$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ur5kJq4ZL67Eq2mt0cZaM7kHNYA.roa File: Ur5kJq4ZL67Eq2mt0cZaM7kHNYA.roa (raw, json) Hash identifier: sejBuUT0qb27KlDxX78iVp+j1tfQL6Za+HhdCj568xo= Subject key identifier: 52:BE:64:26:AE:19:2F:AE:C4:AB:69:AD:D1:C6:5A:33:B9:07:35:80 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 38A0 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ur5kJq4ZL67Eq2mt0cZaM7kHNYA.roa Signing time: Fri 22 Aug 2025 08:45:28 +0000 ROA not before: Fri 22 Aug 2025 08:45:28 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9924 IP address blocks: 118.232.96.0/19 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 07:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14496 (0x38a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:28 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=52BE6426AE192FAEC4AB69ADD1C65A33B9073580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:bb:9b:de:99:67:1e:b9:68:80:11:0b:07:84: 41:0b:13:aa:0c:2d:f0:52:f0:70:4f:d6:7d:53:87: f9:bc:be:62:4c:e5:b8:d1:ce:8a:85:88:9a:82:88: 47:79:49:3e:a0:99:fb:ef:83:84:93:60:9e:87:f8: 07:45:73:4f:a1:87:39:0b:ba:49:d2:8f:c3:b6:5a: 50:65:20:e3:d6:7b:68:e8:ce:fa:77:1c:ff:2b:09: 15:30:8e:b4:b7:de:5d:2f:dd:1d:c5:ed:62:33:64: 85:c7:89:9d:46:dc:4d:91:65:41:3f:ae:7e:ce:d5: fc:a3:32:ed:2f:0c:6c:06:72:67:0d:68:e7:b2:67: 21:22:0e:a0:50:43:59:ea:89:07:8e:05:01:a7:1b: 76:a2:ce:54:f2:10:4d:69:6d:75:65:7b:7d:9a:a1: 30:c6:e4:7f:1f:6c:d5:4f:0e:75:23:bb:49:ea:5f: f9:1c:b0:a7:25:f0:48:13:a2:8c:5f:38:16:11:22: 43:d5:e9:0c:ab:bd:33:e2:ea:2c:b4:75:aa:75:ae: bc:2f:d9:7c:8e:4d:00:af:2d:04:c0:7c:30:c2:77: 6b:a5:44:bf:82:e6:37:5c:73:3d:8f:1a:88:ad:a2: 23:64:17:e5:d4:be:0e:ac:c2:eb:04:f1:34:9b:81: 18:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:BE:64:26:AE:19:2F:AE:C4:AB:69:AD:D1:C6:5A:33:B9:07:35:80 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ur5kJq4ZL67Eq2mt0cZaM7kHNYA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.96.0/19 Signature Algorithm: sha256WithRSAEncryption 01:04:05:58:40:f9:3c:ed:6e:95:65:91:41:58:54:31:9a:a4: c9:16:a1:29:18:5c:b4:26:97:f5:0b:86:a3:86:87:a8:93:e6: 7e:5e:5c:ee:2f:17:8e:1e:2b:56:e4:f7:bf:4d:8a:a2:14:97: 28:1f:8d:d0:42:6d:24:41:10:26:5e:8c:28:ba:2c:a4:db:49: ab:e9:24:ed:85:8a:24:6a:4d:98:da:82:db:b8:0d:6c:2a:ba: 4e:e0:da:a6:8a:2c:90:95:d5:2b:35:a2:d7:73:a4:88:27:fd: 28:2f:81:23:47:43:fc:50:af:20:c2:1e:01:f6:3b:29:85:f6: 91:3c:a3:1f:89:8b:3f:a5:fa:82:cb:24:58:6e:c6:f9:9a:55: b2:6d:30:b4:ea:f4:e4:bb:ba:b6:27:ac:ae:76:70:c2:ba:94: 26:5e:6b:5c:54:2a:ff:be:9b:d9:3b:36:0f:35:4d:64:76:0d: ef:ce:0e:23:8d:0d:70:3d:9d:93:75:91:ef:6c:50:a4:7e:3b: f1:41:69:08:f2:58:cd:9f:48:8c:de:64:f2:69:80:54:a4:f0: 6e:13:79:10:05:84:9b:b1:89:8e:c9:f9:e2:6e:27:bd:a4:8d: 4b:a7:b2:1e:fc:63:ab:17:26:ac:2c:d3:72:b1:d8:b6:c6:a9: cf:d9:2a:43 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOKAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1MjhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDUyQkU2NDI2QUUxOTJG QUVDNEFCNjlBREQxQzY1QTMzQjkwNzM1ODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxu5vemWceuWiAEQsHhEELE6oMLfBS8HBP1n1Th/m8vmJM5bjR zoqFiJqCiEd5ST6gmfvvg4STYJ6H+AdFc0+hhzkLuknSj8O2WlBlIOPWe2jozvp3 HP8rCRUwjrS33l0v3R3F7WIzZIXHiZ1G3E2RZUE/rn7O1fyjMu0vDGwGcmcNaOey ZyEiDqBQQ1nqiQeOBQGnG3aizlTyEE1pbXVle32aoTDG5H8fbNVPDnUju0nqX/kc sKcl8EgTooxfOBYRIkPV6QyrvTPi6iy0dap1rrwv2XyOTQCvLQTAfDDCd2ulRL+C 5jdccz2PGoitoiNkF+XUvg6swusE8TSbgRgZAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUUr5kJq4ZL67Eq2mt0cZaM7kHNYAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1VyNWtKcTRaTDY3RXEybXQw Y1phTTdrSE5ZQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV2 6GAwDQYJKoZIhvcNAQELBQADggEBAAEEBVhA+TztbpVlkUFYVDGapMkWoSkYXLQm l/ULhqOGh6iT5n5eXO4vF44eK1bk979NiqIUlygfjdBCbSRBECZejCi6LKTbSavp JO2FiiRqTZjagtu4DWwquk7g2qaKLJCV1Ss1otdzpIgn/SgvgSNHQ/xQryDCHgH2 OymF9pE8ox+Jiz+l+oLLJFhuxvmaVbJtMLTq9OS7urYnrK52cMK6lCZea1xUKv++ m9k7Ng81TWR2De/ODiONDXA9nZN1ke9sUKR+O/FBaQjyWM2fSIzeZPJpgFSk8G4T eRAFhJuxiY7J+eJuJ72kjUunsh78Y6sXJqws03Kx2LbGqc/ZKkM= -----END CERTIFICATE-----Generated at Fri Oct 24 04:51:05 2025 by rpki-client