$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6VpIiKmTqzYy8opdNSdxq0TsC-o.roa File: 6VpIiKmTqzYy8opdNSdxq0TsC-o.roa (raw, json) Hash identifier: DxQa1yx6whTNcdgJKm1W1ABWwKlHfTBgCxKFvSNUwUw= Subject key identifier: E9:5A:48:88:A9:93:AB:36:32:F2:8A:5D:35:27:71:AB:44:EC:0B:EA Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3AFF Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6VpIiKmTqzYy8opdNSdxq0TsC-o.roa Signing time: Fri 22 Aug 2025 08:47:58 +0000 ROA not before: Fri 22 Aug 2025 08:47:58 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.194.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15103 (0x3aff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:58 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=E95A4888A993AB3632F28A5D352771AB44EC0BEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:87:11:23:f4:6b:f5:45:79:69:57:c6:e9:3d: c3:04:f3:d1:b7:2c:81:34:56:99:32:64:d2:54:c4: eb:9f:35:ff:2c:be:5b:8c:a1:e9:9f:8c:b0:ae:69: 56:f9:b9:e1:2f:3f:b7:0d:38:d9:4c:4c:f0:d8:f3: ce:7e:aa:0d:b5:ed:7b:ae:f3:d3:8a:78:d1:2c:f6: 22:11:ed:8f:9b:7e:8b:d9:0c:45:4c:71:06:a7:22: 4c:fc:be:0f:79:a5:e4:20:ee:e5:2f:07:f0:c9:91: 6e:54:9e:18:a2:70:5d:a3:4b:52:7c:b6:32:1c:b9: 28:d8:64:b6:38:b4:bc:1b:5c:c4:ff:1e:22:55:89: 29:4b:4f:aa:c5:2f:f1:a8:2a:1d:a2:7d:dc:18:f0: 64:ca:ad:0f:47:35:0b:5e:e8:99:34:c2:78:06:b7: 82:ee:aa:b1:25:89:b7:9e:1b:73:a8:49:fe:a1:83: 6b:2e:6e:cd:73:b4:8a:11:57:7e:5e:f0:6e:d9:52: ba:19:99:cc:a7:86:2a:56:cb:29:88:85:e4:02:69: 0e:c7:d2:cf:b3:8a:eb:71:57:94:56:a6:98:ee:95: b5:c6:7c:94:62:9d:20:02:4f:54:e1:bd:5c:0b:e7: ce:58:08:a1:9f:38:7e:e6:52:3c:4e:8a:ff:36:d4: 4e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:5A:48:88:A9:93:AB:36:32:F2:8A:5D:35:27:71:AB:44:EC:0B:EA X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6VpIiKmTqzYy8opdNSdxq0TsC-o.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.48.0/21 Signature Algorithm: sha256WithRSAEncryption 68:c3:57:f0:9e:e3:7e:43:23:11:6e:0c:8a:ca:06:fa:3f:5d: f7:f4:4c:e0:c5:c0:1f:0c:37:ad:30:61:21:01:a7:4e:87:66: 56:18:21:09:a2:4b:52:47:4b:ce:12:95:ae:f7:2e:32:07:10: e7:1f:21:3c:0a:dc:30:e5:d0:b8:93:34:62:04:6b:f0:df:d6: 1e:87:10:69:2d:db:4b:d9:46:80:ee:13:73:2f:d5:8d:e2:6a: ae:48:7b:63:38:f0:f4:30:b8:71:60:8a:4b:96:c2:ea:5d:cc: 56:75:62:a7:06:31:ed:c6:3f:3b:1b:5b:ef:1a:74:6f:20:79: 82:c8:7d:82:81:cf:f8:77:aa:50:fa:ed:a4:81:07:0d:6e:89: 36:1c:1f:63:66:f4:68:6e:8f:a2:fe:02:b1:5c:3b:7f:c8:b1: b0:2d:d9:eb:fc:3a:5a:fb:51:ea:bc:7d:60:38:4c:cb:7c:89: 60:23:41:50:01:c5:62:25:29:42:66:cb:a5:36:5e:65:f0:25: f4:05:53:83:7f:f6:01:8d:55:e4:f1:e7:fa:71:09:2a:27:b9: f4:a1:25:60:a5:2c:8f:62:12:6f:b1:27:5b:ab:03:a8:aa:62: 0f:c0:a4:22:25:a4:cc:f2:b2:63:7c:5e:60:a4:f3:ed:b1:6d: 3e:51:f9:9f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOv8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3NThaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEU5NUE0ODg4QTk5M0FC MzYzMkYyOEE1RDM1Mjc3MUFCNDRFQzBCRUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCYhxEj9Gv1RXlpV8bpPcME89G3LIE0VpkyZNJUxOufNf8svluM oemfjLCuaVb5ueEvP7cNONlMTPDY885+qg217Xuu89OKeNEs9iIR7Y+bfovZDEVM cQanIkz8vg95peQg7uUvB/DJkW5UnhiicF2jS1J8tjIcuSjYZLY4tLwbXMT/HiJV iSlLT6rFL/GoKh2ifdwY8GTKrQ9HNQte6Jk0wngGt4LuqrElibeeG3OoSf6hg2su bs1ztIoRV35e8G7ZUroZmcynhipWyymIheQCaQ7H0s+ziutxV5RWppjulbXGfJRi nSACT1ThvVwL585YCKGfOH7mUjxOiv821E4vAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU6VpIiKmTqzYy8opdNSdxq0TsC+owHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzZWcElpS21UcXpZeThvcGRO U2R4cTBUc0Mtby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wjAwDQYJKoZIhvcNAQELBQADggEBAGjDV/Ce435DIxFuDIrKBvo/Xff0TODFwB8M N60wYSEBp06HZlYYIQmiS1JHS84Sla73LjIHEOcfITwK3DDl0LiTNGIEa/Df1h6H EGkt20vZRoDuE3Mv1Y3iaq5Ie2M48PQwuHFgikuWwupdzFZ1YqcGMe3GPzsbW+8a dG8geYLIfYKBz/h3qlD67aSBBw1uiTYcH2Nm9Ghuj6L+ArFcO3/IsbAt2ev8Olr7 Ueq8fWA4TMt8iWAjQVABxWIlKUJmy6U2XmXwJfQFU4N/9gGNVeTx5/pxCSonufSh JWClLI9iEm+xJ1urA6iqYg/ApCIlpMzysmN8XmCk8+2xbT5R+Z8= -----END CERTIFICATE-----Generated at Fri Oct 24 19:21:53 2025 by rpki-client