$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Kdy9dz98FFrNabFEq8F85ASp0Q0.roa File: Kdy9dz98FFrNabFEq8F85ASp0Q0.roa (raw, json) Hash identifier: or6bteoRKJpETfaP6HMLMUOlkT+iy1KAdQ8wEcvWe0Y= Subject key identifier: 29:DC:BD:77:3F:7C:14:5A:CD:69:B1:44:AB:C1:7C:E4:04:A9:D1:0D Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 385C Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Kdy9dz98FFrNabFEq8F85ASp0Q0.roa Signing time: Fri 22 Aug 2025 08:45:13 +0000 ROA not before: Fri 22 Aug 2025 08:45:13 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.192.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14428 (0x385c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:13 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=29DCBD773F7C145ACD69B144ABC17CE404A9D10D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e8:74:44:95:b4:17:11:04:e2:23:19:04:be: 28:9f:90:11:c9:d1:9c:fd:fb:95:b2:50:f0:3d:68: fe:c1:4f:2b:a4:39:3b:4d:47:60:87:85:18:ac:9f: 9b:67:04:4e:95:37:6e:b1:4d:89:16:7f:f2:21:23: 59:e6:f2:3c:3e:fd:41:1d:9f:4d:09:91:1a:3f:61: 55:62:4d:47:a5:31:17:52:c6:23:a5:62:12:96:54: 49:78:cb:bb:32:15:cb:59:bf:b2:63:3b:40:fa:21: 3d:e1:8e:12:90:ec:ad:fd:7e:57:b3:71:f8:d1:64: 56:a9:78:a4:79:ea:af:3c:12:af:25:48:98:a5:19: 52:5c:63:3e:98:33:87:69:d6:fa:da:0b:cb:bb:8a: 62:79:73:2f:d4:29:f5:c2:94:0f:a9:a6:5b:b2:98: de:e7:8c:b5:a1:d0:02:68:5b:6a:71:30:4a:43:f6: 2d:08:0d:12:52:fb:12:53:ff:8b:24:c7:95:99:58: 58:2c:66:ef:d9:1b:42:61:02:1e:20:fb:5b:50:58: a6:c1:d9:9d:16:fa:7b:61:47:5c:b1:50:8b:8b:9a: 08:7d:1e:83:34:7d:43:d9:21:c0:d5:d8:d6:76:94: 0a:e2:3c:86:be:6c:ac:d2:55:e7:5d:07:7f:ed:0d: 16:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:DC:BD:77:3F:7C:14:5A:CD:69:B1:44:AB:C1:7C:E4:04:A9:D1:0D X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Kdy9dz98FFrNabFEq8F85ASp0Q0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.16.0/21 Signature Algorithm: sha256WithRSAEncryption 1e:82:49:78:d0:ce:d5:69:ce:64:44:4a:88:96:92:29:5a:0a: 4e:4b:c4:b3:bd:76:76:f8:70:4c:ce:48:6f:f8:d1:b2:3b:51: 58:bc:14:04:a2:61:c9:50:c3:8e:aa:21:bf:65:7a:97:08:98: ee:e9:69:be:0e:bb:2e:76:51:2a:2d:72:72:a9:ea:31:7e:72: 59:df:62:8c:bb:d2:dd:c2:1d:4e:4a:ad:7b:79:01:a4:02:70: 42:af:57:f5:91:5b:0e:6c:96:57:4e:17:f7:58:b7:f1:e3:6e: ee:89:47:37:3b:8f:62:6f:e1:72:a3:91:d3:75:02:08:19:39: 46:9d:80:62:85:c7:61:0e:19:68:32:4d:07:16:fd:86:9e:fc: fa:63:43:18:37:b7:03:5a:e2:6f:16:13:0c:05:88:b3:fd:77: 54:d4:65:c3:11:ae:36:b6:60:68:7e:2d:90:5b:a1:4f:c8:e5: 2e:66:d6:10:48:e9:32:7d:70:c3:a2:82:46:db:4c:3f:78:95: 76:83:7f:2a:19:ce:eb:d7:88:f9:66:df:a6:fe:02:68:10:36: 91:a6:dd:db:a0:3c:45:fc:60:1a:31:3c:1f:05:9f:bd:04:0d: 69:8b:9e:3f:0a:07:0d:57:84:c1:0a:fc:9c:8e:24:f8:75:d7: 06:48:c3:35 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOFwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1MTNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDI5RENCRDc3M0Y3QzE0 NUFDRDY5QjE0NEFCQzE3Q0U0MDRBOUQxMEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDU6HRElbQXEQTiIxkEviifkBHJ0Zz9+5WyUPA9aP7BTyukOTtN R2CHhRisn5tnBE6VN26xTYkWf/IhI1nm8jw+/UEdn00JkRo/YVViTUelMRdSxiOl YhKWVEl4y7syFctZv7JjO0D6IT3hjhKQ7K39flezcfjRZFapeKR56q88Eq8lSJil GVJcYz6YM4dp1vraC8u7imJ5cy/UKfXClA+ppluymN7njLWh0AJoW2pxMEpD9i0I DRJS+xJT/4skx5WZWFgsZu/ZG0JhAh4g+1tQWKbB2Z0W+nthR1yxUIuLmgh9HoM0 fUPZIcDV2NZ2lAriPIa+bKzSVeddB3/tDRZXAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUKdy9dz98FFrNabFEq8F85ASp0Q0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0tkeTlkejk4RkZyTmFiRkVx OEY4NUFTcDBRMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wBAwDQYJKoZIhvcNAQELBQADggEBAB6CSXjQztVpzmRESoiWkilaCk5LxLO9dnb4 cEzOSG/40bI7UVi8FASiYclQw46qIb9lepcImO7pab4Ouy52USotcnKp6jF+clnf Yoy70t3CHU5KrXt5AaQCcEKvV/WRWw5slldOF/dYt/Hjbu6JRzc7j2Jv4XKjkdN1 AggZOUadgGKFx2EOGWgyTQcW/Yae/PpjQxg3twNa4m8WEwwFiLP9d1TUZcMRrja2 YGh+LZBboU/I5S5m1hBI6TJ9cMOigkbbTD94lXaDfyoZzuvXiPlm36b+AmgQNpGm 3dugPEX8YBoxPB8Fn70EDWmLnj8KBw1XhMEK/JyOJPh11wZIwzU= -----END CERTIFICATE-----Generated at Fri Oct 24 19:24:30 2025 by rpki-client