$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/70k1949gt4zbs3BqYrEubxNETYU.roa File: 70k1949gt4zbs3BqYrEubxNETYU.roa (raw, json) Hash identifier: RKW5DR/S7bhkDGynx1Xkl3qN1KKpvnois8RGt/BDPQM= Subject key identifier: EF:49:35:F7:8F:60:B7:8C:DB:B3:70:6A:62:B1:2E:6F:13:44:4D:85 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3A3F Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/70k1949gt4zbs3BqYrEubxNETYU.roa Signing time: Fri 22 Aug 2025 08:47:10 +0000 ROA not before: Fri 22 Aug 2025 08:47:10 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 118.233.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14911 (0x3a3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:10 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=EF4935F78F60B78CDBB3706A62B12E6F13444D85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:12:b3:6f:fd:2d:ae:4a:af:4b:e2:50:5c:1c: 8d:0e:50:ba:68:f2:01:2d:92:95:31:b8:16:f4:74: 94:9b:d5:96:2b:f6:e9:fd:b1:d1:dd:05:b4:80:e4: c1:36:9d:13:46:68:bc:63:2d:17:75:f8:36:5c:7b: 03:40:4d:2b:a8:5d:65:c5:99:81:c9:30:48:3e:91: de:b0:b7:45:89:c3:de:2b:db:17:22:6a:e7:77:f6: fc:e6:1c:a2:16:7b:a5:60:f5:82:46:b2:84:85:b0: 4d:a0:ad:39:de:6f:2b:96:43:43:9c:cd:3f:90:97: da:ab:4a:7b:5f:87:e1:5d:6d:b5:13:12:cf:12:82: 11:0e:f1:e7:31:c9:91:b7:4e:a9:d0:e1:78:ee:89: b3:d8:75:37:9e:15:bd:aa:3c:37:5d:6d:d9:6e:e2: 60:7c:2c:db:8c:86:65:85:03:3a:c2:f6:cd:21:bf: 5d:e6:d9:c6:9a:51:16:13:fc:e0:52:68:07:04:55: da:64:68:4c:5f:6f:c1:65:0a:9e:98:ed:cf:8f:26: 02:f4:48:60:da:51:89:8b:55:4b:1f:61:1f:84:5d: 06:1f:72:08:45:99:d5:55:c5:e5:f1:67:96:e0:5f: 0b:d8:f4:fe:3a:9e:be:3f:6b:67:64:c0:a1:14:1e: 67:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:49:35:F7:8F:60:B7:8C:DB:B3:70:6A:62:B1:2E:6F:13:44:4D:85 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/70k1949gt4zbs3BqYrEubxNETYU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.104.0/22 Signature Algorithm: sha256WithRSAEncryption 53:fa:06:3d:80:30:9a:f0:e2:f5:76:75:b5:25:90:97:ab:86: de:7b:0e:2b:1e:e3:6d:6c:d9:3f:54:1d:0b:ae:6c:38:52:db: bf:e7:2d:04:bd:0b:39:89:8a:55:2c:d2:a7:84:7d:02:61:f2: 9c:be:fb:c3:2c:e1:9c:c1:b0:b0:1e:2d:81:f1:00:1d:eb:2f: 63:a4:68:07:1e:4c:f7:d3:5c:ba:9e:c4:e5:e6:a8:5d:69:57: e8:9a:ad:49:58:de:64:f4:cd:4c:d7:46:2d:e5:a1:7b:94:81: b7:84:d0:42:d9:e5:b3:81:60:7d:65:cc:bb:a3:5f:64:11:6e: 43:8e:fa:80:6e:f7:ff:ce:63:47:73:87:d2:9b:74:29:b5:de: 5b:ab:76:e1:be:58:79:0e:a9:b1:9f:0f:b9:c0:35:05:d6:5c: 6a:71:a2:ef:61:67:59:05:29:f1:f2:5c:21:5e:35:d1:7d:dd: a5:2b:94:de:2c:e3:5e:61:98:79:f4:a6:46:f5:4f:8f:16:e7: 0b:13:e0:bb:84:2f:8a:26:15:8a:33:60:6c:b8:bd:73:56:31: 3a:f8:53:8d:e5:08:23:9b:b3:78:0f:b4:c7:d8:20:b4:07:cb: b7:41:e1:e4:84:8a:37:97:73:20:ec:fc:85:bd:bd:7e:40:31: ca:11:c5:96 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOj8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3MTBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEVGNDkzNUY3OEY2MEI3 OENEQkIzNzA2QTYyQjEyRTZGMTM0NDREODUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTErNv/S2uSq9L4lBcHI0OULpo8gEtkpUxuBb0dJSb1ZYr9un9 sdHdBbSA5ME2nRNGaLxjLRd1+DZcewNATSuoXWXFmYHJMEg+kd6wt0WJw94r2xci aud39vzmHKIWe6Vg9YJGsoSFsE2grTnebyuWQ0OczT+Ql9qrSntfh+FdbbUTEs8S ghEO8ecxyZG3TqnQ4XjuibPYdTeeFb2qPDddbdlu4mB8LNuMhmWFAzrC9s0hv13m 2caaURYT/OBSaAcEVdpkaExfb8FlCp6Y7c+PJgL0SGDaUYmLVUsfYR+EXQYfcghF mdVVxeXxZ5bgXwvY9P46nr4/a2dkwKEUHmcjAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU70k1949gt4zbs3BqYrEubxNETYUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzcwazE5NDlndDR6YnMzQnFZ ckV1YnhORVRZVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6WgwDQYJKoZIhvcNAQELBQADggEBAFP6Bj2AMJrw4vV2dbUlkJerht57Dise421s 2T9UHQuubDhS27/nLQS9CzmJilUs0qeEfQJh8py++8Ms4ZzBsLAeLYHxAB3rL2Ok aAceTPfTXLqexOXmqF1pV+iarUlY3mT0zUzXRi3loXuUgbeE0ELZ5bOBYH1lzLuj X2QRbkOO+oBu9//OY0dzh9KbdCm13lurduG+WHkOqbGfD7nANQXWXGpxou9hZ1kF KfHyXCFeNdF93aUrlN4s415hmHn0pkb1T48W5wsT4LuEL4omFYozYGy4vXNWMTr4 U43lCCObs3gPtMfYILQHy7dB4eSEijeXcyDs/IW9vX5AMcoRxZY= -----END CERTIFICATE-----Generated at Fri Oct 24 19:27:50 2025 by rpki-client