$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5zWdqavRhqI4pbK7xzwcE_ljOMo.roa File: 5zWdqavRhqI4pbK7xzwcE_ljOMo.roa (raw, json) Hash identifier: 8ejVg8sBDreBoxNr4WgGrYHWG5wbgyB6adHemkSC8Nw= Subject key identifier: E7:35:9D:A9:AB:D1:86:A2:38:A5:B2:BB:C7:3C:1C:13:F9:63:38:CA Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 39E2 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5zWdqavRhqI4pbK7xzwcE_ljOMo.roa Signing time: Fri 22 Aug 2025 08:46:46 +0000 ROA not before: Fri 22 Aug 2025 08:46:46 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 106.1.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14818 (0x39e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:46 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=E7359DA9ABD186A238A5B2BBC73C1C13F96338CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:78:7a:7c:bb:50:ea:9f:c7:7e:3f:8b:6e:51: 33:4d:b0:af:fc:e7:1c:45:b3:4b:a6:98:c8:30:1f: 7f:7d:03:78:2b:bf:df:92:47:1f:2e:52:7d:4c:57: d8:91:d9:13:63:48:82:19:2f:ec:05:ed:89:48:bb: a2:47:fd:53:75:c1:42:2b:96:9f:85:f4:28:af:78: 9e:e0:24:41:23:a3:58:8f:d5:05:29:13:46:b6:64: 20:7c:20:53:b0:8b:a1:6e:87:75:33:ce:66:c0:e8: 7c:ee:d0:83:b8:18:c5:07:64:46:f7:39:61:f3:f6: 71:3a:1c:9e:56:09:3c:69:ea:67:88:b1:31:11:6a: 5f:7e:2e:18:4f:8a:6c:65:c2:6c:00:82:47:a9:61: 15:ad:7e:64:f3:a4:0e:68:4f:79:56:b6:df:ff:fd: c4:87:ed:21:a8:0d:61:b2:81:9e:24:f3:ed:73:87: 28:36:2d:0d:e8:c8:fc:8b:a1:f9:82:24:26:8b:1b: 5b:68:0b:06:c6:fd:58:2f:bf:79:c7:74:93:ea:70: 27:3d:66:76:7e:1d:30:91:49:86:8e:0b:5b:50:fb: b9:8d:da:d9:f0:a3:f4:d8:ee:60:a5:26:49:78:79: bf:01:44:6e:90:15:0e:02:24:df:72:e7:98:4f:17: e8:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:35:9D:A9:AB:D1:86:A2:38:A5:B2:BB:C7:3C:1C:13:F9:63:38:CA X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5zWdqavRhqI4pbK7xzwcE_ljOMo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.101.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:2f:27:24:d3:8d:8a:b4:5c:5d:8c:9a:ae:48:83:bf:5c:da: 73:2f:ba:be:36:88:02:28:c8:7e:cf:d3:ce:cd:4e:ab:65:54: 62:de:8e:ed:2b:8c:97:d4:c2:e8:e9:52:1a:71:38:5f:59:8b: 4c:3a:e1:47:0f:17:c0:b2:50:04:05:6c:61:a5:70:4d:20:98: 72:df:17:20:9a:62:82:bf:38:de:94:60:f0:e8:bc:da:10:84: f3:34:b5:e7:1c:5d:73:94:3d:39:f1:11:32:74:f8:5c:e1:a7: 3d:e0:d1:1a:df:7f:fa:a1:96:3b:99:fa:bd:4f:21:d6:47:6a: 21:f5:f0:c7:8d:27:31:1a:7b:9b:ff:a2:06:b0:1d:1b:db:7f: 65:f3:d6:ed:d8:c8:57:82:62:8b:c0:ff:c5:b2:e7:1f:b0:eb: 72:8c:19:b7:97:f9:f1:c7:81:ec:5f:3f:fb:24:70:ff:cd:dc: 51:bb:25:8e:7e:d8:85:4d:56:b5:c0:7b:6a:b8:47:8d:19:1f: a4:d2:55:0b:f1:3b:52:3b:11:ff:b6:fc:50:3c:da:30:e5:e9: 70:ad:b3:c7:64:d4:0a:69:14:fa:87:1a:b7:33:a0:01:38:31: d9:77:4e:7a:b3:16:9f:8a:67:b0:f3:3d:ab:85:45:be:75:92: f5:e9:51:76 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOeIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2NDZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEU3MzU5REE5QUJEMTg2 QTIzOEE1QjJCQkM3M0MxQzEzRjk2MzM4Q0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+eHp8u1Dqn8d+P4tuUTNNsK/85xxFs0ummMgwH399A3grv9+S Rx8uUn1MV9iR2RNjSIIZL+wF7YlIu6JH/VN1wUIrlp+F9CiveJ7gJEEjo1iP1QUp E0a2ZCB8IFOwi6Fuh3UzzmbA6Hzu0IO4GMUHZEb3OWHz9nE6HJ5WCTxp6meIsTER al9+LhhPimxlwmwAgkepYRWtfmTzpA5oT3lWtt///cSH7SGoDWGygZ4k8+1zhyg2 LQ3oyPyLofmCJCaLG1toCwbG/Vgvv3nHdJPqcCc9ZnZ+HTCRSYaOC1tQ+7mN2tnw o/TY7mClJkl4eb8BRG6QFQ4CJN9y55hPF+jfAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU5zWdqavRhqI4pbK7xzwcE/ljOMowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzV6V2RxYXZSaHFJNHBiSzd4 endjRV9sak9Nby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq AWUwDQYJKoZIhvcNAQELBQADggEBAE4vJyTTjYq0XF2Mmq5Ig79c2nMvur42iAIo yH7P087NTqtlVGLeju0rjJfUwujpUhpxOF9Zi0w64UcPF8CyUAQFbGGlcE0gmHLf FyCaYoK/ON6UYPDovNoQhPM0teccXXOUPTnxETJ0+Fzhpz3g0Rrff/qhljuZ+r1P IdZHaiH18MeNJzEae5v/ogawHRvbf2Xz1u3YyFeCYovA/8Wy5x+w63KMGbeX+fHH gexfP/skcP/N3FG7JY5+2IVNVrXAe2q4R40ZH6TSVQvxO1I7Ef+2/FA82jDl6XCt s8dk1AppFPqHGrczoAE4Mdl3TnqzFp+KZ7DzPauFRb51kvXpUXY= -----END CERTIFICATE-----Generated at Fri Oct 24 19:21:24 2025 by rpki-client