$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NXcMEEPUuLYCut_b1Gypuds5Kqk.roa File: NXcMEEPUuLYCut_b1Gypuds5Kqk.roa (raw, json) Hash identifier: guhxSXOjiMq/lxPWZpLtIJeEZqTsLUpQosUzcSlcS2c= Subject key identifier: 35:77:0C:10:43:D4:B8:B6:02:BA:DF:DB:D4:6C:A9:B9:DB:39:2A:A9 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 38F1 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NXcMEEPUuLYCut_b1Gypuds5Kqk.roa Signing time: Fri 22 Aug 2025 08:45:46 +0000 ROA not before: Fri 22 Aug 2025 08:45:46 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.194.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14577 (0x38f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:46 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=35770C1043D4B8B602BADFDBD46CA9B9DB392AA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:80:72:95:6c:ba:eb:7b:40:5f:f4:b6:84:48: 16:ad:8d:b1:74:bf:33:60:8d:b3:ff:1c:54:3f:7a: 80:65:31:34:44:4a:5a:c0:16:b1:69:85:71:b3:2c: dc:fd:04:63:c7:53:d8:4c:d4:cb:29:c5:84:ed:44: 35:52:8e:fc:19:f1:86:c7:ff:ed:7a:e1:97:2a:7d: 2e:29:1a:14:3f:64:2c:0b:31:b6:d1:bf:99:29:1d: cd:4f:62:ac:70:86:f9:37:f9:e4:92:36:e8:23:46: c8:e5:5d:35:63:2c:ef:d2:9a:fa:2a:53:8d:ed:df: cb:ed:e5:b1:00:b0:e1:cc:2b:8a:0b:0b:86:0a:97: ee:ae:d4:18:8f:70:0c:77:34:38:f9:21:ae:3d:71: 01:87:06:a3:7b:77:08:5e:2a:c4:97:4d:e0:d8:d1: a0:72:9a:de:6c:9d:ec:f9:f4:73:11:d6:4e:1a:a5: 6e:1d:76:f6:ae:ba:02:e8:97:9d:c0:d4:e0:c6:44: f7:23:8f:24:52:8d:11:fc:f8:be:e3:2a:2a:43:9c: 09:35:f6:e8:1b:ef:cc:e9:9f:59:86:d9:c0:e3:e9: ff:60:22:aa:e8:98:50:4f:ec:8f:b2:4e:00:1c:55: 2d:d1:8f:c6:57:ff:39:46:53:9f:80:c3:4a:e6:fe: 65:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:77:0C:10:43:D4:B8:B6:02:BA:DF:DB:D4:6C:A9:B9:DB:39:2A:A9 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NXcMEEPUuLYCut_b1Gypuds5Kqk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.248.0/21 Signature Algorithm: sha256WithRSAEncryption 10:97:2c:a2:59:12:a9:85:93:2c:97:29:96:11:c4:0f:95:e4: 40:a0:64:7e:ad:14:01:69:ee:20:60:1a:3d:e9:5d:00:ac:d4: 16:c5:52:e4:fa:49:a9:0c:86:26:b8:3f:31:da:2c:ec:ed:72: 06:f3:be:c1:c5:70:c2:3f:10:3a:ec:cb:54:2b:a7:49:93:28: 40:70:c4:49:f2:da:90:38:ba:ce:43:da:15:23:28:8a:bc:33: f4:10:8d:7e:1e:7f:5a:3c:51:21:c4:65:1d:60:69:a2:2f:bd: f2:89:2a:20:a0:0f:7a:ac:29:55:40:4a:60:9f:e3:2a:3b:49: 1a:b0:ef:70:ed:d7:73:f0:91:04:f8:de:2c:b3:5a:ca:cf:24: 41:c2:09:fa:34:cc:a1:93:92:dc:e3:fe:df:5e:0c:d4:a4:0c: 2f:41:78:99:04:9a:7c:1d:7d:af:56:93:28:34:e7:09:54:27: f8:dc:2b:a4:23:96:ff:5a:c6:0b:12:b1:88:34:ca:2d:a8:8c: af:5b:f6:8b:0b:c8:03:04:31:0d:38:ec:c9:b7:c8:ea:67:83: 0a:e2:57:a0:6f:91:96:5f:91:fa:b7:d5:4e:42:96:f0:86:d0: bf:fa:a4:bc:6a:9e:7f:16:4e:b8:28:1b:c1:59:40:e7:6d:f5: d9:bb:09:d1 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOPEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1NDZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDM1NzcwQzEwNDNENEI4 QjYwMkJBREZEQkQ0NkNBOUI5REIzOTJBQTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCugHKVbLrre0Bf9LaESBatjbF0vzNgjbP/HFQ/eoBlMTRESlrA FrFphXGzLNz9BGPHU9hM1MspxYTtRDVSjvwZ8YbH/+164ZcqfS4pGhQ/ZCwLMbbR v5kpHc1PYqxwhvk3+eSSNugjRsjlXTVjLO/SmvoqU43t38vt5bEAsOHMK4oLC4YK l+6u1BiPcAx3NDj5Ia49cQGHBqN7dwheKsSXTeDY0aBymt5snez59HMR1k4apW4d dvauugLol53A1ODGRPcjjyRSjRH8+L7jKipDnAk19ugb78zpn1mG2cDj6f9gIqro mFBP7I+yTgAcVS3Rj8ZX/zlGU5+Aw0rm/mWvAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUNXcMEEPUuLYCut/b1Gypuds5KqkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL05YY01FRVBVdUxZQ3V0X2Ix R3lwdWRzNUtxay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wvgwDQYJKoZIhvcNAQELBQADggEBABCXLKJZEqmFkyyXKZYRxA+V5ECgZH6tFAFp 7iBgGj3pXQCs1BbFUuT6SakMhia4PzHaLOztcgbzvsHFcMI/EDrsy1Qrp0mTKEBw xEny2pA4us5D2hUjKIq8M/QQjX4ef1o8USHEZR1gaaIvvfKJKiCgD3qsKVVASmCf 4yo7SRqw73Dt13PwkQT43iyzWsrPJEHCCfo0zKGTktzj/t9eDNSkDC9BeJkEmnwd fa9Wkyg05wlUJ/jcK6Qjlv9axgsSsYg0yi2ojK9b9osLyAMEMQ047Mm3yOpngwri V6BvkZZfkfq31U5ClvCG0L/6pLxqnn8WTrgoG8FZQOdt9dm7CdE= -----END CERTIFICATE-----Generated at Fri Oct 24 19:24:37 2025 by rpki-client