$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/P9XdIWTi6HPwYx_iLJkY2R6AYT0.roa File: P9XdIWTi6HPwYx_iLJkY2R6AYT0.roa (raw, json) Hash identifier: Zc015pcSeC/0JA7Jl8+8nApTIzz3ZYiDeNNHiLcWSK0= Subject key identifier: 3F:D5:DD:21:64:E2:E8:73:F0:63:1F:E2:2C:99:18:D9:1E:80:61:3D Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3A47 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/P9XdIWTi6HPwYx_iLJkY2R6AYT0.roa Signing time: Fri 22 Aug 2025 08:47:11 +0000 ROA not before: Fri 22 Aug 2025 08:47:11 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9924 IP address blocks: 123.195.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 07:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14919 (0x3a47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:11 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=3FD5DD2164E2E873F0631FE22C9918D91E80613D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:7d:1a:ce:f0:13:c4:d5:c6:51:43:c8:36:64: e7:bf:ab:b0:75:33:31:1c:d4:53:a7:96:bc:cb:69: f3:22:e2:1f:0e:c2:49:15:c4:62:8c:c6:af:fc:6c: b7:01:a3:07:c9:86:fa:d1:ab:5a:f4:25:68:a9:97: d2:a9:a9:61:81:ae:27:3d:59:ba:c4:b9:b1:65:7c: 53:01:ac:e2:30:4d:91:35:5e:39:c8:79:9e:1a:4b: 84:6a:f0:08:1b:25:c1:77:7d:bc:d5:0e:85:9b:63: 79:b6:f5:5d:89:ab:ff:19:56:03:db:f5:c9:5a:b0: f4:8c:1a:b9:e5:18:a9:a0:60:86:42:f0:9b:bc:47: eb:51:02:c2:9a:74:ee:12:2b:52:d7:a3:00:3a:64: e4:a5:3b:0c:2b:d0:aa:80:cd:50:55:b7:b2:fe:8b: d1:1c:e0:5c:01:2d:db:cc:06:1a:7e:2d:bc:2f:5c: 25:db:cd:89:0a:82:78:61:ac:a4:51:c9:cb:c8:97: 5a:c5:cb:36:47:84:03:7c:15:5f:15:8a:cd:6f:f3: 9b:be:38:0b:a5:70:4f:fe:43:8a:b7:31:81:1b:42: 45:46:78:98:4d:c9:ec:35:58:6c:b3:5c:8d:5f:78: 90:4e:02:b2:69:ee:8a:2c:24:88:a8:8b:d8:79:89: de:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:D5:DD:21:64:E2:E8:73:F0:63:1F:E2:2C:99:18:D9:1E:80:61:3D X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/P9XdIWTi6HPwYx_iLJkY2R6AYT0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.208.0/20 Signature Algorithm: sha256WithRSAEncryption b9:9a:8d:e4:80:6d:82:96:c3:e8:7c:1a:8d:b2:f1:2c:c9:41: 15:84:61:3b:94:28:ae:8a:e2:29:96:7b:be:df:91:cc:d0:3b: d1:61:e8:22:47:ab:58:34:57:54:0a:68:2e:ca:95:92:c9:fd: 82:43:0c:97:d7:9a:bf:54:cf:dc:a5:fa:3a:c8:1f:27:f1:8f: 58:e3:84:d4:18:39:72:6f:f4:01:91:8c:ff:1a:1a:91:df:46: 97:e4:f7:08:af:05:78:41:5b:47:c1:db:39:a5:eb:be:0b:7b: 23:d9:b8:1e:3f:95:42:9b:2e:05:dc:a1:e3:08:81:e3:f0:8b: 7e:87:16:ad:a6:ae:0d:19:ba:82:85:25:bf:f2:17:4d:e1:3e: fb:d3:a9:1c:91:9a:00:32:c2:3b:b8:67:0b:4e:2f:26:1f:b2: 24:cf:c4:2c:47:45:23:4b:1b:fa:b1:86:be:b4:13:ff:a0:48: 46:0c:39:01:ad:d6:56:e4:98:95:d9:6e:66:a3:54:94:11:f7: 9b:7e:15:52:4f:d9:61:96:e1:2d:fb:fe:75:b4:cc:23:e7:34: b9:a3:48:ca:08:72:52:17:5f:dd:75:37:74:8d:51:42:96:81: c2:8a:01:cb:bc:6f:02:63:19:ab:4e:f7:25:86:46:56:4a:04: 0c:b0:4b:dc -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOkcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3MTFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDNGRDVERDIxNjRFMkU4 NzNGMDYzMUZFMjJDOTkxOEQ5MUU4MDYxM0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD2fRrO8BPE1cZRQ8g2ZOe/q7B1MzEc1FOnlrzLafMi4h8OwkkV xGKMxq/8bLcBowfJhvrRq1r0JWipl9KpqWGBric9WbrEubFlfFMBrOIwTZE1XjnI eZ4aS4Rq8AgbJcF3fbzVDoWbY3m29V2Jq/8ZVgPb9clasPSMGrnlGKmgYIZC8Ju8 R+tRAsKadO4SK1LXowA6ZOSlOwwr0KqAzVBVt7L+i9Ec4FwBLdvMBhp+LbwvXCXb zYkKgnhhrKRRycvIl1rFyzZHhAN8FV8Vis1v85u+OAulcE/+Q4q3MYEbQkVGeJhN yew1WGyzXI1feJBOArJp7oosJIioi9h5id4hAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUP9XdIWTi6HPwYx/iLJkY2R6AYT0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1A5WGRJV1RpNkhQd1l4X2lM SmtZMlI2QVlUMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR7 w9AwDQYJKoZIhvcNAQELBQADggEBALmajeSAbYKWw+h8Go2y8SzJQRWEYTuUKK6K 4imWe77fkczQO9Fh6CJHq1g0V1QKaC7KlZLJ/YJDDJfXmr9Uz9yl+jrIHyfxj1jj hNQYOXJv9AGRjP8aGpHfRpfk9wivBXhBW0fB2zml674LeyPZuB4/lUKbLgXcoeMI gePwi36HFq2mrg0ZuoKFJb/yF03hPvvTqRyRmgAywju4ZwtOLyYfsiTPxCxHRSNL G/qxhr60E/+gSEYMOQGt1lbkmJXZbmajVJQR95t+FVJP2WGW4S37/nW0zCPnNLmj SMoIclIXX911N3SNUUKWgcKKAcu8bwJjGatO9yWGRlZKBAywS9w= -----END CERTIFICATE-----Generated at Fri Oct 24 04:48:05 2025 by rpki-client