$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Uu0PN3GPjtuGObdjZ_T46GY7SX8.roa File: Uu0PN3GPjtuGObdjZ_T46GY7SX8.roa (raw, json) Hash identifier: Oi1bB5yITy2hO8aGuGspfold+T7xdzVA50FTod74DAY= Subject key identifier: 52:ED:0F:37:71:8F:8E:DB:86:39:B7:63:67:F4:F8:E8:66:3B:49:7F Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3B32 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Uu0PN3GPjtuGObdjZ_T46GY7SX8.roa Signing time: Fri 22 Aug 2025 08:48:10 +0000 ROA not before: Fri 22 Aug 2025 08:48:10 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 118.232.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15154 (0x3b32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:48:10 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=52ED0F37718F8EDB8639B76367F4F8E8663B497F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:94:0f:00:51:d0:f2:68:6b:6a:8c:6b:eb:66: 49:74:dd:65:b3:b1:c3:45:c0:eb:8f:4a:be:c4:fb: c0:80:22:44:82:45:16:41:72:21:22:31:d8:8e:21: 43:e2:5a:0f:4c:78:c6:36:78:5b:8c:12:7a:a5:f5: 4c:2a:2e:a2:11:d3:a4:76:68:c0:9b:ac:b6:4b:5c: cf:d9:11:cf:94:6d:28:36:03:49:28:27:25:d4:07: 76:39:3d:1d:11:c0:09:81:3d:75:f5:99:19:e3:e5: a0:d2:dc:21:a6:1b:ec:97:94:27:fb:05:6e:82:ea: f4:ee:61:a0:21:f1:41:5e:02:fb:0b:7f:68:5b:f7: 4d:fa:29:57:09:76:4c:17:55:5b:41:f9:b8:3c:a6: b8:46:55:57:59:99:70:72:89:71:64:4e:8e:a0:3e: d8:c1:a1:51:5d:5d:a1:61:5b:4c:98:62:d5:28:bd: d9:81:99:0c:b1:28:cd:3b:8e:69:c1:87:58:5e:08: 09:d7:04:18:12:37:4e:10:a3:fe:94:03:74:b6:11: 8c:5b:2b:b9:0a:f4:6d:d6:ab:3f:76:47:30:dd:5b: 73:be:e6:fe:bc:34:6c:24:88:00:10:15:bc:1f:75: 76:87:09:d4:7c:a1:d0:0d:a0:dd:86:18:30:e0:51: 9f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:ED:0F:37:71:8F:8E:DB:86:39:B7:63:67:F4:F8:E8:66:3B:49:7F X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Uu0PN3GPjtuGObdjZ_T46GY7SX8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.100.0/22 Signature Algorithm: sha256WithRSAEncryption 21:51:5f:dc:3d:3e:29:56:fa:0a:85:31:68:6e:da:01:59:2d: a2:6b:03:75:1c:9d:a1:04:90:91:c9:4d:81:50:2a:37:42:ee: c9:d6:1b:1d:5f:d0:09:37:44:df:76:e2:b2:42:c6:21:64:bf: 41:db:a8:8c:74:56:5b:34:16:2f:db:41:bf:b7:17:f0:b6:7a: 7a:78:85:ee:62:d6:34:0d:3b:8e:bc:a9:47:7f:07:c0:f0:81: 46:49:52:da:a7:a6:cc:e5:6a:76:15:38:a0:5e:bc:61:6a:14: ad:69:44:e5:eb:5e:48:ca:70:5d:63:3f:e1:14:43:c2:98:55: 9a:31:49:27:db:e2:0b:f3:f5:da:14:d2:ea:f8:e6:fb:f0:8d: 60:7b:c4:bb:43:13:07:fa:ee:7b:48:10:90:4e:ea:e9:f6:fa: 1b:3d:c6:22:27:67:03:93:85:07:22:e4:19:e7:57:6f:d9:bb: cc:1c:b6:f5:90:fe:db:73:80:80:8f:c0:7f:27:7a:13:6d:13: 9d:fb:3f:19:4f:40:50:c8:a1:f3:06:0d:72:7e:34:ab:fe:d3: cf:25:84:cb:e6:d4:50:0d:04:c3:21:1d:25:99:3f:6b:01:8f: 71:80:cf:f4:9f:8c:77:73:59:2d:1b:49:1b:da:75:30:c0:57: b1:0c:77:b8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOzIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ4MTBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDUyRUQwRjM3NzE4RjhF REI4NjM5Qjc2MzY3RjRGOEU4NjYzQjQ5N0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMlA8AUdDyaGtqjGvrZkl03WWzscNFwOuPSr7E+8CAIkSCRRZB ciEiMdiOIUPiWg9MeMY2eFuMEnql9UwqLqIR06R2aMCbrLZLXM/ZEc+UbSg2A0ko JyXUB3Y5PR0RwAmBPXX1mRnj5aDS3CGmG+yXlCf7BW6C6vTuYaAh8UFeAvsLf2hb 9036KVcJdkwXVVtB+bg8prhGVVdZmXByiXFkTo6gPtjBoVFdXaFhW0yYYtUovdmB mQyxKM07jmnBh1heCAnXBBgSN04Qo/6UA3S2EYxbK7kK9G3Wqz92RzDdW3O+5v68 NGwkiAAQFbwfdXaHCdR8odANoN2GGDDgUZ+7AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUUu0PN3GPjtuGObdjZ/T46GY7SX8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1V1MFBOM0dQanR1R09iZGpa X1Q0NkdZN1NYOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6GQwDQYJKoZIhvcNAQELBQADggEBACFRX9w9PilW+gqFMWhu2gFZLaJrA3UcnaEE kJHJTYFQKjdC7snWGx1f0Ak3RN924rJCxiFkv0HbqIx0Vls0Fi/bQb+3F/C2enp4 he5i1jQNO468qUd/B8DwgUZJUtqnpszlanYVOKBevGFqFK1pROXrXkjKcF1jP+EU Q8KYVZoxSSfb4gvz9doU0ur45vvwjWB7xLtDEwf67ntIEJBO6un2+hs9xiInZwOT hQci5BnnV2/Zu8wctvWQ/ttzgICPwH8nehNtE537PxlPQFDIofMGDXJ+NKv+088l hMvm1FANBMMhHSWZP2sBj3GAz/SfjHdzWS0bSRvadTDAV7EMd7g= -----END CERTIFICATE-----Generated at Fri Oct 24 19:21:44 2025 by rpki-client