$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VXCn6WVIXCB3TgaWH9171o62k70.roa File: VXCn6WVIXCB3TgaWH9171o62k70.roa (raw, json) Hash identifier: +BtICKUs9rkc5PxNj3woP2Mr7FNFx9BLLXF9rQpKao8= Subject key identifier: 55:70:A7:E9:65:48:5C:20:77:4E:06:96:1F:DD:7B:D6:8E:B6:93:BD Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 37FB Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VXCn6WVIXCB3TgaWH9171o62k70.roa Signing time: Fri 22 Aug 2025 08:44:51 +0000 ROA not before: Fri 22 Aug 2025 08:44:51 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.193.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14331 (0x37fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:44:51 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=5570A7E965485C20774E06961FDD7BD68EB693BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:77:ee:0f:81:b3:66:47:0f:2d:73:1e:d8:71: 2e:d8:bc:11:62:f4:f7:9c:ae:f9:fe:02:6b:b4:fa: 13:65:b7:9f:3f:1b:f4:e1:a9:67:5d:22:93:60:ad: 54:bb:18:28:c5:28:11:79:4b:68:00:f7:22:29:c5: 74:74:48:36:85:74:e9:a9:7c:0c:96:05:77:e9:7c: d8:0b:a6:27:49:6c:7c:75:c3:95:d5:00:50:7d:8a: 54:6f:03:3c:ea:38:4d:42:52:53:29:f7:19:d7:cd: 9e:9a:23:8f:49:76:05:b3:27:90:c7:96:f3:92:db: a9:7d:a0:6b:75:ba:89:64:6e:de:03:f7:98:28:86: 2a:23:f5:c4:a9:92:39:fe:3a:98:b2:5d:3e:72:5a: 57:1e:2a:e2:ba:29:e6:ad:4b:c2:6c:de:e7:6e:8c: a7:dd:8d:64:db:ff:16:23:5a:82:da:ab:70:25:55: 31:79:72:f3:0c:2a:a3:bb:40:0d:5a:ca:80:0b:43: 29:c4:94:3c:2d:ea:d6:16:67:32:b3:00:ed:af:dd: 3c:67:ff:6f:78:23:31:2d:83:1c:87:2d:79:5a:f3: 6c:fa:69:c0:a0:79:2f:2b:b4:b0:b8:85:1a:9e:a0: 31:5b:12:91:92:ef:0f:c3:45:43:f2:06:51:82:d2: 00:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:70:A7:E9:65:48:5C:20:77:4E:06:96:1F:DD:7B:D6:8E:B6:93:BD X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VXCn6WVIXCB3TgaWH9171o62k70.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.159.0/24 Signature Algorithm: sha256WithRSAEncryption 44:41:a1:67:5d:c0:2c:eb:e5:cd:50:67:14:de:7c:c8:49:1e: 26:d5:8b:89:23:be:ce:07:0f:68:31:b6:4f:75:1a:32:88:91: 62:c1:64:e1:44:7f:3b:1e:59:f3:d9:1b:18:38:0e:d3:5b:ce: ca:e0:28:b3:89:9f:8e:8a:9c:da:be:c9:0b:c4:d5:25:43:af: 86:24:bc:a0:16:3c:99:2e:a2:2c:02:06:02:56:d3:50:61:7a: d0:61:fc:0c:49:a2:2a:1a:06:a9:73:8a:5e:eb:2b:7e:d1:33: 80:04:ca:4c:b3:5a:5c:7e:f8:61:5e:e1:a2:9a:de:46:13:b3: 02:66:f6:bb:d1:84:d7:d2:e3:3d:09:ed:00:fe:2d:ba:82:71: 22:b5:0c:fd:1e:31:c3:80:b7:97:8a:1c:b0:54:ec:84:8e:44: dd:c0:f2:8f:32:5b:bf:bd:b3:1e:54:31:54:91:0e:d8:f2:63: 2b:9e:c0:60:fc:63:d7:07:a4:b1:c8:8f:83:3a:f6:34:36:e5: e4:2c:38:c7:18:94:87:fc:ab:64:b8:3f:85:bf:14:ee:cf:ee: d4:56:b4:bc:fd:f0:c8:f9:7a:82:f4:ca:b6:5c:70:2f:d1:6a: ea:5b:51:1e:ae:a9:e8:05:5e:3f:6a:92:57:12:d4:cb:47:9c: 82:b8:e3:af -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICN/swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ0NTFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDU1NzBBN0U5NjU0ODVD MjA3NzRFMDY5NjFGREQ3QkQ2OEVCNjkzQkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+d+4PgbNmRw8tcx7YcS7YvBFi9Pecrvn+Amu0+hNlt58/G/Th qWddIpNgrVS7GCjFKBF5S2gA9yIpxXR0SDaFdOmpfAyWBXfpfNgLpidJbHx1w5XV AFB9ilRvAzzqOE1CUlMp9xnXzZ6aI49JdgWzJ5DHlvOS26l9oGt1uolkbt4D95go hioj9cSpkjn+OpiyXT5yWlceKuK6KeatS8Js3udujKfdjWTb/xYjWoLaq3AlVTF5 cvMMKqO7QA1ayoALQynElDwt6tYWZzKzAO2v3Txn/294IzEtgxyHLXla82z6acCg eS8rtLC4hRqeoDFbEpGS7w/DRUPyBlGC0gCvAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUVXCn6WVIXCB3TgaWH9171o62k70wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1ZYQ242V1ZJWENCM1RnYVdI OTE3MW82Mms3MC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7 wZ8wDQYJKoZIhvcNAQELBQADggEBAERBoWddwCzr5c1QZxTefMhJHibVi4kjvs4H D2gxtk91GjKIkWLBZOFEfzseWfPZGxg4DtNbzsrgKLOJn46KnNq+yQvE1SVDr4Yk vKAWPJkuoiwCBgJW01BhetBh/AxJoioaBqlzil7rK37RM4AEykyzWlx++GFe4aKa 3kYTswJm9rvRhNfS4z0J7QD+LbqCcSK1DP0eMcOAt5eKHLBU7ISORN3A8o8yW7+9 sx5UMVSRDtjyYyuewGD8Y9cHpLHIj4M69jQ25eQsOMcYlIf8q2S4P4W/FO7P7tRW tLz98Mj5eoL0yrZccC/RaupbUR6uqegFXj9qklcS1MtHnIK4468= -----END CERTIFICATE-----Generated at Fri Oct 24 19:21:52 2025 by rpki-client