$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/C1Y7YSWlMAvI7ok4bHbb2F0eOqU.roa File: C1Y7YSWlMAvI7ok4bHbb2F0eOqU.roa (raw, json) Hash identifier: hMk/q4B0dmZQ2qpIwa9UAecfNC2ghrBZMGsAqgwdqDY= Subject key identifier: 0B:56:3B:61:25:A5:30:0B:C8:EE:89:38:6C:76:DB:D8:5D:1E:3A:A5 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3A0E Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/C1Y7YSWlMAvI7ok4bHbb2F0eOqU.roa Signing time: Fri 22 Aug 2025 08:46:58 +0000 ROA not before: Fri 22 Aug 2025 08:46:57 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 118.232.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14862 (0x3a0e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:57 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=0B563B6125A5300BC8EE89386C76DBD85D1E3AA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8e:11:48:f6:2c:e3:b0:65:1c:a6:11:e9:8d: 50:32:01:59:5b:94:ac:6c:86:2b:0e:13:d5:4d:d7: 39:f3:9f:38:d8:2e:6c:98:c7:4a:51:f4:63:44:1d: 2d:ca:03:44:b8:27:81:9f:9b:73:02:c8:41:7d:ad: 47:ca:ed:e1:40:1a:51:ef:82:0b:74:a2:e5:f8:f4: 77:40:4e:a9:b7:a3:dd:4b:e5:b4:16:b1:50:57:51: eb:08:06:64:68:ec:36:e4:ac:89:29:60:5e:bb:95: 43:a0:74:78:cd:8f:6a:b9:ac:f8:a1:51:8a:c1:74: 7b:01:16:46:6f:24:49:83:21:23:36:39:05:44:8b: fa:ef:2c:f8:a3:86:a1:27:c2:16:be:98:84:28:03: 83:df:11:98:a2:8a:ee:9b:3a:bc:ee:fb:22:f1:35: 51:fb:39:05:96:71:a2:6c:43:65:89:8e:8b:46:cf: 9f:f6:25:75:08:22:4f:00:58:64:4f:d7:52:d7:eb: 0d:da:23:9f:8a:6d:32:4a:37:bb:fc:c8:2a:2a:f5: 77:d7:02:ae:a0:08:39:67:77:1b:a8:0c:f3:f3:18: 70:b4:b5:6c:03:fc:c2:94:20:16:b5:dc:81:14:3d: 84:5b:c5:14:74:d5:0a:dc:6b:ec:86:4a:86:cc:b1: dd:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:56:3B:61:25:A5:30:0B:C8:EE:89:38:6C:76:DB:D8:5D:1E:3A:A5 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/C1Y7YSWlMAvI7ok4bHbb2F0eOqU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.80.0/21 Signature Algorithm: sha256WithRSAEncryption 81:89:65:62:43:62:7a:78:7f:f5:cf:4e:8f:51:30:8d:e5:cb: d1:bf:74:82:ba:42:d1:20:71:d5:2c:4e:bc:eb:2d:16:ff:f4: 79:07:8b:83:f3:43:d4:23:2c:f7:7b:d6:e7:49:dd:d8:a2:e0: 42:36:48:0a:84:1c:2e:f3:87:7f:9e:d9:74:7f:4a:e1:53:a3: a5:c1:dc:e1:76:9a:da:14:74:c7:89:28:62:61:4d:9f:39:3c: 1d:3a:b9:e1:21:28:28:41:62:26:15:2f:42:18:d8:b6:86:2d: 9f:47:b7:0c:8b:c5:bb:e9:07:a0:27:ea:7b:08:47:cf:80:f0: 56:b1:e9:e6:33:d4:ea:19:92:7e:dc:d0:f5:9b:b2:f2:1e:78: aa:a6:6c:d9:c8:74:8d:ff:4d:11:1d:7c:de:1a:1b:5d:83:e3: b5:d9:14:4e:af:64:ea:5f:41:54:bf:84:2d:43:7f:42:fc:6f: ad:c6:6f:c9:6e:8d:e5:b6:74:c0:cd:5f:b1:97:a8:05:ef:9c: ca:7a:3d:c0:1f:93:ab:d7:a1:a0:0f:ea:79:18:82:38:53:27: 57:42:2b:04:b5:06:6e:5a:20:f8:c5:d1:a7:a7:82:a1:64:d1: 33:c2:01:de:01:7e:8d:60:8e:89:91:9d:f0:0c:e8:80:7f:f2: ac:80:e4:fb -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOg4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2NTdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDBCNTYzQjYxMjVBNTMw MEJDOEVFODkzODZDNzZEQkQ4NUQxRTNBQTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+jhFI9izjsGUcphHpjVAyAVlblKxshisOE9VN1znznzjYLmyY x0pR9GNEHS3KA0S4J4Gfm3MCyEF9rUfK7eFAGlHvggt0ouX49HdATqm3o91L5bQW sVBXUesIBmRo7DbkrIkpYF67lUOgdHjNj2q5rPihUYrBdHsBFkZvJEmDISM2OQVE i/rvLPijhqEnwha+mIQoA4PfEZiiiu6bOrzu+yLxNVH7OQWWcaJsQ2WJjotGz5/2 JXUIIk8AWGRP11LX6w3aI5+KbTJKN7v8yCoq9XfXAq6gCDlndxuoDPPzGHC0tWwD /MKUIBa13IEUPYRbxRR01Qrca+yGSobMsd1hAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUC1Y7YSWlMAvI7ok4bHbb2F0eOqUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0MxWTdZU1dsTUF2STdvazRi SGJiMkYwZU9xVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2 6FAwDQYJKoZIhvcNAQELBQADggEBAIGJZWJDYnp4f/XPTo9RMI3ly9G/dIK6QtEg cdUsTrzrLRb/9HkHi4PzQ9QjLPd71udJ3dii4EI2SAqEHC7zh3+e2XR/SuFTo6XB 3OF2mtoUdMeJKGJhTZ85PB06ueEhKChBYiYVL0IY2LaGLZ9HtwyLxbvpB6An6nsI R8+A8Fax6eYz1OoZkn7c0PWbsvIeeKqmbNnIdI3/TREdfN4aG12D47XZFE6vZOpf QVS/hC1Df0L8b63Gb8lujeW2dMDNX7GXqAXvnMp6PcAfk6vXoaAP6nkYgjhTJ1dC KwS1Bm5aIPjF0aengqFk0TPCAd4Bfo1gjomRnfAM6IB/8qyA5Ps= -----END CERTIFICATE-----Generated at Fri Oct 24 19:18:42 2025 by rpki-client