$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PaT6pLUhkXgjALYQuL6_Mba0rAs.roa File: PaT6pLUhkXgjALYQuL6_Mba0rAs.roa (raw, json) Hash identifier: gL7dxqgdr/E0UUl+f+d85Szx2L/EQU1Hq7DCS9FGfzI= Subject key identifier: 3D:A4:FA:A4:B5:21:91:78:23:00:B6:10:B8:BE:BF:31:B6:B4:AC:0B Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 39E9 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PaT6pLUhkXgjALYQuL6_Mba0rAs.roa Signing time: Fri 22 Aug 2025 08:46:47 +0000 ROA not before: Fri 22 Aug 2025 08:46:47 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.195.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14825 (0x39e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:47 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=3DA4FAA4B52191782300B610B8BEBF31B6B4AC0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fe:f6:da:bd:d0:34:6c:85:cc:3e:55:98:e1: 5b:2d:ab:30:a5:4a:88:08:f6:04:60:92:94:d7:86: 77:da:93:61:9d:52:92:8c:16:69:f7:a9:59:3d:af: a4:1c:33:b1:88:bb:e8:a3:5f:21:65:12:ad:cf:1a: cc:00:7c:e1:99:4f:6f:c4:a7:db:85:4c:46:be:39: 59:9c:02:32:a3:b5:e9:e7:d8:6b:4c:d7:da:98:f9: 3b:d5:5e:aa:2a:4e:fe:1c:ba:fd:fd:cf:4b:7b:3b: 4f:b8:66:a2:eb:46:55:6f:8c:a7:a3:b0:67:d6:a7: f0:ed:3a:9d:0f:bc:00:fd:c2:64:7f:1d:4e:22:b0: 94:ba:93:3c:ce:53:87:52:5a:df:cc:93:fa:3a:e2: 14:5b:a1:25:fc:5c:12:25:a5:81:aa:2d:b2:61:cc: 2e:d7:2e:88:7b:6a:07:99:25:42:22:a3:08:37:6e: c3:14:e8:c3:51:dd:cb:ad:e0:00:59:cd:77:1c:2b: cf:dc:27:0d:e6:6a:5f:04:eb:e0:bb:96:1f:30:63: ce:ab:97:77:98:51:fb:68:81:b8:7d:cf:63:d6:1f: d2:a8:ef:36:bb:1d:de:47:0e:91:0d:ae:72:8d:db: 7c:52:75:38:7c:d3:3f:30:02:31:7a:0f:a3:72:5d: 8e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:A4:FA:A4:B5:21:91:78:23:00:B6:10:B8:BE:BF:31:B6:B4:AC:0B X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PaT6pLUhkXgjALYQuL6_Mba0rAs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.177.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:04:1e:cf:32:8e:e7:2a:c7:a8:e3:79:7a:15:da:53:9a:58: db:8b:57:0c:66:d3:04:e8:d2:8a:d6:b7:a8:39:36:c9:57:e3: 9b:0b:3e:ec:95:6e:70:29:59:db:54:3e:50:29:71:9f:d8:f3: 80:fe:40:ee:57:61:c1:e3:96:9f:e2:8a:a7:69:a3:f2:f3:02: 4b:15:fc:9e:00:ae:01:4a:97:7d:ef:32:58:34:ef:ca:68:c6: be:9a:aa:f8:d9:b9:c1:bc:9a:dd:2c:a8:55:59:03:52:6c:94: 51:20:44:eb:d1:3b:26:1b:04:b8:c6:51:4c:d6:d6:91:b4:54: 3a:77:b4:45:db:29:3a:45:ef:87:44:fd:9b:57:58:c0:a3:4a: 93:20:7b:95:0e:05:f6:a7:0f:ca:70:60:54:c2:76:a9:8d:2e: c1:01:6a:ef:e3:82:75:a0:ac:1a:fd:2c:47:8e:ff:f6:35:f6: e4:f9:61:24:af:2d:65:67:f4:b4:ad:9d:74:67:81:cc:cb:c1: 09:0c:f7:de:8b:12:43:de:82:51:0f:e1:41:9f:52:34:6f:85: 83:01:21:18:17:41:9f:51:93:1d:66:66:2a:db:09:de:75:2b: 92:42:5c:f3:82:54:2e:0a:cc:82:f4:62:3d:98:8e:35:64:9a: a1:c1:ab:ab -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOekwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2NDdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDNEQTRGQUE0QjUyMTkx NzgyMzAwQjYxMEI4QkVCRjMxQjZCNEFDMEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDD/vbavdA0bIXMPlWY4VstqzClSogI9gRgkpTXhnfak2GdUpKM Fmn3qVk9r6QcM7GIu+ijXyFlEq3PGswAfOGZT2/Ep9uFTEa+OVmcAjKjtenn2GtM 19qY+TvVXqoqTv4cuv39z0t7O0+4ZqLrRlVvjKejsGfWp/DtOp0PvAD9wmR/HU4i sJS6kzzOU4dSWt/Mk/o64hRboSX8XBIlpYGqLbJhzC7XLoh7ageZJUIiowg3bsMU 6MNR3cut4ABZzXccK8/cJw3mal8E6+C7lh8wY86rl3eYUftogbh9z2PWH9Ko7za7 Hd5HDpENrnKN23xSdTh80z8wAjF6D6NyXY4hAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUPaT6pLUhkXgjALYQuL6/Mba0rAswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1BhVDZwTFVoa1hnakFMWVF1 TDZfTWJhMHJBcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7 w7EwDQYJKoZIhvcNAQELBQADggEBABoEHs8yjucqx6jjeXoV2lOaWNuLVwxm0wTo 0orWt6g5NslX45sLPuyVbnApWdtUPlApcZ/Y84D+QO5XYcHjlp/iiqdpo/LzAksV /J4ArgFKl33vMlg078poxr6aqvjZucG8mt0sqFVZA1JslFEgROvROyYbBLjGUUzW 1pG0VDp3tEXbKTpF74dE/ZtXWMCjSpMge5UOBfanD8pwYFTCdqmNLsEBau/jgnWg rBr9LEeO//Y19uT5YSSvLWVn9LStnXRngczLwQkM996LEkPeglEP4UGfUjRvhYMB IRgXQZ9Rkx1mZirbCd51K5JCXPOCVC4KzIL0Yj2YjjVkmqHBq6s= -----END CERTIFICATE-----Generated at Fri Oct 24 19:27:24 2025 by rpki-client