$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Tf7Ckyj-ZHoOMvbvDiCtUiqK6J0.roa File: Tf7Ckyj-ZHoOMvbvDiCtUiqK6J0.roa (raw, json) Hash identifier: mObn6o3FSMMG5KdqyQyLOCQuJvaSy+D5HHruHvtbvS4= Subject key identifier: 4D:FE:C2:93:28:FE:64:7A:0E:32:F6:EF:0E:20:AD:52:2A:8A:E8:9D Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 37E9 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Tf7Ckyj-ZHoOMvbvDiCtUiqK6J0.roa Signing time: Fri 22 Aug 2025 08:44:46 +0000 ROA not before: Fri 22 Aug 2025 08:44:46 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9924 IP address blocks: 118.232.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 07:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14313 (0x37e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:44:46 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=4DFEC29328FE647A0E32F6EF0E20AD522A8AE89D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:39:e5:80:e2:9d:7a:05:84:21:1a:eb:b7:38: 26:95:b4:69:d5:5e:6d:15:77:fd:95:e5:8c:c8:0a: 59:9e:ce:35:03:62:94:ec:e2:44:9c:e5:11:46:f6: b6:95:d8:21:aa:5a:00:e4:22:7f:ac:bd:19:92:40: 23:29:71:21:48:f3:82:8c:f5:32:e5:99:f0:25:ef: 1b:4e:26:68:3a:d3:5f:5d:0f:76:41:04:58:90:43: ad:44:3e:3c:73:80:56:ca:d7:82:16:10:23:12:0c: 21:28:37:b9:e0:6d:99:ca:a2:e8:13:bf:1e:84:bc: e5:1f:ce:a8:41:59:91:35:cf:37:65:6c:48:0a:ce: 7d:f0:7f:75:22:45:1f:43:c8:64:32:8c:dc:13:1b: 1d:8e:e8:6a:e2:d0:60:ca:af:08:b4:53:85:af:78: 61:87:8b:8a:c5:3e:10:74:7a:f9:9d:86:65:b6:d2: 70:e3:c1:cf:fc:42:45:68:98:de:8e:d7:20:3f:03: 87:4a:44:cc:67:d1:8b:e5:0c:d1:1a:8b:d3:9e:94: 5f:4e:9e:5b:54:42:c4:d7:98:c1:d4:d1:a2:97:d3: 8e:e9:be:6b:8c:75:b4:7d:54:0a:40:43:d3:e1:ee: d2:fe:50:6f:ff:0d:ec:df:75:c1:3b:97:63:9b:ca: 89:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:FE:C2:93:28:FE:64:7A:0E:32:F6:EF:0E:20:AD:52:2A:8A:E8:9D X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Tf7Ckyj-ZHoOMvbvDiCtUiqK6J0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.160.0/19 Signature Algorithm: sha256WithRSAEncryption 22:12:95:1c:ab:f5:2e:ec:86:f5:79:15:fb:a3:38:89:83:6f: 0e:4e:10:5e:c0:bf:6a:df:ad:bd:80:04:f4:95:3b:a3:c2:e0: 47:db:aa:2a:4b:f0:74:fc:51:f7:8a:f8:07:f2:38:f7:49:a6: ca:b9:3b:b1:1c:fc:b8:2c:ba:3d:c5:17:35:94:14:a1:e9:51: b8:f2:5a:a4:ad:e2:39:a8:c0:32:70:26:70:d1:fe:13:6b:ac: 19:29:3a:8d:e8:06:61:56:38:d6:b6:46:8b:e9:25:3b:cb:47: 80:b8:1b:c5:cd:b7:41:f7:e4:a0:68:96:29:73:ef:c5:ea:41: 73:7f:f1:fe:22:5e:40:11:6a:00:96:54:97:ae:54:a7:d8:b6: a6:5f:91:d7:2b:0a:94:f7:1c:57:68:ff:b3:61:eb:fd:53:b9: fe:73:d3:30:53:68:2c:57:f0:3d:f1:d5:fb:49:53:bf:b5:9d: 8e:bd:32:32:c5:f5:a9:16:69:75:3c:b7:4e:12:58:c9:41:1d: 43:5a:b5:4e:be:95:16:d8:28:78:75:d5:83:2f:9a:21:2e:21: d6:e2:cb:cd:d6:4c:95:78:dc:bd:a4:ee:ad:70:8d:c2:f0:19: 0c:c0:11:7d:7e:be:61:02:f1:38:61:e6:1b:aa:c0:bf:26:b8: 79:c3:a3:3c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICN+kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ0NDZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDRERkVDMjkzMjhGRTY0 N0EwRTMyRjZFRjBFMjBBRDUyMkE4QUU4OUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXOeWA4p16BYQhGuu3OCaVtGnVXm0Vd/2V5YzIClmezjUDYpTs 4kSc5RFG9raV2CGqWgDkIn+svRmSQCMpcSFI84KM9TLlmfAl7xtOJmg6019dD3ZB BFiQQ61EPjxzgFbK14IWECMSDCEoN7ngbZnKougTvx6EvOUfzqhBWZE1zzdlbEgK zn3wf3UiRR9DyGQyjNwTGx2O6Gri0GDKrwi0U4WveGGHi4rFPhB0evmdhmW20nDj wc/8QkVomN6O1yA/A4dKRMxn0YvlDNEai9OelF9OnltUQsTXmMHU0aKX047pvmuM dbR9VApAQ9Ph7tL+UG//DezfdcE7l2ObyokXAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUTf7Ckyj+ZHoOMvbvDiCtUiqK6J0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1RmN0NreWotWkhvT012YnZE aUN0VWlxSzZKMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV2 6KAwDQYJKoZIhvcNAQELBQADggEBACISlRyr9S7shvV5FfujOImDbw5OEF7Av2rf rb2ABPSVO6PC4EfbqipL8HT8UfeK+AfyOPdJpsq5O7Ec/Lgsuj3FFzWUFKHpUbjy WqSt4jmowDJwJnDR/hNrrBkpOo3oBmFWONa2RovpJTvLR4C4G8XNt0H35KBolilz 78XqQXN/8f4iXkARagCWVJeuVKfYtqZfkdcrCpT3HFdo/7Nh6/1Tuf5z0zBTaCxX 8D3x1ftJU7+1nY69MjLF9akWaXU8t04SWMlBHUNatU6+lRbYKHh11YMvmiEuIdbi y83WTJV43L2k7q1wjcLwGQzAEX1+vmEC8Thh5huqwL8muHnDozw= -----END CERTIFICATE-----Generated at Fri Oct 24 04:52:56 2025 by rpki-client