$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/U0PJAwvRNBMvdIKZbraqXcTdRt4.roa File: U0PJAwvRNBMvdIKZbraqXcTdRt4.roa (raw, json) Hash identifier: 4zvYzaI7yB6Rch1Zf+mUXCAxunkuVuPhnE2X1v4vPio= Subject key identifier: 53:43:C9:03:0B:D1:34:13:2F:74:82:99:6E:B6:AA:5D:C4:DD:46:DE Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3966 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/U0PJAwvRNBMvdIKZbraqXcTdRt4.roa Signing time: Fri 22 Aug 2025 08:46:16 +0000 ROA not before: Fri 22 Aug 2025 08:46:16 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.193.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14694 (0x3966) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:16 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=5343C9030BD134132F7482996EB6AA5DC4DD46DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:66:83:09:3f:81:35:fd:37:fb:8b:c9:56:8f: 3b:ab:4e:c3:21:c5:a1:e4:fc:50:c3:50:7b:c2:7f: 2d:25:95:34:51:2e:c7:00:57:57:0d:46:30:c2:11: 50:f1:39:fe:e8:54:25:b9:4e:0c:f5:38:46:01:72: 9e:af:3b:c9:fe:3e:d0:1e:4a:bc:97:63:f8:8f:a8: 57:fc:41:71:19:74:b2:84:c6:fc:60:bb:2c:f1:bd: 44:e0:44:72:5e:a7:52:87:f1:64:fe:69:de:5d:02: e0:99:e4:cc:e3:0a:a2:bc:23:b7:c2:44:49:64:88: 16:e9:d7:80:bc:b8:c8:fd:ae:11:01:0e:f3:c4:b0: 18:5e:a7:0d:d5:0d:01:55:4c:22:4a:12:b9:7a:1d: b9:cc:7a:fe:be:4a:86:8f:b3:74:eb:91:f7:49:d8: 84:40:52:42:15:d6:c1:fc:6f:a4:9a:4b:f4:a8:82: d3:3d:0f:c0:c8:cd:ce:63:e0:ca:7c:1e:19:e4:7c: ca:5b:fe:60:9c:88:03:bc:70:2b:82:a5:5f:07:fe: e3:04:fb:12:1d:f2:6c:e2:7f:83:56:00:80:6a:f1: 33:4f:f0:34:15:0b:02:f6:b9:a5:25:71:ad:70:62: dc:90:3a:92:3b:9c:24:d1:d9:46:2f:db:bb:5a:5b: af:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:43:C9:03:0B:D1:34:13:2F:74:82:99:6E:B6:AA:5D:C4:DD:46:DE X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/U0PJAwvRNBMvdIKZbraqXcTdRt4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.132.0/22 Signature Algorithm: sha256WithRSAEncryption 45:ef:66:22:62:27:b9:5f:12:43:d6:2d:f1:c2:e2:ed:8e:01: 2e:fe:1b:d8:68:5b:cd:04:55:1b:31:91:51:97:c1:39:fb:99: 70:a3:96:b1:87:98:f9:c7:67:64:16:1c:c0:a7:a3:19:d8:8c: 53:02:2a:7c:44:33:58:7e:9d:7e:cf:2e:4a:5c:51:ea:b2:7f: 2d:15:d4:06:27:5f:03:ce:47:ef:f2:61:b2:cc:2f:86:52:bf: e3:a6:c3:20:d4:84:95:31:9d:15:07:db:c1:3a:56:f4:db:58: 8a:51:ae:9e:26:b9:6f:73:78:aa:c0:e4:4c:22:4a:50:8b:d8: f2:40:5b:bc:45:f1:54:7e:bf:6a:40:f8:7b:4e:cb:2b:f5:d0: 6d:49:d8:d7:a9:3b:7e:04:eb:32:71:3c:67:00:3f:1a:71:57: 5f:00:43:f6:ca:1f:b7:60:c5:a0:55:6f:5f:54:e6:a5:19:f6: b1:aa:46:6e:1b:1b:33:17:5c:eb:61:82:cc:bc:9a:df:2a:63: a3:9c:4a:fe:b6:de:69:80:22:cd:3c:02:d2:6e:04:1b:b8:38: 6b:d8:3f:fe:64:ec:0e:cd:97:ad:99:28:c6:45:01:96:f3:77: 9f:b0:c3:72:33:1d:37:c0:39:57:bf:4e:1c:7b:f8:06:c7:f8: 8e:b9:94:59 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOWYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2MTZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDUzNDNDOTAzMEJEMTM0 MTMyRjc0ODI5OTZFQjZBQTVEQzRERDQ2REUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSZoMJP4E1/Tf7i8lWjzurTsMhxaHk/FDDUHvCfy0llTRRLscA V1cNRjDCEVDxOf7oVCW5Tgz1OEYBcp6vO8n+PtAeSryXY/iPqFf8QXEZdLKExvxg uyzxvUTgRHJep1KH8WT+ad5dAuCZ5MzjCqK8I7fCRElkiBbp14C8uMj9rhEBDvPE sBhepw3VDQFVTCJKErl6HbnMev6+SoaPs3TrkfdJ2IRAUkIV1sH8b6SaS/SogtM9 D8DIzc5j4Mp8HhnkfMpb/mCciAO8cCuCpV8H/uME+xId8mzif4NWAIBq8TNP8DQV CwL2uaUlca1wYtyQOpI7nCTR2UYv27taW6/zAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUU0PJAwvRNBMvdIKZbraqXcTdRt4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1UwUEpBd3ZSTkJNdmRJS1pi cmFxWGNUZFJ0NC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wYQwDQYJKoZIhvcNAQELBQADggEBAEXvZiJiJ7lfEkPWLfHC4u2OAS7+G9hoW80E VRsxkVGXwTn7mXCjlrGHmPnHZ2QWHMCnoxnYjFMCKnxEM1h+nX7PLkpcUeqyfy0V 1AYnXwPOR+/yYbLML4ZSv+OmwyDUhJUxnRUH28E6VvTbWIpRrp4muW9zeKrA5Ewi SlCL2PJAW7xF8VR+v2pA+HtOyyv10G1J2NepO34E6zJxPGcAPxpxV18AQ/bKH7dg xaBVb19U5qUZ9rGqRm4bGzMXXOthgsy8mt8qY6OcSv623mmAIs08AtJuBBu4OGvY P/5k7A7Nl62ZKMZFAZbzd5+ww3IzHTfAOVe/Thx7+AbH+I65lFk= -----END CERTIFICATE-----Generated at Fri Oct 24 19:21:29 2025 by rpki-client