$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NzZ-GcgAGu9IkL-XoEHc4jzkQPw.roa File: NzZ-GcgAGu9IkL-XoEHc4jzkQPw.roa (raw, json) Hash identifier: 0umCADdIXjIDnkHe8UwggkD3Q1YR7xhVSZLv41raoKM= Subject key identifier: 37:36:7E:19:C8:00:1A:EF:48:90:BF:97:A0:41:DC:E2:3C:E4:40:FC Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 380F Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NzZ-GcgAGu9IkL-XoEHc4jzkQPw.roa Signing time: Fri 22 Aug 2025 08:44:55 +0000 ROA not before: Fri 22 Aug 2025 08:44:55 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 211.76.126.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14351 (0x380f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:44:55 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=37367E19C8001AEF4890BF97A041DCE23CE440FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:70:ec:e2:af:25:e2:6f:4a:09:2f:fb:4a:80: 3e:b5:2e:72:aa:42:6f:ec:55:3b:91:79:40:48:9f: 32:4b:36:d3:69:52:ab:4c:9a:b2:61:9b:ae:a0:fd: 02:c3:f2:8b:ba:42:9a:b5:86:38:df:a4:11:67:05: 97:31:75:8e:e1:ba:44:ec:43:2e:bc:a1:d8:b7:86: 12:b6:da:61:f8:fd:f4:78:88:90:cc:8b:30:49:f9: d1:8e:e7:60:24:2b:61:dd:51:c2:93:ea:41:dd:79: fb:37:0d:a7:dc:74:0a:1c:fb:d7:36:06:6e:54:2c: 3a:8b:26:df:33:24:b8:0f:4b:92:4b:f9:ef:07:14: 54:11:bc:c3:4f:2d:0b:49:97:55:78:a3:b7:68:3a: df:43:2f:8d:85:5f:f4:ee:c6:f5:13:9b:c1:c8:18: be:b2:bb:dd:52:2e:bf:ee:ff:cc:78:43:9d:13:84: 75:62:25:ba:94:b3:26:0b:6c:92:fa:ed:e2:e3:17: d0:fb:99:47:65:d5:2e:88:65:02:10:81:8c:19:4f: 8b:73:d2:61:5e:6f:53:3a:90:db:fc:60:7a:f3:1b: a9:5d:d3:b5:ab:8b:70:8b:6a:90:85:91:66:20:c9: 56:ee:16:84:7c:3b:60:ff:68:3b:ac:73:79:01:8c: 3c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:36:7E:19:C8:00:1A:EF:48:90:BF:97:A0:41:DC:E2:3C:E4:40:FC X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NzZ-GcgAGu9IkL-XoEHc4jzkQPw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.126.0/23 Signature Algorithm: sha256WithRSAEncryption 42:b6:a5:55:18:7a:4d:f9:d4:9b:f9:4a:e5:72:d4:95:05:63: 59:bd:ee:20:42:9d:79:63:7c:2e:8f:b7:c7:6a:4a:69:f9:46: 78:e2:50:8e:3f:43:4d:b9:c5:01:3c:f8:cf:2c:30:9e:77:9b: 97:53:6a:95:83:d0:af:ee:ab:56:0b:0f:9d:9d:b8:e7:48:aa: ae:f7:02:08:40:dc:fa:0d:4f:94:08:e8:24:ad:d1:94:27:10: ff:b0:78:c5:02:7b:79:01:51:28:f6:5d:87:89:6c:ad:3b:e8: 60:1c:33:ef:31:fb:20:5e:97:0f:39:62:b2:0d:b3:4d:72:32: 4b:1b:85:94:f9:36:02:a1:3f:14:98:60:8b:08:bd:1b:36:f2: 81:c1:06:0b:ef:53:3c:a8:d7:40:2f:2a:f8:19:22:8f:1e:7e: 82:b7:94:b9:7f:83:b0:42:0f:a2:27:b4:42:3c:a1:db:1b:d1: 7f:f1:c5:6d:d1:28:9a:39:92:24:71:b2:32:4d:08:da:9c:b7: 6f:23:21:f8:2e:ec:da:2e:96:e9:3c:02:2a:8d:42:9a:23:dd: 9e:86:42:af:55:8c:2b:4c:db:da:87:63:a7:cb:e7:ce:e5:3f: c1:2a:b9:26:51:7c:5d:a6:a6:b7:91:d6:94:52:06:c7:f9:77: 7d:ad:87:00 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOA8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ0NTVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDM3MzY3RTE5QzgwMDFB RUY0ODkwQkY5N0EwNDFEQ0UyM0NFNDQwRkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwcOziryXib0oJL/tKgD61LnKqQm/sVTuReUBInzJLNtNpUqtM mrJhm66g/QLD8ou6Qpq1hjjfpBFnBZcxdY7hukTsQy68odi3hhK22mH4/fR4iJDM izBJ+dGO52AkK2HdUcKT6kHdefs3DafcdAoc+9c2Bm5ULDqLJt8zJLgPS5JL+e8H FFQRvMNPLQtJl1V4o7doOt9DL42FX/TuxvUTm8HIGL6yu91SLr/u/8x4Q50ThHVi JbqUsyYLbJL67eLjF9D7mUdl1S6IZQIQgYwZT4tz0mFeb1M6kNv8YHrzG6ld07Wr i3CLapCFkWYgyVbuFoR8O2D/aDusc3kBjDx3AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUNzZ+GcgAGu9IkL+XoEHc4jzkQPwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL056Wi1HY2dBR3U5SWtMLVhv RUhjNGp6a1FQdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHT TH4wDQYJKoZIhvcNAQELBQADggEBAEK2pVUYek351Jv5SuVy1JUFY1m97iBCnXlj fC6Pt8dqSmn5RnjiUI4/Q025xQE8+M8sMJ53m5dTapWD0K/uq1YLD52duOdIqq73 AghA3PoNT5QI6CSt0ZQnEP+weMUCe3kBUSj2XYeJbK076GAcM+8x+yBelw85YrIN s01yMksbhZT5NgKhPxSYYIsIvRs28oHBBgvvUzyo10AvKvgZIo8efoK3lLl/g7BC D6IntEI8odsb0X/xxW3RKJo5kiRxsjJNCNqct28jIfgu7Nouluk8AiqNQpoj3Z6G Qq9VjCtM29qHY6fL587lP8EquSZRfF2mpreR1pRSBsf5d32thwA= -----END CERTIFICATE-----Generated at Fri Oct 24 19:24:56 2025 by rpki-client