$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Xzk4um2C3fiB_hltLeEUskBMBF0.roa File: Xzk4um2C3fiB_hltLeEUskBMBF0.roa (raw, json) Hash identifier: wjipIXoBN9g3FGhqvlcyQ9irwA35KN2jxWQnCRpRMWM= Subject key identifier: 5F:39:38:BA:6D:82:DD:F8:81:FE:19:6D:2D:E1:14:B2:40:4C:04:5D Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3AA6 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Xzk4um2C3fiB_hltLeEUskBMBF0.roa Signing time: Fri 22 Aug 2025 08:47:35 +0000 ROA not before: Fri 22 Aug 2025 08:47:35 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9924 IP address blocks: 123.195.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 07:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15014 (0x3aa6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:35 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=5F3938BA6D82DDF881FE196D2DE114B2404C045D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b9:09:c3:d5:ea:75:e7:eb:8c:00:b1:1d:0d: 25:f6:0a:eb:5e:61:e7:a8:7c:5d:20:8a:28:1f:77: d8:2b:bf:c3:bc:66:4b:a3:98:ba:5a:f9:58:a9:ee: 2e:e1:9f:d9:68:50:27:4f:aa:8f:ea:f6:0c:49:93: 43:5a:9e:fb:21:05:33:0d:7b:69:b6:ee:b1:ee:92: 40:2c:26:3f:32:dc:5c:1d:36:5d:28:f6:97:4f:2f: 23:4a:5e:81:30:39:1e:ba:8b:ed:69:90:48:10:32: ac:a8:35:ef:e9:6d:3c:22:30:04:4e:26:3d:8a:cf: e3:02:90:e4:6d:74:f6:33:24:9e:c7:47:cf:d5:5c: 50:4a:29:54:da:63:da:81:50:b4:16:f2:7f:ce:23: 69:f3:1b:89:e8:db:f2:44:51:dd:fe:29:4a:8e:19: 69:06:8e:3c:6f:d2:2d:ff:02:02:78:71:f9:11:99: 68:f3:97:8e:d3:53:a6:5c:83:1c:16:41:68:bb:2b: e8:d5:94:48:eb:cb:28:6f:df:fc:23:06:cb:f7:b1: f4:03:98:5e:f7:3b:5e:3f:ef:9f:fd:8e:29:5c:52: 04:0f:3a:71:b6:73:59:90:ef:3c:cb:a0:02:3b:6b: 1c:f3:5a:bd:6a:c6:9f:d9:55:37:0b:37:03:bf:95: 86:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:39:38:BA:6D:82:DD:F8:81:FE:19:6D:2D:E1:14:B2:40:4C:04:5D X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Xzk4um2C3fiB_hltLeEUskBMBF0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.224.0/20 Signature Algorithm: sha256WithRSAEncryption 63:69:3a:62:d0:0f:77:be:a0:ac:87:21:72:fb:c8:bf:43:32: 7f:6f:d5:06:13:5d:48:e8:2f:10:ca:dc:d5:25:51:dd:51:7e: 86:2c:af:f3:05:01:90:7e:38:50:7f:39:5b:36:26:c1:79:8f: 09:87:ba:28:c8:03:e4:2d:f5:3d:40:df:6e:8b:87:ed:9c:a2: c7:35:00:07:ef:44:7a:64:ec:76:65:09:b2:e7:dc:45:5e:f4: 1f:32:b2:bf:e5:0f:be:2e:d4:2e:55:ae:cb:ee:d0:68:91:a6: b2:07:89:27:5e:f4:c4:4a:98:54:f8:39:12:ee:70:33:72:88: 3c:e2:c0:ea:e2:03:fb:8e:55:e5:3a:dd:b5:40:da:db:5d:11: 08:ec:91:89:bf:00:95:f5:ac:a5:6d:c5:b3:c2:62:b1:9c:73: bd:97:3a:b0:7d:26:7e:ca:16:9d:15:e7:78:5c:e7:80:a5:8d: 2b:4d:d2:1a:f9:f6:ca:00:b7:99:f2:31:69:f3:a5:ea:a4:0d: e6:7b:65:30:7f:73:b6:86:da:05:ae:de:cb:41:08:33:93:2b: e1:2f:a3:e1:92:26:55:cc:95:6f:41:6f:7d:41:e2:59:aa:d6: eb:bd:d1:af:17:59:5c:1a:3a:a5:ee:b0:40:93:b1:46:9f:4a: 32:90:47:ed -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOqYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3MzVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDVGMzkzOEJBNkQ4MkRE Rjg4MUZFMTk2RDJERTExNEIyNDA0QzA0NUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIuQnD1ep15+uMALEdDSX2CuteYeeofF0giigfd9grv8O8Zkuj mLpa+Vip7i7hn9loUCdPqo/q9gxJk0NanvshBTMNe2m27rHukkAsJj8y3FwdNl0o 9pdPLyNKXoEwOR66i+1pkEgQMqyoNe/pbTwiMAROJj2Kz+MCkORtdPYzJJ7HR8/V XFBKKVTaY9qBULQW8n/OI2nzG4no2/JEUd3+KUqOGWkGjjxv0i3/AgJ4cfkRmWjz l47TU6ZcgxwWQWi7K+jVlEjryyhv3/wjBsv3sfQDmF73O14/75/9jilcUgQPOnG2 c1mQ7zzLoAI7axzzWr1qxp/ZVTcLNwO/lYb/AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUXzk4um2C3fiB/hltLeEUskBMBF0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1h6azR1bTJDM2ZpQl9obHRM ZUVVc2tCTUJGMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR7 w+AwDQYJKoZIhvcNAQELBQADggEBAGNpOmLQD3e+oKyHIXL7yL9DMn9v1QYTXUjo LxDK3NUlUd1RfoYsr/MFAZB+OFB/OVs2JsF5jwmHuijIA+Qt9T1A326Lh+2cosc1 AAfvRHpk7HZlCbLn3EVe9B8ysr/lD74u1C5Vrsvu0GiRprIHiSde9MRKmFT4ORLu cDNyiDziwOriA/uOVeU63bVA2ttdEQjskYm/AJX1rKVtxbPCYrGcc72XOrB9Jn7K Fp0V53hc54CljStN0hr59soAt5nyMWnzpeqkDeZ7ZTB/c7aG2gWu3stBCDOTK+Ev o+GSJlXMlW9Bb31B4lmq1uu90a8XWVwaOqXusECTsUafSjKQR+0= -----END CERTIFICATE-----Generated at Fri Oct 24 04:55:39 2025 by rpki-client