$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NgaDwSOkPWnGU8dVIjgSqaZrrlA.roa File: NgaDwSOkPWnGU8dVIjgSqaZrrlA.roa (raw, json) Hash identifier: nt60VPXcT9++R+vZT+b7FCVYQ1f3/80JUdnHEqUQlSY= Subject key identifier: 36:06:83:C1:23:A4:3D:69:C6:53:C7:55:22:38:12:A9:A6:6B:AE:50 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 38FD Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NgaDwSOkPWnGU8dVIjgSqaZrrlA.roa Signing time: Fri 22 Aug 2025 08:45:50 +0000 ROA not before: Fri 22 Aug 2025 08:45:50 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.194.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14589 (0x38fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:50 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=360683C123A43D69C653C755223812A9A66BAE50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6b:1f:ed:c1:1a:54:33:14:75:2e:3a:f7:f7: dd:87:61:79:d0:3f:ab:a8:3b:22:70:8e:e7:f0:4d: fe:84:5c:4f:a9:fc:c4:f0:9e:8c:a0:10:8e:fa:60: ed:39:e9:94:ae:78:21:d9:13:3d:9f:dc:2e:91:fa: 80:ff:79:50:9d:de:9e:63:3b:7f:82:71:0b:27:df: 62:4f:1a:10:f3:f6:17:d0:49:29:d7:b3:a8:fe:47: e4:83:27:c4:f5:57:2f:61:e0:15:53:63:99:a2:0d: 1c:d0:1c:98:9d:19:2c:86:cd:98:0f:e8:f7:1a:86: 11:a1:43:7d:f8:e6:48:60:e5:87:d6:df:5d:8a:9a: e8:c1:e4:40:78:b6:f2:b7:49:ef:90:ec:a8:8e:d3: 0d:c2:65:9a:18:68:37:8e:36:80:17:08:74:08:ed: 3e:be:ed:9e:83:8b:09:b5:30:ff:b2:5d:03:5f:fd: 69:7f:cb:76:86:6e:2e:4d:23:92:61:15:2f:d0:40: 61:58:b0:dd:a1:44:b3:13:8a:e1:a9:8c:2c:ab:2c: 61:1b:3b:25:2a:22:0f:9a:55:c9:24:3f:0e:e7:b9: 67:ae:92:d7:48:78:6d:66:61:7c:e5:d7:d1:0e:3b: 85:85:e7:62:a4:1b:3a:06:38:9e:f2:82:3a:40:b8: 0b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:06:83:C1:23:A4:3D:69:C6:53:C7:55:22:38:12:A9:A6:6B:AE:50 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NgaDwSOkPWnGU8dVIjgSqaZrrlA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.80.0/21 Signature Algorithm: sha256WithRSAEncryption 40:98:32:87:01:84:01:04:a4:cd:87:16:90:47:43:25:c8:c6: ad:78:3b:a8:7d:26:16:55:e2:5f:dd:de:f1:3f:21:0a:5d:49: cd:63:9c:4e:4a:ee:de:88:cf:5c:22:15:70:37:0d:97:0e:3b: 2c:e4:51:62:c3:5a:80:9e:df:73:d6:7c:84:67:fe:20:1d:eb: 78:77:f9:95:21:8e:b1:91:ba:fd:3f:54:96:f1:96:0c:95:5f: 73:49:b4:9d:86:3e:ea:89:03:8e:b9:ff:64:81:7d:b4:53:1f: 67:fa:42:78:c8:60:90:fa:39:e1:37:82:9b:a9:55:e0:f5:76: 20:9e:99:3c:ef:19:b5:43:78:10:57:7f:e4:7d:94:08:a0:48: 3b:e9:d0:6c:13:3f:97:d1:6c:f7:c9:68:bc:b9:35:08:2f:11: a5:2d:6e:46:82:5d:ee:32:1f:2f:d2:82:85:25:7f:ea:f4:33: 13:61:fd:45:bd:c9:78:4c:a1:de:e1:81:c1:fb:48:3f:0d:8b: e9:f5:0c:10:4c:95:95:9b:72:4a:1e:b2:63:49:11:08:2c:3d: bd:64:b1:85:f8:36:d5:0f:9f:c1:b1:d6:c7:6e:45:a6:0a:e4: d2:8d:b1:6e:59:b5:d2:92:cb:f1:46:9f:c7:3f:d6:68:b4:78: b2:74:b1:3c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOP0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1NTBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDM2MDY4M0MxMjNBNDNE NjlDNjUzQzc1NTIyMzgxMkE5QTY2QkFFNTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8ax/twRpUMxR1Ljr3992HYXnQP6uoOyJwjufwTf6EXE+p/MTw noygEI76YO056ZSueCHZEz2f3C6R+oD/eVCd3p5jO3+CcQsn32JPGhDz9hfQSSnX s6j+R+SDJ8T1Vy9h4BVTY5miDRzQHJidGSyGzZgP6PcahhGhQ3345khg5YfW312K mujB5EB4tvK3Se+Q7KiO0w3CZZoYaDeONoAXCHQI7T6+7Z6Diwm1MP+yXQNf/Wl/ y3aGbi5NI5JhFS/QQGFYsN2hRLMTiuGpjCyrLGEbOyUqIg+aVckkPw7nuWeuktdI eG1mYXzl19EOO4WF52KkGzoGOJ7ygjpAuAsfAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUNgaDwSOkPWnGU8dVIjgSqaZrrlAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL05nYUR3U09rUFduR1U4ZFZJ amdTcWFacnJsQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wlAwDQYJKoZIhvcNAQELBQADggEBAECYMocBhAEEpM2HFpBHQyXIxq14O6h9JhZV 4l/d3vE/IQpdSc1jnE5K7t6Iz1wiFXA3DZcOOyzkUWLDWoCe33PWfIRn/iAd63h3 +ZUhjrGRuv0/VJbxlgyVX3NJtJ2GPuqJA465/2SBfbRTH2f6QnjIYJD6OeE3gpup VeD1diCemTzvGbVDeBBXf+R9lAigSDvp0GwTP5fRbPfJaLy5NQgvEaUtbkaCXe4y Hy/SgoUlf+r0MxNh/UW9yXhMod7hgcH7SD8Ni+n1DBBMlZWbckoesmNJEQgsPb1k sYX4NtUPn8Gx1sduRaYK5NKNsW5ZtdKSy/FGn8c/1mi0eLJ0sTw= -----END CERTIFICATE-----Generated at Fri Oct 24 19:21:49 2025 by rpki-client