$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aaF7vLTCkIWQwLix8w9sLnwPD9s.roa File: aaF7vLTCkIWQwLix8w9sLnwPD9s.roa (raw, json) Hash identifier: ivnAeQ7OcRRzdz0nMJxO30n59P4hLG/+pJoatOTU7tY= Subject key identifier: 69:A1:7B:BC:B4:C2:90:85:90:C0:B8:B1:F3:0F:6C:2E:7C:0F:0F:DB Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 37F9 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aaF7vLTCkIWQwLix8w9sLnwPD9s.roa Signing time: Fri 22 Aug 2025 08:44:51 +0000 ROA not before: Fri 22 Aug 2025 08:44:51 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9924 IP address blocks: 118.232.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 07:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14329 (0x37f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:44:51 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=69A17BBCB4C2908590C0B8B1F30F6C2E7C0F0FDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:17:ff:0d:b6:98:e4:6a:98:65:a1:94:68:eb: d6:d8:dd:bf:98:49:57:a6:45:c6:80:17:3e:8a:73: 4b:da:8d:10:ba:94:e3:bb:e3:c3:c8:73:d1:44:e5: 23:d6:28:aa:ab:b0:ba:01:6d:94:85:e0:27:70:c3: 70:21:32:fb:55:67:ce:54:7a:ec:b4:10:1c:53:f2: 15:e6:52:82:ce:88:2e:c5:27:d4:6d:e1:b0:cf:35: d0:0f:e3:81:ad:34:89:88:84:c0:0a:57:bf:01:ff: c8:ee:bb:32:cc:c7:eb:97:1b:38:14:8c:ff:a3:95: 41:d1:3d:ff:eb:2b:b0:21:d0:5e:df:35:a6:42:a8: f2:a5:67:80:8e:14:ec:8f:4f:2d:e4:8f:bd:18:fa: 40:fd:d2:19:32:50:93:91:71:a2:89:19:5e:07:14: 7e:d6:df:84:c5:30:8c:87:af:d2:c5:99:ab:3c:b4: f1:fa:f5:70:dd:28:ef:f4:1c:b9:4b:09:07:31:e5: f3:c7:3c:a3:7e:7d:d3:32:5c:10:22:73:fd:20:81: 13:c4:ce:55:d5:80:18:51:5e:5a:25:29:46:6e:f4: 76:de:ee:28:eb:b5:95:5e:39:93:0b:1c:fa:ff:9e: b2:fc:4a:92:a5:65:d4:d9:87:9d:86:5a:24:18:d7: bd:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:A1:7B:BC:B4:C2:90:85:90:C0:B8:B1:F3:0F:6C:2E:7C:0F:0F:DB X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aaF7vLTCkIWQwLix8w9sLnwPD9s.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.0.0/18 Signature Algorithm: sha256WithRSAEncryption 67:ef:6f:43:34:85:8a:60:cd:3d:e3:d2:94:a7:46:e9:be:03: 33:d3:dd:bc:26:5b:e9:85:8f:e6:2d:df:c3:d9:38:c5:24:d3: 0f:ef:43:d0:23:36:e3:64:85:92:2b:82:0a:94:f1:29:88:cd: bc:0e:48:28:a1:cc:97:f8:da:e1:bb:9d:bd:5f:e7:43:42:2b: 6d:b7:ea:ba:11:44:d1:de:9f:b9:c5:e5:af:cb:2a:86:4b:1b: 9e:8a:84:b1:25:f0:b0:30:74:50:0b:de:3a:de:8c:ac:62:bb: 75:6e:98:63:05:e9:8c:ab:90:c4:fd:95:90:1e:78:2c:7b:e8: d6:91:b8:9a:da:2a:21:f6:10:de:9a:ba:1c:e9:d9:b6:67:21: d9:89:51:85:66:69:72:17:33:93:d1:f2:b3:f1:5b:24:c0:20: 23:07:f0:9e:f8:63:85:f6:7b:f4:bc:c8:99:c3:10:47:5d:18: 9e:cc:89:60:21:4e:e8:9c:e5:5d:dd:bd:69:a6:96:1c:3e:a8: c9:a8:8b:5a:36:82:1b:56:84:95:c0:65:87:da:5e:43:e4:44: 17:bf:4b:7d:04:64:9f:dd:e6:87:85:29:60:40:17:63:44:f8: 85:dd:09:71:53:df:f7:24:22:77:91:6f:49:89:98:3b:27:d5: 48:22:c1:6e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICN/kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ0NTFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDY5QTE3QkJDQjRDMjkw ODU5MEMwQjhCMUYzMEY2QzJFN0MwRjBGREIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQChF/8NtpjkaphloZRo69bY3b+YSVemRcaAFz6Kc0vajRC6lOO7 48PIc9FE5SPWKKqrsLoBbZSF4Cdww3AhMvtVZ85Ueuy0EBxT8hXmUoLOiC7FJ9Rt 4bDPNdAP44GtNImIhMAKV78B/8juuzLMx+uXGzgUjP+jlUHRPf/rK7Ah0F7fNaZC qPKlZ4COFOyPTy3kj70Y+kD90hkyUJORcaKJGV4HFH7W34TFMIyHr9LFmas8tPH6 9XDdKO/0HLlLCQcx5fPHPKN+fdMyXBAic/0ggRPEzlXVgBhRXlolKUZu9Hbe7ijr tZVeOZMLHPr/nrL8SpKlZdTZh52GWiQY172TAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUaaF7vLTCkIWQwLix8w9sLnwPD9swHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2FhRjd2TFRDa0lXUXdMaXg4 dzlzTG53UEQ5cy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZ2 6AAwDQYJKoZIhvcNAQELBQADggEBAGfvb0M0hYpgzT3j0pSnRum+AzPT3bwmW+mF j+Yt38PZOMUk0w/vQ9AjNuNkhZIrggqU8SmIzbwOSCihzJf42uG7nb1f50NCK223 6roRRNHen7nF5a/LKoZLG56KhLEl8LAwdFAL3jrejKxiu3VumGMF6YyrkMT9lZAe eCx76NaRuJraKiH2EN6auhzp2bZnIdmJUYVmaXIXM5PR8rPxWyTAICMH8J74Y4X2 e/S8yJnDEEddGJ7MiWAhTuic5V3dvWmmlhw+qMmoi1o2ghtWhJXAZYfaXkPkRBe/ S30EZJ/d5oeFKWBAF2NE+IXdCXFT3/ckIneRb0mJmDsn1UgiwW4= -----END CERTIFICATE-----Generated at Fri Oct 24 04:52:55 2025 by rpki-client