$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/anoQ5pjLg9B9AljG20yqaPLg1fg.roa File: anoQ5pjLg9B9AljG20yqaPLg1fg.roa (raw, json) Hash identifier: 9E+dYhxH4yMrxIFKbELK9apqg4zk+Xs0HtzIuYVY3Sw= Subject key identifier: 6A:7A:10:E6:98:CB:83:D0:7D:02:58:C6:DB:4C:AA:68:F2:E0:D5:F8 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 39A5 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/anoQ5pjLg9B9AljG20yqaPLg1fg.roa Signing time: Fri 22 Aug 2025 08:46:30 +0000 ROA not before: Fri 22 Aug 2025 08:46:30 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.195.237.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14757 (0x39a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:30 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=6A7A10E698CB83D07D0258C6DB4CAA68F2E0D5F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ad:be:47:25:86:29:47:17:8e:01:40:fe:c9: c0:77:21:be:3f:8d:92:20:6c:bf:c8:e9:65:85:13: c3:6e:93:cb:8e:d6:d5:e8:18:59:61:57:03:2c:ef: 39:2d:93:33:08:d9:53:e9:80:5c:23:56:42:f1:81: 3e:ba:54:1c:73:93:14:dc:11:e1:53:a0:28:5f:b0: 68:d4:fd:3f:eb:ad:08:b2:b8:49:ec:cb:a1:9b:fc: f5:20:64:bb:32:da:63:12:55:29:e1:99:dd:79:80: ab:2d:5d:9b:2d:2a:56:82:4e:5c:eb:04:f2:44:54: 2b:6f:d1:8e:db:02:0b:ea:82:ae:68:24:20:ce:6c: 5c:72:f8:46:f7:bb:97:64:82:4f:73:01:b5:66:de: 2b:09:25:aa:4c:ea:39:81:da:09:7a:4c:06:a3:f1: ec:e9:40:d3:b5:39:f1:62:7d:1a:8f:fa:5f:43:57: 53:94:d9:2f:41:df:04:29:54:b4:fb:02:e9:a7:c3: b0:57:5d:b3:36:c3:11:ce:81:04:52:d4:9a:51:d4: 4a:86:06:d7:27:0f:fa:0e:a0:69:81:30:6f:e7:5c: ec:df:9d:80:7c:31:07:bc:29:f4:35:49:6c:1c:0e: c0:35:22:7e:51:6d:26:20:4b:c3:8d:a5:1f:e7:25: af:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:7A:10:E6:98:CB:83:D0:7D:02:58:C6:DB:4C:AA:68:F2:E0:D5:F8 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/anoQ5pjLg9B9AljG20yqaPLg1fg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.237.0/25 Signature Algorithm: sha256WithRSAEncryption 91:28:b0:6c:7d:3d:60:3b:00:4a:f3:43:a5:a1:9b:29:77:35: 29:47:cb:38:27:5a:7a:de:b7:a3:ad:70:61:11:bf:71:41:b3: 17:a8:73:91:c8:84:82:3a:cb:15:be:05:85:86:71:8f:65:25: a9:cb:1b:ed:0d:00:ab:c7:6c:6e:ad:49:9d:19:4e:fc:5f:a0: e5:7b:8e:5b:e8:ae:7b:4b:dd:b5:43:14:6f:4b:6e:a8:71:8c: f9:92:c7:0d:57:21:48:71:01:d7:76:b2:52:36:52:a3:d4:f5: a6:7e:e0:e0:df:5f:dc:80:1a:85:ea:79:a4:32:22:f5:5d:d3: 64:3d:4a:8a:2b:54:19:69:39:99:f6:1e:77:f4:db:30:a3:44: 3e:1c:00:12:75:f7:8e:09:80:49:0d:43:f0:2b:ab:a1:d3:6b: 7b:18:11:55:d5:9d:62:46:66:36:69:95:09:d2:09:65:78:5d: 3d:89:89:7f:3d:c4:cd:3b:b9:97:58:a7:04:1c:3c:78:73:9c: 3b:74:cf:4d:6a:97:2e:00:df:af:19:29:7d:e0:c3:14:30:a5: 02:1d:75:a7:10:65:c3:4a:31:1a:31:a4:f4:e2:65:2c:77:8a: 08:91:64:86:35:6c:0c:54:55:a0:3d:70:fe:03:f2:3b:4b:3b: fc:b3:96:90 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICOaUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2MzBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDZBN0ExMEU2OThDQjgz RDA3RDAyNThDNkRCNENBQTY4RjJFMEQ1RjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDjrb5HJYYpRxeOAUD+ycB3Ib4/jZIgbL/I6WWFE8Nuk8uO1tXo GFlhVwMs7zktkzMI2VPpgFwjVkLxgT66VBxzkxTcEeFToChfsGjU/T/rrQiyuEns y6Gb/PUgZLsy2mMSVSnhmd15gKstXZstKlaCTlzrBPJEVCtv0Y7bAgvqgq5oJCDO bFxy+Eb3u5dkgk9zAbVm3isJJapM6jmB2gl6TAaj8ezpQNO1OfFifRqP+l9DV1OU 2S9B3wQpVLT7Aumnw7BXXbM2wxHOgQRS1JpR1EqGBtcnD/oOoGmBMG/nXOzfnYB8 MQe8KfQ1SWwcDsA1In5RbSYgS8ONpR/nJa+jAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUanoQ5pjLg9B9AljG20yqaPLg1fgwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2Fub1E1cGpMZzlCOUFsakcy MHlxYVBMZzFmZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQd7 w+0AMA0GCSqGSIb3DQEBCwUAA4IBAQCRKLBsfT1gOwBK80OloZspdzUpR8s4J1p6 3rejrXBhEb9xQbMXqHORyISCOssVvgWFhnGPZSWpyxvtDQCrx2xurUmdGU78X6Dl e45b6K57S921QxRvS26ocYz5kscNVyFIcQHXdrJSNlKj1PWmfuDg31/cgBqF6nmk MiL1XdNkPUqKK1QZaTmZ9h539Nswo0Q+HAASdfeOCYBJDUPwK6uh02t7GBFV1Z1i RmY2aZUJ0glleF09iYl/PcTNO7mXWKcEHDx4c5w7dM9NapcuAN+vGSl94MMUMKUC HXWnEGXDSjEaMaT04mUsd4oIkWSGNWwMVFWgPXD+A/I7Szv8s5aQ -----END CERTIFICATE-----Generated at Fri Oct 24 19:21:53 2025 by rpki-client