$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WSjqB8mpCQT34SbakiIPu0dhTZk.roa File: WSjqB8mpCQT34SbakiIPu0dhTZk.roa (raw, json) Hash identifier: bfOECa1Jh/Ux/pbVIT0inBjadXEos5htOAGoQmG4eQs= Subject key identifier: 59:28:EA:07:C9:A9:09:04:F7:E1:26:DA:92:22:0F:BB:47:61:4D:99 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 37CE Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WSjqB8mpCQT34SbakiIPu0dhTZk.roa Signing time: Fri 22 Aug 2025 08:44:39 +0000 ROA not before: Fri 22 Aug 2025 08:44:39 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.192.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14286 (0x37ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:44:39 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=5928EA07C9A90904F7E126DA92220FBB47614D99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9e:5f:50:c6:76:e0:c6:97:1e:4d:ca:c7:03: 1e:be:48:f5:9a:05:5f:5e:b6:b8:c5:fa:1e:0e:0e: 63:41:d8:65:17:9f:5c:9a:9c:cb:d9:63:fc:48:cd: 08:a7:61:2a:3c:b6:5e:1b:ec:de:01:da:2a:74:99: b9:05:d1:03:b5:77:57:18:24:75:c8:53:a4:31:2d: cc:15:27:07:10:d8:1c:64:3c:6c:2e:cb:cc:02:cf: 91:f0:96:3f:3d:e7:2c:9d:d8:31:6c:63:d8:e6:24: 3c:19:bb:b4:eb:05:26:54:3c:0d:93:1e:9a:e4:9a: d7:96:de:5f:c6:17:82:2b:d0:ed:ba:6a:b0:26:60: a1:82:64:2d:85:40:54:04:52:a6:d3:5f:4b:6b:1e: fb:8f:d7:18:72:34:42:16:83:5e:15:a4:e0:7f:a5: 75:f9:60:c3:9b:c5:1b:34:8a:28:fe:5c:75:a3:45: 89:d1:7f:0c:ae:ae:f1:f9:7d:c8:c2:92:bb:e6:e0: b5:34:b2:d6:c1:86:a2:29:9c:61:61:34:96:b8:ab: c5:40:7d:04:48:f3:6d:e5:18:76:66:58:e1:28:7c: 73:4c:c9:4d:06:6c:ef:4d:2d:c0:f4:06:84:ec:c0: 60:7e:4c:54:90:67:fa:c5:79:2a:42:44:69:97:0f: 24:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:28:EA:07:C9:A9:09:04:F7:E1:26:DA:92:22:0F:BB:47:61:4D:99 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WSjqB8mpCQT34SbakiIPu0dhTZk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.208.0/21 Signature Algorithm: sha256WithRSAEncryption 16:df:43:73:00:8c:5d:c5:2d:c5:c9:56:f0:0a:7c:11:ce:0a: f7:ed:db:5b:d0:ef:99:28:63:66:ea:88:1d:69:df:90:b1:6a: 75:4b:06:23:4b:60:ba:fb:f4:54:80:19:13:1d:9d:55:8f:07: 61:d6:f3:8e:7e:a3:3e:9c:39:62:1b:b4:77:b8:9e:88:3a:dc: 4e:0f:7f:00:53:aa:cf:cb:89:31:84:84:9e:cd:ab:c5:99:de: e1:dd:3f:c9:0b:57:8f:3e:0b:d8:4e:bd:4f:2a:f0:cc:c3:d1: 92:d3:28:8f:6a:2a:0c:9d:57:45:e7:ac:4f:ec:2f:56:7b:99: fd:d4:ee:8b:26:f3:48:f2:6e:5c:8d:dc:b2:a0:44:fb:d8:78: bd:ed:a2:60:57:b3:0d:6d:93:cd:85:c2:db:cb:09:3c:f2:28: d1:0d:b0:83:e5:de:24:6a:d0:48:8d:a0:ac:dd:df:10:e2:09: 53:64:1b:9e:e3:bf:59:a9:d7:2d:fc:04:43:5c:ec:c7:37:ce: d6:81:76:7e:1a:58:f7:96:d9:9d:73:e1:9c:25:04:2b:86:7c: 3d:f8:3a:4c:4c:9d:a7:28:01:27:45:2d:22:36:c4:33:83:9c: b9:0e:cd:f7:d5:8c:73:9e:99:8e:b6:ab:51:7d:e3:80:87:55: 2d:fa:ca:2c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICN84wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ0MzlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDU5MjhFQTA3QzlBOTA5 MDRGN0UxMjZEQTkyMjIwRkJCNDc2MTREOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPnl9QxnbgxpceTcrHAx6+SPWaBV9etrjF+h4ODmNB2GUXn1ya nMvZY/xIzQinYSo8tl4b7N4B2ip0mbkF0QO1d1cYJHXIU6QxLcwVJwcQ2BxkPGwu y8wCz5Hwlj895yyd2DFsY9jmJDwZu7TrBSZUPA2THprkmteW3l/GF4Ir0O26arAm YKGCZC2FQFQEUqbTX0trHvuP1xhyNEIWg14VpOB/pXX5YMObxRs0iij+XHWjRYnR fwyurvH5fcjCkrvm4LU0stbBhqIpnGFhNJa4q8VAfQRI823lGHZmWOEofHNMyU0G bO9NLcD0BoTswGB+TFSQZ/rFeSpCRGmXDyTtAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUWSjqB8mpCQT34SbakiIPu0dhTZkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1dTanFCOG1wQ1FUMzRTYmFr aUlQdTBkaFRaay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wNAwDQYJKoZIhvcNAQELBQADggEBABbfQ3MAjF3FLcXJVvAKfBHOCvft21vQ75ko Y2bqiB1p35CxanVLBiNLYLr79FSAGRMdnVWPB2HW845+oz6cOWIbtHe4nog63E4P fwBTqs/LiTGEhJ7Nq8WZ3uHdP8kLV48+C9hOvU8q8MzD0ZLTKI9qKgydV0XnrE/s L1Z7mf3U7osm80jyblyN3LKgRPvYeL3tomBXsw1tk82FwtvLCTzyKNENsIPl3iRq 0EiNoKzd3xDiCVNkG57jv1mp1y38BENc7Mc3ztaBdn4aWPeW2Z1z4ZwlBCuGfD34 OkxMnacoASdFLSI2xDODnLkOzffVjHOemY62q1F944CHVS36yiw= -----END CERTIFICATE-----Generated at Fri Oct 24 19:24:56 2025 by rpki-client