$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3Gj-9YJC1P3ZDzhHMp73XmhGHPg.roa File: 3Gj-9YJC1P3ZDzhHMp73XmhGHPg.roa (raw, json) Hash identifier: U9+inZWxXmfdQ1ihbdf9J49kAUsdjpKm6GC+uF+d4+I= Subject key identifier: DC:68:FE:F5:82:42:D4:FD:D9:0F:38:47:32:9E:F7:5E:68:46:1C:F8 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3AA5 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3Gj-9YJC1P3ZDzhHMp73XmhGHPg.roa Signing time: Fri 22 Aug 2025 08:47:35 +0000 ROA not before: Fri 22 Aug 2025 08:47:35 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 106.1.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15013 (0x3aa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:35 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=DC68FEF58242D4FDD90F3847329EF75E68461CF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d7:c1:67:fa:8f:ff:17:82:28:b1:e0:71:6b: be:eb:bf:ea:9f:22:c4:e4:49:a8:e7:1a:48:09:94: ab:a3:33:e7:eb:0b:da:1b:94:9b:56:69:3b:e9:b7: c3:41:24:74:8c:7c:b2:b0:2f:95:15:79:0a:7e:a5: f3:43:c9:9b:8e:4c:6a:8b:01:84:45:9b:60:07:92: 82:47:cf:d8:e2:3c:14:5f:45:6f:9c:cf:1c:10:90: 93:d8:e8:52:97:a6:74:e3:2b:5b:1e:d5:00:d8:b7: 4d:3d:67:b2:d1:52:a6:20:a1:7a:12:01:fc:05:0f: 31:af:26:79:a2:8b:8a:81:ca:44:25:1a:a2:1a:cf: 93:cb:4f:d1:a7:d5:b0:4e:31:66:ce:aa:63:84:34: 76:df:87:4f:ab:7e:88:9a:64:2e:83:43:9e:e9:f2: d5:29:3d:a9:e4:14:2a:6e:1b:fc:9f:fc:1b:06:5c: c5:c4:99:69:8b:59:c9:11:16:44:de:07:6d:9e:a0: 61:75:ee:2a:e2:9e:1f:3d:30:84:ef:9e:87:9b:8d: d4:81:a5:ea:b4:d5:f7:f4:cc:34:18:53:ba:12:7b: 55:af:b3:20:f3:93:59:b6:37:c9:2c:44:fb:34:f4: ec:21:3c:d0:87:0d:bb:f4:35:37:cb:d5:b6:24:30: eb:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:68:FE:F5:82:42:D4:FD:D9:0F:38:47:32:9E:F7:5E:68:46:1C:F8 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3Gj-9YJC1P3ZDzhHMp73XmhGHPg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.135.0/24 Signature Algorithm: sha256WithRSAEncryption 76:4b:da:97:a0:8a:b6:64:48:e1:9b:25:f5:1f:6f:e5:61:17: c3:88:9a:bc:0f:28:8d:85:1d:34:16:78:9c:28:a4:80:85:27: 64:d6:1f:a3:f2:96:8f:ce:fe:d7:30:4f:2c:dd:d6:9f:8c:5e: 4d:85:64:3d:52:f8:25:17:9e:48:49:2f:f0:ab:ab:5c:9f:72: 93:27:ac:c1:e9:22:b5:b1:72:4a:15:36:c3:d1:40:01:de:aa: e4:91:7b:61:29:b8:ef:f3:dd:b3:6f:6c:77:cb:91:be:e6:72: 54:9a:b3:16:74:bb:35:96:c2:64:4f:3a:65:ee:c1:b2:0c:29: 1d:f3:17:6c:7c:2b:4b:1d:9e:32:1e:ac:98:5f:32:7d:a8:20: 0f:e6:04:2d:2a:d1:66:5e:2d:48:0c:1d:7d:8a:dd:72:60:36: 92:2b:d6:f4:94:41:0c:ff:47:a1:f4:a6:85:85:2e:a0:85:e8: bb:ce:ec:aa:8d:67:cd:ac:bf:f8:89:01:eb:f7:eb:47:cf:46: 1d:ff:64:eb:01:b0:c0:f2:30:b9:78:ac:58:88:ed:96:43:1e: df:35:09:4a:f3:23:32:aa:c2:a7:ed:0c:73:57:89:54:74:29: 2b:1b:97:40:0e:c7:57:02:45:72:fe:b9:05:74:84:04:8d:aa: 58:29:28:42 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOqUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3MzVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKERDNjhGRUY1ODI0MkQ0 RkREOTBGMzg0NzMyOUVGNzVFNjg0NjFDRjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCm18Fn+o//F4IoseBxa77rv+qfIsTkSajnGkgJlKujM+frC9ob lJtWaTvpt8NBJHSMfLKwL5UVeQp+pfNDyZuOTGqLAYRFm2AHkoJHz9jiPBRfRW+c zxwQkJPY6FKXpnTjK1se1QDYt009Z7LRUqYgoXoSAfwFDzGvJnmii4qBykQlGqIa z5PLT9Gn1bBOMWbOqmOENHbfh0+rfoiaZC6DQ57p8tUpPankFCpuG/yf/BsGXMXE mWmLWckRFkTeB22eoGF17irinh89MITvnoebjdSBpeq01ff0zDQYU7oSe1WvsyDz k1m2N8ksRPs09OwhPNCHDbv0NTfL1bYkMOsZAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU3Gj+9YJC1P3ZDzhHMp73XmhGHPgwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzNHai05WUpDMVAzWkR6aEhN cDczWG1oR0hQZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq AYcwDQYJKoZIhvcNAQELBQADggEBAHZL2pegirZkSOGbJfUfb+VhF8OImrwPKI2F HTQWeJwopICFJ2TWH6Pylo/O/tcwTyzd1p+MXk2FZD1S+CUXnkhJL/Crq1yfcpMn rMHpIrWxckoVNsPRQAHequSRe2EpuO/z3bNvbHfLkb7mclSasxZ0uzWWwmRPOmXu wbIMKR3zF2x8K0sdnjIerJhfMn2oIA/mBC0q0WZeLUgMHX2K3XJgNpIr1vSUQQz/ R6H0poWFLqCF6LvO7KqNZ82sv/iJAev360fPRh3/ZOsBsMDyMLl4rFiI7ZZDHt81 CUrzIzKqwqftDHNXiVR0KSsbl0AOx1cCRXL+uQV0hASNqlgpKEI= -----END CERTIFICATE-----Generated at Fri Oct 24 19:21:44 2025 by rpki-client