$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/b-ETQdTJzlqNy-x8GgxjeMkWAqw.roa File: b-ETQdTJzlqNy-x8GgxjeMkWAqw.roa (raw, json) Hash identifier: fR0M0x17sMr8bPZtAVnXvX6ZvYg20m35DT8loy8uGp8= Subject key identifier: 6F:E1:13:41:D4:C9:CE:5A:8D:CB:EC:7C:1A:0C:63:78:C9:16:02:AC Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 38C7 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/b-ETQdTJzlqNy-x8GgxjeMkWAqw.roa Signing time: Fri 22 Aug 2025 08:45:38 +0000 ROA not before: Fri 22 Aug 2025 08:45:38 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9924 IP address blocks: 123.195.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 07:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14535 (0x38c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:38 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=6FE11341D4C9CE5A8DCBEC7C1A0C6378C91602AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:57:7e:b9:a2:31:35:82:72:20:34:df:55:1f: e0:6a:35:75:ad:ac:57:d6:57:ac:b0:43:6d:00:25: 6d:a3:c4:09:cf:40:48:86:65:43:f1:be:70:55:b5: 10:f6:ca:78:46:63:71:59:95:8b:3d:85:48:27:ef: e6:36:0e:77:bd:46:b0:bf:a3:43:32:00:22:e5:ef: 72:52:14:9b:44:55:3d:91:01:e4:2d:39:36:74:0b: dc:76:ce:36:c5:a1:74:f9:c5:29:66:ae:2f:98:bf: 04:19:9b:84:02:8c:91:1c:dd:50:e1:01:9e:82:0d: 2c:b1:2c:22:cb:d0:f5:67:5e:3f:9d:02:06:35:ad: f2:5b:15:1f:d5:b0:c6:a4:14:19:67:5a:7c:79:64: 87:05:6a:93:b7:cf:f9:8a:82:29:c3:85:7c:8a:83: 80:90:f1:7b:fd:f7:53:7b:f1:9a:75:5c:6c:84:2d: 37:0f:7a:a4:25:f0:54:e6:7c:e2:90:b8:6b:62:6e: 90:0b:36:08:ce:4f:28:29:28:4f:22:17:54:9f:9d: 82:ae:97:0c:fe:52:cb:31:cb:8c:7e:07:98:b7:68: b9:8c:3c:bf:53:36:6a:11:22:e4:05:90:45:cf:41: 06:1d:00:d0:ab:f7:a9:ff:c1:f4:c3:70:fe:79:92: a1:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:E1:13:41:D4:C9:CE:5A:8D:CB:EC:7C:1A:0C:63:78:C9:16:02:AC X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/b-ETQdTJzlqNy-x8GgxjeMkWAqw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.246.0/24 Signature Algorithm: sha256WithRSAEncryption 78:fc:6e:5d:a7:63:1d:6e:6d:96:7a:12:00:fe:7a:16:3d:a6: f8:0b:a2:c4:d3:1c:83:9d:71:e9:b0:2b:35:e1:09:f0:62:0d: 24:d6:7c:1e:9c:5e:f5:12:e5:ea:2b:c3:ca:8d:e6:13:c0:ce: 09:40:09:f8:a4:5b:c7:38:e8:31:5d:5e:96:4f:87:89:35:ae: 9b:db:d1:90:a3:f4:b7:b1:8d:81:8c:9b:ae:b1:92:41:19:82: 0b:5d:94:95:c7:e5:06:14:19:c8:bd:c2:36:66:ad:57:99:bf: 80:08:6a:0e:63:b5:e5:f8:fe:17:47:d8:0a:52:78:98:2a:b4: ad:28:c4:a7:a2:40:fb:cc:77:87:6d:8e:da:29:08:63:84:d4: 12:d2:db:e1:b4:45:1f:6d:f4:0d:ad:0b:04:c9:60:f2:d4:07: 3b:08:39:9c:ce:17:db:63:56:31:6e:e8:02:b1:5f:56:1d:c6: 5c:2d:80:78:4c:f2:ae:a9:90:1c:ed:77:b1:a0:87:fa:1e:5b: df:37:2e:dc:b2:f9:1f:90:20:e7:f9:3c:97:47:c7:74:9a:99: 58:dd:8c:80:32:37:e9:0c:78:d5:99:79:2b:fa:06:41:6d:56: 19:99:d2:65:2b:6b:0a:bf:38:cf:e3:60:32:6b:a1:c2:a5:2e: d6:e3:83:2e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOMcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1MzhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDZGRTExMzQxRDRDOUNF NUE4RENCRUM3QzFBMEM2Mzc4QzkxNjAyQUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpV365ojE1gnIgNN9VH+BqNXWtrFfWV6ywQ20AJW2jxAnPQEiG ZUPxvnBVtRD2ynhGY3FZlYs9hUgn7+Y2Dne9RrC/o0MyACLl73JSFJtEVT2RAeQt OTZ0C9x2zjbFoXT5xSlmri+YvwQZm4QCjJEc3VDhAZ6CDSyxLCLL0PVnXj+dAgY1 rfJbFR/VsMakFBlnWnx5ZIcFapO3z/mKginDhXyKg4CQ8Xv991N78Zp1XGyELTcP eqQl8FTmfOKQuGtibpALNgjOTygpKE8iF1SfnYKulwz+Ussxy4x+B5i3aLmMPL9T NmoRIuQFkEXPQQYdANCr96n/wfTDcP55kqGrAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUb+ETQdTJzlqNy+x8GgxjeMkWAqwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2ItRVRRZFRKemxxTnkteDhH Z3hqZU1rV0Fxdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7 w/YwDQYJKoZIhvcNAQELBQADggEBAHj8bl2nYx1ubZZ6EgD+ehY9pvgLosTTHIOd cemwKzXhCfBiDSTWfB6cXvUS5eorw8qN5hPAzglACfikW8c46DFdXpZPh4k1rpvb 0ZCj9LexjYGMm66xkkEZggtdlJXH5QYUGci9wjZmrVeZv4AIag5jteX4/hdH2ApS eJgqtK0oxKeiQPvMd4dtjtopCGOE1BLS2+G0RR9t9A2tCwTJYPLUBzsIOZzOF9tj VjFu6AKxX1YdxlwtgHhM8q6pkBztd7Ggh/oeW983Ltyy+R+QIOf5PJdHx3SamVjd jIAyN+kMeNWZeSv6BkFtVhmZ0mUrawq/OM/jYDJrocKlLtbjgy4= -----END CERTIFICATE-----Generated at Fri Oct 24 04:55:39 2025 by rpki-client