$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KpLVjQ2grA-Gh7EC3yqL6PkcP9w.roa File: KpLVjQ2grA-Gh7EC3yqL6PkcP9w.roa (raw, json) Hash identifier: flsf/A9FDSuFjd2KeFIbVF0om8637wMqAPSN382Lqvk= Subject key identifier: 2A:92:D5:8D:0D:A0:AC:0F:86:87:B1:02:DF:2A:8B:E8:F9:1C:3F:DC Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3968 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KpLVjQ2grA-Gh7EC3yqL6PkcP9w.roa Signing time: Fri 22 Aug 2025 08:46:16 +0000 ROA not before: Fri 22 Aug 2025 08:46:16 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 211.76.124.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14696 (0x3968) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:16 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=2A92D58D0DA0AC0F8687B102DF2A8BE8F91C3FDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:75:b5:0e:f5:70:21:1e:1f:a8:ad:b0:82:6d: 00:81:2c:e0:55:8d:b7:84:fe:8f:23:1d:ad:e1:fe: 74:c5:b0:cd:33:ec:d6:d0:e8:4b:8e:a5:5d:18:f4: 32:cd:ab:6a:36:09:c2:92:e5:b0:88:e9:98:b6:a2: a2:54:97:16:b2:91:38:29:d4:84:94:be:44:ac:8e: 46:c2:51:93:38:bd:74:8d:6d:26:91:67:d2:0e:6a: fe:bf:c3:0e:78:0a:53:52:71:26:22:6d:13:7b:e3: 3d:80:d6:80:6f:80:91:c4:df:14:fb:e1:49:33:73: 42:52:b9:2f:53:69:c2:64:52:77:79:58:0a:c6:08: 59:35:27:9a:79:86:14:ad:24:88:c2:02:4c:bc:a6: 34:78:e7:d6:9e:71:77:05:20:e7:9e:7f:9f:55:6e: aa:f9:1a:36:74:0b:c9:89:74:92:68:16:87:11:02: 05:50:21:96:22:5e:54:8d:0d:1a:02:07:d6:71:45: 7a:e6:fe:02:86:64:6a:83:db:f6:9f:2b:d8:87:9b: 69:87:ce:c4:88:41:b4:56:b5:bb:dc:be:18:ae:d7: 94:bf:fd:53:b2:ea:01:82:da:8e:e0:e9:c8:e7:0a: 93:c9:3d:bf:d4:f2:42:ea:dc:07:8c:e7:5c:5b:cc: 7f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:92:D5:8D:0D:A0:AC:0F:86:87:B1:02:DF:2A:8B:E8:F9:1C:3F:DC X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KpLVjQ2grA-Gh7EC3yqL6PkcP9w.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.124.0/25 Signature Algorithm: sha256WithRSAEncryption ba:31:db:24:00:be:ed:95:18:5c:6b:26:00:d0:ab:f8:e3:37: ad:72:49:f1:4d:57:ee:d1:cc:12:e0:10:f6:0e:a8:2d:4e:87: 5b:f7:46:76:f1:c7:35:05:ab:cf:dc:dd:87:2b:75:60:a4:e5: c2:b6:e7:a8:6b:c8:14:51:5e:a6:2e:04:79:56:37:1b:dc:43: 46:b3:e3:bb:2d:73:c8:22:40:d9:7f:ef:73:4a:0c:01:85:ca: 19:17:79:b5:33:60:f2:fd:ae:cf:e8:24:49:73:14:8b:2f:66: 21:f0:19:3b:7f:ec:fb:97:0b:27:ca:b4:f3:68:c5:df:36:b2: 12:25:9f:13:4b:2a:5b:26:25:8d:08:83:b5:6e:b4:4c:60:73: 94:c8:33:73:f2:32:cb:4e:31:f9:dd:85:79:11:d6:03:e6:f7: e6:1a:ae:45:f0:fc:1e:ac:0a:a7:0d:dd:50:f4:eb:22:0b:d4: b1:a9:a2:aa:23:39:f4:cd:79:84:6b:d5:f0:36:ba:f7:f8:35: 83:80:43:75:18:98:0f:68:38:5c:9b:67:e7:30:25:28:71:cf: 9e:ba:b6:f3:3c:00:64:01:27:ee:ae:19:fd:c6:a2:99:7a:aa: ef:3b:b1:ab:67:51:0a:8c:f9:3c:0c:e3:e6:a3:69:e6:3b:cd: b3:c9:0e:9a -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICOWgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2MTZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDJBOTJENThEMERBMEFD MEY4Njg3QjEwMkRGMkE4QkU4RjkxQzNGREMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDodbUO9XAhHh+orbCCbQCBLOBVjbeE/o8jHa3h/nTFsM0z7NbQ 6EuOpV0Y9DLNq2o2CcKS5bCI6Zi2oqJUlxaykTgp1ISUvkSsjkbCUZM4vXSNbSaR Z9IOav6/ww54ClNScSYibRN74z2A1oBvgJHE3xT74Ukzc0JSuS9TacJkUnd5WArG CFk1J5p5hhStJIjCAky8pjR459aecXcFIOeef59Vbqr5GjZ0C8mJdJJoFocRAgVQ IZYiXlSNDRoCB9ZxRXrm/gKGZGqD2/afK9iHm2mHzsSIQbRWtbvcvhiu15S//VOy 6gGC2o7g6cjnCpPJPb/U8kLq3AeM51xbzH/rAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUKpLVjQ2grA+Gh7EC3yqL6PkcP9wwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0twTFZqUTJnckEtR2g3RUMz eXFMNlBrY1A5dy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQfT THwAMA0GCSqGSIb3DQEBCwUAA4IBAQC6MdskAL7tlRhcayYA0Kv44zetcknxTVfu 0cwS4BD2DqgtTodb90Z28cc1BavP3N2HK3VgpOXCtueoa8gUUV6mLgR5Vjcb3ENG s+O7LXPIIkDZf+9zSgwBhcoZF3m1M2Dy/a7P6CRJcxSLL2Yh8Bk7f+z7lwsnyrTz aMXfNrISJZ8TSypbJiWNCIO1brRMYHOUyDNz8jLLTjH53YV5EdYD5vfmGq5F8Pwe rAqnDd1Q9OsiC9SxqaKqIzn0zXmEa9XwNrr3+DWDgEN1GJgPaDhcm2fnMCUocc+e urbzPABkASfurhn9xqKZeqrvO7GrZ1EKjPk8DOPmo2nmO82zyQ6a -----END CERTIFICATE-----Generated at Fri Oct 24 19:21:20 2025 by rpki-client