$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DsYRRWC7lcLM90ej23os3-XJQ40.roa File: DsYRRWC7lcLM90ej23os3-XJQ40.roa (raw, json) Hash identifier: xBqccc7pRz+FIoClUzowsP3pRw/YUZI3tbalDa2js6o= Subject key identifier: 0E:C6:11:45:60:BB:95:C2:CC:F7:47:A3:DB:7A:2C:DF:E5:C9:43:8D Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3AB0 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DsYRRWC7lcLM90ej23os3-XJQ40.roa Signing time: Fri 22 Aug 2025 08:47:39 +0000 ROA not before: Fri 22 Aug 2025 08:47:39 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9924 IP address blocks: 118.232.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 07:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15024 (0x3ab0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:39 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=0EC6114560BB95C2CCF747A3DB7A2CDFE5C9438D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:73:71:0d:a4:ce:1f:6f:bf:93:ad:b5:5d:67: 7b:a0:36:e5:00:17:95:db:df:7b:94:74:14:77:cd: 81:24:f0:e8:b8:91:cd:c6:55:7e:f7:36:38:c0:65: a0:4e:65:3f:77:95:9c:0f:bf:2b:87:c0:64:e8:41: e6:6e:48:7b:6b:ec:17:a5:6c:44:49:0a:37:1f:f6: bc:0f:1f:0c:89:bb:8d:3d:43:79:c6:f4:3e:1a:fd: ff:02:1f:70:83:0d:03:87:fc:2b:40:02:72:f3:0d: 03:85:d5:90:aa:0f:a5:b0:f5:f5:b9:25:3c:5c:a6: 52:2b:8b:8c:2d:84:06:22:f4:30:fd:71:3a:53:9b: ee:e4:b8:89:1c:81:6a:32:0c:22:17:37:01:11:f8: 4b:f3:06:b4:42:fb:c1:0e:17:a6:5b:6f:35:38:a4: 7a:86:b2:78:fc:d2:ca:b5:ba:1b:5a:9a:10:7e:57: d8:f3:09:db:ff:34:d1:dc:99:43:6a:4d:2d:d5:a8: 00:df:2a:1a:fa:c5:a1:af:4f:ab:ca:a9:01:f3:8f: 34:b5:27:a7:34:9e:63:f7:77:6e:ec:f7:b0:54:05: 23:18:3a:64:70:6e:99:c9:9e:be:d6:18:32:03:10: af:4f:9b:c0:a7:7a:0e:85:f5:1f:71:26:8f:7d:7d: e6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:C6:11:45:60:BB:95:C2:CC:F7:47:A3:DB:7A:2C:DF:E5:C9:43:8D X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DsYRRWC7lcLM90ej23os3-XJQ40.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.224.0/19 Signature Algorithm: sha256WithRSAEncryption 11:72:fb:30:36:36:a9:c6:3c:29:9a:ce:fa:f7:91:38:ef:83: d9:92:59:6b:a4:21:f0:67:eb:8b:8b:9f:e9:65:9d:9c:48:e8: 69:be:8b:b0:b5:7d:74:06:09:13:10:f1:ea:a2:b9:06:5b:4b: ca:00:4f:d9:8b:2a:43:c3:45:06:68:5a:dd:7e:78:57:4f:f4: 65:22:6a:f1:90:09:f7:7e:75:7f:9d:e7:b6:e2:1c:10:fd:04: a0:70:06:e2:f9:05:a2:d0:b5:97:30:42:6e:bb:5c:8e:eb:18: f6:a2:4b:07:c3:bd:49:54:1f:48:54:30:a1:68:89:22:48:51: 20:5b:95:53:2f:34:fc:1f:53:3e:9d:7a:e0:ba:b3:7e:0a:91: 55:40:fa:bc:ac:c2:61:99:e8:47:af:de:a0:e2:13:69:54:25: 66:bf:35:5b:4c:ae:f0:c7:c1:10:eb:01:e9:13:d4:87:f9:c4: 08:b0:bc:5b:1f:f7:7f:03:ea:b5:40:96:a4:dc:9b:50:94:aa: 51:4d:1c:e7:1d:76:75:cc:7e:de:41:14:4f:1a:5f:49:90:b6: 76:d4:40:6c:39:20:f1:41:97:31:6d:f2:42:69:68:b8:00:60: d7:e0:88:5c:47:22:14:d4:9b:c1:22:9a:e3:18:02:50:ef:b9: e9:15:de:4e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOrAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3MzlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDBFQzYxMTQ1NjBCQjk1 QzJDQ0Y3NDdBM0RCN0EyQ0RGRTVDOTQzOEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDjc3ENpM4fb7+TrbVdZ3ugNuUAF5Xb33uUdBR3zYEk8Oi4kc3G VX73NjjAZaBOZT93lZwPvyuHwGToQeZuSHtr7BelbERJCjcf9rwPHwyJu409Q3nG 9D4a/f8CH3CDDQOH/CtAAnLzDQOF1ZCqD6Ww9fW5JTxcplIri4wthAYi9DD9cTpT m+7kuIkcgWoyDCIXNwER+EvzBrRC+8EOF6ZbbzU4pHqGsnj80sq1uhtamhB+V9jz Cdv/NNHcmUNqTS3VqADfKhr6xaGvT6vKqQHzjzS1J6c0nmP3d27s97BUBSMYOmRw bpnJnr7WGDIDEK9Pm8Cneg6F9R9xJo99feaXAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUDsYRRWC7lcLM90ej23os3+XJQ40wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0RzWVJSV0M3bGNMTTkwZWoy M29zMy1YSlE0MC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV2 6OAwDQYJKoZIhvcNAQELBQADggEBABFy+zA2NqnGPCmazvr3kTjvg9mSWWukIfBn 64uLn+llnZxI6Gm+i7C1fXQGCRMQ8eqiuQZbS8oAT9mLKkPDRQZoWt1+eFdP9GUi avGQCfd+dX+d57biHBD9BKBwBuL5BaLQtZcwQm67XI7rGPaiSwfDvUlUH0hUMKFo iSJIUSBblVMvNPwfUz6deuC6s34KkVVA+ryswmGZ6Eev3qDiE2lUJWa/NVtMrvDH wRDrAekT1If5xAiwvFsf938D6rVAlqTcm1CUqlFNHOcddnXMft5BFE8aX0mQtnbU QGw5IPFBlzFt8kJpaLgAYNfgiFxHIhTUm8EimuMYAlDvuekV3k4= -----END CERTIFICATE-----Generated at Fri Oct 24 04:48:23 2025 by rpki-client