$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZWYomHMwxIIyiobqKfMUz_F0M7A.roa File: ZWYomHMwxIIyiobqKfMUz_F0M7A.roa (raw, json) Hash identifier: VmXZG4dxe/yMjEBsbruaeY7RFArkeBNYDJJs9tSSnUI= Subject key identifier: 65:66:28:98:73:30:C4:82:32:8A:86:EA:29:F3:14:CF:F1:74:33:B0 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3933 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZWYomHMwxIIyiobqKfMUz_F0M7A.roa Signing time: Fri 22 Aug 2025 08:46:04 +0000 ROA not before: Fri 22 Aug 2025 08:46:04 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.195.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14643 (0x3933) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:04 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=656628987330C482328A86EA29F314CFF17433B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:69:89:25:64:24:fa:c6:b1:48:ac:c2:72:ef: ff:56:3e:6f:71:b0:16:5b:03:f9:85:bf:41:45:7f: 2c:f8:69:c0:1c:fd:a7:bd:56:ef:94:44:77:f8:1b: 12:b0:8c:1e:ba:ed:50:9f:c4:bb:d5:ca:9f:9a:5c: e7:7f:90:08:7f:89:c5:12:e9:b3:9e:e5:b8:1f:d5: 8b:4f:ac:88:3d:9d:c0:0c:ae:58:6e:6d:ab:52:ba: 09:22:d2:26:0b:46:4b:7f:bb:36:a4:36:45:5d:2c: ad:71:31:f6:9f:76:f0:70:7f:26:86:2e:09:2b:ea: 4f:82:04:0c:21:b4:a1:36:95:ee:4c:29:b0:05:7d: 42:ae:45:e0:4c:c1:0b:df:ec:17:70:2a:e3:c4:a7: bc:d6:e3:44:1f:36:54:91:0a:61:8f:ea:cd:69:af: 6d:ac:49:dd:a5:03:a0:c6:f0:d1:45:14:ee:98:17: 93:8a:17:7a:ab:81:27:1f:87:49:ad:5c:44:a4:b6: 1b:b2:56:65:0d:c6:d6:9a:88:a0:6b:83:87:8c:6e: 25:a2:3a:9c:94:42:22:8a:9f:1d:95:e5:16:9d:1e: 9b:38:8d:ca:56:d0:5e:bf:01:a2:6a:35:94:2a:9b: f2:b4:34:73:df:f3:00:99:5b:01:22:58:fe:58:b6: cd:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:66:28:98:73:30:C4:82:32:8A:86:EA:29:F3:14:CF:F1:74:33:B0 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZWYomHMwxIIyiobqKfMUz_F0M7A.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.132.0/22 Signature Algorithm: sha256WithRSAEncryption 17:fa:e7:7b:b4:31:22:ff:d5:67:30:a0:7c:c0:ce:c2:5a:e0: 4e:5e:b2:ca:48:2f:aa:45:7e:46:cf:4c:8e:e0:38:57:a7:f0: 30:d5:3e:7c:45:b8:60:d3:9c:83:2e:40:60:66:c9:91:da:e4: 96:83:55:3f:02:42:79:b9:f6:0a:f3:f1:d7:c1:eb:be:64:b0: 43:a5:2d:3f:aa:6a:90:85:9d:08:18:39:6e:30:13:57:dd:79: 7b:2c:93:6b:74:a9:e1:52:02:a6:1a:4e:71:57:a2:0a:c9:e9: d4:c6:b8:ad:ff:69:b6:20:9a:b7:18:5a:c4:95:b6:d4:5a:c7: d9:f9:b3:e1:01:d7:7e:29:dd:b5:a7:36:7f:3f:b4:18:49:0a: ef:67:b9:97:58:22:de:b6:bb:25:34:e7:29:6b:8f:a1:83:ac: 58:b1:e3:31:ba:25:01:b8:47:cc:e9:bd:91:0c:e5:8d:b2:8e: 31:d1:28:bf:e7:15:c8:12:ba:57:b1:b1:de:40:b3:9d:61:45: 10:c9:aa:ab:b1:43:52:81:4c:38:25:fb:c7:2a:07:72:b2:1f: c6:de:22:5f:22:10:3a:ec:41:b8:5e:c6:6d:3b:96:bb:5a:12: 6f:55:d2:58:e9:fb:ac:9e:c9:39:5d:24:16:68:9c:5f:b6:cb: 89:5c:23:09 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOTMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2MDRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDY1NjYyODk4NzMzMEM0 ODIzMjhBODZFQTI5RjMxNENGRjE3NDMzQjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDaYklZCT6xrFIrMJy7/9WPm9xsBZbA/mFv0FFfyz4acAc/ae9 Vu+URHf4GxKwjB667VCfxLvVyp+aXOd/kAh/icUS6bOe5bgf1YtPrIg9ncAMrlhu batSugki0iYLRkt/uzakNkVdLK1xMfafdvBwfyaGLgkr6k+CBAwhtKE2le5MKbAF fUKuReBMwQvf7BdwKuPEp7zW40QfNlSRCmGP6s1pr22sSd2lA6DG8NFFFO6YF5OK F3qrgScfh0mtXESkthuyVmUNxtaaiKBrg4eMbiWiOpyUQiKKnx2V5RadHps4jcpW 0F6/AaJqNZQqm/K0NHPf8wCZWwEiWP5Yts35AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUZWYomHMwxIIyiobqKfMUz/F0M7AwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1pXWW9tSE13eElJeWlvYnFL Zk1Vel9GME03QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 w4QwDQYJKoZIhvcNAQELBQADggEBABf653u0MSL/1WcwoHzAzsJa4E5esspIL6pF fkbPTI7gOFen8DDVPnxFuGDTnIMuQGBmyZHa5JaDVT8CQnm59grz8dfB675ksEOl LT+qapCFnQgYOW4wE1fdeXssk2t0qeFSAqYaTnFXogrJ6dTGuK3/abYgmrcYWsSV ttRax9n5s+EB134p3bWnNn8/tBhJCu9nuZdYIt62uyU05ylrj6GDrFix4zG6JQG4 R8zpvZEM5Y2yjjHRKL/nFcgSulexsd5As51hRRDJqquxQ1KBTDgl+8cqB3KyH8be Il8iEDrsQbhexm07lrtaEm9V0ljp+6yeyTldJBZonF+2y4lcIwk= -----END CERTIFICATE-----Generated at Fri Oct 24 19:25:07 2025 by rpki-client