$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BvqqzXDSR5A7xu9qQ8As9W43eew.roa File: BvqqzXDSR5A7xu9qQ8As9W43eew.roa (raw, json) Hash identifier: nB1io629pgSYAbn3LylxpCKYz97EL2VsmojUshZiGig= Subject key identifier: 06:FA:AA:CD:70:D2:47:90:3B:C6:EF:6A:43:C0:2C:F5:6E:37:79:EC Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3840 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BvqqzXDSR5A7xu9qQ8As9W43eew.roa Signing time: Fri 22 Aug 2025 08:45:06 +0000 ROA not before: Fri 22 Aug 2025 08:45:06 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.194.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14400 (0x3840) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:06 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=06FAAACD70D247903BC6EF6A43C02CF56E3779EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ed:d2:df:ed:5a:52:3e:42:a3:ec:a1:c3:30: 78:7a:1f:89:98:b2:b2:23:4f:f9:9f:1d:fe:b1:a5: f1:23:e3:47:f6:50:58:41:1e:16:6e:aa:8e:21:21: 6b:e0:5c:de:89:b1:78:f9:96:b9:0c:ae:0a:a2:e1: a2:a6:7c:cc:28:18:d6:08:ec:40:ce:5d:81:7c:13: 7c:5f:1a:73:57:49:3a:d1:b6:50:a9:f2:24:b6:b4: 69:52:47:fe:6a:2f:f4:4e:90:81:9f:3f:df:db:a6: fd:8e:69:27:0f:c1:92:cc:47:6f:45:54:23:c8:e3: b8:ef:c4:88:0c:63:37:8c:91:1a:f7:98:1d:bf:04: c6:45:cd:4a:16:ee:fe:0c:c5:86:e3:cb:58:53:18: 4c:aa:9e:34:ee:29:77:3d:e6:3b:34:84:65:83:c4: 0c:12:33:12:d1:f6:08:89:36:4e:e8:72:6f:5d:ab: f4:11:1c:23:39:c6:3f:02:48:d1:d9:57:7b:70:61: 80:93:14:ca:4f:55:42:65:7c:b1:16:e6:2f:0f:41: 9a:77:bb:c9:6e:87:4c:52:4a:00:9d:eb:c7:13:00: 6f:e2:67:07:32:13:66:db:8a:b1:3c:73:51:b0:6f: ff:2b:f9:44:51:3a:6e:8e:2e:7d:17:17:a6:78:7f: 9a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:FA:AA:CD:70:D2:47:90:3B:C6:EF:6A:43:C0:2C:F5:6E:37:79:EC X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BvqqzXDSR5A7xu9qQ8As9W43eew.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.184.0/21 Signature Algorithm: sha256WithRSAEncryption 28:9c:66:eb:86:11:32:d0:e1:a3:54:24:aa:f7:0f:e6:96:9b: ed:c7:a6:ee:2b:32:c6:f1:16:0d:0c:3b:58:63:b5:3c:2c:cc: 0a:92:e1:cf:b7:78:f3:95:66:a3:54:54:ce:84:aa:9d:ca:77: 13:af:4d:5d:09:0f:be:64:2b:cc:b7:dd:54:bd:bb:88:b8:df: 53:61:33:f5:cb:b3:57:b3:77:43:aa:19:76:34:01:b9:26:6e: 38:f9:95:57:4c:a4:c2:1a:92:14:c4:99:93:b8:48:df:11:c9: a7:10:d1:db:e9:75:1c:89:e0:29:c6:7d:af:a1:23:89:a9:bc: 10:32:5d:17:72:53:43:3c:4d:44:8b:21:21:c0:4c:b5:1c:b0: 26:d4:ca:1a:1a:58:c8:43:9b:e5:a1:bd:e0:0d:3d:59:eb:cc: 4b:98:5e:1f:ab:47:79:51:2b:3f:e0:3c:09:e6:34:25:82:78: 51:34:79:c5:f6:22:56:d9:5c:e0:a3:4f:31:6c:c9:c5:a1:ad: 5b:4e:c9:67:44:87:aa:33:32:65:a4:4e:4b:8d:a7:f8:61:bf: 80:ce:b0:6c:09:03:25:01:bf:fb:d4:43:10:cf:2f:c7:16:27: 93:66:d2:80:1a:1a:3b:c4:0c:62:52:df:69:d3:80:03:17:7a: 3f:bf:c3:7e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOEAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1MDZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDA2RkFBQUNENzBEMjQ3 OTAzQkM2RUY2QTQzQzAyQ0Y1NkUzNzc5RUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDR7dLf7VpSPkKj7KHDMHh6H4mYsrIjT/mfHf6xpfEj40f2UFhB HhZuqo4hIWvgXN6JsXj5lrkMrgqi4aKmfMwoGNYI7EDOXYF8E3xfGnNXSTrRtlCp 8iS2tGlSR/5qL/ROkIGfP9/bpv2OaScPwZLMR29FVCPI47jvxIgMYzeMkRr3mB2/ BMZFzUoW7v4MxYbjy1hTGEyqnjTuKXc95js0hGWDxAwSMxLR9giJNk7ocm9dq/QR HCM5xj8CSNHZV3twYYCTFMpPVUJlfLEW5i8PQZp3u8luh0xSSgCd68cTAG/iZwcy E2bbirE8c1Gwb/8r+URROm6OLn0XF6Z4f5qbAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUBvqqzXDSR5A7xu9qQ8As9W43eewwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0J2cXF6WERTUjVBN3h1OXFR OEFzOVc0M2Vldy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wrgwDQYJKoZIhvcNAQELBQADggEBACicZuuGETLQ4aNUJKr3D+aWm+3Hpu4rMsbx Fg0MO1hjtTwszAqS4c+3ePOVZqNUVM6Eqp3KdxOvTV0JD75kK8y33VS9u4i431Nh M/XLs1ezd0OqGXY0Abkmbjj5lVdMpMIakhTEmZO4SN8RyacQ0dvpdRyJ4CnGfa+h I4mpvBAyXRdyU0M8TUSLISHATLUcsCbUyhoaWMhDm+WhveANPVnrzEuYXh+rR3lR Kz/gPAnmNCWCeFE0ecX2IlbZXOCjTzFsycWhrVtOyWdEh6ozMmWkTkuNp/hhv4DO sGwJAyUBv/vUQxDPL8cWJ5Nm0oAaGjvEDGJS32nTgAMXej+/w34= -----END CERTIFICATE-----Generated at Fri Oct 24 19:21:29 2025 by rpki-client