$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/B0ry2OxcFISOpPZyYbTz8dQuL4E.roa File: B0ry2OxcFISOpPZyYbTz8dQuL4E.roa (raw, json) Hash identifier: uJ/y3rK3vbSbH9uUAXfItZaj0PQLtPvT4mOl645GQd0= Subject key identifier: 07:4A:F2:D8:EC:5C:14:84:8E:A4:F6:72:61:B4:F3:F1:D4:2E:2F:81 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 38A7 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/B0ry2OxcFISOpPZyYbTz8dQuL4E.roa Signing time: Fri 22 Aug 2025 08:45:30 +0000 ROA not before: Fri 22 Aug 2025 08:45:30 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 118.232.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14503 (0x38a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:30 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=074AF2D8EC5C14848EA4F67261B4F3F1D42E2F81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:09:12:63:19:37:99:a9:39:e7:88:4a:1f:ca: 2f:03:77:2a:dc:3f:3e:9c:d7:33:41:cc:bd:aa:60: 2e:8e:98:b8:00:76:80:d3:41:49:c5:f1:50:e4:c1: c0:69:f2:9f:7c:d0:ed:87:d2:60:9f:31:4a:fb:9b: b3:50:22:c8:04:c2:99:57:cc:5a:30:c9:76:b5:2d: a8:41:f5:7d:45:88:bd:af:95:64:54:2a:4f:c2:9b: c3:78:a7:07:ad:91:c5:d6:61:55:cf:2c:96:51:f9: 94:34:0e:ec:a0:65:32:a4:2c:76:d4:42:d9:e6:87: ae:de:d3:52:02:b2:9a:c2:9a:eb:f1:f7:ed:98:d3: 65:c7:bf:79:d4:75:b3:c2:ac:10:ec:96:cc:0c:7a: ff:1e:9b:b9:8a:e4:10:70:6e:fd:12:14:0b:17:df: 90:09:7f:3f:a0:b9:bd:e1:20:22:cb:ca:b2:3d:8f: 7b:f0:bc:62:36:bb:c3:88:d5:dd:e1:fb:9f:e9:6f: ee:d5:08:9f:8e:e4:54:d5:a8:cb:c5:65:fa:72:10: 7a:fc:94:84:16:d5:6b:d4:aa:b1:1d:c8:f8:bd:de: f1:1b:8b:f9:62:7e:d0:c2:72:b5:1e:d4:75:19:20: b5:ed:25:ca:be:4a:ea:9b:56:f6:90:17:9e:78:30: e9:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:4A:F2:D8:EC:5C:14:84:8E:A4:F6:72:61:B4:F3:F1:D4:2E:2F:81 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/B0ry2OxcFISOpPZyYbTz8dQuL4E.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.12.0/22 Signature Algorithm: sha256WithRSAEncryption 43:ac:e3:42:05:7d:2b:92:44:d6:6a:5d:5e:c5:4a:55:85:e4: b3:a2:23:e0:87:13:96:82:f6:ba:f6:d2:98:c3:00:15:37:5a: f0:46:13:a6:8d:a2:0f:6f:78:02:d0:8e:88:32:07:f4:d0:75: 68:79:42:58:a0:f0:53:3d:bc:a2:cc:6c:6f:9c:80:5c:f9:05: c8:5c:2a:26:3a:9d:2c:4d:f9:4f:e5:01:21:d7:19:f4:96:c3: 6a:64:00:de:c4:35:a2:d5:ea:07:9a:9b:f1:2d:ef:42:c2:e8: 3b:c6:53:d3:d8:51:ea:d0:77:26:83:1c:2e:38:01:44:7d:16: 76:35:0e:d0:a0:f8:5e:3e:d7:b3:29:93:41:bf:48:78:f1:af: f7:55:56:8a:00:fe:90:90:5d:75:24:64:5d:e1:f2:37:04:e4: 7f:2d:59:04:35:4d:e1:47:1c:4a:fa:9c:48:b9:de:2c:e5:1e: 8b:75:9e:84:fd:06:61:ab:89:c1:75:58:27:b8:89:b6:89:0e: 37:5b:23:67:bd:8d:a7:97:36:6f:4b:99:70:10:f3:c9:f0:7b: 10:6f:ed:e0:74:94:d9:68:96:b5:b2:65:94:ef:ec:0a:be:dd: b3:f1:b4:d6:99:f3:ac:c8:bc:74:61:48:cd:b5:51:73:03:b0: d1:04:2a:5e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOKcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1MzBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDA3NEFGMkQ4RUM1QzE0 ODQ4RUE0RjY3MjYxQjRGM0YxRDQyRTJGODEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTCRJjGTeZqTnniEofyi8DdyrcPz6c1zNBzL2qYC6OmLgAdoDT QUnF8VDkwcBp8p980O2H0mCfMUr7m7NQIsgEwplXzFowyXa1LahB9X1FiL2vlWRU Kk/Cm8N4pwetkcXWYVXPLJZR+ZQ0DuygZTKkLHbUQtnmh67e01ICsprCmuvx9+2Y 02XHv3nUdbPCrBDslswMev8em7mK5BBwbv0SFAsX35AJfz+gub3hICLLyrI9j3vw vGI2u8OI1d3h+5/pb+7VCJ+O5FTVqMvFZfpyEHr8lIQW1WvUqrEdyPi93vEbi/li ftDCcrUe1HUZILXtJcq+SuqbVvaQF554MOnpAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUB0ry2OxcFISOpPZyYbTz8dQuL4EwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0IwcnkyT3hjRklTT3BQWnlZ YlR6OGRRdUw0RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6AwwDQYJKoZIhvcNAQELBQADggEBAEOs40IFfSuSRNZqXV7FSlWF5LOiI+CHE5aC 9rr20pjDABU3WvBGE6aNog9veALQjogyB/TQdWh5Qlig8FM9vKLMbG+cgFz5Bchc KiY6nSxN+U/lASHXGfSWw2pkAN7ENaLV6geam/Et70LC6DvGU9PYUerQdyaDHC44 AUR9FnY1DtCg+F4+17Mpk0G/SHjxr/dVVooA/pCQXXUkZF3h8jcE5H8tWQQ1TeFH HEr6nEi53izlHot1noT9BmGricF1WCe4ibaJDjdbI2e9jaeXNm9LmXAQ88nwexBv 7eB0lNlolrWyZZTv7Aq+3bPxtNaZ86zIvHRhSM21UXMDsNEEKl4= -----END CERTIFICATE-----Generated at Fri Oct 24 19:25:03 2025 by rpki-client