$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5rPv7ldDrGVeKLd0yrgD2ydZHQE.roa File: 5rPv7ldDrGVeKLd0yrgD2ydZHQE.roa (raw, json) Hash identifier: 5TpWwFJcnNPew6qMRhH9akAZ9bKiQ7J3GmKrVG6xL+s= Subject key identifier: E6:B3:EF:EE:57:43:AC:65:5E:28:B7:74:CA:B8:03:DB:27:59:1D:01 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3B2C Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5rPv7ldDrGVeKLd0yrgD2ydZHQE.roa Signing time: Fri 22 Aug 2025 08:48:08 +0000 ROA not before: Fri 22 Aug 2025 08:48:08 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.194.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15148 (0x3b2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:48:08 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=E6B3EFEE5743AC655E28B774CAB803DB27591D01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:92:d7:5d:76:a1:40:71:d0:6b:be:16:3f:65: 2a:3d:c1:6f:bb:ae:26:e6:14:3d:3c:eb:33:2b:25: 11:ed:94:df:8c:b5:68:7b:43:8f:8b:38:f3:c7:80: 37:f7:ac:be:d2:dd:a7:84:4c:9e:65:fb:c4:e3:c4: 88:9a:da:5e:a0:ff:6c:06:05:ae:56:d3:4d:a9:fd: c2:e5:96:8a:f1:ea:d6:ea:f0:30:11:8e:9a:18:56: 7b:2a:3b:b8:a0:ef:27:29:d3:a8:fa:8d:a2:c6:d1: cd:b6:f5:5b:47:a3:ca:24:87:e9:fb:31:b5:8e:fb: 6e:7c:4d:a2:c8:0a:e6:5a:cd:e4:33:ba:e4:d4:01: 34:bd:28:02:0f:ce:39:fd:4e:95:c3:e8:c3:eb:ed: 8e:57:c9:68:5e:01:54:4e:ed:a4:13:b1:5c:32:8f: 60:84:f3:9e:88:c2:57:fb:94:b5:f4:ab:26:c0:5a: b3:05:f9:e6:39:9e:85:2b:f1:ab:87:1c:8f:5e:3e: f4:d1:ad:20:a1:8b:18:69:e7:6f:96:54:e2:d3:67: 47:39:3b:94:5d:c8:1c:5f:43:6a:ea:8e:61:5e:a2: 43:31:57:e8:c8:e7:6e:4a:fb:8e:a3:cf:8f:d7:41: f6:04:54:30:2b:e8:1e:1d:bb:00:79:09:32:9a:a2: 20:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:B3:EF:EE:57:43:AC:65:5E:28:B7:74:CA:B8:03:DB:27:59:1D:01 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5rPv7ldDrGVeKLd0yrgD2ydZHQE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.176.0/22 Signature Algorithm: sha256WithRSAEncryption 8a:10:1e:7b:5e:a8:42:aa:17:3a:34:35:5a:4a:a7:05:b3:55: 62:57:32:ec:ae:77:63:e2:9f:c7:47:f3:71:5a:26:07:6b:a9: 89:2c:23:89:bf:c9:68:a3:b2:36:d5:5d:0a:77:c2:be:6e:50: 27:b9:2f:3c:4b:3f:52:0b:14:b3:3d:e5:8c:85:a5:7c:e5:9f: 23:6a:f9:c5:61:ef:d7:91:2f:7d:d7:d4:ed:83:ac:40:72:d4: 78:d9:0d:0c:d2:68:6c:00:c0:d6:78:a4:6e:d3:e8:53:37:6c: 12:01:4a:11:93:29:b5:d9:f5:6f:c9:1d:fb:17:74:50:30:ee: 7d:db:2c:82:b3:a5:00:07:a0:12:4b:d0:f3:33:83:e4:98:bb: 5d:98:7f:f0:b8:03:bc:b3:8e:4b:12:09:f9:52:1b:34:54:6d: 98:ac:32:7f:de:3e:67:07:94:25:28:cd:64:f6:fe:d8:72:14: dd:b1:23:91:dc:1a:81:d7:98:45:a3:25:7f:7d:5a:78:dd:e0: 17:c2:a2:59:a4:83:34:48:4a:c6:2f:7d:45:19:9b:f7:78:10: af:26:b1:56:a2:5f:f1:f9:e8:46:8b:3a:13:86:f4:46:27:75: 9a:ed:7a:04:42:ef:7f:2a:60:df:80:1d:e1:af:3c:23:99:53: ea:99:a2:f4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOywwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ4MDhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEU2QjNFRkVFNTc0M0FD NjU1RTI4Qjc3NENBQjgwM0RCMjc1OTFEMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCXktdddqFAcdBrvhY/ZSo9wW+7ribmFD086zMrJRHtlN+MtWh7 Q4+LOPPHgDf3rL7S3aeETJ5l+8TjxIia2l6g/2wGBa5W002p/cLllorx6tbq8DAR jpoYVnsqO7ig7ycp06j6jaLG0c229VtHo8okh+n7MbWO+258TaLICuZazeQzuuTU ATS9KAIPzjn9TpXD6MPr7Y5XyWheAVRO7aQTsVwyj2CE856Iwlf7lLX0qybAWrMF +eY5noUr8auHHI9ePvTRrSChixhp52+WVOLTZ0c5O5RdyBxfQ2rqjmFeokMxV+jI 525K+46jz4/XQfYEVDAr6B4duwB5CTKaoiDxAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU5rPv7ldDrGVeKLd0yrgD2ydZHQEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzVyUHY3bGREckdWZUtMZDB5 cmdEMnlkWkhRRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wrAwDQYJKoZIhvcNAQELBQADggEBAIoQHnteqEKqFzo0NVpKpwWzVWJXMuyud2Pi n8dH83FaJgdrqYksI4m/yWijsjbVXQp3wr5uUCe5LzxLP1ILFLM95YyFpXzlnyNq +cVh79eRL33X1O2DrEBy1HjZDQzSaGwAwNZ4pG7T6FM3bBIBShGTKbXZ9W/JHfsX dFAw7n3bLIKzpQAHoBJL0PMzg+SYu12Yf/C4A7yzjksSCflSGzRUbZisMn/ePmcH lCUozWT2/thyFN2xI5HcGoHXmEWjJX99Wnjd4BfColmkgzRISsYvfUUZm/d4EK8m sVaiX/H56EaLOhOG9EYndZrtegRC738qYN+AHeGvPCOZU+qZovQ= -----END CERTIFICATE-----Generated at Fri Oct 24 19:21:46 2025 by rpki-client