$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9aHgQU4P8SwL09r-nWcnFCa3Qsw.roa File: 9aHgQU4P8SwL09r-nWcnFCa3Qsw.roa (raw, json) Hash identifier: bPZth+O+WwCEmk5L24yeWc8400/etSk4O8SHLrC0L/0= Subject key identifier: F5:A1:E0:41:4E:0F:F1:2C:0B:D3:DA:FE:9D:67:27:14:26:B7:42:CC Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3B37 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9aHgQU4P8SwL09r-nWcnFCa3Qsw.roa Signing time: Fri 22 Aug 2025 08:48:11 +0000 ROA not before: Fri 22 Aug 2025 08:48:11 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.195.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15159 (0x3b37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:48:11 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=F5A1E0414E0FF12C0BD3DAFE9D67271426B742CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:82:27:6e:88:ea:11:3c:35:dd:3b:c9:45:12: ab:05:0b:f7:bb:98:2b:4e:bd:db:35:f4:36:99:2b: 04:ef:ee:6d:00:2c:b0:65:5e:2b:07:58:1b:8d:83: 1e:a0:20:c0:6b:d2:9f:71:40:80:74:22:de:fc:d1: e8:ad:27:44:fa:b1:ba:7b:0f:54:28:20:a4:31:5b: 81:95:1f:1d:37:e8:14:15:30:15:d5:7f:d5:fd:51: 64:9c:d2:eb:76:bd:7b:51:58:7d:fb:60:06:49:2c: a4:86:b2:62:66:39:66:81:9a:e1:6d:a8:f6:fb:0b: da:4f:fc:d5:4f:c7:50:32:64:0b:6a:a7:65:cb:e8: e4:e1:67:54:f0:5f:88:22:87:55:d0:6e:c4:02:c0: 3f:f0:c4:ef:a0:df:2b:a3:6e:fe:de:45:0f:35:70: 23:3a:03:23:84:48:d9:28:a3:e0:98:9b:fe:f8:26: 66:d6:01:00:ee:d5:81:f0:f5:75:8e:fb:a5:9d:52: 5c:a4:13:e4:61:7b:19:aa:9a:6f:03:f2:fb:e5:5a: 14:cf:d0:5c:94:c6:36:17:11:f6:c9:3b:0d:33:42: 54:cf:b5:0c:41:af:dc:c5:dc:fb:04:e0:04:0d:22: b1:17:fe:f6:3e:ef:92:9c:8d:9f:ce:d0:94:c3:98: 57:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:A1:E0:41:4E:0F:F1:2C:0B:D3:DA:FE:9D:67:27:14:26:B7:42:CC X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9aHgQU4P8SwL09r-nWcnFCa3Qsw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.28.0/22 Signature Algorithm: sha256WithRSAEncryption b4:42:b7:ce:ed:02:7d:c7:26:c2:bb:a6:a4:96:6e:f3:52:d5: 64:bc:ff:04:5b:61:37:cf:68:80:dc:a7:57:ff:c6:03:68:b0: 16:cd:c8:3b:8f:21:43:17:34:ea:f2:8c:eb:ae:1a:75:7e:00: cf:3f:a6:7c:49:5d:4d:65:37:98:cd:86:c6:cb:7b:0e:83:b9: a3:9f:58:54:84:79:5f:b5:75:e4:ab:05:20:ac:c9:4b:99:51: 34:f6:15:b6:14:8a:58:c1:11:f1:ab:2c:ac:68:e0:bf:ed:e2: 3f:ac:ea:9e:aa:de:75:c7:5f:a0:46:46:2d:55:e1:0a:5e:51: 9a:f4:c3:c2:0d:80:6f:8f:14:09:75:39:2d:97:f9:f1:44:f8: 0e:e0:be:5d:44:a9:dc:43:10:e6:a6:d4:da:99:93:22:a3:31: 39:1a:05:d0:19:5a:77:4e:1f:07:a8:87:be:dd:f5:ee:89:a8: e8:8a:48:66:e2:e8:fc:8a:58:69:5d:e0:07:fd:cd:9f:f3:b7: ef:5e:93:92:e8:bf:cd:1d:42:4f:94:8a:7a:1a:16:d7:cd:3a: df:7f:65:e4:d3:20:8f:4c:92:22:cb:db:95:09:d4:bd:8e:d1: f3:23:83:6c:6c:9f:d8:6c:5b:e9:8b:6d:c1:41:e5:ae:a5:6f: c0:33:0d:48 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOzcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ4MTFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEY1QTFFMDQxNEUwRkYx MkMwQkQzREFGRTlENjcyNzE0MjZCNzQyQ0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4giduiOoRPDXdO8lFEqsFC/e7mCtOvds19DaZKwTv7m0ALLBl XisHWBuNgx6gIMBr0p9xQIB0It780eitJ0T6sbp7D1QoIKQxW4GVHx036BQVMBXV f9X9UWSc0ut2vXtRWH37YAZJLKSGsmJmOWaBmuFtqPb7C9pP/NVPx1AyZAtqp2XL 6OThZ1TwX4gih1XQbsQCwD/wxO+g3yujbv7eRQ81cCM6AyOESNkoo+CYm/74JmbW AQDu1YHw9XWO+6WdUlykE+Rhexmqmm8D8vvlWhTP0FyUxjYXEfbJOw0zQlTPtQxB r9zF3PsE4AQNIrEX/vY+75KcjZ/O0JTDmFePAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU9aHgQU4P8SwL09r+nWcnFCa3QswwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzlhSGdRVTRQOFN3TDA5ci1u V2NuRkNhM1Fzdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wxwwDQYJKoZIhvcNAQELBQADggEBALRCt87tAn3HJsK7pqSWbvNS1WS8/wRbYTfP aIDcp1f/xgNosBbNyDuPIUMXNOryjOuuGnV+AM8/pnxJXU1lN5jNhsbLew6DuaOf WFSEeV+1deSrBSCsyUuZUTT2FbYUiljBEfGrLKxo4L/t4j+s6p6q3nXHX6BGRi1V 4QpeUZr0w8INgG+PFAl1OS2X+fFE+A7gvl1EqdxDEOam1NqZkyKjMTkaBdAZWndO Hweoh77d9e6JqOiKSGbi6PyKWGld4Af9zZ/zt+9ek5Lov80dQk+UinoaFtfNOt9/ ZeTTII9MkiLL25UJ1L2O0fMjg2xsn9hsW+mLbcFB5a6lb8AzDUg= -----END CERTIFICATE-----Generated at Fri Oct 24 19:21:28 2025 by rpki-client