$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aAquOmn0lCwmx3cc_Seu8KCVkEQ.roa File: aAquOmn0lCwmx3cc_Seu8KCVkEQ.roa (raw, json) Hash identifier: V+Xea/Z+/cCi8HHFVOLox30+JPrR7kNRra4Kr2EqiRs= Subject key identifier: 68:0A:AE:3A:69:F4:94:2C:26:C7:77:1C:FD:27:AE:F0:A0:95:90:44 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 39CB Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aAquOmn0lCwmx3cc_Seu8KCVkEQ.roa Signing time: Fri 22 Aug 2025 08:46:41 +0000 ROA not before: Fri 22 Aug 2025 08:46:41 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.193.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14795 (0x39cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:41 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=680AAE3A69F4942C26C7771CFD27AEF0A0959044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:fe:9d:c2:32:86:f4:a8:29:88:7e:78:06:88: d1:e3:1f:b4:d6:78:b7:e3:17:65:83:86:00:0d:38: a7:f2:95:80:7a:75:46:78:ec:93:45:36:12:94:61: 81:ff:07:fd:7a:17:c7:2d:d8:0d:05:e4:1b:4b:61: ac:c6:cd:83:b4:96:4e:0c:b2:07:df:b9:dd:af:13: 2e:92:be:da:39:45:3c:82:2b:60:c2:d4:43:f3:f4: d4:eb:93:35:65:a7:bb:4e:36:ae:5b:97:96:ed:ed: ab:10:30:83:2f:67:70:0d:36:1a:ce:d6:cd:40:cd: 00:fc:5d:4a:f7:24:60:8d:08:f6:68:8b:7a:18:ad: 80:bc:e0:d0:ba:c6:ed:b0:b1:86:58:9c:76:60:fb: 2c:f3:15:6e:eb:bf:05:9f:5f:b8:b8:80:6e:a2:72: f4:a7:f2:eb:f4:02:d6:5a:93:46:03:51:63:12:e7: af:09:cc:ef:c4:cb:ee:ab:5f:2d:44:4f:41:7b:2c: f2:f4:6e:e2:b2:c1:67:d3:33:5b:ac:65:7b:ff:24: 87:2c:50:3e:f7:51:6a:85:df:3d:57:bd:05:e8:6f: c2:ad:48:92:d7:8c:4a:5f:9c:09:dc:2c:f1:78:e3: 6f:6a:24:dc:3e:80:eb:b6:0f:50:ab:8b:0c:0b:ae: 3e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:0A:AE:3A:69:F4:94:2C:26:C7:77:1C:FD:27:AE:F0:A0:95:90:44 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aAquOmn0lCwmx3cc_Seu8KCVkEQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.32.0/21 Signature Algorithm: sha256WithRSAEncryption 2b:1e:2a:55:69:5d:5c:5a:89:25:df:6c:38:d0:a6:f5:75:77: a4:0a:a2:94:d5:84:cb:8b:54:c3:bb:39:fe:90:d3:57:9e:a7: f0:2b:0e:85:51:1c:7e:7e:30:2a:76:94:74:2c:62:03:69:49: 34:bf:71:2e:b9:f1:bb:ea:c0:63:ce:e6:11:9c:87:5b:7a:29: 4d:c3:b1:30:88:f3:9c:6b:02:1a:b3:68:53:bd:a0:73:f6:d9: bf:6b:a8:54:4e:a9:4d:87:e2:93:78:55:62:49:a5:6a:8b:73: dc:21:e7:20:bd:01:c1:9f:59:a1:74:49:41:f6:2a:b1:d9:54: 57:75:ef:97:ee:e2:16:61:85:b4:75:62:1b:1f:02:bb:e6:0d: 69:c7:2e:23:39:11:d6:7b:8a:ff:c6:68:f2:d4:7d:ed:34:43: 11:85:f7:d2:ff:aa:4c:62:f0:9b:45:64:ff:53:09:20:41:c3: ac:06:00:ad:59:fe:e5:47:bd:1c:8c:d5:9f:b4:95:6e:33:4f: ca:f6:fe:7b:5d:a3:43:d7:52:44:a0:1f:d2:6a:45:a8:47:d9: 05:a4:b4:10:90:56:2d:1e:3e:40:78:7f:55:bb:78:d8:47:08: 74:b7:44:55:03:d1:ca:ce:d4:2e:79:41:35:6e:ee:1e:0a:86: b2:7e:cd:a1 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOcswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2NDFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDY4MEFBRTNBNjlGNDk0 MkMyNkM3NzcxQ0ZEMjdBRUYwQTA5NTkwNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDa/p3CMob0qCmIfngGiNHjH7TWeLfjF2WDhgANOKfylYB6dUZ4 7JNFNhKUYYH/B/16F8ct2A0F5BtLYazGzYO0lk4Msgffud2vEy6Svto5RTyCK2DC 1EPz9NTrkzVlp7tONq5bl5bt7asQMIMvZ3ANNhrO1s1AzQD8XUr3JGCNCPZoi3oY rYC84NC6xu2wsYZYnHZg+yzzFW7rvwWfX7i4gG6icvSn8uv0AtZak0YDUWMS568J zO/Ey+6rXy1ET0F7LPL0buKywWfTM1usZXv/JIcsUD73UWqF3z1XvQXob8KtSJLX jEpfnAncLPF4429qJNw+gOu2D1CriwwLrj4FAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUaAquOmn0lCwmx3cc/Seu8KCVkEQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2FBcXVPbW4wbEN3bXgzY2Nf U2V1OEtDVmtFUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wSAwDQYJKoZIhvcNAQELBQADggEBACseKlVpXVxaiSXfbDjQpvV1d6QKopTVhMuL VMO7Of6Q01eep/ArDoVRHH5+MCp2lHQsYgNpSTS/cS658bvqwGPO5hGch1t6KU3D sTCI85xrAhqzaFO9oHP22b9rqFROqU2H4pN4VWJJpWqLc9wh5yC9AcGfWaF0SUH2 KrHZVFd175fu4hZhhbR1YhsfArvmDWnHLiM5EdZ7iv/GaPLUfe00QxGF99L/qkxi 8JtFZP9TCSBBw6wGAK1Z/uVHvRyM1Z+0lW4zT8r2/ntdo0PXUkSgH9JqRahH2QWk tBCQVi0ePkB4f1W7eNhHCHS3RFUD0crO1C55QTVu7h4KhrJ+zaE= -----END CERTIFICATE-----Generated at Fri Oct 24 19:24:34 2025 by rpki-client