$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TGb0EHMxA6DKMqWcfxVfVuUtNVg.roa File: TGb0EHMxA6DKMqWcfxVfVuUtNVg.roa (raw, json) Hash identifier: cWQsD6Z8lF/NxSyctyZwBVfkm0WtZxUM4+KeuBRWnok= Subject key identifier: 4C:66:F4:10:73:31:03:A0:CA:32:A5:9C:7F:15:5F:56:E5:2D:35:58 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3970 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TGb0EHMxA6DKMqWcfxVfVuUtNVg.roa Signing time: Fri 22 Aug 2025 08:46:18 +0000 ROA not before: Fri 22 Aug 2025 08:46:18 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 106.1.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14704 (0x3970) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:18 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=4C66F410733103A0CA32A59C7F155F56E52D3558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:78:18:35:4a:38:5e:f3:a0:12:2e:1f:d6:3f: 11:fb:14:cd:06:d5:52:e4:37:d6:33:9f:05:d8:97: e2:9d:20:ba:20:73:aa:92:8b:9f:57:05:8c:72:15: 5f:bd:0d:0c:df:4c:f8:4e:53:6c:3a:37:e9:a7:58: a0:89:95:bc:5a:b3:8a:05:18:bb:31:b0:75:0c:60: b4:07:07:c9:72:5e:5e:b6:44:da:70:08:c2:b7:8e: 17:a8:46:26:32:46:86:45:5e:2b:d0:a7:21:00:7e: 19:55:06:55:0f:02:87:f3:00:00:d7:80:cc:dc:d1: 68:96:40:ef:8d:56:22:63:c8:d4:38:fb:f4:b5:dc: 71:0d:10:69:eb:5a:3e:b7:80:32:7f:bb:d9:c0:6d: d5:20:00:af:31:c5:5b:14:81:e7:f1:f3:2f:8a:cd: 99:07:40:07:6d:67:64:06:f5:ef:10:65:c5:b1:a1: cf:e4:a8:7e:34:ee:05:42:59:74:db:00:c6:d0:2f: b0:27:a6:1e:3c:81:33:97:94:b2:1a:ad:3a:5f:6b: 72:53:48:52:45:ab:23:25:39:84:74:00:7e:9c:45: 63:44:d7:ab:ed:4a:f9:77:4c:f7:02:ca:c7:15:91: c5:65:0d:8d:31:02:01:ae:6f:28:7e:34:f1:c8:ce: 26:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:66:F4:10:73:31:03:A0:CA:32:A5:9C:7F:15:5F:56:E5:2D:35:58 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TGb0EHMxA6DKMqWcfxVfVuUtNVg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.238.0/23 Signature Algorithm: sha256WithRSAEncryption 0e:65:0e:1d:41:bc:bc:35:33:2e:97:82:22:a2:e5:ec:e4:bd: 25:8d:42:fd:1b:2a:d7:9d:16:86:b4:a7:8d:b9:bd:95:47:16: 84:38:d0:ef:16:7d:bc:6a:d1:77:43:8f:ce:cd:12:84:43:65: 37:7b:6e:c8:6a:c1:04:70:ba:cd:29:2e:ec:d1:56:3c:c9:c5: d1:44:41:8d:5a:c1:da:3e:2e:90:87:f3:f1:f9:95:7b:34:eb: 45:93:2d:43:c7:22:61:f5:51:8d:ec:90:88:7a:4f:90:2e:1c: db:92:be:32:ea:c7:cf:dc:04:74:6e:00:4c:be:c8:26:3d:a8: 27:50:41:05:60:03:35:14:c6:37:88:ad:e2:b1:2b:b7:ae:a4: 61:c1:f5:c6:e5:6c:55:4f:15:fe:1d:94:2d:c4:38:d3:a3:90: a0:92:85:46:55:6f:a1:ac:c4:7d:90:c2:53:02:33:ea:61:b4: e3:e0:6d:0e:3e:2d:d5:30:b2:28:dc:b7:bc:f4:74:b5:69:b8: ac:57:c6:c6:33:f7:76:d6:8f:e8:cd:c0:d1:2c:f8:30:80:75: 6f:6b:43:df:34:80:11:62:93:20:f5:81:8f:1f:03:9a:6c:6d: 75:00:73:1a:d4:98:19:05:db:78:6c:bd:24:d1:7b:13:30:fe: a2:c3:0a:69 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOXAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2MThaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDRDNjZGNDEwNzMzMTAz QTBDQTMyQTU5QzdGMTU1RjU2RTUyRDM1NTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCgeBg1Sjhe86ASLh/WPxH7FM0G1VLkN9YznwXYl+KdILogc6qS i59XBYxyFV+9DQzfTPhOU2w6N+mnWKCJlbxas4oFGLsxsHUMYLQHB8lyXl62RNpw CMK3jheoRiYyRoZFXivQpyEAfhlVBlUPAofzAADXgMzc0WiWQO+NViJjyNQ4+/S1 3HENEGnrWj63gDJ/u9nAbdUgAK8xxVsUgefx8y+KzZkHQAdtZ2QG9e8QZcWxoc/k qH407gVCWXTbAMbQL7Anph48gTOXlLIarTpfa3JTSFJFqyMlOYR0AH6cRWNE16vt Svl3TPcCyscVkcVlDY0xAgGubyh+NPHIziaRAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUTGb0EHMxA6DKMqWcfxVfVuUtNVgwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1RHYjBFSE14QTZES01xV2Nm eFZmVnVVdE5WZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFq Ae4wDQYJKoZIhvcNAQELBQADggEBAA5lDh1BvLw1My6XgiKi5ezkvSWNQv0bKted Foa0p425vZVHFoQ40O8Wfbxq0XdDj87NEoRDZTd7bshqwQRwus0pLuzRVjzJxdFE QY1awdo+LpCH8/H5lXs060WTLUPHImH1UY3skIh6T5AuHNuSvjLqx8/cBHRuAEy+ yCY9qCdQQQVgAzUUxjeIreKxK7eupGHB9cblbFVPFf4dlC3EONOjkKCShUZVb6Gs xH2QwlMCM+phtOPgbQ4+LdUwsijct7z0dLVpuKxXxsYz93bWj+jNwNEs+DCAdW9r Q980gBFikyD1gY8fA5psbXUAcxrUmBkF23hsvSTRexMw/qLDCmk= -----END CERTIFICATE-----Generated at Fri Oct 24 19:24:59 2025 by rpki-client