$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JeHPeV2dxqrtLxbyklXNnPKf37g.roa File: JeHPeV2dxqrtLxbyklXNnPKf37g.roa (raw, json) Hash identifier: pfm3kmgIZ2GxKyIhZm2UDMKRhQShLaxDwa1MtKTeQSo= Subject key identifier: 25:E1:CF:79:5D:9D:C6:AA:ED:2F:16:F2:92:55:CD:9C:F2:9F:DF:B8 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 38CA Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JeHPeV2dxqrtLxbyklXNnPKf37g.roa Signing time: Fri 22 Aug 2025 08:45:38 +0000 ROA not before: Fri 22 Aug 2025 08:45:38 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9924 IP address blocks: 123.193.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 07:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14538 (0x38ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:38 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=25E1CF795D9DC6AAED2F16F29255CD9CF29FDFB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:01:24:c9:92:e1:15:22:62:9c:6e:d9:7e:c2: 48:8e:c0:fd:a5:b9:01:d6:28:18:fe:28:c1:f2:31: 03:14:71:82:8f:e5:06:bc:87:c5:05:c2:7b:9f:c4: 0a:fb:b7:23:18:29:1b:a8:58:5c:f9:39:cd:65:33: c5:16:99:e2:98:45:d2:bc:4e:d2:ac:33:09:1a:47: af:c9:62:7f:95:a2:67:05:01:a3:c6:fb:8c:87:75: ea:94:74:f3:53:be:35:ae:24:d7:d9:74:c6:e9:0d: 89:85:ff:b2:51:1c:fb:e2:c1:b3:53:65:c9:d7:a1: 99:02:c5:a9:36:00:44:19:7b:6b:0b:fc:ad:bd:83: ab:42:22:9c:25:35:09:31:eb:f1:98:89:67:ea:45: 24:35:0e:ce:41:be:fe:8a:8e:95:94:f1:e2:f3:2a: de:35:b9:3e:48:a2:80:ce:72:b7:54:64:f0:c3:e1: 13:1a:5e:8f:3e:32:5b:6b:0a:5f:a5:94:73:fb:25: 93:5a:3a:39:b8:f2:ca:48:1e:8c:e9:dc:bc:0d:a5: d4:27:52:d9:19:76:e4:82:0b:ce:f9:5a:30:82:88: 47:06:0f:ab:c7:02:cf:37:89:1b:04:81:05:3c:dc: fa:87:20:c2:be:57:d5:af:5b:f7:d9:31:88:d9:30: 7b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:E1:CF:79:5D:9D:C6:AA:ED:2F:16:F2:92:55:CD:9C:F2:9F:DF:B8 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JeHPeV2dxqrtLxbyklXNnPKf37g.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.96.0/21 Signature Algorithm: sha256WithRSAEncryption 58:b2:7d:ec:dd:c2:33:4d:d2:72:2f:0b:d8:25:7f:e9:16:bb: a3:d0:f6:96:ac:68:71:7c:d4:9a:2d:06:68:a1:79:64:fd:12: a6:6f:21:08:00:a5:b2:ca:10:c2:05:a3:c9:a2:8b:83:1d:18: 14:5e:d4:d2:d5:70:38:00:d5:d2:23:66:d0:21:4c:eb:f4:d4: eb:77:52:b8:0e:f8:6c:f2:7c:26:25:21:fb:00:60:0e:af:f3: cf:03:7b:0e:ff:ed:1c:42:2b:d3:46:ce:68:42:b5:bf:27:4e: c2:d9:24:d5:96:0c:45:8a:f4:fd:94:74:6d:e0:06:a3:d6:79: 4e:b0:20:3a:75:c5:0d:a5:c9:2e:32:6e:46:94:ab:22:74:1f: 88:60:d0:7e:a6:0f:a8:ba:98:16:e9:88:7c:6e:16:b5:f0:db: b4:7b:7c:f7:bb:24:7d:07:a5:79:2a:ac:f1:1d:46:36:ca:46: 75:7d:b8:d8:67:0d:d1:13:6a:1c:95:59:2c:cf:45:c3:df:6d: 4a:11:51:2e:07:b2:f4:a3:8c:c2:9a:ae:c2:75:36:a2:54:46: c3:da:04:70:0d:6b:5c:ed:c3:0f:9d:14:eb:ba:3c:71:af:1c: 6d:38:3f:ab:21:37:0f:b6:31:d2:65:6a:4f:6b:98:a7:68:db: ec:77:74:2e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOMowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1MzhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDI1RTFDRjc5NUQ5REM2 QUFFRDJGMTZGMjkyNTVDRDlDRjI5RkRGQjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNASTJkuEVImKcbtl+wkiOwP2luQHWKBj+KMHyMQMUcYKP5Qa8 h8UFwnufxAr7tyMYKRuoWFz5Oc1lM8UWmeKYRdK8TtKsMwkaR6/JYn+VomcFAaPG +4yHdeqUdPNTvjWuJNfZdMbpDYmF/7JRHPviwbNTZcnXoZkCxak2AEQZe2sL/K29 g6tCIpwlNQkx6/GYiWfqRSQ1Ds5Bvv6KjpWU8eLzKt41uT5IooDOcrdUZPDD4RMa Xo8+MltrCl+llHP7JZNaOjm48spIHozp3LwNpdQnUtkZduSCC875WjCCiEcGD6vH As83iRsEgQU83PqHIMK+V9WvW/fZMYjZMHsPAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUJeHPeV2dxqrtLxbyklXNnPKf37gwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0plSFBlVjJkeHFydEx4Ynlr bFhOblBLZjM3Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wWAwDQYJKoZIhvcNAQELBQADggEBAFiyfezdwjNN0nIvC9glf+kWu6PQ9pasaHF8 1JotBmiheWT9EqZvIQgApbLKEMIFo8mii4MdGBRe1NLVcDgA1dIjZtAhTOv01Ot3 UrgO+GzyfCYlIfsAYA6v888Dew7/7RxCK9NGzmhCtb8nTsLZJNWWDEWK9P2UdG3g BqPWeU6wIDp1xQ2lyS4ybkaUqyJ0H4hg0H6mD6i6mBbpiHxuFrXw27R7fPe7JH0H pXkqrPEdRjbKRnV9uNhnDdETahyVWSzPRcPfbUoRUS4HsvSjjMKarsJ1NqJURsPa BHANa1ztww+dFOu6PHGvHG04P6shNw+2MdJlak9rmKdo2+x3dC4= -----END CERTIFICATE-----Generated at Fri Oct 24 04:48:22 2025 by rpki-client