$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8vFLOi85vHnc0cGx9eaW7E6U0XI.roa File: 8vFLOi85vHnc0cGx9eaW7E6U0XI.roa (raw, json) Hash identifier: CTmVmoPfaXi+GU7wOKi+40LUVu6ZZ/3YaUc7tGN1Et0= Subject key identifier: F2:F1:4B:3A:2F:39:BC:79:DC:D1:C1:B1:F5:E6:96:EC:4E:94:D1:72 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3996 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8vFLOi85vHnc0cGx9eaW7E6U0XI.roa Signing time: Fri 22 Aug 2025 08:46:27 +0000 ROA not before: Fri 22 Aug 2025 08:46:27 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 118.233.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14742 (0x3996) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:27 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=F2F14B3A2F39BC79DCD1C1B1F5E696EC4E94D172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:00:74:ea:aa:b6:07:8f:45:43:08:bf:dc:79: 70:c2:8f:06:b6:14:97:aa:fc:8b:3b:85:98:72:88: 88:8a:49:11:02:fa:73:d3:5b:e3:9f:13:43:54:e8: 49:c0:b5:77:0e:f7:8e:62:1f:7c:93:4b:fa:2c:5a: 82:08:c2:3d:5c:70:73:26:57:22:6d:3a:30:76:74: 4f:1f:b9:cb:28:0c:af:23:8c:60:91:01:0f:66:b4: a4:5d:d1:dc:65:3b:6c:dd:31:8b:07:1d:14:19:cc: cf:95:97:29:dd:0f:26:27:8f:74:f7:88:92:e8:54: 09:c9:ee:4b:b8:de:69:fb:dc:0a:5a:2f:8d:af:74: db:48:71:10:85:99:3d:65:b7:48:a4:06:b7:f2:96: 6e:ac:bd:af:dd:50:ba:96:43:f2:da:87:3b:77:15: 70:e3:c1:54:bc:16:4d:b2:e1:12:19:07:b7:2e:1d: ca:50:66:7a:11:d1:87:eb:c3:34:68:ea:f1:ec:2f: c0:fb:a5:3a:ac:21:e5:dc:27:04:d7:0a:71:a3:57: 4d:f2:13:b3:f6:1e:54:04:0e:cb:2f:24:3c:b1:a1: 5a:2b:0b:6a:01:cd:de:a1:5b:78:42:6c:18:d2:7a: f1:d7:07:31:68:0c:14:70:88:c3:87:30:8c:10:f1: 13:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:F1:4B:3A:2F:39:BC:79:DC:D1:C1:B1:F5:E6:96:EC:4E:94:D1:72 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8vFLOi85vHnc0cGx9eaW7E6U0XI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.220.0/22 Signature Algorithm: sha256WithRSAEncryption 94:da:8b:3b:f3:45:4e:73:e2:9f:a3:5f:af:96:70:dd:13:e0: 35:dc:41:6e:d0:5c:5a:3f:2b:15:60:1d:30:18:49:49:0c:d1: d9:7b:ba:b0:af:03:f6:c3:ca:48:44:37:91:ab:35:60:6b:c6: 83:15:d5:42:bc:27:0c:89:bb:62:1e:fa:e0:c1:06:1c:8c:a9: 2d:e0:c7:7f:7c:7b:12:0b:77:8a:4d:3f:fa:89:44:85:28:d8: d8:28:84:fb:1d:34:92:c5:20:65:6d:22:f0:0a:c6:7c:bc:48: 7c:02:6d:15:a3:6c:b4:24:19:93:48:4e:83:67:f1:62:09:8c: 77:20:73:7e:6d:1a:3b:d6:cd:c9:e3:e4:24:e5:a9:53:5f:16: 4c:a2:89:ac:14:37:87:b4:67:a2:e5:26:2f:3a:e1:4f:f2:c5: fe:29:08:53:ff:a2:39:72:92:10:1c:4d:66:02:26:9b:7d:fa: 09:c8:f5:f5:e2:fd:f7:01:68:eb:72:2b:1a:5b:3a:25:e6:33: 36:cc:38:92:a7:55:8e:d0:cd:b0:db:22:1a:39:21:44:b6:e5: d5:cf:c0:b8:e6:50:bd:6e:17:c5:52:e6:5b:6e:51:a8:e5:18: 2a:32:ed:15:ff:81:06:c1:e1:84:89:17:a0:cd:ad:ef:bf:62: cd:d1:57:9c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOZYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2MjdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEYyRjE0QjNBMkYzOUJD NzlEQ0QxQzFCMUY1RTY5NkVDNEU5NEQxNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+AHTqqrYHj0VDCL/ceXDCjwa2FJeq/Is7hZhyiIiKSREC+nPT W+OfE0NU6EnAtXcO945iH3yTS/osWoIIwj1ccHMmVyJtOjB2dE8fucsoDK8jjGCR AQ9mtKRd0dxlO2zdMYsHHRQZzM+VlyndDyYnj3T3iJLoVAnJ7ku43mn73ApaL42v dNtIcRCFmT1lt0ikBrfylm6sva/dULqWQ/Lahzt3FXDjwVS8Fk2y4RIZB7cuHcpQ ZnoR0YfrwzRo6vHsL8D7pTqsIeXcJwTXCnGjV03yE7P2HlQEDssvJDyxoVorC2oB zd6hW3hCbBjSevHXBzFoDBRwiMOHMIwQ8RNNAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU8vFLOi85vHnc0cGx9eaW7E6U0XIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzh2RkxPaTg1dkhuYzBjR3g5 ZWFXN0U2VTBYSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6dwwDQYJKoZIhvcNAQELBQADggEBAJTaizvzRU5z4p+jX6+WcN0T4DXcQW7QXFo/ KxVgHTAYSUkM0dl7urCvA/bDykhEN5GrNWBrxoMV1UK8JwyJu2Ie+uDBBhyMqS3g x398exILd4pNP/qJRIUo2NgohPsdNJLFIGVtIvAKxny8SHwCbRWjbLQkGZNIToNn 8WIJjHcgc35tGjvWzcnj5CTlqVNfFkyiiawUN4e0Z6LlJi864U/yxf4pCFP/ojly khAcTWYCJpt9+gnI9fXi/fcBaOtyKxpbOiXmMzbMOJKnVY7QzbDbIho5IUS25dXP wLjmUL1uF8VS5ltuUajlGCoy7RX/gQbB4YSJF6DNre+/Ys3RV5w= -----END CERTIFICATE-----Generated at Fri Oct 24 19:24:55 2025 by rpki-client