$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TU0U9egedUj5KtD4T4_cIl-6Xk0.roa File: TU0U9egedUj5KtD4T4_cIl-6Xk0.roa (raw, json) Hash identifier: UH6VrwAHaqxppzWmsHCDedR3uys2AqU/hK2UzXQPqa4= Subject key identifier: 4D:4D:14:F5:E8:1E:75:48:F9:2A:D0:F8:4F:8F:DC:22:5F:BA:5E:4D Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3907 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TU0U9egedUj5KtD4T4_cIl-6Xk0.roa Signing time: Fri 22 Aug 2025 08:45:52 +0000 ROA not before: Fri 22 Aug 2025 08:45:52 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 106.1.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14599 (0x3907) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:52 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=4D4D14F5E81E7548F92AD0F84F8FDC225FBA5E4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6c:5a:de:ce:4a:1d:e7:f8:4e:17:01:e5:7c: 5e:c9:c4:5b:11:1d:42:c3:b9:26:4f:78:5b:a9:33: 6f:6b:3e:85:ba:25:8e:e7:bc:dc:02:64:f7:18:10: b3:ef:6e:50:cb:2f:39:53:18:32:97:3f:5e:ce:f2: e3:7b:37:a1:6c:0c:25:59:c2:9b:5a:72:85:99:cb: a2:b7:35:aa:80:44:50:73:ae:13:d7:0c:51:7d:07: 79:e3:34:d0:24:c0:af:4a:59:70:9e:cb:22:3a:1f: 5f:36:b7:c4:5b:f8:95:2d:ee:6d:ba:3c:a8:e3:4a: 8f:9e:60:08:de:74:5d:7f:93:bc:37:5d:79:04:6b: 00:ce:c3:38:be:03:ab:d1:f9:ab:a1:05:43:bf:52: 49:fe:7d:3b:62:01:54:98:d3:e3:94:cc:39:de:1f: 41:09:19:6c:c4:a4:17:6f:87:3b:b9:f9:3a:06:36: 7b:54:ec:73:72:6a:c8:4c:8b:f2:6f:de:bf:fd:f4: c4:d4:18:5c:93:1f:8e:37:3a:10:4d:f8:1e:77:fc: e6:93:38:3c:9f:27:11:45:2d:4d:c6:5c:b4:c1:ae: 12:bf:03:c1:b9:33:c5:ef:29:d1:84:4d:03:72:bf: 0f:37:a3:47:c6:75:37:79:cf:7b:ca:fb:4b:68:18: 56:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:4D:14:F5:E8:1E:75:48:F9:2A:D0:F8:4F:8F:DC:22:5F:BA:5E:4D X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TU0U9egedUj5KtD4T4_cIl-6Xk0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.132.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:54:43:a1:c8:97:c7:58:36:19:b5:b0:6a:35:ec:08:ba:46: 10:31:98:07:9a:7e:84:8b:54:7b:a3:79:d6:b2:5e:9a:56:c6: 24:58:2e:60:b4:e3:a5:08:9a:86:93:09:d4:a7:f5:d2:33:7d: bc:67:ef:f8:cf:b9:fe:1d:23:b6:72:c0:0e:d0:c7:39:09:92: ad:25:9d:ff:08:e3:b8:3b:dd:b5:f0:9b:63:a9:eb:65:a0:22: 68:a3:18:ee:46:2b:a7:a3:93:00:97:9b:0b:95:12:9c:28:74: cb:2b:37:8e:29:ee:43:35:c7:1b:7e:e1:87:88:82:5b:ad:9b: ec:51:06:f9:f5:f6:93:82:f5:69:bd:42:4b:48:11:f5:bf:61: b5:cb:d4:59:f4:27:58:2d:0a:0b:0a:a5:ae:5f:6f:23:76:1d: 16:77:8b:07:24:1d:5f:67:40:fe:97:4e:87:d5:bf:a1:54:8e: f6:68:af:a7:a9:9a:df:86:5c:33:b6:21:50:fe:8c:cd:42:e8: 08:a8:4a:df:9b:0a:7b:ca:d7:93:ae:66:30:34:9b:56:7e:96: 53:32:39:c7:c5:9e:f7:92:8d:55:80:f8:a0:2c:0a:89:00:03: ee:63:12:25:29:79:76:80:4d:f6:c5:90:b0:da:98:3b:09:da: 36:58:69:82 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOQcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1NTJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDRENEQxNEY1RTgxRTc1 NDhGOTJBRDBGODRGOEZEQzIyNUZCQTVFNEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7bFrezkod5/hOFwHlfF7JxFsRHULDuSZPeFupM29rPoW6JY7n vNwCZPcYELPvblDLLzlTGDKXP17O8uN7N6FsDCVZwptacoWZy6K3NaqARFBzrhPX DFF9B3njNNAkwK9KWXCeyyI6H182t8Rb+JUt7m26PKjjSo+eYAjedF1/k7w3XXkE awDOwzi+A6vR+auhBUO/Ukn+fTtiAVSY0+OUzDneH0EJGWzEpBdvhzu5+ToGNntU 7HNyashMi/Jv3r/99MTUGFyTH443OhBN+B53/OaTODyfJxFFLU3GXLTBrhK/A8G5 M8XvKdGETQNyvw83o0fGdTd5z3vK+0toGFZVAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUTU0U9egedUj5KtD4T4/cIl+6Xk0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1RVMFU5ZWdlZFVqNUt0RDRU NF9jSWwtNlhrMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq AYQwDQYJKoZIhvcNAQELBQADggEBAE9UQ6HIl8dYNhm1sGo17Ai6RhAxmAeafoSL VHujedayXppWxiRYLmC046UImoaTCdSn9dIzfbxn7/jPuf4dI7ZywA7QxzkJkq0l nf8I47g73bXwm2Op62WgImijGO5GK6ejkwCXmwuVEpwodMsrN44p7kM1xxt+4YeI glutm+xRBvn19pOC9Wm9QktIEfW/YbXL1Fn0J1gtCgsKpa5fbyN2HRZ3iwckHV9n QP6XTofVv6FUjvZor6epmt+GXDO2IVD+jM1C6AioSt+bCnvK15OuZjA0m1Z+llMy OcfFnveSjVWA+KAsCokAA+5jEiUpeXaATfbFkLDamDsJ2jZYaYI= -----END CERTIFICATE-----Generated at Fri Oct 24 19:21:25 2025 by rpki-client