$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SZggGa1oKfOYLPyZq2qvG8RVsJ0.roa File: SZggGa1oKfOYLPyZq2qvG8RVsJ0.roa (raw, json) Hash identifier: /5ic2hwJqtVhNbA918w8T2D92BWReDQ/zFr+zRWXaQE= Subject key identifier: 49:98:20:19:AD:68:29:F3:98:2C:FC:99:AB:6A:AF:1B:C4:55:B0:9D Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 38F6 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SZggGa1oKfOYLPyZq2qvG8RVsJ0.roa Signing time: Fri 22 Aug 2025 08:45:48 +0000 ROA not before: Fri 22 Aug 2025 08:45:48 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 106.1.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14582 (0x38f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:48 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=49982019AD6829F3982CFC99AB6AAF1BC455B09D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6f:e2:87:3f:c2:df:ee:4f:b1:c0:7c:56:62: c2:21:b7:11:3a:fe:3f:5a:78:2c:74:b9:4b:4b:ad: 5a:ef:ef:f3:49:d7:e1:5c:8f:a4:a1:18:7a:69:43: a0:fb:1d:9f:1a:ef:e0:03:29:09:24:a0:f3:fb:50: 18:f5:bb:f8:6a:27:6b:4e:cb:bf:14:6b:73:d4:a3: ba:ae:d7:a7:42:b1:66:38:98:11:32:6a:30:43:d0: b2:34:15:fb:99:46:ce:b4:e1:2e:ca:7c:5c:ed:e9: f5:3b:3a:4b:65:a3:ea:fb:b1:4a:59:d8:de:0f:58: 9c:d6:66:2e:62:8d:58:af:0d:88:a3:1f:48:f6:81: 40:d7:4b:2f:a8:fe:97:ce:b7:e1:82:79:17:86:3a: 88:9f:b6:5e:5f:dd:d9:ba:7e:f6:64:50:8a:47:2a: 56:07:0e:cb:f6:59:1e:7f:98:f4:5f:bb:1b:9f:58: 69:a1:d5:67:0a:22:23:ec:6e:c8:42:2f:49:6a:11: ff:ec:89:29:70:3a:ed:c5:51:e9:c2:da:ad:2c:60: 65:35:4b:e2:ae:8f:3d:e6:a2:4a:40:b8:c9:3a:ea: 8c:36:76:05:f0:12:1c:16:18:60:17:6d:a3:0c:ac: 41:39:ee:39:c7:fb:66:e7:cd:99:a8:ab:ff:4c:1c: bd:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:98:20:19:AD:68:29:F3:98:2C:FC:99:AB:6A:AF:1B:C4:55:B0:9D X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SZggGa1oKfOYLPyZq2qvG8RVsJ0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.192.0/22 Signature Algorithm: sha256WithRSAEncryption aa:72:e4:f7:15:c0:ae:ad:d3:04:58:93:c8:be:a3:8c:88:50: 4c:49:66:da:82:d2:62:f6:5d:2d:f7:f1:f9:72:0a:19:80:7e: 0f:4e:d4:51:dd:a1:c0:fa:84:72:58:72:f1:ed:03:5b:20:f6: 86:e9:82:b8:8e:3e:c9:67:dd:81:71:0c:56:ef:fb:4c:27:cd: 00:48:1d:38:3d:ae:d8:d5:3f:f7:94:cb:0c:e5:f8:ef:f9:7b: c2:c6:7f:68:3c:1d:c0:88:02:94:11:de:ea:20:88:63:47:15: 29:ba:8e:2a:8e:19:63:08:ae:37:e7:1d:6e:ec:55:5b:2a:ac: db:31:e0:e4:61:f7:1b:51:e0:cc:9f:61:2c:5b:08:34:42:96: fa:ab:92:e9:43:32:7b:dd:a7:30:dd:e3:3f:a1:3e:97:2a:f2: 97:1b:c6:3b:3c:9c:ff:58:f7:38:ea:aa:c7:85:25:bc:be:d5: 01:16:b9:b7:40:12:08:24:c2:fd:03:e1:03:84:45:5c:36:d3: 58:b7:ef:57:8d:e6:67:e5:b8:72:11:55:8c:9b:c4:9f:10:53: 02:a9:14:e7:ff:d4:f9:1b:87:e6:14:2d:06:00:e8:13:be:7b: 06:29:cc:b5:ac:92:ff:e6:8c:37:6e:89:7e:a3:1e:f9:a0:1b: 68:1e:a4:aa -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOPYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1NDhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDQ5OTgyMDE5QUQ2ODI5 RjM5ODJDRkM5OUFCNkFBRjFCQzQ1NUIwOUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKb+KHP8Lf7k+xwHxWYsIhtxE6/j9aeCx0uUtLrVrv7/NJ1+Fc j6ShGHppQ6D7HZ8a7+ADKQkkoPP7UBj1u/hqJ2tOy78Ua3PUo7qu16dCsWY4mBEy ajBD0LI0FfuZRs604S7KfFzt6fU7Oktlo+r7sUpZ2N4PWJzWZi5ijVivDYijH0j2 gUDXSy+o/pfOt+GCeReGOoiftl5f3dm6fvZkUIpHKlYHDsv2WR5/mPRfuxufWGmh 1WcKIiPsbshCL0lqEf/siSlwOu3FUenC2q0sYGU1S+Kujz3mokpAuMk66ow2dgXw EhwWGGAXbaMMrEE57jnH+2bnzZmoq/9MHL3RAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUSZggGa1oKfOYLPyZq2qvG8RVsJ0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1NaZ2dHYTFvS2ZPWUxQeVpx MnF2RzhSVnNKMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq AcAwDQYJKoZIhvcNAQELBQADggEBAKpy5PcVwK6t0wRYk8i+o4yIUExJZtqC0mL2 XS338flyChmAfg9O1FHdocD6hHJYcvHtA1sg9obpgriOPsln3YFxDFbv+0wnzQBI HTg9rtjVP/eUywzl+O/5e8LGf2g8HcCIApQR3uogiGNHFSm6jiqOGWMIrjfnHW7s VVsqrNsx4ORh9xtR4MyfYSxbCDRClvqrkulDMnvdpzDd4z+hPpcq8pcbxjs8nP9Y 9zjqqseFJby+1QEWubdAEggkwv0D4QOERVw201i371eN5mfluHIRVYybxJ8QUwKp FOf/1Pkbh+YULQYA6BO+ewYpzLWskv/mjDduiX6jHvmgG2gepKo= -----END CERTIFICATE-----Generated at Fri Oct 24 19:27:41 2025 by rpki-client