$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QhpRmwMLoOXcOcROM6C-X8nsXyo.roa File: QhpRmwMLoOXcOcROM6C-X8nsXyo.roa (raw, json) Hash identifier: fcTUz+8t0bODeF7lm9KGWAlhlZDausT9xo4ocym3V9g= Subject key identifier: 42:1A:51:9B:03:0B:A0:E5:DC:39:C4:4E:33:A0:BE:5F:C9:EC:5F:2A Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 37E2 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QhpRmwMLoOXcOcROM6C-X8nsXyo.roa Signing time: Fri 22 Aug 2025 08:44:44 +0000 ROA not before: Fri 22 Aug 2025 08:44:44 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.194.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14306 (0x37e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:44:44 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=421A519B030BA0E5DC39C44E33A0BE5FC9EC5F2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:98:54:bc:3f:39:28:76:41:8a:39:0e:5d:6e: 11:cb:40:2a:46:01:d9:54:ed:05:6b:ea:f1:1b:2b: 11:39:42:c3:35:bf:2d:a1:1c:35:60:79:e1:0a:e7: 87:fa:c1:44:af:65:95:ea:6e:e4:62:a4:b2:a1:76: b3:d6:3f:3e:41:18:02:63:23:be:3a:ca:0c:af:a5: 5c:dd:7f:d1:66:ce:61:1b:71:5e:72:3e:4a:0c:b0: cf:48:9d:e3:b1:fb:92:39:ff:10:0d:22:9c:f4:b0: ef:1b:c8:17:81:21:90:bc:26:6e:c0:f4:f8:d9:07: 0a:39:7f:11:4d:db:79:76:f2:d9:09:39:8e:43:c2: 42:43:9a:cc:80:31:fe:ad:73:88:61:a3:bd:b1:53: dd:d9:a1:fb:f4:7a:e9:69:2d:8b:8c:d7:c3:d6:22: 89:44:a9:01:90:60:65:65:8d:73:28:c5:8c:62:8a: 91:17:73:33:81:37:1c:3d:90:ea:44:24:1c:65:32: b0:c9:80:af:8b:74:08:02:51:f1:4c:06:5d:61:c6: e5:4c:45:f3:44:b6:5f:82:3f:6c:38:8d:7a:be:cd: a9:b1:34:95:4d:57:cf:e5:fa:20:bd:84:53:24:c6: b5:21:c0:68:99:2d:90:71:ef:51:36:10:91:94:b4: 5c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:1A:51:9B:03:0B:A0:E5:DC:39:C4:4E:33:A0:BE:5F:C9:EC:5F:2A X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QhpRmwMLoOXcOcROM6C-X8nsXyo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.108.0/22 Signature Algorithm: sha256WithRSAEncryption 15:b0:80:b7:b8:10:c5:cb:ab:0c:bb:7e:42:ca:99:79:a4:c3: 1e:45:f2:c7:c2:43:5d:b7:0d:d0:49:a9:db:01:13:ff:0c:61: 07:5f:f2:7a:96:00:7a:d3:7d:ad:f9:c5:44:e6:cc:38:1d:87: 47:31:a3:1f:60:e4:fe:1f:e6:4a:17:28:d0:9d:a4:9d:aa:ba: 9a:fb:e3:a4:40:3a:c6:e7:79:27:96:ed:5e:63:57:5e:d8:2c: 8b:1b:cb:39:84:5c:25:da:8c:93:5e:f0:44:a0:0f:eb:03:9a: f9:00:36:5a:7e:a0:d8:03:f7:42:c0:1a:4f:16:7c:10:20:cc: e3:d3:00:47:63:b7:f2:d8:97:41:be:cf:83:0b:11:b1:6b:82: dc:85:19:f6:27:d6:79:54:21:d3:fb:3f:55:7d:98:f6:2f:a1: 4a:23:ec:fb:c0:db:c9:ca:44:db:bf:58:7a:7b:7f:a0:9d:be: 56:d9:78:be:6a:5e:cd:52:25:73:09:4b:60:7b:0f:8b:fd:f5: 67:29:f3:e7:2d:51:4d:e5:34:83:e8:bd:1b:42:05:1e:d2:f5: fc:e0:43:88:30:04:a0:65:27:09:9d:af:5c:36:1c:e6:51:77: d6:e8:c5:b4:db:81:8a:2f:54:97:bf:5b:70:bd:4f:b3:9a:b4: 50:c9:4d:aa -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICN+IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ0NDRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDQyMUE1MTlCMDMwQkEw RTVEQzM5QzQ0RTMzQTBCRTVGQzlFQzVGMkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLmFS8PzkodkGKOQ5dbhHLQCpGAdlU7QVr6vEbKxE5QsM1vy2h HDVgeeEK54f6wUSvZZXqbuRipLKhdrPWPz5BGAJjI746ygyvpVzdf9FmzmEbcV5y PkoMsM9IneOx+5I5/xANIpz0sO8byBeBIZC8Jm7A9PjZBwo5fxFN23l28tkJOY5D wkJDmsyAMf6tc4hho72xU93Zofv0eulpLYuM18PWIolEqQGQYGVljXMoxYxiipEX czOBNxw9kOpEJBxlMrDJgK+LdAgCUfFMBl1hxuVMRfNEtl+CP2w4jXq+zamxNJVN V8/l+iC9hFMkxrUhwGiZLZBx71E2EJGUtFyZAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUQhpRmwMLoOXcOcROM6C+X8nsXyowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1FocFJtd01Mb09YY09jUk9N NkMtWDhuc1h5by5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wmwwDQYJKoZIhvcNAQELBQADggEBABWwgLe4EMXLqwy7fkLKmXmkwx5F8sfCQ123 DdBJqdsBE/8MYQdf8nqWAHrTfa35xUTmzDgdh0cxox9g5P4f5koXKNCdpJ2qupr7 46RAOsbneSeW7V5jV17YLIsbyzmEXCXajJNe8ESgD+sDmvkANlp+oNgD90LAGk8W fBAgzOPTAEdjt/LYl0G+z4MLEbFrgtyFGfYn1nlUIdP7P1V9mPYvoUoj7PvA28nK RNu/WHp7f6CdvlbZeL5qXs1SJXMJS2B7D4v99Wcp8+ctUU3lNIPovRtCBR7S9fzg Q4gwBKBlJwmdr1w2HOZRd9boxbTbgYovVJe/W3C9T7OatFDJTao= -----END CERTIFICATE-----Generated at Fri Oct 24 19:18:37 2025 by rpki-client