$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VPiE9Mn7U9nsY59jlNsDIK72FwI.roa File: VPiE9Mn7U9nsY59jlNsDIK72FwI.roa (raw, json) Hash identifier: hR73/Epl26mdvilQ84seKhT0YodIutzJghpupnrZ8gE= Subject key identifier: 54:F8:84:F4:C9:FB:53:D9:EC:63:9F:63:94:DB:03:20:AE:F6:17:02 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 381E Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VPiE9Mn7U9nsY59jlNsDIK72FwI.roa Signing time: Fri 22 Aug 2025 08:44:58 +0000 ROA not before: Fri 22 Aug 2025 08:44:58 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.195.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14366 (0x381e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:44:58 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=54F884F4C9FB53D9EC639F6394DB0320AEF61702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fb:c5:74:5b:d9:51:2f:53:6a:1a:ad:2a:f2: 4b:e6:e9:75:54:82:38:c5:a1:68:52:5d:7b:b4:95: c8:57:aa:a0:29:c5:2f:d5:13:1f:4d:e1:01:fc:b8: be:5b:aa:01:bf:7d:73:12:de:aa:b4:3d:69:72:a1: c0:7b:38:74:87:72:37:12:0a:09:39:43:83:9d:f4: b4:c4:3b:67:7b:1e:a1:0a:76:d5:12:50:fc:17:db: a3:48:50:56:a8:61:41:8d:cb:66:f6:4f:25:0f:b0: 73:7a:8c:30:d3:35:04:e0:53:4e:ca:39:d3:fc:41: 3f:95:7b:f7:0d:50:c8:aa:d6:44:bb:42:22:ba:52: 04:36:a4:81:63:cf:7b:88:f5:c5:b1:04:9c:02:35: 5c:9b:64:4d:23:41:05:70:fa:f8:b7:51:a7:00:5f: 23:82:e4:ad:87:4f:05:14:c0:5e:c1:c2:02:30:d4: a0:3f:87:12:2f:3c:73:cd:c1:f6:3f:26:83:ad:8c: 8c:1f:57:27:b7:15:a8:d2:89:f8:11:a8:e4:b4:67: 0d:f6:e7:ed:a1:f5:f4:1b:e9:57:fb:19:1b:f0:41: 17:78:9f:4c:34:00:74:a9:c6:39:4f:1e:78:53:cd: 12:70:5d:4c:db:93:b1:9f:a0:6d:d8:ee:b2:1c:1e: 3c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:F8:84:F4:C9:FB:53:D9:EC:63:9F:63:94:DB:03:20:AE:F6:17:02 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VPiE9Mn7U9nsY59jlNsDIK72FwI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.232.0/22 Signature Algorithm: sha256WithRSAEncryption 8c:fa:bb:d2:aa:73:7b:8d:71:2f:2e:d9:e1:83:b7:0e:51:cc: ae:d2:eb:d9:0f:86:04:66:59:56:ea:30:6b:11:42:83:0c:a5: 64:42:df:df:af:f9:cd:15:07:7b:92:f1:c6:c3:f5:46:da:c6: 94:63:96:33:88:9f:84:86:71:d3:64:9f:4e:e0:26:d8:97:5f: a0:17:4a:5c:58:61:80:f4:10:e9:4d:f7:dd:32:d0:01:51:e6: ec:f3:bf:74:2f:29:36:e6:f2:be:e3:22:61:60:1f:56:5b:00: c3:7f:cf:39:fc:53:ce:75:b5:50:3a:bc:cb:3c:c9:01:35:b3: bf:d8:00:ae:e3:3f:1f:85:dc:b8:56:6e:59:45:9b:99:c3:ed: 3c:d6:49:65:ac:0c:7e:c7:80:1a:a2:b8:7f:6e:1e:3d:5e:d3: f3:ff:ae:3f:6c:4e:28:63:36:fb:76:96:b5:cd:ff:46:a5:bc: 1a:1d:bf:88:17:8e:6e:68:c0:25:ba:84:9e:80:60:19:94:9c: 65:a0:26:06:1e:43:a0:7c:26:74:e7:ea:6e:b9:b8:48:4a:1a: 72:8a:59:78:aa:5b:32:15:80:ca:c9:ec:46:15:6f:f8:79:e6: 43:85:59:ea:1f:a4:a7:20:d0:fb:bf:ca:7e:a8:ea:75:cf:78: 9e:8b:bb:21 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOB4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ0NThaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDU0Rjg4NEY0QzlGQjUz RDlFQzYzOUY2Mzk0REIwMzIwQUVGNjE3MDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDA+8V0W9lRL1NqGq0q8kvm6XVUgjjFoWhSXXu0lchXqqApxS/V Ex9N4QH8uL5bqgG/fXMS3qq0PWlyocB7OHSHcjcSCgk5Q4Od9LTEO2d7HqEKdtUS UPwX26NIUFaoYUGNy2b2TyUPsHN6jDDTNQTgU07KOdP8QT+Ve/cNUMiq1kS7QiK6 UgQ2pIFjz3uI9cWxBJwCNVybZE0jQQVw+vi3UacAXyOC5K2HTwUUwF7BwgIw1KA/ hxIvPHPNwfY/JoOtjIwfVye3FajSifgRqOS0Zw325+2h9fQb6Vf7GRvwQRd4n0w0 AHSpxjlPHnhTzRJwXUzbk7GfoG3Y7rIcHjxjAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUVPiE9Mn7U9nsY59jlNsDIK72FwIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1ZQaUU5TW43VTluc1k1OWps TnNESUs3MkZ3SS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 w+gwDQYJKoZIhvcNAQELBQADggEBAIz6u9Kqc3uNcS8u2eGDtw5RzK7S69kPhgRm WVbqMGsRQoMMpWRC39+v+c0VB3uS8cbD9UbaxpRjljOIn4SGcdNkn07gJtiXX6AX SlxYYYD0EOlN990y0AFR5uzzv3QvKTbm8r7jImFgH1ZbAMN/zzn8U851tVA6vMs8 yQE1s7/YAK7jPx+F3LhWbllFm5nD7TzWSWWsDH7HgBqiuH9uHj1e0/P/rj9sTihj Nvt2lrXN/0alvBodv4gXjm5owCW6hJ6AYBmUnGWgJgYeQ6B8JnTn6m65uEhKGnKK WXiqWzIVgMrJ7EYVb/h55kOFWeofpKcg0Pu/yn6o6nXPeJ6LuyE= -----END CERTIFICATE-----Generated at Fri Oct 24 19:21:45 2025 by rpki-client