$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YQdYqZAUuqtDKwY5i1EmR4uX8qw.roa File: YQdYqZAUuqtDKwY5i1EmR4uX8qw.roa (raw, json) Hash identifier: 0AbPovL7c9AAISFGKmy0+7bumohhs++mzOdTPWh5LBY= Subject key identifier: 61:07:58:A9:90:14:BA:AB:43:2B:06:39:8B:51:26:47:8B:97:F2:AC Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 39C0 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YQdYqZAUuqtDKwY5i1EmR4uX8qw.roa Signing time: Fri 22 Aug 2025 08:46:36 +0000 ROA not before: Fri 22 Aug 2025 08:46:36 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 45.64.28.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14784 (0x39c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:36 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=610758A99014BAAB432B06398B5126478B97F2AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e0:49:b0:8b:97:0e:4a:a1:b0:f3:5b:c7:ed: 4a:11:ba:c0:54:07:18:34:49:2a:88:54:7e:79:a9: a9:3d:f7:77:bf:f1:7d:83:94:af:88:bc:6d:4f:04: 2c:9b:d1:24:83:2d:13:c4:49:e9:0c:4c:d8:13:5c: d6:b5:b4:27:4a:c9:7f:16:82:15:81:dc:96:1b:fa: 92:31:61:ce:82:1c:7f:8d:a2:5c:23:2a:06:19:6e: 8e:e2:9e:67:cd:cc:b3:a0:20:eb:e3:5d:69:93:9a: 18:cf:3b:e3:9f:a7:1e:bb:44:f1:18:c0:94:eb:de: 8e:49:f1:e4:59:51:30:e5:d5:b9:da:8f:58:3a:19: 09:1e:8d:19:36:11:4f:92:d0:5e:47:87:e6:f8:d8: c4:09:75:86:a8:db:c9:d1:fb:4a:54:e6:5a:93:01: b3:7a:04:74:7c:7c:03:fd:ec:c0:42:e9:de:52:f6: 8a:44:cf:38:79:c0:d2:f6:49:b7:bd:e3:38:5b:22: ca:35:a5:dd:61:4b:2e:51:c6:e4:30:89:a6:62:10: 4b:27:63:45:f2:cf:74:6f:38:9c:9d:02:d1:d9:d5: 8c:06:c3:39:34:b0:44:1f:dd:d5:3b:cf:1e:37:27: 3a:fc:b8:28:aa:e1:a2:9b:1f:4b:e4:14:ee:0b:fb: 36:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:07:58:A9:90:14:BA:AB:43:2B:06:39:8B:51:26:47:8B:97:F2:AC X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YQdYqZAUuqtDKwY5i1EmR4uX8qw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.64.28.0/22 Signature Algorithm: sha256WithRSAEncryption 33:01:ed:49:66:e0:75:5c:1d:d2:78:8e:57:cf:5f:69:c2:76: 4e:9f:9d:e7:ae:8c:58:fd:2d:43:c8:86:56:9e:f5:15:1a:a4: 07:94:93:03:08:38:aa:80:af:08:a1:e4:45:0f:df:34:20:36: b6:10:63:a5:09:cf:a7:9b:23:80:82:6e:60:01:92:67:23:ca: 84:80:22:a6:40:80:d7:2a:ac:af:fe:f2:4a:77:1f:6f:49:7e: c6:d0:ed:72:ed:a1:77:f5:d8:94:16:4a:80:f2:e4:02:b3:f0: ae:b9:00:b8:04:c6:f2:06:4f:a6:0d:4b:b0:93:74:ed:92:e2: 65:3b:3c:79:fd:f9:45:6b:f9:a3:d8:c6:24:e9:de:be:58:af: be:59:6d:e5:5e:00:3e:93:b7:ad:76:f0:7e:9a:8d:62:fa:92: 9e:2b:0d:58:18:b9:e6:46:38:73:f3:c2:9a:9f:e1:71:75:ee: 05:24:5d:ed:13:f3:18:88:71:ac:a6:d2:1f:ef:c8:da:43:f9: 43:c2:01:c9:c6:d8:e4:e6:19:ab:9b:4c:34:5c:e9:88:bb:33: ad:3f:4b:05:f0:7c:02:fa:06:e7:da:27:a6:90:88:35:4d:34: 1c:da:67:7d:12:d2:e8:f9:75:5d:d1:9e:05:be:0a:64:4f:86: 17:21:fe:c9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOcAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2MzZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDYxMDc1OEE5OTAxNEJB QUI0MzJCMDYzOThCNTEyNjQ3OEI5N0YyQUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJ4Emwi5cOSqGw81vH7UoRusBUBxg0SSqIVH55qak993e/8X2D lK+IvG1PBCyb0SSDLRPESekMTNgTXNa1tCdKyX8WghWB3JYb+pIxYc6CHH+Nolwj KgYZbo7inmfNzLOgIOvjXWmTmhjPO+Ofpx67RPEYwJTr3o5J8eRZUTDl1bnaj1g6 GQkejRk2EU+S0F5Hh+b42MQJdYao28nR+0pU5lqTAbN6BHR8fAP97MBC6d5S9opE zzh5wNL2Sbe94zhbIso1pd1hSy5RxuQwiaZiEEsnY0Xyz3RvOJydAtHZ1YwGwzk0 sEQf3dU7zx43Jzr8uCiq4aKbH0vkFO4L+zY9AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUYQdYqZAUuqtDKwY5i1EmR4uX8qwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1lRZFlxWkFVdXF0REt3WTVp MUVtUjR1WDhxdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIt QBwwDQYJKoZIhvcNAQELBQADggEBADMB7Ulm4HVcHdJ4jlfPX2nCdk6fneeujFj9 LUPIhlae9RUapAeUkwMIOKqArwih5EUP3zQgNrYQY6UJz6ebI4CCbmABkmcjyoSA IqZAgNcqrK/+8kp3H29JfsbQ7XLtoXf12JQWSoDy5AKz8K65ALgExvIGT6YNS7CT dO2S4mU7PHn9+UVr+aPYxiTp3r5Yr75ZbeVeAD6Tt6128H6ajWL6kp4rDVgYueZG OHPzwpqf4XF17gUkXe0T8xiIcaym0h/vyNpD+UPCAcnG2OTmGaubTDRc6Yi7M60/ SwXwfAL6BufaJ6aQiDVNNBzaZ30S0uj5dV3RngW+CmRPhhch/sk= -----END CERTIFICATE-----Generated at Fri Oct 24 19:25:00 2025 by rpki-client