$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Lla61UtKrsocYC3QjSyrZ7T_nYA.roa File: Lla61UtKrsocYC3QjSyrZ7T_nYA.roa (raw, json) Hash identifier: KOIFzhLUcxllB9KkRX/En8NXA5Qwl1WLa7HTG9w4ocQ= Subject key identifier: 2E:56:BA:D5:4B:4A:AE:CA:1C:60:2D:D0:8D:2C:AB:67:B4:FF:9D:80 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3927 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Lla61UtKrsocYC3QjSyrZ7T_nYA.roa Signing time: Fri 22 Aug 2025 08:46:01 +0000 ROA not before: Fri 22 Aug 2025 08:46:01 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.195.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14631 (0x3927) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:01 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=2E56BAD54B4AAECA1C602DD08D2CAB67B4FF9D80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d2:c0:1a:37:8d:6b:94:8f:f4:37:2b:5c:b7: d5:cd:8f:f5:ed:c3:33:74:80:0a:25:8a:68:0b:96: 8a:8c:b5:8d:1c:36:d4:5a:19:24:2b:0e:ae:b8:da: 78:ae:d6:4f:5d:1f:49:c2:49:51:0b:ee:e0:7d:57: 4c:53:0f:d3:24:91:2a:37:7c:54:04:9b:8b:99:20: a0:35:e9:33:05:96:c3:cb:62:53:22:e7:88:66:78: 70:16:13:dd:c8:72:ec:5e:5e:86:4c:db:4c:97:8c: b4:22:5c:5b:45:2a:e3:8f:d3:98:48:21:09:bc:6e: 0a:9e:4f:bc:c3:46:cc:4d:61:01:d0:36:bc:48:f6: 7f:56:d1:a4:e9:ca:67:10:a7:77:57:a2:98:95:ca: 26:3a:af:d5:9f:9d:12:81:6f:bc:a5:e9:45:cf:37: 51:ff:5d:c4:4e:aa:66:60:9e:64:cf:e9:b1:d1:44: f7:c4:17:c5:fc:ad:3d:30:76:87:97:48:45:db:52: 6a:82:d1:a7:12:d3:73:c6:e5:6e:43:47:e5:e2:54: a7:fc:49:d5:16:f6:22:8a:d7:59:40:c4:19:ec:a9: b7:a3:82:b4:e3:4f:b1:df:a1:64:66:36:69:51:bf: 9c:fc:cb:e8:f4:00:8a:22:0d:a6:91:f2:4d:da:30: a2:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:56:BA:D5:4B:4A:AE:CA:1C:60:2D:D0:8D:2C:AB:67:B4:FF:9D:80 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Lla61UtKrsocYC3QjSyrZ7T_nYA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.12.0/22 Signature Algorithm: sha256WithRSAEncryption 6a:fe:f6:28:c3:8d:ec:38:7c:c3:fc:d3:b8:e4:2c:d7:f4:50: 51:6c:52:14:ab:e4:d2:10:94:e5:db:8a:25:f1:0a:d5:33:82: 0a:ae:30:57:90:fb:bd:f9:a1:d5:cc:52:4f:d9:7b:b2:5b:10: 1f:6b:2e:00:5e:9b:2d:1f:ab:6d:c2:99:cf:be:d9:09:2e:2d: 7f:21:14:f5:50:f8:5d:21:6a:c2:c8:c1:e3:ec:59:39:02:95: 93:11:2d:f5:a8:8a:b1:fb:87:42:ab:e9:cf:34:86:a0:b6:85: a9:9f:52:3a:8b:46:14:54:9d:f0:f1:8b:64:db:bb:f0:89:69: 6f:1d:f2:76:9f:84:5f:c6:f6:e4:cc:07:a8:60:20:b9:50:c0: 24:73:82:c1:d8:74:b9:c7:35:32:83:eb:10:a8:4e:bc:34:72: 9e:11:6e:ca:9f:da:82:62:2e:4d:30:bb:b7:b2:6c:4e:07:ef: fb:34:f8:2f:73:11:82:b2:d2:67:7f:41:88:00:01:3c:bc:f4: d3:91:ce:6e:d3:1b:24:81:84:50:1c:65:a4:7d:47:47:06:15: 18:36:da:e0:46:37:be:dc:53:43:e8:fc:41:81:f0:e0:23:b1: 43:21:98:f0:43:9d:4c:f4:17:a1:b8:87:b5:c5:5e:5a:c8:30: 74:97:bd:3e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOScwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2MDFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDJFNTZCQUQ1NEI0QUFF Q0ExQzYwMkREMDhEMkNBQjY3QjRGRjlEODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCc0sAaN41rlI/0Nytct9XNj/XtwzN0gAolimgLloqMtY0cNtRa GSQrDq642niu1k9dH0nCSVEL7uB9V0xTD9MkkSo3fFQEm4uZIKA16TMFlsPLYlMi 54hmeHAWE93IcuxeXoZM20yXjLQiXFtFKuOP05hIIQm8bgqeT7zDRsxNYQHQNrxI 9n9W0aTpymcQp3dXopiVyiY6r9WfnRKBb7yl6UXPN1H/XcROqmZgnmTP6bHRRPfE F8X8rT0wdoeXSEXbUmqC0acS03PG5W5DR+XiVKf8SdUW9iKK11lAxBnsqbejgrTj T7HfoWRmNmlRv5z8y+j0AIoiDaaR8k3aMKJvAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQULla61UtKrsocYC3QjSyrZ7T/nYAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0xsYTYxVXRLcnNvY1lDM1Fq U3lyWjdUX25ZQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wwwwDQYJKoZIhvcNAQELBQADggEBAGr+9ijDjew4fMP807jkLNf0UFFsUhSr5NIQ lOXbiiXxCtUzggquMFeQ+735odXMUk/Ze7JbEB9rLgBemy0fq23Cmc++2QkuLX8h FPVQ+F0hasLIwePsWTkClZMRLfWoirH7h0Kr6c80hqC2hamfUjqLRhRUnfDxi2Tb u/CJaW8d8nafhF/G9uTMB6hgILlQwCRzgsHYdLnHNTKD6xCoTrw0cp4Rbsqf2oJi Lk0wu7eybE4H7/s0+C9zEYKy0md/QYgAATy89NORzm7TGySBhFAcZaR9R0cGFRg2 2uBGN77cU0Po/EGB8OAjsUMhmPBDnUz0F6G4h7XFXlrIMHSXvT4= -----END CERTIFICATE-----Generated at Fri Oct 24 19:24:59 2025 by rpki-client