: f6:3b:af:4c:f5:f8:8a:fc:25:71:52:91:6f:6c:f4: 25:f1:e3:67:67:b3:16:ca:e4:21:63:80:ae:52:5d: e1:14:ea:9b:77:5e:f3:04:80:6e:4e:a0:26:61:d8: 07:46:3f:77:99:4e:85:87:fb:d4:0d:b2:a1:47:d5: 0c:11:84:64:ac:5c:33:bd:41:2e:62:cb:98:e8:ef: d3:00:21:7a:f7:64:83:c1:e5:fb:75:02:6e:9a:09: 0b:1e:ec:30:81:fb:ce:ba:99:05:27:a7:3f:de:f0: 42:07:05:ac:f5:cc:d4:c7:47:08:04:bb:3e:25:dc: d8:b3:81:fd:73:21:fd:70:47:3f:9a:02:ac:de:c6: da:5f:da:92:df:cf:0d:bd:6d:c6:16:11:2c:42:6c: 31:74:e4:13:fa:e0:68:59:1d:2b:05:59:2a:10:9b: 94:2e:d0:52:3b:35:d9:f4:3d:2f:3c:7b:59:03:8b: 2f:ea:ed:13:94:32:c0:58:08:9c:9b:f5:43:e0:fe: 48:4c:53:64:62:ca:a9:54:06:7c:82:64:29:e1:70: 71:36:85:31:bf:14:ab:7f:dd:b5:4d:f2:af:50:86: 0a:e5:66:80:ea:d1:cc:2f:b6:71:93:55:e5:f8:70: 56:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:CB:34:E5:7F:2A:A6:AF:16:8D:BC:92:A3:08:DF:D1:2C:3D:7C:7E X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/38s05X8qpq8WjbySowjf0Sw9fH4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.0.0/14 Signature Algorithm: sha256WithRSAEncryption 3a:53:bf:02:4c:d3:ce:8d:b1:04:77:96:a4:c8:45:bf:f7:cc: fa:af:68:11:f4:40:6d:65:16:a2:48:ce:19:4a:d0:02:7b:5e: 67:0b:31:61:4f:84:ba:96:7f:bb:91:9b:6c:46:11:84:69:23: a5:63:7d:a1:65:7f:eb:92:d8:34:32:6d:88:a7:89:a2:5b:01: 01:cd:64:b7:80:4b:eb:4a:8b:16:c7:40:1a:b7:8a:94:b4:1f: 02:70:72:7d:06:58:ad:fb:72:46:c4:24:1e:a2:89:88:1d:f4: 47:aa:5d:e3:13:d4:fc:d3:66:4c:91:ad:1d:e1:50:e7:33:26: 7a:6f:0c:f3:30:ab:df:96:51:09:79:2e:91:25:29:37:45:6c: 8f:fc:7c:2e:55:dc:50:d5:8b:6e:b4:55:d7:48:97:3e:15:88: 73:0b:42:48:77:de:40:2e:8b:b6:8e:15:a6:96:e1:1a:f3:e9: 26:11:e3:13:af:85:24:fe:3b:66:23:2e:17:24:02:58:21:53: b1:c5:6b:6d:1a:d5:22:a8:d1:fc:59:96:63:a3:e6:46:60:8d: bc:39:31:92:9a:8b:6d:56:62:e5:e0:da:64:63:b4:41:c7:d7: d7:2a:80:a5:77:45:89:0f:d4:af:e8:7d:c9:67:2f:f4:ed:9e: b5:b9:90:92 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICOhYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2NTlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKERGQ0IzNEU1N0YyQUE2 QUYxNjhEQkM5MkEzMDhERkQxMkMzRDdDN0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/GJuLBi7I56ktCYhAhfY7r0z1+Ir8JXFSkW9s9CXx42dnsxbK 5CFjgK5SXeEU6pt3XvMEgG5OoCZh2AdGP3eZToWH+9QNsqFH1QwRhGSsXDO9QS5i y5jo79MAIXr3ZIPB5ft1Am6aCQse7DCB+866mQUnpz/e8EIHBaz1zNTHRwgEuz4l 3Nizgf1zIf1wRz+aAqzextpf2pLfzw29bcYWESxCbDF05BP64GhZHSsFWSoQm5Qu 0FI7Ndn0PS88e1kDiy/q7ROUMsBYCJyb9UPg/khMU2RiyqlUBnyCZCnhcHE2hTG/ FKt/3bVN8q9QhgrlZoDq0cwvtnGTVeX4cFbpAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQU38s05X8qpq8WjbySowjf0Sw9fH4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzM4czA1WDhxcHE4V2pieVNv d2pmMFN3OWZINC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwJ7 wDANBgkqhkiG9w0BAQsFAAOCAQEAOlO/AkzTzo2xBHeWpMhFv/fM+q9oEfRAbWUW okjOGUrQAnteZwsxYU+EupZ/u5GbbEYRhGkjpWN9oWV/65LYNDJtiKeJolsBAc1k t4BL60qLFsdAGreKlLQfAnByfQZYrftyRsQkHqKJiB30R6pd4xPU/NNmTJGtHeFQ 5zMmem8M8zCr35ZRCXkukSUpN0Vsj/x8LlXcUNWLbrRV10iXPhWIcwtCSHfeQC6L to4VppbhGvPpJhHjE6+FJP47ZiMuFyQCWCFTscVrbRrVIqjR/FmWY6PmRmCNvDkx kpqLbVZi5eDaZGO0QcfX1yqApXdFiQ/Ur+h9yWcv9O2etbmQkg== -----END CERTIFICATE-----Generated at Fri Oct 24 19:27:19 2025 by rpki-client