$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EE49ez8VBiQ4Oj3O4R3dzF1Kk_o.roa File: EE49ez8VBiQ4Oj3O4R3dzF1Kk_o.roa (raw, json) Hash identifier: sPIh3FJOf9fiYfO7XSSYvMzT9Nuy1IAVEne+5YGe6u0= Subject key identifier: 10:4E:3D:7B:3F:15:06:24:38:3A:3D:CE:E1:1D:DD:CC:5D:4A:93:FA Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 398A Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EE49ez8VBiQ4Oj3O4R3dzF1Kk_o.roa Signing time: Fri 22 Aug 2025 08:46:24 +0000 ROA not before: Fri 22 Aug 2025 08:46:24 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 118.233.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14730 (0x398a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:24 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=104E3D7B3F150624383A3DCEE11DDDCC5D4A93FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:59:b0:e7:3c:29:e3:f0:33:f3:3e:e9:4a:9e: 8b:eb:6b:4e:11:c1:95:3e:95:5c:ad:50:52:3d:d4: 32:fe:87:7d:c6:13:ce:a6:54:14:40:3f:23:0d:71: f6:be:3b:60:a0:de:b7:1f:72:51:f3:68:2a:69:88: fe:9d:3d:95:12:74:65:26:6d:18:91:21:61:8a:e8: b7:38:99:35:24:1a:f6:a4:7d:bc:6e:ec:62:b3:df: 75:bf:ae:5d:dd:fa:b5:20:22:04:08:60:26:e2:e9: 29:d7:f6:ab:df:0a:ad:08:20:a0:dc:5f:29:d9:ab: 6a:11:58:e4:e2:ef:ae:48:ba:c8:bb:02:af:d6:23: 72:ef:73:f2:3a:d2:d8:41:a0:ff:4e:6c:1f:63:51: d4:df:97:f0:47:fa:e2:90:95:8e:f4:69:a1:49:08: 8c:0c:7a:bd:e2:25:36:33:60:02:0f:20:30:6c:38: 82:b6:95:a6:3e:bd:db:81:a5:60:99:94:9d:d9:6a: 6d:d3:ae:f4:0e:ac:be:e4:ad:51:7c:5d:ec:05:a9: 6f:42:35:a9:8f:14:66:60:a2:af:7d:5e:f3:90:64: 92:67:7e:f3:84:bc:0c:d6:68:9a:09:35:0c:1e:de: d7:87:17:d5:5d:d4:a7:8e:26:f8:57:23:89:95:1c: 57:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:4E:3D:7B:3F:15:06:24:38:3A:3D:CE:E1:1D:DD:CC:5D:4A:93:FA X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EE49ez8VBiQ4Oj3O4R3dzF1Kk_o.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.184.0/22 Signature Algorithm: sha256WithRSAEncryption 90:bb:d1:e2:8b:36:7c:07:84:d2:49:4a:60:8e:f6:41:06:e2: 9a:08:ac:9f:1b:95:79:5c:58:38:92:1e:d0:cf:3d:30:34:03: 62:f2:5c:9a:5f:ae:3f:f7:8e:eb:bd:bc:ed:78:b6:8f:5f:1d: c0:36:34:9e:28:d3:49:73:48:a1:03:3e:c0:38:87:90:ba:1b: 1b:cf:eb:70:68:70:16:cc:95:97:74:c4:5b:41:6a:0b:64:51: 9e:14:0a:d1:05:9c:ad:e4:a2:6f:94:74:72:f0:f0:94:83:0b: 99:c1:59:b3:91:70:2b:ae:9f:98:40:90:80:ab:4d:87:e6:10: 81:c4:ab:99:eb:a9:7c:2e:94:cc:af:72:68:d2:b2:88:81:6c: 24:8a:f6:2c:6e:3f:51:ce:04:57:81:1c:a0:1b:f3:c8:b0:73: da:b3:02:c8:d9:90:61:1d:81:70:c8:ef:30:f6:0f:b4:2d:7d: 32:3d:3f:80:31:b8:69:b0:a0:29:1b:93:fe:2d:7e:59:69:29: 1c:bc:3b:e1:27:cc:e3:46:c4:ea:46:94:16:b6:a5:5a:56:4c: b8:12:44:da:50:f5:18:0e:86:99:4d:7f:01:4c:0e:32:04:7d: 1f:a4:aa:e3:1d:86:d6:d2:1b:8a:fc:b7:7f:17:59:26:b6:d9: 4a:5b:28:cc -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOYowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2MjRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDEwNEUzRDdCM0YxNTA2 MjQzODNBM0RDRUUxMURERENDNUQ0QTkzRkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCkWbDnPCnj8DPzPulKnovra04RwZU+lVytUFI91DL+h33GE86m VBRAPyMNcfa+O2Cg3rcfclHzaCppiP6dPZUSdGUmbRiRIWGK6Lc4mTUkGvakfbxu 7GKz33W/rl3d+rUgIgQIYCbi6SnX9qvfCq0IIKDcXynZq2oRWOTi765Iusi7Aq/W I3Lvc/I60thBoP9ObB9jUdTfl/BH+uKQlY70aaFJCIwMer3iJTYzYAIPIDBsOIK2 laY+vduBpWCZlJ3Zam3TrvQOrL7krVF8XewFqW9CNamPFGZgoq99XvOQZJJnfvOE vAzWaJoJNQwe3teHF9Vd1KeOJvhXI4mVHFdLAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUEE49ez8VBiQ4Oj3O4R3dzF1Kk/owHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0VFNDllejhWQmlRNE9qM080 UjNkekYxS2tfby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6bgwDQYJKoZIhvcNAQELBQADggEBAJC70eKLNnwHhNJJSmCO9kEG4poIrJ8blXlc WDiSHtDPPTA0A2LyXJpfrj/3juu9vO14to9fHcA2NJ4o00lzSKEDPsA4h5C6GxvP 63BocBbMlZd0xFtBagtkUZ4UCtEFnK3kom+UdHLw8JSDC5nBWbORcCuun5hAkICr TYfmEIHEq5nrqXwulMyvcmjSsoiBbCSK9ixuP1HOBFeBHKAb88iwc9qzAsjZkGEd gXDI7zD2D7QtfTI9P4AxuGmwoCkbk/4tfllpKRy8O+EnzONGxOpGlBa2pVpWTLgS RNpQ9RgOhplNfwFMDjIEfR+kquMdhtbSG4r8t38XWSa22UpbKMw= -----END CERTIFICATE-----Generated at Fri Oct 24 19:27:23 2025 by rpki-client