$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VxwmWhebXWHMMJAgzWzTk8rENnw.roa File: VxwmWhebXWHMMJAgzWzTk8rENnw.roa (raw, json) Hash identifier: aPv6fl8WiOqAISWyTzR4HQ/L6pRXcortmGXhboeigtA= Subject key identifier: 57:1C:26:5A:17:9B:5D:61:CC:30:90:20:CD:6C:D3:93:CA:C4:36:7C Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 38E0 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VxwmWhebXWHMMJAgzWzTk8rENnw.roa Signing time: Fri 22 Aug 2025 08:45:44 +0000 ROA not before: Fri 22 Aug 2025 08:45:44 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.194.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14560 (0x38e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:44 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=571C265A179B5D61CC309020CD6CD393CAC4367C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:d0:7e:a0:c3:bb:d6:3d:7d:45:54:9b:66:4a: f0:f0:9b:e6:71:77:84:12:86:73:f5:37:30:83:d0: 6b:8a:bd:64:03:32:3d:c8:7f:dd:61:6b:c6:16:aa: 61:80:ae:d8:df:b9:62:6c:c9:26:de:0c:7d:9d:8f: 5a:e5:3b:30:26:7e:1e:ea:72:fe:0b:bd:4f:34:2e: 3c:c8:84:df:38:6b:57:2c:14:f8:39:87:fe:8e:93: c2:e7:1b:2f:eb:6d:ce:01:d0:34:a5:e6:1e:15:aa: 56:11:12:82:f7:a5:a9:af:9e:60:6a:79:6e:73:11: d0:f6:cc:86:63:b6:3b:0b:15:e6:b6:35:0a:aa:1d: af:b4:ec:f4:c1:5e:bd:c4:1a:c0:57:ba:63:80:3e: 3e:38:b8:75:4d:8b:fb:f0:a7:fc:d8:8a:00:91:c3: 87:ca:e8:99:f2:9b:51:5c:19:f2:60:85:97:72:1c: 42:ad:94:56:6f:ee:7b:ea:b2:e8:06:de:e2:48:d9: 82:c3:82:03:de:be:f7:9c:f0:c4:64:58:6c:10:d9: 6b:50:3e:34:8f:6f:33:c3:64:a3:23:02:78:71:52: e0:29:07:2a:04:45:ea:02:03:c6:1e:da:72:b5:c6: 9e:fa:57:f9:f1:7e:91:84:27:f3:53:2c:52:60:fd: a4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:1C:26:5A:17:9B:5D:61:CC:30:90:20:CD:6C:D3:93:CA:C4:36:7C X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VxwmWhebXWHMMJAgzWzTk8rENnw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.128.0/20 Signature Algorithm: sha256WithRSAEncryption 2f:f2:88:96:8c:c7:a4:fa:73:60:c3:d6:4d:5b:dc:5c:43:70: 14:82:3c:24:af:df:4c:c0:10:d4:05:1d:66:9b:dc:35:f2:c9: 0b:ec:fc:36:71:16:90:70:2a:0a:68:27:b1:6c:00:54:18:bd: cb:93:23:9a:59:37:43:d1:b2:94:04:16:b2:a7:37:fe:ea:ab: c3:c2:e9:c4:e4:47:f7:a3:ca:fb:89:18:d9:12:16:f2:8a:c8: e1:32:d1:1d:77:e0:52:bf:67:ae:c0:1f:95:60:07:66:9e:16: f5:f1:4e:67:02:90:0d:2e:e7:e3:a9:69:d1:1b:00:23:2b:b6: a9:71:be:6f:ed:4a:82:c1:e4:87:1e:e0:74:81:9a:e6:5c:6d: fa:9d:c5:9e:11:84:69:b7:54:f3:1d:06:e3:55:87:8a:26:97: 70:03:b3:8e:e1:df:6c:92:5b:89:fe:bd:6b:3c:91:b6:93:29: e5:9c:43:cb:3e:bb:92:00:41:9e:6f:54:05:37:88:21:a8:43: bc:4f:95:7c:bf:93:bf:f7:5b:b0:38:b6:0e:df:45:3e:ea:7a: b2:08:76:19:7b:69:2b:d3:49:8e:74:29:94:70:5a:fb:b9:60: 34:f6:14:13:00:68:8f:23:a1:46:25:4f:62:3b:14:62:b2:62: 3e:ec:36:62 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOOAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1NDRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDU3MUMyNjVBMTc5QjVE NjFDQzMwOTAyMENENkNEMzkzQ0FDNDM2N0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDx0H6gw7vWPX1FVJtmSvDwm+Zxd4QShnP1NzCD0GuKvWQDMj3I f91ha8YWqmGArtjfuWJsySbeDH2dj1rlOzAmfh7qcv4LvU80LjzIhN84a1csFPg5 h/6Ok8LnGy/rbc4B0DSl5h4VqlYREoL3pamvnmBqeW5zEdD2zIZjtjsLFea2NQqq Ha+07PTBXr3EGsBXumOAPj44uHVNi/vwp/zYigCRw4fK6Jnym1FcGfJghZdyHEKt lFZv7nvqsugG3uJI2YLDggPevvec8MRkWGwQ2WtQPjSPbzPDZKMjAnhxUuApByoE ReoCA8Ye2nK1xp76V/nxfpGEJ/NTLFJg/aRlAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUVxwmWhebXWHMMJAgzWzTk8rENnwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1Z4d21XaGViWFdITU1KQWd6 V3pUazhyRU5udy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR7 woAwDQYJKoZIhvcNAQELBQADggEBAC/yiJaMx6T6c2DD1k1b3FxDcBSCPCSv30zA ENQFHWab3DXyyQvs/DZxFpBwKgpoJ7FsAFQYvcuTI5pZN0PRspQEFrKnN/7qq8PC 6cTkR/ejyvuJGNkSFvKKyOEy0R134FK/Z67AH5VgB2aeFvXxTmcCkA0u5+OpadEb ACMrtqlxvm/tSoLB5Ice4HSBmuZcbfqdxZ4RhGm3VPMdBuNVh4oml3ADs47h32yS W4n+vWs8kbaTKeWcQ8s+u5IAQZ5vVAU3iCGoQ7xPlXy/k7/3W7A4tg7fRT7qerII dhl7aSvTSY50KZRwWvu5YDT2FBMAaI8joUYlT2I7FGKyYj7sNmI= -----END CERTIFICATE-----Generated at Fri Oct 24 19:25:05 2025 by rpki-client