$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GadId8XiYg1dZCEciEIpiPn5ew8.roa File: GadId8XiYg1dZCEciEIpiPn5ew8.roa (raw, json) Hash identifier: kigV9QHIR8Jl5lC086hX5dC1l4qBAJVaXrm5aLpED3Y= Subject key identifier: 19:A7:48:77:C5:E2:62:0D:5D:64:21:1C:88:42:29:88:F9:F9:7B:0F Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3900 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GadId8XiYg1dZCEciEIpiPn5ew8.roa Signing time: Fri 22 Aug 2025 08:45:51 +0000 ROA not before: Fri 22 Aug 2025 08:45:51 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 118.233.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14592 (0x3900) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:51 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=19A74877C5E2620D5D64211C88422988F9F97B0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:50:ee:cb:b9:41:88:f3:96:c7:cd:21:0b:74: d5:6d:f2:3d:77:ca:46:96:30:be:a5:a0:fd:4a:57: 6f:02:6d:81:53:1c:47:83:23:dc:2c:d1:f3:7c:db: 04:b1:f5:6e:fc:81:c3:cf:ff:65:9c:4d:ed:b4:66: 58:ec:8f:c8:8d:57:4a:97:d8:1b:2b:c1:37:ba:9c: 0f:c4:a8:f0:6f:52:fb:74:34:95:a5:28:d0:74:2b: b6:21:46:a5:af:72:a5:e5:f3:df:b3:18:4e:89:e3: ac:e8:ac:e4:58:0d:9d:c9:a8:32:2b:5b:df:6f:5c: 59:82:40:ea:40:fb:7c:fa:a2:e0:91:a3:7b:b8:67: 13:4d:72:13:2a:9f:7b:d1:41:8b:f5:df:5d:a8:f1: 58:3f:6e:20:87:ec:ad:4a:21:9d:5e:48:e9:61:35: 5f:8e:00:67:cf:83:3b:3a:d0:20:6e:87:75:9d:94: a8:a5:bc:fa:38:a5:f8:ef:a9:f2:21:9f:c8:25:c5: 91:35:d1:57:57:3d:29:de:d4:b6:79:db:d9:58:a2: d0:f1:9f:cb:39:76:a0:5d:14:51:dd:bf:70:e6:e4: 7e:28:67:4a:f6:6d:a8:17:82:42:a7:a9:70:fe:f7: ec:b5:33:79:b7:a2:20:7f:a3:3d:27:06:3d:4d:94: de:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:A7:48:77:C5:E2:62:0D:5D:64:21:1C:88:42:29:88:F9:F9:7B:0F X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GadId8XiYg1dZCEciEIpiPn5ew8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.80.0/21 Signature Algorithm: sha256WithRSAEncryption 73:93:8e:d9:2c:1f:e9:e0:03:bd:b5:39:ed:8b:74:f3:18:2f: 8c:e6:07:ee:ca:48:f0:b1:a0:b3:b7:a6:09:42:6f:07:36:52: 38:38:f0:ee:db:1b:17:a7:2b:29:bc:c1:43:5b:7f:fc:c5:40: 68:40:dc:08:2b:40:3b:02:f8:49:ac:ff:70:49:12:11:1f:e8: d1:1c:dd:e2:c4:7b:4c:20:01:e4:d9:7e:d3:39:51:24:33:a1: 0d:9f:55:86:d3:f6:ba:6c:aa:c6:c7:ef:d6:1c:47:fb:cb:6c: 59:4b:3e:53:8c:43:8e:5f:3c:7f:15:ec:02:cc:be:15:f1:75: 16:59:83:06:eb:e2:b9:28:d5:39:6d:f8:56:0a:88:5f:30:29: ab:d6:cc:0e:63:d0:ca:39:60:61:53:40:2f:78:92:2f:9a:8e: d1:09:82:0b:e2:96:47:ed:61:1f:c2:3e:28:c1:0a:22:30:e6: a7:b9:08:ca:f0:af:ff:57:90:8e:30:4a:ac:e5:bd:a6:4f:4a: b0:f2:15:fe:91:c1:08:6e:44:4f:b6:a2:b4:6f:3c:7e:a6:30: aa:d2:b2:7a:d3:68:19:7e:dc:39:fe:e6:62:33:7a:8d:d8:54: 32:82:84:92:ef:c5:f1:95:02:c0:e8:a3:d8:83:02:0e:c5:d1: 46:0e:7e:1e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOQAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1NTFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDE5QTc0ODc3QzVFMjYy MEQ1RDY0MjExQzg4NDIyOTg4RjlGOTdCMEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDjUO7LuUGI85bHzSELdNVt8j13ykaWML6loP1KV28CbYFTHEeD I9ws0fN82wSx9W78gcPP/2WcTe20Zljsj8iNV0qX2BsrwTe6nA/EqPBvUvt0NJWl KNB0K7YhRqWvcqXl89+zGE6J46zorORYDZ3JqDIrW99vXFmCQOpA+3z6ouCRo3u4 ZxNNchMqn3vRQYv1312o8Vg/biCH7K1KIZ1eSOlhNV+OAGfPgzs60CBuh3WdlKil vPo4pfjvqfIhn8glxZE10VdXPSne1LZ529lYotDxn8s5dqBdFFHdv3Dm5H4oZ0r2 bagXgkKnqXD+9+y1M3m3oiB/oz0nBj1NlN6HAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUGadId8XiYg1dZCEciEIpiPn5ew8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0dhZElkOFhpWWcxZFpDRWNp RUlwaVBuNWV3OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2 6VAwDQYJKoZIhvcNAQELBQADggEBAHOTjtksH+ngA721Oe2LdPMYL4zmB+7KSPCx oLO3pglCbwc2Ujg48O7bGxenKym8wUNbf/zFQGhA3AgrQDsC+Ems/3BJEhEf6NEc 3eLEe0wgAeTZftM5USQzoQ2fVYbT9rpsqsbH79YcR/vLbFlLPlOMQ45fPH8V7ALM vhXxdRZZgwbr4rko1Tlt+FYKiF8wKavWzA5j0Mo5YGFTQC94ki+ajtEJggvilkft YR/CPijBCiIw5qe5CMrwr/9XkI4wSqzlvaZPSrDyFf6RwQhuRE+2orRvPH6mMKrS snrTaBl+3Dn+5mIzeo3YVDKChJLvxfGVAsDoo9iDAg7F0UYOfh4= -----END CERTIFICATE-----Generated at Fri Oct 24 19:27:20 2025 by rpki-client