$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aHUgyWfRNL2nQPKU9Zzw2qbtne8.roa File: aHUgyWfRNL2nQPKU9Zzw2qbtne8.roa (raw, json) Hash identifier: bY0r2fsESxhwT9eSGlZFT7g33+EgKt+63K7IPrHVIBM= Subject key identifier: 68:75:20:C9:67:D1:34:BD:A7:40:F2:94:F5:9C:F0:DA:A6:ED:9D:EF Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 38EE Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aHUgyWfRNL2nQPKU9Zzw2qbtne8.roa Signing time: Fri 22 Aug 2025 08:45:46 +0000 ROA not before: Fri 22 Aug 2025 08:45:46 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.195.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14574 (0x38ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:46 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=687520C967D134BDA740F294F59CF0DAA6ED9DEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c8:81:78:24:29:0d:d1:99:7b:7b:d7:ac:d4: a6:b1:aa:80:83:cd:21:13:fb:e2:55:1a:24:66:64: 8e:f7:87:d3:97:22:c6:06:9e:93:4e:28:6c:d2:79: f4:42:27:7e:da:15:cf:b2:3b:43:90:17:af:9e:d7: 3e:d1:6b:33:fd:dc:a9:da:3b:f4:47:ec:bc:88:4e: eb:00:fd:60:bf:6e:22:32:54:c7:67:8d:38:83:86: b8:8e:a4:31:56:8c:3b:f1:fc:1f:49:21:fc:c8:fd: 61:7f:67:fe:12:b4:d5:0b:0c:50:64:91:cb:5d:19: c8:06:e0:61:39:1e:09:90:05:31:54:e3:53:f3:9b: f0:05:ed:d8:e3:f1:1e:84:a1:b8:ca:38:51:f7:c7: 7f:fe:49:86:79:2f:74:9f:fc:24:f4:f1:7c:dc:df: d2:51:cc:16:0e:f0:2e:39:79:93:bb:84:84:ce:a4: 1a:3a:5d:65:b7:cb:54:5a:c1:77:89:77:f7:3d:e3: c5:60:e9:cd:1e:e9:d2:64:7c:0f:19:d6:bf:c2:87: c0:ef:9d:ba:a0:9a:71:eb:60:d6:03:32:91:b6:0b: 05:86:73:e4:b7:a6:4f:e3:52:15:49:98:81:2e:36: 97:6a:63:e1:13:9b:65:9d:72:15:7c:c1:93:ef:a9: ac:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:75:20:C9:67:D1:34:BD:A7:40:F2:94:F5:9C:F0:DA:A6:ED:9D:EF X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aHUgyWfRNL2nQPKU9Zzw2qbtne8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.179.0/24 Signature Algorithm: sha256WithRSAEncryption af:17:ef:d3:74:91:7f:4d:b9:73:fd:fe:d8:ce:8d:61:d7:2f: 2b:fd:a6:fc:49:4d:16:97:31:79:d8:1e:1d:69:49:db:e5:fa: 00:fa:5c:40:d4:80:ff:0e:e1:7a:78:f9:73:cb:77:c9:50:f6: 9b:8b:94:09:e6:f5:2e:d9:70:3d:65:ab:9b:55:1a:0f:8b:c0: 34:b9:4d:7e:d2:6c:7e:4d:26:f6:18:b7:75:9f:9a:06:5d:5f: af:6c:72:3b:58:60:e3:e6:34:4a:72:c4:a9:82:13:50:37:d2: e5:9d:50:f3:65:d4:47:e6:72:63:8e:31:f1:16:23:1a:6b:7c: f7:e3:28:14:3a:d1:7a:04:80:9f:79:60:6d:54:f7:4c:a7:c9: 9c:f3:0f:d1:9e:63:6b:fb:95:99:e5:c7:97:b7:dc:01:53:4b: c4:89:bf:06:f2:93:d6:81:5e:68:7b:25:29:f1:8b:51:60:1b: 36:9d:45:93:91:9f:b6:94:1c:d7:68:6a:10:43:2c:b7:8d:97: 48:80:f2:47:98:6f:60:f6:2d:41:1f:c3:e4:b8:3a:ce:80:71: 1b:6a:8a:8e:68:18:39:22:8f:79:8d:fa:b1:4e:e7:12:d6:b8: 68:1f:9b:25:12:81:c9:6d:b7:bd:60:6e:04:36:f0:12:84:69: 4b:7d:94:64 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOO4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1NDZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDY4NzUyMEM5NjdEMTM0 QkRBNzQwRjI5NEY1OUNGMERBQTZFRDlERUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCgyIF4JCkN0Zl7e9es1KaxqoCDzSET++JVGiRmZI73h9OXIsYG npNOKGzSefRCJ37aFc+yO0OQF6+e1z7RazP93KnaO/RH7LyITusA/WC/biIyVMdn jTiDhriOpDFWjDvx/B9JIfzI/WF/Z/4StNULDFBkkctdGcgG4GE5HgmQBTFU41Pz m/AF7djj8R6EobjKOFH3x3/+SYZ5L3Sf/CT08Xzc39JRzBYO8C45eZO7hITOpBo6 XWW3y1RawXeJd/c948Vg6c0e6dJkfA8Z1r/Ch8DvnbqgmnHrYNYDMpG2CwWGc+S3 pk/jUhVJmIEuNpdqY+ETm2WdchV8wZPvqay/AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUaHUgyWfRNL2nQPKU9Zzw2qbtne8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2FIVWd5V2ZSTkwyblFQS1U5 Wnp3MnFidG5lOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7 w7MwDQYJKoZIhvcNAQELBQADggEBAK8X79N0kX9NuXP9/tjOjWHXLyv9pvxJTRaX MXnYHh1pSdvl+gD6XEDUgP8O4Xp4+XPLd8lQ9puLlAnm9S7ZcD1lq5tVGg+LwDS5 TX7SbH5NJvYYt3WfmgZdX69scjtYYOPmNEpyxKmCE1A30uWdUPNl1EfmcmOOMfEW IxprfPfjKBQ60XoEgJ95YG1U90ynyZzzD9GeY2v7lZnlx5e33AFTS8SJvwbyk9aB Xmh7JSnxi1FgGzadRZORn7aUHNdoahBDLLeNl0iA8keYb2D2LUEfw+S4Os6AcRtq io5oGDkij3mN+rFO5xLWuGgfmyUSgcltt71gbgQ28BKEaUt9lGQ= -----END CERTIFICATE-----Generated at Fri Oct 24 19:21:48 2025 by rpki-client