$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7ifVC-LsirxKN3E-VcMm7D3iz28.roa File: 7ifVC-LsirxKN3E-VcMm7D3iz28.roa (raw, json) Hash identifier: sw8Mt2ruvRlQ0Kw+Ql/E9q9yQDWZXFZkU4bnHmF5MTE= Subject key identifier: EE:27:D5:0B:E2:EC:8A:BC:4A:37:71:3E:55:C3:26:EC:3D:E2:CF:6F Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3A40 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7ifVC-LsirxKN3E-VcMm7D3iz28.roa Signing time: Fri 22 Aug 2025 08:47:10 +0000 ROA not before: Fri 22 Aug 2025 08:47:10 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 211.76.121.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14912 (0x3a40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:10 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=EE27D50BE2EC8ABC4A37713E55C326EC3DE2CF6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e8:87:d6:27:af:fd:c6:1e:e1:bc:06:b1:bc: 53:71:b6:c6:cf:a4:02:eb:77:49:29:ff:d8:96:51: e0:69:f1:bf:3b:f1:64:62:14:85:af:ed:4c:11:2b: 0b:9a:fd:7b:50:48:e5:78:ab:49:b3:63:96:cc:26: 42:cc:eb:2e:61:3e:eb:79:41:8f:09:c2:00:40:ba: 1b:ce:ad:b2:e4:32:9d:b5:1d:8f:e6:a1:97:63:69: d8:f3:0d:c0:d6:b8:40:d5:cb:c6:a1:bf:05:91:ea: 20:39:da:db:4a:2d:4e:1f:ba:b3:4b:e9:7e:12:24: 5b:85:3f:72:ba:a7:0b:58:23:2d:c9:87:42:6a:fa: 2c:99:ea:51:f4:fa:a5:79:93:0f:d5:22:2d:19:b3: 2c:fb:01:e0:9c:21:ac:e3:11:a8:b3:52:37:d6:1f: 3e:07:47:96:53:da:9f:25:e9:38:88:bc:93:f6:3f: 2c:62:ff:ce:51:bc:22:7e:5a:e1:bd:0d:14:54:b5: 57:b5:18:4a:d0:2c:f1:db:0a:0e:d0:fa:4c:2a:b4: 5c:31:8b:b4:a1:62:27:a6:71:5e:f3:d5:c3:0a:9c: ab:e1:84:6d:83:93:9c:b3:16:dd:a3:91:32:07:2f: 89:dc:ff:93:23:e9:39:a5:66:f7:41:8f:0e:fd:2b: 97:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:27:D5:0B:E2:EC:8A:BC:4A:37:71:3E:55:C3:26:EC:3D:E2:CF:6F X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7ifVC-LsirxKN3E-VcMm7D3iz28.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.121.0/25 Signature Algorithm: sha256WithRSAEncryption b4:a4:5c:27:78:2e:56:62:94:8a:a7:26:3d:f8:9e:c6:cc:30: 1b:01:8f:74:d0:53:70:51:48:d6:70:3f:9a:67:d6:54:a8:87: c7:e2:e5:bc:bd:88:41:82:d2:39:05:50:2e:6d:61:28:80:56: c8:a2:e1:71:c3:f4:72:f8:da:7e:1b:d8:92:40:34:e5:88:2a: e3:91:00:05:eb:7f:80:f0:b8:ec:66:5c:a5:dd:81:dc:c4:34: b0:b4:da:c1:3d:1f:6a:5a:60:51:e3:83:60:8d:c3:ae:a8:9f: 8d:47:a2:0a:99:53:6e:ed:73:18:18:aa:7c:a7:71:98:23:41: 0c:f5:ab:77:e6:2f:48:17:f8:34:4f:69:c3:5c:c6:28:d9:c5: 29:2b:a7:41:6e:97:be:05:73:2b:24:66:ba:d7:30:19:d9:33: fe:c9:60:d2:e6:9e:88:35:04:82:18:50:3a:5b:a8:74:72:02: 71:03:60:b7:4c:40:6c:a3:d4:1f:ee:b7:d4:f8:71:b5:22:9d: ac:95:47:13:52:7f:34:a1:6a:f4:60:3c:63:ae:d6:21:ab:2c: 92:d7:d4:41:a4:1a:b9:ae:7e:6b:3d:e1:f9:56:8e:84:b5:6b: 64:97:fc:99:b7:ab:8c:37:89:1c:3f:b5:47:28:f8:1a:b9:e9: 8b:45:82:49 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICOkAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3MTBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEVFMjdENTBCRTJFQzhB QkM0QTM3NzEzRTU1QzMyNkVDM0RFMkNGNkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC96IfWJ6/9xh7hvAaxvFNxtsbPpALrd0kp/9iWUeBp8b878WRi FIWv7UwRKwua/XtQSOV4q0mzY5bMJkLM6y5hPut5QY8JwgBAuhvOrbLkMp21HY/m oZdjadjzDcDWuEDVy8ahvwWR6iA52ttKLU4furNL6X4SJFuFP3K6pwtYIy3Jh0Jq +iyZ6lH0+qV5kw/VIi0Zsyz7AeCcIazjEaizUjfWHz4HR5ZT2p8l6TiIvJP2Pyxi /85RvCJ+WuG9DRRUtVe1GErQLPHbCg7Q+kwqtFwxi7ShYiemcV7z1cMKnKvhhG2D k5yzFt2jkTIHL4nc/5Mj6TmlZvdBjw79K5f9AgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQU7ifVC+LsirxKN3E+VcMm7D3iz28wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzdpZlZDLUxzaXJ4S04zRS1W Y01tN0QzaXoyOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQfT THkAMA0GCSqGSIb3DQEBCwUAA4IBAQC0pFwneC5WYpSKpyY9+J7GzDAbAY900FNw UUjWcD+aZ9ZUqIfH4uW8vYhBgtI5BVAubWEogFbIouFxw/Ry+Np+G9iSQDTliCrj kQAF63+A8LjsZlyl3YHcxDSwtNrBPR9qWmBR44NgjcOuqJ+NR6IKmVNu7XMYGKp8 p3GYI0EM9at35i9IF/g0T2nDXMYo2cUpK6dBbpe+BXMrJGa61zAZ2TP+yWDS5p6I NQSCGFA6W6h0cgJxA2C3TEBso9Qf7rfU+HG1Ip2slUcTUn80oWr0YDxjrtYhqyyS 19RBpBq5rn5rPeH5Vo6EtWtkl/yZt6uMN4kcP7VHKPgauemLRYJJ -----END CERTIFICATE-----Generated at Fri Oct 24 19:27:50 2025 by rpki-client