$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4NvvNvYnyWNDp1ScuZ9nlj8Cnto.roa File: 4NvvNvYnyWNDp1ScuZ9nlj8Cnto.roa (raw, json) Hash identifier: gmUeoFIfbo3OxVA8atFSZz5D4DNB6GTx0n1GqPxdwIU= Subject key identifier: E0:DB:EF:36:F6:27:C9:63:43:A7:54:9C:B9:9F:67:96:3F:02:9E:DA Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 39DC Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4NvvNvYnyWNDp1ScuZ9nlj8Cnto.roa Signing time: Fri 22 Aug 2025 08:46:45 +0000 ROA not before: Fri 22 Aug 2025 08:46:45 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.192.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14812 (0x39dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:45 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=E0DBEF36F627C96343A7549CB99F67963F029EDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:0d:e1:11:12:75:c1:d1:25:f3:b6:11:18:a2: 16:79:e2:c6:28:93:d9:81:c3:8c:56:fb:2d:a4:0a: 4f:60:24:80:27:20:f0:e1:50:0c:8e:d0:33:a1:a7: 0a:ea:4e:75:20:6c:1e:0c:13:12:dd:56:2e:43:aa: cf:84:35:9b:b7:ad:4b:d7:34:2f:37:c3:9e:88:77: 55:23:40:24:4d:e2:5c:3f:0a:72:95:c5:3a:ab:ad: d4:55:46:50:e3:57:80:fb:e6:0b:52:93:70:dd:b9: 12:f5:80:1f:77:05:1c:fc:b3:be:d2:e0:16:37:bd: ad:c1:c4:67:cc:e7:3e:ed:9c:28:60:bb:e1:bd:cc: bf:d0:aa:95:ce:f5:8e:38:b3:ec:67:f4:71:e7:87: 00:a0:97:2e:9d:a9:a2:3d:45:7d:7e:a1:45:8b:77: 7e:ed:7f:0f:e6:8d:bd:76:24:d4:44:48:5e:90:d3: 67:f6:59:67:ea:e7:57:ef:7a:35:b2:df:a0:86:65: 93:4c:fb:92:c1:99:7c:d0:15:f6:98:ac:52:b4:1b: 61:ec:01:b0:e4:d8:b1:bf:1e:3b:e0:53:13:27:12: ef:01:b3:cc:30:03:94:a8:c3:b9:94:ec:6d:dd:c1: 9f:dc:de:16:75:f5:66:ff:7f:54:18:ea:ce:f5:c8: b4:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:DB:EF:36:F6:27:C9:63:43:A7:54:9C:B9:9F:67:96:3F:02:9E:DA X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4NvvNvYnyWNDp1ScuZ9nlj8Cnto.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.144.0/21 Signature Algorithm: sha256WithRSAEncryption 2d:43:fa:17:2e:a7:ad:90:9c:ec:f7:69:7a:ba:92:57:a1:b2: a2:5f:e8:a1:ba:53:f1:42:23:4f:28:f2:5c:f7:8f:96:54:77: 29:a1:e6:a5:f8:00:93:0d:48:e5:17:a0:84:35:60:f1:f6:6a: 46:d0:5a:00:51:64:ee:8f:b9:18:ad:f1:6b:36:a8:a7:41:89: 4e:8b:3f:8c:7b:f6:5b:9a:e6:4c:11:5d:cf:fc:80:87:9b:f6: b5:f4:87:33:9c:08:58:74:72:20:fe:a4:7a:a1:ba:d7:2f:c2: 02:82:33:eb:da:9d:54:37:b2:cc:66:d4:09:db:3c:40:cb:ec: df:02:aa:0c:f8:9d:e2:6a:2b:51:fc:16:6c:66:57:4a:15:07: d7:a4:a3:f9:38:05:5a:28:29:fa:f5:dd:85:42:7e:67:fe:92: 9e:67:4d:07:39:75:33:66:5d:fb:9a:df:04:01:9c:5a:93:ce: a6:94:db:89:07:51:72:bb:1c:08:0a:73:e1:40:7b:d0:24:29: 7c:3e:56:53:e3:70:47:c2:90:d7:15:c8:7b:5b:ca:e0:df:99: 65:8f:e2:82:bc:d0:8c:70:d0:45:ec:69:6d:48:90:6a:2b:ad: cf:38:f0:74:aa:0e:53:1a:0b:ca:72:15:34:76:71:f4:31:16: ce:83:79:49 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOdwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2NDVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEUwREJFRjM2RjYyN0M5 NjM0M0E3NTQ5Q0I5OUY2Nzk2M0YwMjlFREEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWDeEREnXB0SXzthEYohZ54sYok9mBw4xW+y2kCk9gJIAnIPDh UAyO0DOhpwrqTnUgbB4MExLdVi5Dqs+ENZu3rUvXNC83w56Id1UjQCRN4lw/CnKV xTqrrdRVRlDjV4D75gtSk3DduRL1gB93BRz8s77S4BY3va3BxGfM5z7tnChgu+G9 zL/QqpXO9Y44s+xn9HHnhwCgly6dqaI9RX1+oUWLd37tfw/mjb12JNRESF6Q02f2 WWfq51fvejWy36CGZZNM+5LBmXzQFfaYrFK0G2HsAbDk2LG/HjvgUxMnEu8Bs8ww A5Sow7mU7G3dwZ/c3hZ19Wb/f1QY6s71yLQLAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU4NvvNvYnyWNDp1ScuZ9nlj8CntowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzROdnZOdllueVdORHAxU2N1 WjlubGo4Q250by5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wJAwDQYJKoZIhvcNAQELBQADggEBAC1D+hcup62QnOz3aXq6klehsqJf6KG6U/FC I08o8lz3j5ZUdymh5qX4AJMNSOUXoIQ1YPH2akbQWgBRZO6PuRit8Ws2qKdBiU6L P4x79lua5kwRXc/8gIeb9rX0hzOcCFh0ciD+pHqhutcvwgKCM+vanVQ3ssxm1Anb PEDL7N8Cqgz4neJqK1H8FmxmV0oVB9eko/k4BVooKfr13YVCfmf+kp5nTQc5dTNm Xfua3wQBnFqTzqaU24kHUXK7HAgKc+FAe9AkKXw+VlPjcEfCkNcVyHtbyuDfmWWP 4oK80Ixw0EXsaW1IkGorrc848HSqDlMaC8pyFTR2cfQxFs6DeUk= -----END CERTIFICATE-----Generated at Fri Oct 24 19:21:50 2025 by rpki-client