$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FbaMWx9Q7Y-_tINaYmXT0IN8sSA.roa File: FbaMWx9Q7Y-_tINaYmXT0IN8sSA.roa (raw, json) Hash identifier: 6Lnw0UH946q/gkVpwaFKkz6cso90kI4TROP7pSygmFA= Subject key identifier: 15:B6:8C:5B:1F:50:ED:8F:BF:B4:83:5A:62:65:D3:D0:83:7C:B1:20 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3926 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FbaMWx9Q7Y-_tINaYmXT0IN8sSA.roa Signing time: Fri 22 Aug 2025 08:46:01 +0000 ROA not before: Fri 22 Aug 2025 08:46:01 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9924 IP address blocks: 118.232.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 07:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14630 (0x3926) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:01 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=15B68C5B1F50ED8FBFB4835A6265D3D0837CB120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ec:0d:26:f7:df:31:6d:0e:b8:aa:0a:95:0b: 9b:38:27:c3:98:5c:56:1a:aa:c7:8d:7a:18:db:e1: 44:6f:37:64:ab:d4:1b:e8:25:e9:90:e9:99:b2:30: 10:72:90:af:58:9e:b3:27:ab:88:b5:80:d5:6d:46: 65:37:7b:19:b8:00:f1:f6:c6:06:1e:5d:62:79:3f: 59:ad:6d:b7:22:96:15:79:49:1e:76:81:37:3e:b0: 6e:c8:9b:c1:66:73:31:22:4d:bd:06:a0:1b:43:91: 3b:52:39:ec:e1:97:63:70:90:be:15:7e:e6:9b:0e: b9:79:c0:a2:f8:b1:90:f3:cd:7f:4f:1b:66:02:41: fc:ea:3c:98:8e:69:e7:2e:73:30:88:b0:14:d0:81: 4d:6c:f7:c9:50:f5:1f:e4:2c:fd:c3:2a:d4:fd:94: a0:d3:e1:a1:84:3c:84:5f:94:c7:af:53:60:f6:cc: e0:a5:08:2e:f2:ab:ac:24:ee:d4:ed:56:67:f1:40: 5a:c9:2d:62:13:dc:f0:d2:65:b7:4a:11:71:96:eb: 1d:97:ba:3e:49:8b:67:22:7c:08:b2:ce:19:6f:5d: 02:ae:48:0c:66:6a:8a:b7:6b:b7:bd:78:07:ff:20: b4:37:d2:4d:d3:9f:09:de:53:61:30:63:9f:08:cf: 94:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:B6:8C:5B:1F:50:ED:8F:BF:B4:83:5A:62:65:D3:D0:83:7C:B1:20 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FbaMWx9Q7Y-_tINaYmXT0IN8sSA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.220.0/22 Signature Algorithm: sha256WithRSAEncryption 2e:65:ef:12:04:da:8d:c7:c6:f9:69:54:32:08:e8:c9:b3:d0: d8:8b:38:b2:20:bc:93:31:f0:43:08:b5:e0:59:b0:ea:bf:2d: a6:da:67:6f:81:8a:38:9a:8a:84:e4:99:ab:64:f6:47:19:87: cb:ca:52:a7:b0:9c:90:7d:e7:2d:72:54:0c:f5:06:73:73:93: 0a:e1:d6:e0:a9:84:0b:41:f0:d7:9c:a3:f9:54:ff:6c:99:8d: 47:01:6c:6f:b3:99:82:1b:b6:d8:90:42:f1:4a:a8:af:a1:ae: bc:c2:49:84:8b:18:2e:89:56:c2:18:d7:97:cd:3d:9c:11:c2: 25:30:f9:d9:07:69:2f:f3:f2:1b:3f:e7:b6:c5:65:61:2f:36: a1:13:57:f4:12:18:f4:f2:2b:76:ef:0f:c1:b4:31:3e:a0:2e: 73:6e:f2:11:14:7e:6b:47:1d:34:21:d2:93:2b:36:6d:67:d7: 10:69:34:bb:8d:d5:52:aa:86:95:6d:37:03:6d:eb:52:ff:ce: 8d:ee:e6:e6:ba:14:bc:ab:5f:db:2c:54:16:5e:54:cb:1e:b5: 4c:c2:06:20:b2:c5:86:f9:b9:1a:c4:1e:42:b1:71:2a:09:20: 39:aa:ce:74:67:5b:fe:56:10:bb:94:40:d1:25:e4:bd:ee:79: ef:4d:ca:1b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOSYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2MDFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDE1QjY4QzVCMUY1MEVE OEZCRkI0ODM1QTYyNjVEM0QwODM3Q0IxMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC37A0m998xbQ64qgqVC5s4J8OYXFYaqseNehjb4URvN2Sr1Bvo JemQ6ZmyMBBykK9YnrMnq4i1gNVtRmU3exm4APH2xgYeXWJ5P1mtbbcilhV5SR52 gTc+sG7Im8FmczEiTb0GoBtDkTtSOezhl2NwkL4VfuabDrl5wKL4sZDzzX9PG2YC QfzqPJiOaecuczCIsBTQgU1s98lQ9R/kLP3DKtT9lKDT4aGEPIRflMevU2D2zOCl CC7yq6wk7tTtVmfxQFrJLWIT3PDSZbdKEXGW6x2Xuj5Ji2cifAiyzhlvXQKuSAxm aoq3a7e9eAf/ILQ30k3TnwneU2EwY58Iz5TVAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUFbaMWx9Q7Y+/tINaYmXT0IN8sSAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0ZiYU1XeDlRN1ktX3RJTmFZ bVhUMElOOHNTQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6NwwDQYJKoZIhvcNAQELBQADggEBAC5l7xIE2o3HxvlpVDII6Mmz0NiLOLIgvJMx 8EMIteBZsOq/LabaZ2+BijiaioTkmatk9kcZh8vKUqewnJB95y1yVAz1BnNzkwrh 1uCphAtB8Neco/lU/2yZjUcBbG+zmYIbttiQQvFKqK+hrrzCSYSLGC6JVsIY15fN PZwRwiUw+dkHaS/z8hs/57bFZWEvNqETV/QSGPTyK3bvD8G0MT6gLnNu8hEUfmtH HTQh0pMrNm1n1xBpNLuN1VKqhpVtNwNt61L/zo3u5ua6FLyrX9ssVBZeVMsetUzC BiCyxYb5uRrEHkKxcSoJIDmqznRnW/5WELuUQNEl5L3uee9Nyhs= -----END CERTIFICATE-----Generated at Fri Oct 24 04:48:07 2025 by rpki-client