$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/K5zFZUOkJoqnsW30WKYGnBgDIZ0.roa File: K5zFZUOkJoqnsW30WKYGnBgDIZ0.roa (raw, json) Hash identifier: WhQivIDi1AGWJVTAI62B/uQnFlId+nxJvroEZWlqfbU= Subject key identifier: 2B:9C:C5:65:43:A4:26:8A:A7:B1:6D:F4:58:A6:06:9C:18:03:21:9D Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3AB8 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/K5zFZUOkJoqnsW30WKYGnBgDIZ0.roa Signing time: Fri 22 Aug 2025 08:47:42 +0000 ROA not before: Fri 22 Aug 2025 08:47:42 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 118.232.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15032 (0x3ab8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:42 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=2B9CC56543A4268AA7B16DF458A6069C1803219D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9a:7d:c7:4f:32:24:4a:cd:92:d0:40:5c:50: 0b:b9:03:06:fe:f5:64:5d:17:92:5d:d0:ab:68:93: 2b:de:fb:9c:39:fa:13:73:be:c8:b4:6f:fd:cd:42: 8d:d7:33:61:20:9b:31:c1:1d:1f:52:d8:39:55:79: c8:0c:7e:fb:86:6d:c3:0b:17:57:f0:38:9e:a2:77: a6:97:13:da:fc:7b:c0:40:c1:40:06:23:90:46:fc: 7a:2b:9f:1d:14:35:3e:16:76:8b:6b:e4:91:fc:94: fa:4f:57:37:b4:dd:22:2e:fd:55:2a:bd:de:f4:68: b1:de:2c:77:e0:2f:19:c5:d4:39:32:95:0f:1d:63: 0c:db:b4:64:f2:21:21:a2:fd:ce:2d:2c:0b:c8:c3: 4d:dc:47:58:da:cf:e5:06:f0:f8:87:06:80:fc:20: 1a:3d:51:5c:64:1c:14:28:d8:f7:04:b7:6a:fe:1e: 01:77:98:c7:7e:b0:32:82:04:8b:0c:76:70:3d:7e: af:b2:b6:6a:c6:f3:c2:d4:24:2c:89:e9:8f:43:15: b6:b1:7a:30:c3:2c:88:ef:83:74:d1:af:a0:fa:16: 07:73:56:3d:45:5a:2f:2d:8e:fa:67:5d:ea:65:25: 9b:2f:92:6c:1e:24:95:bc:b8:b3:40:6c:a3:5b:56: f7:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:9C:C5:65:43:A4:26:8A:A7:B1:6D:F4:58:A6:06:9C:18:03:21:9D X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/K5zFZUOkJoqnsW30WKYGnBgDIZ0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.48.0/21 Signature Algorithm: sha256WithRSAEncryption 14:4c:ca:03:5a:e0:fc:b0:9b:3a:79:d6:b0:7a:42:06:07:5a: 2b:b0:a2:aa:ee:52:c0:ea:3f:3e:68:ea:13:9b:6b:62:b6:6c: aa:2a:2a:d9:c3:67:2e:ea:24:d3:5d:eb:eb:b0:4a:e0:79:5f: 96:6a:2f:1e:25:b3:64:1b:21:ca:bd:a0:67:e2:67:65:d3:72: ab:e0:ec:e5:cb:64:b3:b5:e9:de:03:c0:ec:5e:88:c8:e8:d1: 04:28:75:6c:16:dc:3f:23:52:81:8b:6c:cc:c1:60:c8:0a:6a: b5:e8:72:5b:a8:3b:94:93:be:eb:1d:32:67:87:8e:15:d7:8d: 8c:31:7f:03:70:e0:0f:c6:fa:18:68:d9:d4:27:8e:2a:da:b3: b5:3e:e2:a0:26:d6:6d:66:6a:ca:67:e6:cd:e6:7f:a0:4d:d0: 4f:73:02:05:98:03:f6:88:32:ea:f1:5c:e7:51:60:66:84:42: f8:ca:10:0f:d4:81:2b:84:f0:4b:62:1f:72:fd:dc:2b:b6:4d: 6f:55:71:ce:a6:4d:ce:e4:ae:39:b9:4c:09:24:b4:56:60:d7: d4:a1:d8:ae:2d:46:b7:ba:91:1c:e0:20:fd:c9:93:fc:41:e5: 00:f2:13:f8:5f:86:1f:0b:07:5f:f3:f7:08:ef:19:6e:49:f6: 4e:4c:d7:03 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOrgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3NDJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDJCOUNDNTY1NDNBNDI2 OEFBN0IxNkRGNDU4QTYwNjlDMTgwMzIxOUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEmn3HTzIkSs2S0EBcUAu5Awb+9WRdF5Jd0Ktokyve+5w5+hNz vsi0b/3NQo3XM2EgmzHBHR9S2DlVecgMfvuGbcMLF1fwOJ6id6aXE9r8e8BAwUAG I5BG/Hornx0UNT4Wdotr5JH8lPpPVze03SIu/VUqvd70aLHeLHfgLxnF1DkylQ8d YwzbtGTyISGi/c4tLAvIw03cR1jaz+UG8PiHBoD8IBo9UVxkHBQo2PcEt2r+HgF3 mMd+sDKCBIsMdnA9fq+ytmrG88LUJCyJ6Y9DFbaxejDDLIjvg3TRr6D6FgdzVj1F Wi8tjvpnXeplJZsvkmweJJW8uLNAbKNbVvdpAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUK5zFZUOkJoqnsW30WKYGnBgDIZ0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0s1ekZaVU9rSm9xbnNXMzBX S1lHbkJnRElaMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2 6DAwDQYJKoZIhvcNAQELBQADggEBABRMygNa4Pywmzp51rB6QgYHWiuwoqruUsDq Pz5o6hOba2K2bKoqKtnDZy7qJNNd6+uwSuB5X5ZqLx4ls2QbIcq9oGfiZ2XTcqvg 7OXLZLO16d4DwOxeiMjo0QQodWwW3D8jUoGLbMzBYMgKarXocluoO5STvusdMmeH jhXXjYwxfwNw4A/G+hho2dQnjiras7U+4qAm1m1maspn5s3mf6BN0E9zAgWYA/aI MurxXOdRYGaEQvjKEA/UgSuE8EtiH3L93Cu2TW9Vcc6mTc7krjm5TAkktFZg19Sh 2K4tRre6kRzgIP3Jk/xB5QDyE/hfhh8LB1/z9wjvGW5J9k5M1wM= -----END CERTIFICATE-----Generated at Fri Oct 24 19:21:24 2025 by rpki-client