$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Y4dRQ9P1ppINZidxV5NTv4tMVEE.roa File: Y4dRQ9P1ppINZidxV5NTv4tMVEE.roa (raw, json) Hash identifier: UHLaufz7mSgPOZ84rNKpyLy7uQulH39YrJ3W90Z5aq4= Subject key identifier: 63:87:51:43:D3:F5:A6:92:0D:66:27:71:57:93:53:BF:8B:4C:54:41 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3936 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Y4dRQ9P1ppINZidxV5NTv4tMVEE.roa Signing time: Fri 22 Aug 2025 08:46:05 +0000 ROA not before: Fri 22 Aug 2025 08:46:05 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9924 IP address blocks: 118.232.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 07:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14646 (0x3936) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:05 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=63875143D3F5A6920D662771579353BF8B4C5441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0c:b6:fc:f0:40:bd:7a:94:9f:59:74:c6:c2: a5:21:81:23:b4:30:96:93:1f:d6:3a:9c:81:c9:57: 0c:f0:ea:e8:4e:6b:e9:8a:db:0b:5f:67:63:ad:57: 4f:73:1f:a2:e8:22:84:f1:a9:f5:d8:44:15:25:c6: 61:7d:7e:46:8c:e3:96:0e:e5:04:aa:0d:f4:49:fa: e3:bd:15:87:ad:ea:ce:97:98:87:de:9e:b7:20:b7: e2:00:a6:92:c2:6b:c0:d0:1a:d4:1d:30:22:93:c5: 0a:d8:ba:5a:1d:18:33:92:67:c3:82:40:1a:e2:58: 40:b0:e0:56:ae:d2:72:89:8e:43:52:0f:6d:b9:2e: 00:f3:f0:5e:b5:60:b0:40:eb:60:aa:36:47:1c:fe: 5e:c2:cf:d9:22:1e:20:7c:25:d9:7e:56:70:f8:7c: c4:35:f2:a6:ab:e0:c6:76:1a:eb:35:25:9a:c0:80: f7:d1:06:03:b1:4d:7c:20:16:7c:79:da:06:33:ba: 59:33:91:8d:10:06:96:d2:09:da:3c:4d:70:58:d2: 08:8b:9d:5a:31:fd:19:22:06:12:13:6a:3b:cc:91: e9:35:20:c6:87:cb:be:fb:24:03:73:87:66:e9:9b: 48:a6:0b:7e:b0:f1:4a:b5:03:83:c2:3b:81:7e:e7: f4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:87:51:43:D3:F5:A6:92:0D:66:27:71:57:93:53:BF:8B:4C:54:41 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Y4dRQ9P1ppINZidxV5NTv4tMVEE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.128.0/18 Signature Algorithm: sha256WithRSAEncryption 2e:a4:ea:36:f7:40:a1:d1:bc:1e:92:48:16:e6:d1:8f:b9:0d: 43:e2:53:0b:74:82:63:11:98:8d:19:31:42:32:4f:d7:01:89: 4e:46:65:86:6b:d6:a6:9c:14:69:b9:66:e3:a6:cc:d1:69:d8: a1:9e:75:8e:25:89:52:5a:1f:48:7f:9b:30:f9:73:fa:ca:4f: 82:d5:c4:5f:31:c3:a8:59:0b:3e:ad:1b:38:ee:24:0b:46:e9: c3:99:9b:5b:d2:44:74:67:53:52:58:d8:d8:1d:d2:e4:6c:02: 94:d3:ef:a5:3f:39:30:24:fd:56:08:63:12:78:58:35:dc:9b: 8c:1b:7c:44:57:aa:9a:a0:fc:97:a3:8b:1c:59:6d:d1:2b:b3: 02:86:cd:99:9d:4e:ec:f5:6a:9f:82:7e:7f:81:f0:50:72:0f: c1:7e:55:f3:6c:7d:5d:27:ff:96:7b:2e:9c:81:84:09:1e:ee: 9a:36:5d:8c:91:4b:c9:18:d0:1d:f0:d2:99:3b:75:82:c3:35: 34:98:80:a3:5d:43:e3:10:37:e9:7a:b6:8f:03:49:fe:48:4b: b8:74:44:c3:1c:c5:6b:07:9e:a9:95:5d:4f:b6:3d:b4:1e:d2: 1f:c5:6a:c8:3b:98:4c:8c:f3:73:b1:fc:81:b2:f3:c1:7a:fa: 9b:28:35:fd -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOTYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2MDVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDYzODc1MTQzRDNGNUE2 OTIwRDY2Mjc3MTU3OTM1M0JGOEI0QzU0NDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzDLb88EC9epSfWXTGwqUhgSO0MJaTH9Y6nIHJVwzw6uhOa+mK 2wtfZ2OtV09zH6LoIoTxqfXYRBUlxmF9fkaM45YO5QSqDfRJ+uO9FYet6s6XmIfe nrcgt+IAppLCa8DQGtQdMCKTxQrYulodGDOSZ8OCQBriWECw4Fau0nKJjkNSD225 LgDz8F61YLBA62CqNkcc/l7Cz9kiHiB8Jdl+VnD4fMQ18qar4MZ2Gus1JZrAgPfR BgOxTXwgFnx52gYzulkzkY0QBpbSCdo8TXBY0giLnVox/RkiBhITajvMkek1IMaH y777JANzh2bpm0imC36w8Uq1A4PCO4F+5/SfAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUY4dRQ9P1ppINZidxV5NTv4tMVEEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1k0ZFJROVAxcHBJTlppZHhW NU5UdjR0TVZFRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZ2 6IAwDQYJKoZIhvcNAQELBQADggEBAC6k6jb3QKHRvB6SSBbm0Y+5DUPiUwt0gmMR mI0ZMUIyT9cBiU5GZYZr1qacFGm5ZuOmzNFp2KGedY4liVJaH0h/mzD5c/rKT4LV xF8xw6hZCz6tGzjuJAtG6cOZm1vSRHRnU1JY2Ngd0uRsApTT76U/OTAk/VYIYxJ4 WDXcm4wbfERXqpqg/JejixxZbdErswKGzZmdTuz1ap+Cfn+B8FByD8F+VfNsfV0n /5Z7LpyBhAke7po2XYyRS8kY0B3w0pk7dYLDNTSYgKNdQ+MQN+l6to8DSf5IS7h0 RMMcxWsHnqmVXU+2PbQe0h/Fasg7mEyM83Ox/IGy88F6+psoNf0= -----END CERTIFICATE-----Generated at Fri Oct 24 04:55:41 2025 by rpki-client