$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HrMx91cGWFUJjHH9lyUdRVyUJ-c.roa File: HrMx91cGWFUJjHH9lyUdRVyUJ-c.roa (raw, json) Hash identifier: hhufObfI7gSbP5nJKZ0Df3tHa0nnnqPMNTcemuRUEWs= Subject key identifier: 1E:B3:31:F7:57:06:58:55:09:8C:71:FD:97:25:1D:45:5C:94:27:E7 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3A28 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HrMx91cGWFUJjHH9lyUdRVyUJ-c.roa Signing time: Fri 22 Aug 2025 08:47:04 +0000 ROA not before: Fri 22 Aug 2025 08:47:04 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 118.232.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14888 (0x3a28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:04 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=1EB331F757065855098C71FD97251D455C9427E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0a:f6:a2:14:55:f2:e4:e9:01:18:17:9f:dd: 08:d8:f3:35:07:96:54:a9:1e:f4:5a:37:d9:b9:92: 82:09:b2:86:65:c8:68:b2:34:c7:50:24:7c:82:68: 1d:c1:5e:60:04:11:f7:9f:55:43:1b:3f:06:77:b1: 18:fa:14:51:82:5b:2c:00:57:bf:7b:11:fc:76:76: 06:09:af:8a:00:21:86:49:4b:66:59:8d:e7:54:3c: 30:4b:63:b6:70:38:a0:b6:ce:3b:fe:c8:5a:06:8d: d9:6a:7e:c6:69:54:1b:0d:ef:3b:3c:b7:93:20:2f: 2f:86:6e:81:ec:83:ac:11:1d:db:c4:a1:cb:8c:79: e7:30:56:d9:54:ec:fd:13:73:52:f3:f8:76:c7:ff: bd:53:e0:ef:31:5f:92:b0:15:61:9c:e3:0d:98:27: e1:9c:de:5c:d4:53:4b:14:2b:80:12:78:d3:dd:67: 2a:1e:79:d2:37:25:3f:71:d8:b3:2d:95:3c:48:97: b9:6e:56:96:ea:f4:b5:1e:50:37:f7:1d:1d:44:df: e7:9e:1f:b9:f8:ff:03:e8:b0:2a:18:4c:f7:61:c2: 75:dc:33:29:f5:0f:8b:c1:0a:96:34:f5:ed:6b:f2: 75:69:bd:ad:28:0f:3d:ca:10:95:35:81:c5:f4:da: 67:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:B3:31:F7:57:06:58:55:09:8C:71:FD:97:25:1D:45:5C:94:27:E7 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HrMx91cGWFUJjHH9lyUdRVyUJ-c.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.160.0/21 Signature Algorithm: sha256WithRSAEncryption b5:5e:18:2d:98:42:bd:61:d9:52:ec:35:ef:29:2b:0e:e0:85: 6f:90:57:d0:59:e3:b4:59:6c:e6:47:fc:af:90:d9:2c:f8:6c: d7:81:0a:18:63:75:ca:c3:81:72:1b:60:45:2d:58:fa:30:4b: 30:4a:63:ee:db:02:25:c1:74:73:7f:37:06:ad:75:2e:2c:34: b2:76:ad:3d:f7:16:25:c9:fc:d9:32:3a:b7:35:f3:2e:54:4d: 27:8d:b0:c1:79:f8:02:a9:24:db:df:80:c2:ac:b7:8e:56:1e: ce:86:08:2a:01:68:89:a9:46:e6:7a:51:84:c9:ac:50:fe:31: 3e:d5:b7:48:b8:32:d4:fe:a9:d7:f4:bd:ca:ce:55:e9:84:e3: c6:a5:1e:cf:3b:5a:f8:ad:02:86:e0:f8:3c:fd:11:97:bc:48: 8f:b8:6a:5c:ef:b6:6f:a5:88:c5:f4:46:82:1c:21:ec:79:da: bd:9a:87:ff:18:1e:d0:6a:c8:c5:70:77:4e:6a:a8:8e:4e:61: 1e:f1:cf:9b:5f:e3:3e:56:9f:65:62:93:92:eb:ad:7a:d6:f3: 07:eb:53:e4:3f:b2:66:ea:2e:aa:b3:2f:e7:2b:ed:39:78:15: 7f:c9:98:ac:82:d6:40:25:d4:29:c3:8c:67:04:18:06:df:41: d6:62:05:a9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOigwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3MDRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDFFQjMzMUY3NTcwNjU4 NTUwOThDNzFGRDk3MjUxRDQ1NUM5NDI3RTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGCvaiFFXy5OkBGBef3QjY8zUHllSpHvRaN9m5koIJsoZlyGiy NMdQJHyCaB3BXmAEEfefVUMbPwZ3sRj6FFGCWywAV797Efx2dgYJr4oAIYZJS2ZZ jedUPDBLY7ZwOKC2zjv+yFoGjdlqfsZpVBsN7zs8t5MgLy+GboHsg6wRHdvEocuM eecwVtlU7P0Tc1Lz+HbH/71T4O8xX5KwFWGc4w2YJ+Gc3lzUU0sUK4ASeNPdZyoe edI3JT9x2LMtlTxIl7luVpbq9LUeUDf3HR1E3+eeH7n4/wPosCoYTPdhwnXcMyn1 D4vBCpY09e1r8nVpva0oDz3KEJU1gcX02mdHAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUHrMx91cGWFUJjHH9lyUdRVyUJ+cwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0hyTXg5MWNHV0ZVSmpISDls eVVkUlZ5VUotYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2 6KAwDQYJKoZIhvcNAQELBQADggEBALVeGC2YQr1h2VLsNe8pKw7ghW+QV9BZ47RZ bOZH/K+Q2Sz4bNeBChhjdcrDgXIbYEUtWPowSzBKY+7bAiXBdHN/NwatdS4sNLJ2 rT33FiXJ/NkyOrc18y5UTSeNsMF5+AKpJNvfgMKst45WHs6GCCoBaImpRuZ6UYTJ rFD+MT7Vt0i4MtT+qdf0vcrOVemE48alHs87WvitAobg+Dz9EZe8SI+4alzvtm+l iMX0RoIcIex52r2ah/8YHtBqyMVwd05qqI5OYR7xz5tf4z5Wn2Vik5LrrXrW8wfr U+Q/smbqLqqzL+cr7Tl4FX/JmKyC1kAl1CnDjGcEGAbfQdZiBak= -----END CERTIFICATE-----Generated at Fri Oct 24 19:27:44 2025 by rpki-client