$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PZyb4HaSLn5wpHaIKwzVDWXxGwQ.roa File: PZyb4HaSLn5wpHaIKwzVDWXxGwQ.roa (raw, json) Hash identifier: /npCz3yY0P0TzXzDpHQTgQY184hMQqQPK6cTEcbFGAM= Subject key identifier: 3D:9C:9B:E0:76:92:2E:7E:70:A4:76:88:2B:0C:D5:0D:65:F1:1B:04 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 37D7 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PZyb4HaSLn5wpHaIKwzVDWXxGwQ.roa Signing time: Fri 22 Aug 2025 08:44:42 +0000 ROA not before: Fri 22 Aug 2025 08:44:42 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.194.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14295 (0x37d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:44:42 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=3D9C9BE076922E7E70A476882B0CD50D65F11B04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:72:7f:1d:19:df:68:a7:91:15:96:b8:28:e8: 94:01:0c:7d:99:25:5b:e5:05:4a:de:f3:91:9c:8a: c8:e9:44:bb:77:a7:76:3f:43:a0:e2:e9:e8:64:62: 34:d0:b4:f3:a7:ee:7e:fb:d1:fe:5e:05:17:20:61: 88:d6:7a:ac:ab:ac:9e:05:98:21:12:54:58:47:d2: 6c:ac:f3:83:34:72:01:48:12:c3:4f:ec:ad:f2:32: 01:c5:2c:b0:67:c7:9c:0c:9a:5b:fa:bd:bc:3b:30: 94:99:a7:41:3b:d4:07:18:56:a8:5a:c1:3d:c8:7a: b6:0a:79:ce:4b:f9:76:e2:cd:52:0a:57:be:ad:01: 3d:b4:43:34:19:ac:ea:ae:05:5e:ef:2a:af:c7:6d: af:1c:30:9b:08:5b:d4:00:3f:bf:de:a7:32:36:87: 74:b0:f6:fb:ef:19:db:c5:20:ef:7d:51:97:17:db: 29:5b:b3:a0:ea:49:82:f7:a4:69:59:33:71:63:35: 73:29:33:13:57:69:e5:8e:1e:c2:c5:d2:ae:00:2d: 31:32:3c:d2:a1:af:f1:fb:dc:8a:37:d1:76:bd:9c: c2:14:75:ad:d8:08:ac:1c:e3:ba:af:f8:d1:2d:1f: 0b:e2:5e:10:b1:08:d6:55:90:37:a1:a1:20:9f:70: 9e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:9C:9B:E0:76:92:2E:7E:70:A4:76:88:2B:0C:D5:0D:65:F1:1B:04 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PZyb4HaSLn5wpHaIKwzVDWXxGwQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.96.0/21 Signature Algorithm: sha256WithRSAEncryption 8e:6d:26:77:03:c0:e8:e4:b4:21:ea:02:92:5d:d4:de:83:28: f2:32:08:04:55:50:66:1e:ea:f8:64:b4:1b:b2:ef:2c:95:9a: 86:0c:b3:92:7a:c7:8b:3e:9a:28:e2:95:c1:39:0b:aa:d9:81: dc:b1:fe:87:ef:e6:5c:fd:22:e7:da:77:d5:f3:a3:6a:21:a1: c2:cb:b9:1d:0a:7b:10:39:f1:f7:a4:89:52:ad:1f:36:d7:bc: 5c:c3:15:54:09:fe:cf:1e:66:7e:cf:f0:e5:8c:4b:92:cd:73: 8a:5e:56:57:10:6a:e1:3b:d8:0e:c9:2e:b9:a5:ba:14:01:3a: c7:4e:ec:38:9c:54:71:c9:14:c6:bd:87:6e:11:89:b1:0f:72: 68:a3:2b:db:98:56:88:81:78:89:ff:99:76:8c:c6:3a:3a:2d: 11:18:31:5b:8e:88:61:a8:26:d6:fa:6f:80:36:71:27:0b:c3: 0d:64:3b:07:9b:67:19:97:74:82:06:02:34:eb:43:c6:36:1d: 24:65:c2:ad:97:a0:5c:af:5a:43:be:31:77:4e:10:ff:c2:29: 88:6a:ea:36:18:f9:dd:23:f8:af:bc:14:b3:2e:dd:a9:fb:15: 9f:bf:f4:1a:7c:74:ee:53:7b:b6:e3:b3:c1:96:6f:80:20:12: 82:22:82:a8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICN9cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ0NDJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDNEOUM5QkUwNzY5MjJF N0U3MEE0NzY4ODJCMENENTBENjVGMTFCMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGcn8dGd9op5EVlrgo6JQBDH2ZJVvlBUre85GcisjpRLt3p3Y/ Q6Di6ehkYjTQtPOn7n770f5eBRcgYYjWeqyrrJ4FmCESVFhH0mys84M0cgFIEsNP 7K3yMgHFLLBnx5wMmlv6vbw7MJSZp0E71AcYVqhawT3IerYKec5L+XbizVIKV76t AT20QzQZrOquBV7vKq/Hba8cMJsIW9QAP7/epzI2h3Sw9vvvGdvFIO99UZcX2ylb s6DqSYL3pGlZM3FjNXMpMxNXaeWOHsLF0q4ALTEyPNKhr/H73Io30Xa9nMIUda3Y CKwc47qv+NEtHwviXhCxCNZVkDehoSCfcJ5ZAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUPZyb4HaSLn5wpHaIKwzVDWXxGwQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1BaeWI0SGFTTG41d3BIYUlL d3pWRFdYeEd3US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wmAwDQYJKoZIhvcNAQELBQADggEBAI5tJncDwOjktCHqApJd1N6DKPIyCARVUGYe 6vhktBuy7yyVmoYMs5J6x4s+mijilcE5C6rZgdyx/ofv5lz9Iufad9Xzo2ohocLL uR0KexA58fekiVKtHzbXvFzDFVQJ/s8eZn7P8OWMS5LNc4peVlcQauE72A7JLrml uhQBOsdO7DicVHHJFMa9h24RibEPcmijK9uYVoiBeIn/mXaMxjo6LREYMVuOiGGo Jtb6b4A2cScLww1kOwebZxmXdIIGAjTrQ8Y2HSRlwq2XoFyvWkO+MXdOEP/CKYhq 6jYY+d0j+K+8FLMu3an7FZ+/9Bp8dO5Te7bjs8GWb4AgEoIigqg= -----END CERTIFICATE-----Generated at Fri Oct 24 19:27:50 2025 by rpki-client