$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3lexq5Zs2XPvB5cN6huGJdB_jEg.roa File: 3lexq5Zs2XPvB5cN6huGJdB_jEg.roa (raw, json) Hash identifier: rX1yac74TTUvUWmsAZ6viKlEDP6HThkEdCoo8v1DH3k= Subject key identifier: DE:57:B1:AB:96:6C:D9:73:EF:07:97:0D:EA:1B:86:25:D0:7F:8C:48 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 395F Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3lexq5Zs2XPvB5cN6huGJdB_jEg.roa Signing time: Fri 22 Aug 2025 08:46:14 +0000 ROA not before: Fri 22 Aug 2025 08:46:14 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 118.232.196.0/22 maxlen: 27 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14687 (0x395f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:14 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=DE57B1AB966CD973EF07970DEA1B8625D07F8C48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:04:6e:c2:ce:9c:eb:97:41:af:61:ff:21:22: 38:80:8f:01:bd:ae:fa:af:25:d1:66:17:9b:71:83: 8f:40:ba:1d:20:f8:40:9a:83:9b:8c:db:ae:1e:cb: 0a:bf:df:7c:95:b5:37:e5:06:b6:29:29:b7:b7:5e: ea:66:94:a7:fe:84:d0:75:5b:13:1b:ce:91:e4:f0: 57:0d:2b:93:31:1e:e2:bf:8f:bf:25:e6:cb:9b:49: 44:e8:94:56:54:17:b2:cc:95:f8:7d:c0:d3:92:d5: 81:bf:b6:a6:23:6a:b0:1e:ff:94:3b:ce:c0:2d:f3: 69:ae:67:3d:1a:10:8c:5e:4b:da:69:eb:26:5f:bd: cd:81:f7:f6:c8:c5:3d:2a:2f:d1:6d:e6:00:d7:ba: 06:89:72:bb:e9:2b:5c:4d:9f:23:01:28:9e:65:57: a4:7c:4b:87:a7:ca:11:41:81:66:30:16:4d:71:1e: ef:63:1e:86:a2:3e:87:8a:24:64:8f:c8:37:ce:d3: f0:a3:c4:e8:68:62:08:58:97:cf:55:46:02:c5:e1: 41:04:f8:27:12:0d:8a:32:34:af:46:23:e1:ba:55: 25:d0:05:8b:79:f0:29:3a:53:e1:51:b2:05:c8:24: 2e:48:d2:b3:d3:52:6b:4b:2e:26:8c:ba:1c:f2:e2: 6d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:57:B1:AB:96:6C:D9:73:EF:07:97:0D:EA:1B:86:25:D0:7F:8C:48 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3lexq5Zs2XPvB5cN6huGJdB_jEg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.196.0/22 Signature Algorithm: sha256WithRSAEncryption 4e:bf:5e:c7:c8:da:37:ac:18:bf:98:a4:64:e2:37:78:fa:3c: fa:5f:da:30:b1:cf:de:30:81:6f:6e:09:86:21:42:06:ba:e8: fe:ae:53:d8:13:6e:2d:6a:f7:2d:9b:b9:35:fa:c6:5b:5d:60: 28:e7:16:06:52:4c:06:90:6c:e4:4e:ca:7e:8a:f7:6b:1d:b3: cd:cf:83:16:a5:ee:cb:fa:ab:d2:33:a5:56:75:27:e7:10:46: b9:c3:8f:95:f4:30:ee:d2:89:6f:b1:b0:55:33:15:84:f2:97: d6:a3:4e:55:9b:b3:ab:01:29:ad:b2:50:c6:0b:96:90:ce:b1: 15:ae:f7:87:43:3f:50:39:69:31:12:9d:47:97:e0:69:9a:cf: c9:52:96:27:b2:03:82:50:6e:f4:05:56:e5:c0:1c:4a:03:26: a1:96:7a:bc:ac:8e:45:84:65:b7:50:65:a5:27:5f:51:5d:e6: 5e:29:07:a1:4a:21:6a:7c:c3:f4:2d:86:3f:d7:2d:de:e2:a7: 0a:ce:6e:d9:15:19:6a:36:c3:99:d2:e1:12:e5:cc:1a:15:c0: 6d:91:09:82:e1:7d:e6:79:33:06:55:31:7f:e6:20:c3:e1:dd: 0a:47:ae:00:4b:76:0e:23:e3:95:02:91:4b:86:7e:30:87:f0: 3a:d9:ea:15 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOV8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2MTRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKERFNTdCMUFCOTY2Q0Q5 NzNFRjA3OTcwREVBMUI4NjI1RDA3RjhDNDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHBG7Czpzrl0GvYf8hIjiAjwG9rvqvJdFmF5txg49Auh0g+ECa g5uM264eywq/33yVtTflBrYpKbe3XupmlKf+hNB1WxMbzpHk8FcNK5MxHuK/j78l 5subSUTolFZUF7LMlfh9wNOS1YG/tqYjarAe/5Q7zsAt82muZz0aEIxeS9pp6yZf vc2B9/bIxT0qL9Ft5gDXugaJcrvpK1xNnyMBKJ5lV6R8S4enyhFBgWYwFk1xHu9j HoaiPoeKJGSPyDfO0/CjxOhoYghYl89VRgLF4UEE+CcSDYoyNK9GI+G6VSXQBYt5 8Ck6U+FRsgXIJC5I0rPTUmtLLiaMuhzy4m0NAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU3lexq5Zs2XPvB5cN6huGJdB/jEgwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzNsZXhxNVpzMlhQdkI1Y042 aHVHSmRCX2pFZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6MQwDQYJKoZIhvcNAQELBQADggEBAE6/XsfI2jesGL+YpGTiN3j6PPpf2jCxz94w gW9uCYYhQga66P6uU9gTbi1q9y2buTX6xltdYCjnFgZSTAaQbOROyn6K92sds83P gxal7sv6q9IzpVZ1J+cQRrnDj5X0MO7SiW+xsFUzFYTyl9ajTlWbs6sBKa2yUMYL lpDOsRWu94dDP1A5aTESnUeX4Gmaz8lSlieyA4JQbvQFVuXAHEoDJqGWerysjkWE ZbdQZaUnX1Fd5l4pB6FKIWp8w/Qthj/XLd7ipwrObtkVGWo2w5nS4RLlzBoVwG2R CYLhfeZ5MwZVMX/mIMPh3QpHrgBLdg4j45UCkUuGfjCH8DrZ6hU= -----END CERTIFICATE-----Generated at Fri Oct 24 19:18:43 2025 by rpki-client