$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Mi4zUBPu-NkQXvIdoYZ3adNVC1Y.roa File: Mi4zUBPu-NkQXvIdoYZ3adNVC1Y.roa (raw, json) Hash identifier: Jb0QChvMZh5bRZptbWEqCowpOGF9BfsGtAIi4067YUM= Subject key identifier: 32:2E:33:50:13:EE:F8:D9:10:5E:F2:1D:A1:86:77:69:D3:55:0B:56 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3A8A Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Mi4zUBPu-NkQXvIdoYZ3adNVC1Y.roa Signing time: Fri 22 Aug 2025 08:47:28 +0000 ROA not before: Fri 22 Aug 2025 08:47:28 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.195.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14986 (0x3a8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:28 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=322E335013EEF8D9105EF21DA1867769D3550B56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a7:44:c5:a8:d3:ab:b2:75:62:b1:6b:d7:f2: 46:50:0c:5d:36:e9:c1:ee:b6:44:ca:e4:1d:b7:29: 54:90:7d:3e:49:cf:7e:b1:07:89:d7:07:a0:12:b1: 4b:9c:fd:4a:78:76:ea:99:49:e2:00:02:ab:0d:90: 62:b0:dd:30:53:eb:59:3e:86:67:3b:f2:d9:49:21: 40:40:e3:f9:bc:fd:43:d5:f7:15:c7:b1:cd:d0:f4: cf:4d:e1:a0:a7:4a:10:4e:3e:9e:de:e8:02:3a:ce: ab:de:ff:d9:33:53:fc:96:cc:87:f0:c9:7e:fc:88: 63:98:35:25:cc:d8:ab:08:b4:05:c2:57:4c:53:9f: ca:9a:95:68:c6:5d:59:74:22:0c:c6:ff:c9:15:41: 1f:5b:ff:9b:ce:52:72:92:d9:2e:5c:62:25:f8:ea: e2:e3:b1:7f:34:5a:8f:37:2d:e4:0d:d3:82:cf:fe: 4d:27:98:28:c9:89:b2:27:48:bb:ee:ee:30:73:57: 4d:ea:6c:02:e4:40:58:a9:58:aa:30:75:2c:13:93: 03:14:44:2d:07:88:eb:68:ae:c8:82:85:62:a9:52: e2:68:2b:5d:55:2a:1c:40:cf:49:f8:02:71:80:b3: d8:54:69:f2:b1:45:63:82:94:bd:81:34:37:f2:0e: 7b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:2E:33:50:13:EE:F8:D9:10:5E:F2:1D:A1:86:77:69:D3:55:0B:56 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Mi4zUBPu-NkQXvIdoYZ3adNVC1Y.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.192.0/22 Signature Algorithm: sha256WithRSAEncryption 8c:75:c4:f2:6e:81:1c:14:2d:6b:88:37:32:55:13:94:58:f2: df:8c:26:95:90:ca:1e:49:15:21:eb:a6:0d:8d:ac:2f:29:3a: c8:70:62:61:4f:01:b7:ea:79:ff:9c:01:10:ab:0c:80:a8:3b: ec:f7:be:d7:71:83:bd:a7:27:8e:9b:3f:84:59:cc:7c:00:66: 55:51:69:86:e5:cf:74:9b:a1:61:61:59:08:df:be:54:b0:42: 5f:a3:1e:20:f0:21:40:92:b6:66:db:5d:6f:cb:79:ef:f9:9c: 01:ce:f6:a3:7b:4e:52:0c:21:74:49:46:5a:6c:3d:ad:c3:3f: 23:06:48:4a:6a:fe:2e:1d:be:b0:07:c0:78:54:74:05:12:4f: 13:91:61:89:ea:ba:0d:58:aa:b8:b1:91:fa:58:37:07:50:ed: b7:42:d9:d7:f4:30:fd:97:e1:d7:95:f8:12:f4:f5:93:45:95: 8d:c3:34:8a:e5:cd:c1:df:a5:3e:4b:fb:11:a0:ef:67:e9:b5: 47:74:a8:67:cb:94:56:26:b6:a2:bd:f7:a1:6a:8a:2a:50:10: f0:87:cc:24:fa:fe:ba:a1:71:93:f6:69:36:95:b1:02:7b:56: e2:46:0e:52:76:fa:2e:20:27:d5:f6:6e:72:22:dc:8c:dc:50: 75:e6:f5:4e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOoowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3MjhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDMyMkUzMzUwMTNFRUY4 RDkxMDVFRjIxREExODY3NzY5RDM1NTBCNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNp0TFqNOrsnVisWvX8kZQDF026cHutkTK5B23KVSQfT5Jz36x B4nXB6ASsUuc/Up4duqZSeIAAqsNkGKw3TBT61k+hmc78tlJIUBA4/m8/UPV9xXH sc3Q9M9N4aCnShBOPp7e6AI6zqve/9kzU/yWzIfwyX78iGOYNSXM2KsItAXCV0xT n8qalWjGXVl0IgzG/8kVQR9b/5vOUnKS2S5cYiX46uLjsX80Wo83LeQN04LP/k0n mCjJibInSLvu7jBzV03qbALkQFipWKowdSwTkwMURC0HiOtorsiChWKpUuJoK11V KhxAz0n4AnGAs9hUafKxRWOClL2BNDfyDnv7AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUMi4zUBPu+NkQXvIdoYZ3adNVC1YwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL01pNHpVQlB1LU5rUVh2SWRv WVozYWROVkMxWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 w8AwDQYJKoZIhvcNAQELBQADggEBAIx1xPJugRwULWuINzJVE5RY8t+MJpWQyh5J FSHrpg2NrC8pOshwYmFPAbfqef+cARCrDICoO+z3vtdxg72nJ46bP4RZzHwAZlVR aYblz3SboWFhWQjfvlSwQl+jHiDwIUCStmbbXW/Lee/5nAHO9qN7TlIMIXRJRlps Pa3DPyMGSEpq/i4dvrAHwHhUdAUSTxORYYnqug1YqrixkfpYNwdQ7bdC2df0MP2X 4deV+BL09ZNFlY3DNIrlzcHfpT5L+xGg72fptUd0qGfLlFYmtqK996FqiipQEPCH zCT6/rqhcZP2aTaVsQJ7VuJGDlJ2+i4gJ9X2bnIi3IzcUHXm9U4= -----END CERTIFICATE-----Generated at Fri Oct 24 19:18:39 2025 by rpki-client