$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4SUC6CDnzS0n5HXXB2NtEhsuV4Y.roa File: 4SUC6CDnzS0n5HXXB2NtEhsuV4Y.roa (raw, json) Hash identifier: 6RM9CHUxQnZkvIZPIfvNyrveARXdodzoxmLhjoUacvk= Subject key identifier: E1:25:02:E8:20:E7:CD:2D:27:E4:75:D7:07:63:6D:12:1B:2E:57:86 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 39E4 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4SUC6CDnzS0n5HXXB2NtEhsuV4Y.roa Signing time: Fri 22 Aug 2025 08:46:47 +0000 ROA not before: Fri 22 Aug 2025 08:46:47 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.193.223.64/26 maxlen: 26 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14820 (0x39e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:47 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=E12502E820E7CD2D27E475D707636D121B2E5786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3b:0a:bc:00:21:90:be:8c:25:91:75:dd:38: a3:d8:e4:9b:24:49:a1:24:af:96:e4:9b:0b:06:81: 50:c8:a2:1e:ce:70:87:89:d2:8d:4e:31:75:c8:25: fd:8e:71:77:a0:24:1b:55:b4:73:d1:91:2d:03:a3: a8:4f:ec:51:d8:f9:f6:13:79:69:f4:26:93:f3:db: ff:27:cc:e2:71:44:39:13:61:25:27:ee:3a:b0:41: 33:ab:f6:47:28:2e:2b:ff:e2:b9:1e:84:ca:28:b0: 97:51:34:ce:89:36:4f:04:f7:6d:68:a7:5c:b6:fe: a9:26:48:f8:ab:29:b0:04:8b:1e:50:52:94:0b:84: bf:57:33:77:d0:83:12:54:8d:bf:c1:77:be:f1:b7: 8c:40:4f:05:f0:db:91:2e:37:b7:f7:bd:65:75:39: 1b:87:7c:48:62:12:79:c9:fc:4f:01:7d:f8:b6:1e: f1:55:64:c6:29:5e:48:3e:e9:50:0c:cf:6b:17:1e: 7e:49:db:ca:07:89:1d:34:50:31:c8:6a:e2:37:41: 21:e8:60:a0:4d:98:31:67:35:e3:f2:ad:3c:11:a8: 21:4a:b3:89:24:cb:3c:a0:6f:70:8d:20:45:be:c7: b0:c9:ab:63:15:dd:2f:88:c1:97:86:1c:b0:b7:95: 22:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:25:02:E8:20:E7:CD:2D:27:E4:75:D7:07:63:6D:12:1B:2E:57:86 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4SUC6CDnzS0n5HXXB2NtEhsuV4Y.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.223.64/26 Signature Algorithm: sha256WithRSAEncryption 8b:b0:c1:ee:01:e9:f3:56:2d:d6:89:e2:de:6a:0f:1a:9b:1d: 80:ec:05:97:e5:80:8c:91:d0:82:a2:ec:bb:89:6e:98:cc:fa: 2a:cb:8c:c1:73:8e:6e:73:f9:0e:44:69:c4:f3:23:7c:eb:10: fb:bb:63:97:6e:a6:25:a3:18:3e:02:17:2e:03:fc:75:38:eb: 2f:3c:8b:54:85:5c:94:ff:cd:c9:3f:d9:70:c2:58:3e:5b:9b: 03:0c:1b:f7:73:50:37:de:19:f2:98:f6:94:c9:82:b8:1c:03: d7:6d:c0:fb:30:d1:88:6f:a4:d3:bc:d6:91:9d:1c:b5:67:ba: fa:f7:4e:cf:77:40:22:38:4a:67:9d:17:f5:65:e1:b2:a4:0e: 03:dc:20:ca:50:50:98:91:17:da:fa:47:90:8a:aa:58:91:f0: 2e:50:6d:bb:0d:27:85:31:3a:15:a1:03:90:a1:f7:b0:6d:17: a8:08:29:d7:68:9f:d1:ba:08:6a:34:cc:9a:0b:8c:b8:b8:61: 05:e3:2e:87:bb:3c:59:1a:49:b6:9a:9a:73:12:34:40:6f:bb: c6:ef:91:e8:ca:8b:a7:f4:64:25:e5:04:16:34:c7:ba:60:9d: 4b:dc:9d:09:ee:33:b2:d9:01:d3:0d:0f:06:e0:d0:12:7b:f6: 85:13:dc:93 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICOeQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2NDdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEUxMjUwMkU4MjBFN0NE MkQyN0U0NzVENzA3NjM2RDEyMUIyRTU3ODYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8Owq8ACGQvowlkXXdOKPY5JskSaEkr5bkmwsGgVDIoh7OcIeJ 0o1OMXXIJf2OcXegJBtVtHPRkS0Do6hP7FHY+fYTeWn0JpPz2/8nzOJxRDkTYSUn 7jqwQTOr9kcoLiv/4rkehMoosJdRNM6JNk8E921op1y2/qkmSPirKbAEix5QUpQL hL9XM3fQgxJUjb/Bd77xt4xATwXw25EuN7f3vWV1ORuHfEhiEnnJ/E8Bffi2HvFV ZMYpXkg+6VAMz2sXHn5J28oHiR00UDHIauI3QSHoYKBNmDFnNePyrTwRqCFKs4kk yzygb3CNIEW+x7DJq2MV3S+IwZeGHLC3lSKJAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQU4SUC6CDnzS0n5HXXB2NtEhsuV4YwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzRTVUM2Q0RuelMwbjVIWFhC Mk50RWhzdVY0WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQZ7 wd9AMA0GCSqGSIb3DQEBCwUAA4IBAQCLsMHuAenzVi3WieLeag8amx2A7AWX5YCM kdCCouy7iW6YzPoqy4zBc45uc/kORGnE8yN86xD7u2OXbqYloxg+AhcuA/x1OOsv PItUhVyU/83JP9lwwlg+W5sDDBv3c1A33hnymPaUyYK4HAPXbcD7MNGIb6TTvNaR nRy1Z7r6907Pd0AiOEpnnRf1ZeGypA4D3CDKUFCYkRfa+keQiqpYkfAuUG27DSeF MToVoQOQofewbReoCCnXaJ/RughqNMyaC4y4uGEF4y6HuzxZGkm2mppzEjRAb7vG 75Hoyoun9GQl5QQWNMe6YJ1L3J0J7jOy2QHTDQ8G4NASe/aFE9yT -----END CERTIFICATE-----Generated at Fri Oct 24 19:27:26 2025 by rpki-client