$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aR-XXvYt5nILkRGFHqmcPN90GD0.roa File: aR-XXvYt5nILkRGFHqmcPN90GD0.roa (raw, json) Hash identifier: +lZO909d8lgnw9iqBq71zjUJrEREIpwhbYCz9cq3hXk= Subject key identifier: 69:1F:97:5E:F6:2D:E6:72:0B:91:11:85:1E:A9:9C:3C:DF:74:18:3D Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 39BF Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aR-XXvYt5nILkRGFHqmcPN90GD0.roa Signing time: Fri 22 Aug 2025 08:46:36 +0000 ROA not before: Fri 22 Aug 2025 08:46:36 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 106.1.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14783 (0x39bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:36 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=691F975EF62DE6720B9111851EA99C3CDF74183D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5e:93:28:6e:de:b1:53:44:37:b7:1d:a3:fe: 60:a4:8d:70:00:4c:e9:dd:97:5c:e4:a3:fc:a0:6c: de:c2:30:94:c1:e4:83:d6:37:94:5f:5d:4d:34:a5: df:31:4e:39:52:cb:eb:dc:7b:68:fe:d1:b9:bc:cd: f6:87:46:45:33:d5:38:cb:19:28:c2:0a:a1:8d:38: e9:51:f8:61:5a:e3:11:f5:93:10:cb:1c:9e:5b:1b: b4:b0:90:c2:cd:a3:d1:1f:58:65:fb:99:68:a3:94: b0:f5:f0:db:12:6a:1b:85:dd:f8:11:53:cb:88:6c: cb:9a:fc:5b:0a:87:c5:3f:41:8a:20:a5:95:0e:61: bc:53:1f:c3:a7:85:49:31:90:54:a3:c4:bb:91:36: 92:0e:c0:e3:1e:6b:d5:ae:c5:c2:56:cf:a2:e0:5d: 72:2a:05:26:b3:78:b3:36:6c:46:09:aa:d5:fe:27: d4:fa:2e:50:1e:df:83:90:91:27:b6:91:fa:b4:36: fa:7d:56:1a:09:d8:35:f4:a8:a4:35:e3:bb:09:52: 2e:c2:3f:f0:72:d2:52:9c:d9:7e:b5:ab:37:09:e9: 44:db:65:01:43:db:d4:e1:8c:ef:d3:ee:54:5b:1a: 9b:59:bb:7d:18:e5:00:81:ff:8d:45:72:bf:e9:94: 5c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:1F:97:5E:F6:2D:E6:72:0B:91:11:85:1E:A9:9C:3C:DF:74:18:3D X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aR-XXvYt5nILkRGFHqmcPN90GD0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.212.0/22 Signature Algorithm: sha256WithRSAEncryption b9:16:61:78:41:49:e6:be:1b:50:1e:be:b3:b8:e7:09:17:8a: da:75:0c:1f:e8:1a:c9:99:68:0e:9d:5d:f8:11:fc:2b:d2:1b: 12:89:91:97:6d:73:0a:be:c5:56:13:9d:d0:87:0e:f9:e0:1b: d2:40:dc:72:a6:ce:7a:79:8d:92:f2:f2:59:9d:07:77:83:95: 4f:1f:b9:8b:b3:c2:f6:f7:2d:c4:50:48:cc:e2:59:04:db:e2: 14:57:88:16:a3:57:f8:00:21:55:da:58:c4:af:8e:fd:37:d2: 85:a8:b8:d6:65:a8:da:b4:12:19:ec:b6:07:8e:79:68:51:e6: 2c:ba:cf:66:fa:dd:6a:5b:ad:68:8b:38:11:94:7f:d9:05:a8: eb:80:8a:1e:8a:47:1c:da:4a:af:40:d8:61:96:38:df:9f:9a: 26:b2:bc:34:dd:40:f3:e3:5b:05:da:8e:1d:39:8f:f3:8e:c0: 70:4b:92:81:3c:9e:82:29:2b:0d:ab:47:16:cd:38:d3:a0:10: dd:ac:0f:44:4a:92:c5:81:a0:66:1c:ba:f1:6e:db:d8:d6:b0: 1e:68:2b:7a:a0:c7:ad:20:d5:8a:58:fc:0d:ba:b3:d9:dd:12: 64:df:9a:4e:a1:4d:36:a2:f6:48:af:cc:70:5a:e2:8a:77:07: 50:f4:56:a7 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOb8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2MzZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDY5MUY5NzVFRjYyREU2 NzIwQjkxMTE4NTFFQTk5QzNDREY3NDE4M0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+XpMobt6xU0Q3tx2j/mCkjXAATOndl1zko/ygbN7CMJTB5IPW N5RfXU00pd8xTjlSy+vce2j+0bm8zfaHRkUz1TjLGSjCCqGNOOlR+GFa4xH1kxDL HJ5bG7SwkMLNo9EfWGX7mWijlLD18NsSahuF3fgRU8uIbMua/FsKh8U/QYogpZUO YbxTH8OnhUkxkFSjxLuRNpIOwOMea9WuxcJWz6LgXXIqBSazeLM2bEYJqtX+J9T6 LlAe34OQkSe2kfq0Nvp9VhoJ2DX0qKQ147sJUi7CP/By0lKc2X61qzcJ6UTbZQFD 29ThjO/T7lRbGptZu30Y5QCB/41Fcr/plFxXAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUaR+XXvYt5nILkRGFHqmcPN90GD0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2FSLVhYdll0NW5JTGtSR0ZI cW1jUE45MEdEMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq AdQwDQYJKoZIhvcNAQELBQADggEBALkWYXhBSea+G1AevrO45wkXitp1DB/oGsmZ aA6dXfgR/CvSGxKJkZdtcwq+xVYTndCHDvngG9JA3HKmznp5jZLy8lmdB3eDlU8f uYuzwvb3LcRQSMziWQTb4hRXiBajV/gAIVXaWMSvjv030oWouNZlqNq0EhnstgeO eWhR5iy6z2b63WpbrWiLOBGUf9kFqOuAih6KRxzaSq9A2GGWON+fmiayvDTdQPPj WwXajh05j/OOwHBLkoE8noIpKw2rRxbNONOgEN2sD0RKksWBoGYcuvFu29jWsB5o K3qgx60g1YpY/A26s9ndEmTfmk6hTTai9kivzHBa4op3B1D0Vqc= -----END CERTIFICATE-----Generated at Fri Oct 24 19:27:51 2025 by rpki-client