$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ILBnmNVQwcv_baaXFwL4nzZFkLc.roa File: ILBnmNVQwcv_baaXFwL4nzZFkLc.roa (raw, json) Hash identifier: f7utjGdzsumFBg4gZApe7FNuKCLt337ofB3tw3c2Cbs= Subject key identifier: 20:B0:67:98:D5:50:C1:CB:FF:6D:A6:97:17:02:F8:9F:36:45:90:B7 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3B33 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ILBnmNVQwcv_baaXFwL4nzZFkLc.roa Signing time: Fri 22 Aug 2025 08:48:10 +0000 ROA not before: Fri 22 Aug 2025 08:48:10 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.193.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15155 (0x3b33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:48:10 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=20B06798D550C1CBFF6DA6971702F89F364590B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:be:64:f0:f8:f8:43:fa:c0:ec:b5:54:86:be: a1:47:3e:77:70:ae:0f:35:29:f5:16:33:96:94:a2: bd:11:d9:f1:fb:a4:00:52:0e:63:25:20:cc:3e:60: fd:0d:5d:27:82:20:c1:1f:53:bb:90:31:11:4d:8b: 2d:72:72:25:90:91:ea:72:e9:e8:fe:b7:f7:2a:9a: 3f:f8:33:95:26:48:e5:5f:06:d9:f8:b4:66:e1:8d: 71:4c:16:98:64:eb:53:f7:56:84:68:4a:5f:cd:4f: fb:4e:cd:12:1b:b8:64:83:e5:9a:30:37:54:37:90: 86:59:2f:56:39:e3:61:c8:6d:73:df:5c:83:8d:f6: 6c:2c:a9:e9:52:8e:a1:a8:ad:5d:46:ab:7b:2d:71: e2:57:8d:55:d8:fc:74:d7:ef:af:53:3e:ca:25:65: 2d:47:e2:39:e2:ba:27:33:41:67:4a:b9:45:37:26: 82:b1:78:73:ea:dc:2f:ed:62:6f:80:34:94:29:43: aa:65:d8:c7:9c:55:9e:85:71:ef:68:73:8b:cb:26: 03:01:cc:1e:72:d5:ad:5b:27:4e:da:53:46:1f:63: c7:6f:f1:0c:72:51:46:9f:c0:c0:65:42:04:f4:43: 50:ae:69:0d:2e:6a:e8:86:2f:fd:17:8f:92:9f:3a: db:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:B0:67:98:D5:50:C1:CB:FF:6D:A6:97:17:02:F8:9F:36:45:90:B7 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ILBnmNVQwcv_baaXFwL4nzZFkLc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.109.0/24 Signature Algorithm: sha256WithRSAEncryption 55:01:0c:95:f4:0f:32:d1:53:e5:a8:1c:82:df:05:05:03:10: c0:bc:ee:8c:55:75:34:e1:4f:a7:c8:eb:eb:e0:12:92:cb:d8: a1:d8:ef:76:f5:3b:94:d3:84:34:99:49:8e:c4:2f:51:2a:c9: 0c:c3:69:88:fa:e0:4a:b4:6f:42:98:0a:73:9e:d0:5b:16:b6: 1d:50:b6:f0:86:56:5e:98:9f:be:ca:b0:70:4b:9e:0f:13:21: fe:37:9b:8a:69:5a:1e:2c:a4:37:a7:e6:5d:eb:97:bd:43:d7: 9e:7d:bd:ce:e9:e0:b7:9c:93:a7:39:29:1a:7c:ee:2d:bc:43: 9e:d1:f4:9d:9b:8f:4f:5f:94:4d:36:6f:13:8d:c9:3d:06:e2: a4:17:fb:14:51:04:ca:d7:7e:55:95:86:a7:4e:5f:a8:c2:cc: 0c:5d:a4:75:27:f8:0c:f2:64:2b:e0:ca:98:85:35:a8:d7:4f: 98:a0:56:c2:76:55:f7:4c:0c:78:a8:8c:cc:28:62:89:32:fb: 40:02:9a:fe:39:27:cd:08:0d:3c:ed:4c:7e:9f:ad:e9:f8:6a: 3b:88:55:d7:53:66:52:1e:d6:55:f8:71:9a:ac:4b:b1:9b:b6: 99:d5:33:61:81:10:5b:fd:0a:b3:19:ab:bf:73:6f:69:8c:88: d3:44:32:d1 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOzMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ4MTBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDIwQjA2Nzk4RDU1MEMx Q0JGRjZEQTY5NzE3MDJGODlGMzY0NTkwQjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5vmTw+PhD+sDstVSGvqFHPndwrg81KfUWM5aUor0R2fH7pABS DmMlIMw+YP0NXSeCIMEfU7uQMRFNiy1yciWQkepy6ej+t/cqmj/4M5UmSOVfBtn4 tGbhjXFMFphk61P3VoRoSl/NT/tOzRIbuGSD5ZowN1Q3kIZZL1Y542HIbXPfXION 9mwsqelSjqGorV1Gq3stceJXjVXY/HTX769TPsolZS1H4jniuiczQWdKuUU3JoKx eHPq3C/tYm+ANJQpQ6pl2MecVZ6Fce9oc4vLJgMBzB5y1a1bJ07aU0YfY8dv8Qxy UUafwMBlQgT0Q1CuaQ0uauiGL/0Xj5KfOtv1AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUILBnmNVQwcv/baaXFwL4nzZFkLcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0lMQm5tTlZRd2N2X2JhYVhG d0w0bnpaRmtMYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7 wW0wDQYJKoZIhvcNAQELBQADggEBAFUBDJX0DzLRU+WoHILfBQUDEMC87oxVdTTh T6fI6+vgEpLL2KHY73b1O5TThDSZSY7EL1EqyQzDaYj64Eq0b0KYCnOe0FsWth1Q tvCGVl6Yn77KsHBLng8TIf43m4ppWh4spDen5l3rl71D1559vc7p4Leck6c5KRp8 7i28Q57R9J2bj09flE02bxONyT0G4qQX+xRRBMrXflWVhqdOX6jCzAxdpHUn+Azy ZCvgypiFNajXT5igVsJ2VfdMDHiojMwoYoky+0ACmv45J80IDTztTH6fren4ajuI VddTZlIe1lX4cZqsS7GbtpnVM2GBEFv9CrMZq79zb2mMiNNEMtE= -----END CERTIFICATE-----Generated at Fri Oct 24 19:21:49 2025 by rpki-client