$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ym6euyJkUHvsULXyxk4KGm5POPs.roa File: Ym6euyJkUHvsULXyxk4KGm5POPs.roa (raw, json) Hash identifier: nkdBnYARmujT/hyGmzjywZy7QPPzMk8ou/VYoXcqBO4= Subject key identifier: 62:6E:9E:BB:22:64:50:7B:EC:50:B5:F2:C6:4E:0A:1A:6E:4F:38:FB Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3983 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ym6euyJkUHvsULXyxk4KGm5POPs.roa Signing time: Fri 22 Aug 2025 08:46:22 +0000 ROA not before: Fri 22 Aug 2025 08:46:22 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.195.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14723 (0x3983) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:22 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=626E9EBB2264507BEC50B5F2C64E0A1A6E4F38FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6a:69:5e:66:80:a3:7c:da:82:99:f7:b5:99: dd:84:83:ec:0a:5c:57:fd:39:cb:59:26:d8:d5:a0: 8e:58:1e:33:c4:02:e5:13:e3:3f:ae:3d:9e:77:f0: 93:16:c9:3d:2f:64:1c:f2:a8:c1:5a:da:8d:ac:ed: d7:63:0e:33:45:d2:d0:8d:20:8c:67:1d:51:e0:4d: 85:3e:93:58:4e:82:b6:31:74:cd:25:59:7b:7b:79: 18:4b:21:0c:09:a7:58:e3:56:f9:f6:8e:55:93:11: 72:11:99:45:9c:6b:3b:42:45:20:ac:a6:15:b3:58: aa:83:38:45:89:eb:ab:8a:1c:f1:26:98:ec:ed:7a: be:f7:b2:c8:06:56:51:12:72:c4:2a:10:3b:0e:99: 00:dd:ba:33:05:fd:9e:34:e8:f5:d0:82:35:f4:09: 84:60:de:05:df:ea:a2:3a:b2:f2:4c:b7:4e:fa:35: 2c:ef:ea:36:0f:7e:a6:f7:ca:af:88:04:6c:af:75: d8:0e:60:e4:62:13:81:dd:87:7e:c4:c9:67:05:d7: de:92:ee:36:a8:12:2a:52:9e:42:c0:dd:24:30:ac: bc:61:04:f5:57:4b:e3:f8:0a:42:8d:6a:e9:b4:51: 6e:32:90:2c:84:36:c1:ee:6f:f3:6c:87:5a:6e:34: 80:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:6E:9E:BB:22:64:50:7B:EC:50:B5:F2:C6:4E:0A:1A:6E:4F:38:FB X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ym6euyJkUHvsULXyxk4KGm5POPs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.136.0/21 Signature Algorithm: sha256WithRSAEncryption 0b:22:45:5b:19:42:73:a6:bf:84:31:43:d0:25:60:55:17:5d: 14:34:ac:14:64:77:2a:3f:44:e6:9c:7f:45:bd:15:b9:1e:6b: 87:84:c2:28:84:97:2c:3d:b9:ba:90:63:9f:6e:ec:a3:d5:1a: 8d:20:1d:ee:7a:90:93:3f:bc:05:89:cd:16:bc:3a:39:9e:67: 96:84:5a:8f:cb:dc:86:d3:87:10:d8:56:7c:02:a3:59:27:28: cf:5d:c0:eb:0c:2e:57:12:c4:5f:dc:a2:57:c7:26:49:13:0d: ad:77:6d:88:a8:b2:82:ee:f4:91:83:48:18:c8:0c:35:f6:d3: 7f:8c:99:b4:39:9a:94:3a:63:c4:c2:83:d9:6f:dc:73:b9:35: 5b:08:9f:56:29:a7:95:1e:5a:74:8f:da:3a:1c:25:14:69:e1: 39:55:d5:e2:54:67:27:97:14:07:de:d5:32:74:1f:26:b0:2d: f0:fe:7b:43:21:19:06:d2:d1:f9:bd:db:a6:ae:ad:77:3a:1b: b2:23:a7:2e:0d:2c:74:38:97:cd:58:b4:c3:51:45:25:18:8c: 97:1e:15:29:49:24:93:48:ee:a4:1f:75:45:a3:eb:bf:ea:11: eb:ce:d2:e8:8e:91:69:49:53:e7:6f:ba:12:04:dd:d0:f9:42: ed:78:16:94 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOYMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2MjJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDYyNkU5RUJCMjI2NDUw N0JFQzUwQjVGMkM2NEUwQTFBNkU0RjM4RkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8amleZoCjfNqCmfe1md2Eg+wKXFf9OctZJtjVoI5YHjPEAuUT 4z+uPZ538JMWyT0vZBzyqMFa2o2s7ddjDjNF0tCNIIxnHVHgTYU+k1hOgrYxdM0l WXt7eRhLIQwJp1jjVvn2jlWTEXIRmUWcaztCRSCsphWzWKqDOEWJ66uKHPEmmOzt er73ssgGVlEScsQqEDsOmQDdujMF/Z406PXQgjX0CYRg3gXf6qI6svJMt076NSzv 6jYPfqb3yq+IBGyvddgOYORiE4Hdh37EyWcF196S7jaoEipSnkLA3SQwrLxhBPVX S+P4CkKNaum0UW4ykCyENsHub/Nsh1puNIDRAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUYm6euyJkUHvsULXyxk4KGm5POPswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1ltNmV1eUprVUh2c1VMWHl4 azRLR201UE9Qcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 w4gwDQYJKoZIhvcNAQELBQADggEBAAsiRVsZQnOmv4QxQ9AlYFUXXRQ0rBRkdyo/ ROacf0W9Fbkea4eEwiiElyw9ubqQY59u7KPVGo0gHe56kJM/vAWJzRa8OjmeZ5aE Wo/L3IbThxDYVnwCo1knKM9dwOsMLlcSxF/colfHJkkTDa13bYiosoLu9JGDSBjI DDX203+MmbQ5mpQ6Y8TCg9lv3HO5NVsIn1Ypp5UeWnSP2jocJRRp4TlV1eJUZyeX FAfe1TJ0HyawLfD+e0MhGQbS0fm926aurXc6G7Ijpy4NLHQ4l81YtMNRRSUYjJce FSlJJJNI7qQfdUWj67/qEevO0uiOkWlJU+dvuhIE3dD5Qu14FpQ= -----END CERTIFICATE-----Generated at Fri Oct 24 19:27:42 2025 by rpki-client