$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Q3pBxpRzIWgY95v1h9bNAafd7e8.roa File: Q3pBxpRzIWgY95v1h9bNAafd7e8.roa (raw, json) Hash identifier: G+1va6OINVE3qoPk8lB0OPYblTxfQukH0mFdMZ9YhQ8= Subject key identifier: 43:7A:41:C6:94:73:21:68:18:F7:9B:F5:87:D6:CD:01:A7:DD:ED:EF Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3852 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Q3pBxpRzIWgY95v1h9bNAafd7e8.roa Signing time: Fri 22 Aug 2025 08:45:11 +0000 ROA not before: Fri 22 Aug 2025 08:45:11 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.193.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14418 (0x3852) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:11 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=437A41C69473216818F79BF587D6CD01A7DDEDEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:32:10:c7:da:b0:d0:88:a1:c7:00:72:27:5a: bd:40:5b:60:e6:16:1c:45:e2:01:0d:8c:cb:1f:8c: dc:75:73:cb:7a:bb:64:55:9f:ce:32:16:4c:78:e2: 69:cd:31:51:ab:49:d4:c4:a8:51:7d:61:3d:1f:03: b1:38:7d:4d:c5:3c:11:19:1c:70:85:ab:5c:3a:4e: 98:6e:72:49:cf:21:1d:3d:fc:e2:89:3e:4b:e1:49: f3:b6:d4:b7:93:fd:00:98:3f:02:d1:0c:6f:64:bb: fb:2f:94:f2:38:d8:a8:7a:3e:e0:66:0c:59:1c:49: 28:f9:43:15:4c:3d:42:c6:52:b7:a9:cf:10:b6:ad: 20:9a:81:94:60:f5:e2:0e:5e:f5:38:8f:56:78:ee: c1:ae:5e:0b:06:db:c9:9d:1c:69:70:35:a2:f8:91: 2e:a4:50:6b:5d:21:f0:85:92:e2:da:48:04:53:fd: 20:ad:63:ce:4b:d8:61:d5:a1:9b:ad:64:46:35:bc: 52:1f:d7:ec:c4:44:70:b5:a4:45:7d:69:4e:50:0f: 05:15:eb:8d:c4:9e:35:a5:77:e0:04:4e:ca:2f:de: 7e:ad:f8:00:88:c1:4f:c0:2c:14:15:32:0d:d9:27: 87:16:fc:1d:8c:08:3c:bd:16:04:14:43:4e:64:66: 9d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:7A:41:C6:94:73:21:68:18:F7:9B:F5:87:D6:CD:01:A7:DD:ED:EF X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Q3pBxpRzIWgY95v1h9bNAafd7e8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.107.0/24 Signature Algorithm: sha256WithRSAEncryption ba:d0:41:5c:2c:91:2f:cb:fe:7a:d5:4c:d3:41:82:b2:c2:f7: 77:71:ba:31:3f:32:fe:56:36:6e:3c:68:a3:25:db:98:e7:a8: bf:07:db:2b:be:07:73:9e:39:73:7e:33:2c:fa:c5:17:3f:26: 31:67:19:44:95:ac:cf:ce:a3:31:b1:3c:c7:7f:6a:ab:8c:5e: cc:ba:6b:c6:bd:c1:13:54:60:af:6c:58:31:14:f8:72:17:9b: 35:fd:c6:4a:08:0e:81:d9:be:01:78:26:a6:3f:4d:82:21:94: 66:87:74:00:62:fc:07:4a:cf:d0:2f:ba:16:38:e4:d0:b6:b4: 75:f4:f1:4c:8f:fc:22:ba:dd:b9:e6:a5:5c:6d:c1:f4:8d:21: 37:8f:3d:fe:e8:2b:03:2d:d3:68:73:1b:f1:5d:20:65:85:eb: c4:62:3a:4a:c9:9b:30:5f:9f:09:65:e3:e9:59:a9:eb:9a:de: 46:3e:8b:9a:84:30:22:a6:43:28:d0:99:28:fd:08:ea:a1:07: 78:83:5f:10:2b:62:16:32:a0:ca:10:5e:ed:c9:0f:cd:c9:4b: b4:b5:e2:c2:54:9e:dd:1f:c5:d6:4c:d2:ca:f2:e4:68:ca:22: e2:fd:83:42:ac:2b:76:f9:22:35:f0:8d:d5:b6:bf:37:74:2d: e3:a9:8b:80 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOFIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1MTFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDQzN0E0MUM2OTQ3MzIx NjgxOEY3OUJGNTg3RDZDRDAxQTdEREVERUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJMhDH2rDQiKHHAHInWr1AW2DmFhxF4gENjMsfjNx1c8t6u2RV n84yFkx44mnNMVGrSdTEqFF9YT0fA7E4fU3FPBEZHHCFq1w6TphucknPIR09/OKJ PkvhSfO21LeT/QCYPwLRDG9ku/svlPI42Kh6PuBmDFkcSSj5QxVMPULGUrepzxC2 rSCagZRg9eIOXvU4j1Z47sGuXgsG28mdHGlwNaL4kS6kUGtdIfCFkuLaSART/SCt Y85L2GHVoZutZEY1vFIf1+zERHC1pEV9aU5QDwUV643EnjWld+AETsov3n6t+ACI wU/ALBQVMg3ZJ4cW/B2MCDy9FgQUQ05kZp1pAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUQ3pBxpRzIWgY95v1h9bNAafd7e8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1EzcEJ4cFJ6SVdnWTk1djFo OWJOQWFmZDdlOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7 wWswDQYJKoZIhvcNAQELBQADggEBALrQQVwskS/L/nrVTNNBgrLC93dxujE/Mv5W Nm48aKMl25jnqL8H2yu+B3OeOXN+Myz6xRc/JjFnGUSVrM/OozGxPMd/aquMXsy6 a8a9wRNUYK9sWDEU+HIXmzX9xkoIDoHZvgF4JqY/TYIhlGaHdABi/AdKz9AvuhY4 5NC2tHX08UyP/CK63bnmpVxtwfSNITePPf7oKwMt02hzG/FdIGWF68RiOkrJmzBf nwll4+lZqeua3kY+i5qEMCKmQyjQmSj9COqhB3iDXxArYhYyoMoQXu3JD83JS7S1 4sJUnt0fxdZM0sry5GjKIuL9g0KsK3b5IjXwjdW2vzd0LeOpi4A= -----END CERTIFICATE-----Generated at Fri Oct 24 19:27:46 2025 by rpki-client