$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/L2xyKysqVylL2Rq4xaUfYCJkx4E.roa File: L2xyKysqVylL2Rq4xaUfYCJkx4E.roa (raw, json) Hash identifier: wdVC5jZj/RvXoJiZH8Vixz1c61MGlDjAL6T7dPTxJD8= Subject key identifier: 2F:6C:72:2B:2B:2A:57:29:4B:D9:1A:B8:C5:A5:1F:60:22:64:C7:81 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 38B8 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/L2xyKysqVylL2Rq4xaUfYCJkx4E.roa Signing time: Fri 22 Aug 2025 08:45:33 +0000 ROA not before: Fri 22 Aug 2025 08:45:33 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.195.180.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14520 (0x38b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:33 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=2F6C722B2B2A57294BD91AB8C5A51F602264C781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:05:90:6e:f7:49:db:c4:83:20:be:48:d4:3c: 0c:72:9b:72:d1:af:8f:3d:fc:15:97:81:42:dd:74: 5a:3e:9b:89:7c:78:10:0c:2c:b7:63:18:fe:e8:a9: 14:7e:da:c9:be:f8:aa:3e:31:64:c3:ef:55:be:12: d4:01:1b:c9:b9:5d:35:7c:52:01:5d:52:9a:7d:ca: b9:d9:ae:75:b1:e1:19:f3:cb:c9:cb:d4:f7:89:89: 29:71:a8:e1:8b:22:94:b1:ca:97:77:78:25:1b:25: 34:cb:12:bc:62:b6:9f:9a:fc:7e:0e:5f:06:74:2e: 0b:06:ce:97:27:65:28:6b:d6:a9:71:69:4c:7f:7c: 4e:96:05:09:96:b1:ad:99:c4:4e:cb:49:7e:43:48: 13:a0:3b:8a:04:47:fd:4e:f9:75:c8:ec:e3:5e:58: b9:eb:7f:cd:84:8c:56:5f:20:ab:ea:a9:9a:c0:c5: fa:29:e7:ed:fe:16:3f:96:0a:f8:b4:7a:65:9e:0c: 01:2c:44:b9:dc:22:ad:3b:92:c0:8e:32:03:e7:67: a2:95:51:c1:32:ab:00:46:a3:9d:9c:2e:75:7e:06: 42:3f:ad:9c:8a:83:a1:b8:e5:4c:54:55:27:9b:6c: 8b:a2:e9:6e:f5:61:0f:50:69:d9:33:00:e1:a9:df: 8a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:6C:72:2B:2B:2A:57:29:4B:D9:1A:B8:C5:A5:1F:60:22:64:C7:81 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/L2xyKysqVylL2Rq4xaUfYCJkx4E.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.180.0/23 Signature Algorithm: sha256WithRSAEncryption 6d:0a:b5:a9:a6:ac:68:fa:58:4a:c1:a7:be:f5:92:84:bf:7c: 4b:80:0a:82:f9:01:c8:0d:bb:0b:7b:7c:fc:5f:fa:a9:c6:3a: ae:13:3c:23:13:7a:ad:9d:b3:6e:e6:3d:e2:43:8c:45:e9:c6: 47:ed:f5:32:82:f0:c7:88:12:c9:3a:e1:1d:fb:c1:52:7b:e0: d1:34:01:fa:39:dc:cb:40:31:2e:4a:cd:50:04:76:24:de:7d: fb:48:c2:67:4b:ce:99:69:91:40:83:00:68:a2:38:82:12:95: 4a:7a:0f:57:41:46:3d:cc:94:88:28:2d:ad:58:69:6e:39:67: 11:07:65:80:29:75:24:46:00:1d:41:44:53:49:a5:f1:19:eb: 32:f8:16:c7:64:cf:59:00:5c:13:83:c4:fe:90:41:0b:08:36: 4d:c5:df:5c:90:09:ba:2e:2e:74:ba:32:ec:71:ee:17:1b:c0: ce:7c:91:ce:cb:fe:39:cf:8d:f1:a7:ac:60:df:06:37:76:a8: 62:e6:3b:f9:cf:47:5b:6b:2d:36:90:0b:25:0e:30:30:7f:17: 42:ed:7b:2b:57:74:4b:50:78:50:71:7c:a3:83:8a:40:28:89: ac:c4:1a:d2:6d:68:4e:f0:83:a0:ba:3d:ed:1d:8d:c1:f3:82: 78:10:21:a4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOLgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1MzNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDJGNkM3MjJCMkIyQTU3 Mjk0QkQ5MUFCOEM1QTUxRjYwMjI2NEM3ODEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4BZBu90nbxIMgvkjUPAxym3LRr489/BWXgULddFo+m4l8eBAM LLdjGP7oqRR+2sm++Ko+MWTD71W+EtQBG8m5XTV8UgFdUpp9yrnZrnWx4Rnzy8nL 1PeJiSlxqOGLIpSxypd3eCUbJTTLErxitp+a/H4OXwZ0LgsGzpcnZShr1qlxaUx/ fE6WBQmWsa2ZxE7LSX5DSBOgO4oER/1O+XXI7ONeWLnrf82EjFZfIKvqqZrAxfop 5+3+Fj+WCvi0emWeDAEsRLncIq07ksCOMgPnZ6KVUcEyqwBGo52cLnV+BkI/rZyK g6G45UxUVSebbIui6W71YQ9QadkzAOGp34rNAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUL2xyKysqVylL2Rq4xaUfYCJkx4EwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0wyeHlLeXNxVnlsTDJScTR4 YVVmWUNKa3g0RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF7 w7QwDQYJKoZIhvcNAQELBQADggEBAG0KtammrGj6WErBp771koS/fEuACoL5AcgN uwt7fPxf+qnGOq4TPCMTeq2ds27mPeJDjEXpxkft9TKC8MeIEsk64R37wVJ74NE0 Afo53MtAMS5KzVAEdiTefftIwmdLzplpkUCDAGiiOIISlUp6D1dBRj3MlIgoLa1Y aW45ZxEHZYApdSRGAB1BRFNJpfEZ6zL4Fsdkz1kAXBODxP6QQQsINk3F31yQCbou LnS6Muxx7hcbwM58kc7L/jnPjfGnrGDfBjd2qGLmO/nPR1trLTaQCyUOMDB/F0Lt eytXdEtQeFBxfKODikAoiazEGtJtaE7wg6C6Pe0djcHzgngQIaQ= -----END CERTIFICATE-----Generated at Fri Oct 24 19:21:23 2025 by rpki-client