$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9ob0nlxFNX5Ri6z_yyS-l-uZa30.roa File: 9ob0nlxFNX5Ri6z_yyS-l-uZa30.roa (raw, json) Hash identifier: dMbmsW/b8iKIf1vzsZ6UUWsC2CYGzndSF99szga/Bvo= Subject key identifier: F6:86:F4:9E:5C:45:35:7E:51:8B:AC:FF:CB:24:BE:97:EB:99:6B:7D Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 38B7 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9ob0nlxFNX5Ri6z_yyS-l-uZa30.roa Signing time: Fri 22 Aug 2025 08:45:33 +0000 ROA not before: Fri 22 Aug 2025 08:45:33 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 118.232.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14519 (0x38b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:33 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=F686F49E5C45357E518BACFFCB24BE97EB996B7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:31:aa:4a:a2:e4:cd:2f:a9:b3:a9:20:d7:41: 80:c9:80:8d:c5:9e:0e:81:3f:d0:b2:37:e6:51:c0: 62:10:4a:05:5a:f5:8c:22:1c:15:39:a3:b7:54:f4: 70:18:1c:94:31:63:64:de:7f:73:12:22:33:30:b1: 01:35:79:f3:16:f5:20:50:72:8f:c1:45:77:0a:d9: 33:2b:ab:fd:14:4f:6b:0d:fd:c9:78:58:a2:f5:00: a3:4a:18:ab:a0:dc:75:92:80:c2:97:da:67:aa:a9: 4e:f5:8e:ee:ad:cf:e2:63:8f:22:2f:15:ad:45:63: 4f:34:a6:bd:21:a8:f6:11:4b:6d:06:9d:97:ef:53: 8d:82:1a:24:50:97:86:d1:b9:97:2c:38:9d:3a:61: 72:fa:69:1f:ef:77:56:93:41:bc:09:f3:0e:e0:f9: b7:05:70:f9:a8:b5:aa:de:97:14:d5:03:15:34:39: 24:fb:41:24:49:4d:e6:b5:f8:c7:68:80:c3:27:df: d6:e4:94:18:cd:f8:cc:eb:4c:8e:9b:6d:9d:53:95: c1:3c:e8:6b:44:4f:8b:1c:a4:46:fd:cc:e0:38:29: 7b:88:d8:9f:83:31:a8:93:8b:dd:f0:00:a2:05:66: 63:93:8a:f3:e1:c1:cc:cd:c8:8a:c5:48:f5:47:46: 03:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:86:F4:9E:5C:45:35:7E:51:8B:AC:FF:CB:24:BE:97:EB:99:6B:7D X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9ob0nlxFNX5Ri6z_yyS-l-uZa30.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.88.0/21 Signature Algorithm: sha256WithRSAEncryption 83:3a:12:e0:e0:4f:1c:a7:44:95:65:48:be:96:e5:18:01:f5: f8:c1:c1:e3:f0:d6:db:b1:40:9b:86:15:26:7c:10:8d:50:c1: 1d:37:cc:b4:a2:d4:bf:f4:3e:15:8d:fb:0f:b3:36:84:9b:ba: c5:81:e8:c2:e0:2b:00:db:56:a0:5e:2e:8b:12:17:9d:91:d9: 8c:ab:9c:30:5c:f3:e6:b1:ec:0a:12:2c:c0:53:13:d0:ed:a7: 54:d4:60:fb:c5:79:ff:46:fb:56:81:59:82:33:58:1e:81:d6: 8c:d6:30:7f:9d:15:1e:38:d6:69:a0:bd:70:b1:d6:4a:3a:3d: 69:4b:6a:1f:b6:48:f2:45:4a:c0:74:b1:91:da:e3:7a:93:19: 04:c0:d0:3c:bb:00:3e:d1:8b:7e:29:d6:ff:14:39:d5:75:68: c5:be:7a:ec:49:5a:d6:d3:3d:87:ba:1e:77:1c:1c:1d:20:17: 5c:11:ef:83:9b:c7:d8:76:8d:4d:0e:42:9e:7d:13:70:5c:eb: 73:22:51:af:54:03:8f:60:39:aa:c2:df:8a:46:9d:14:ff:16: 06:06:02:cd:3a:60:55:f1:55:f3:8a:65:2c:d8:d5:e7:90:17: 34:72:d8:34:6d:27:78:83:c4:f9:3a:0e:36:a1:8b:7f:4c:e0: 4d:be:d1:a6 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOLcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1MzNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEY2ODZGNDlFNUM0NTM1 N0U1MThCQUNGRkNCMjRCRTk3RUI5OTZCN0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCkMapKouTNL6mzqSDXQYDJgI3Fng6BP9CyN+ZRwGIQSgVa9Ywi HBU5o7dU9HAYHJQxY2Tef3MSIjMwsQE1efMW9SBQco/BRXcK2TMrq/0UT2sN/cl4 WKL1AKNKGKug3HWSgMKX2meqqU71ju6tz+JjjyIvFa1FY080pr0hqPYRS20GnZfv U42CGiRQl4bRuZcsOJ06YXL6aR/vd1aTQbwJ8w7g+bcFcPmotarelxTVAxU0OST7 QSRJTea1+MdogMMn39bklBjN+MzrTI6bbZ1TlcE86GtET4scpEb9zOA4KXuI2J+D MaiTi93wAKIFZmOTivPhwczNyIrFSPVHRgO5AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU9ob0nlxFNX5Ri6z/yyS+l+uZa30wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzlvYjBubHhGTlg1Umk2el95 eVMtbC11WmEzMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2 6FgwDQYJKoZIhvcNAQELBQADggEBAIM6EuDgTxynRJVlSL6W5RgB9fjBwePw1tux QJuGFSZ8EI1QwR03zLSi1L/0PhWN+w+zNoSbusWB6MLgKwDbVqBeLosSF52R2Yyr nDBc8+ax7AoSLMBTE9Dtp1TUYPvFef9G+1aBWYIzWB6B1ozWMH+dFR441mmgvXCx 1ko6PWlLah+2SPJFSsB0sZHa43qTGQTA0Dy7AD7Ri34p1v8UOdV1aMW+euxJWtbT PYe6HnccHB0gF1wR74Obx9h2jU0OQp59E3Bc63MiUa9UA49gOarC34pGnRT/FgYG As06YFXxVfOKZSzY1eeQFzRy2DRtJ3iDxPk6Djahi39M4E2+0aY= -----END CERTIFICATE-----Generated at Fri Oct 24 19:25:03 2025 by rpki-client