$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bp7S1lXBJo_U1K5_OP0_O18dpyw.roa File: bp7S1lXBJo_U1K5_OP0_O18dpyw.roa (raw, json) Hash identifier: wxFCH0hcO32GRflMrajTzbeTQ8pBWZiY3hgzL0lfGek= Subject key identifier: 6E:9E:D2:D6:55:C1:26:8F:D4:D4:AE:7F:38:FD:3F:3B:5F:1D:A7:2C Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3821 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bp7S1lXBJo_U1K5_OP0_O18dpyw.roa Signing time: Fri 22 Aug 2025 08:44:59 +0000 ROA not before: Fri 22 Aug 2025 08:44:59 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 106.1.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14369 (0x3821) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:44:59 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=6E9ED2D655C1268FD4D4AE7F38FD3F3B5F1DA72C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:75:31:69:0e:1c:e8:36:2c:03:4c:b8:c3:a5: 7e:83:34:11:c1:cc:87:fb:32:02:e0:20:ff:22:8d: 2c:f8:0a:3d:76:ca:e4:da:1f:88:6a:59:2b:fa:81: ac:f0:6d:58:95:fa:fb:35:d5:5b:ef:12:57:7d:97: 3c:c9:fb:84:60:ff:f0:ce:48:f3:89:54:81:f8:ba: f4:0e:6b:7d:18:c2:27:16:0e:41:1a:e0:0e:4f:d2: c9:c5:5c:ab:8a:ec:bd:00:e6:ff:22:49:2d:27:ad: 9c:e7:84:1f:14:79:6d:98:56:1e:dd:8d:82:de:8e: aa:39:96:ea:46:18:5e:ae:4a:7a:7e:af:b1:3a:e4: 88:b5:dd:b8:fd:9b:3c:74:1b:7c:f2:4c:fe:ac:ee: 61:f0:54:1d:4b:0b:01:8a:55:11:e6:94:a3:f6:e4: ef:f7:fa:2c:d2:23:18:03:4d:e0:5d:6f:06:ea:4f: 0b:64:7c:33:13:62:c3:86:80:2d:56:51:fc:a0:82: 97:ff:9a:5a:78:f2:90:74:91:5b:3c:d2:57:cd:95: a1:f3:00:1b:b6:7d:39:7e:4a:66:1f:5a:14:5e:16: e1:1b:ec:64:e0:92:e0:3c:e8:c0:a6:68:2e:fd:af: db:94:f1:0c:a3:ea:d8:46:70:7c:20:b7:ac:08:e8: 0f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:9E:D2:D6:55:C1:26:8F:D4:D4:AE:7F:38:FD:3F:3B:5F:1D:A7:2C X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bp7S1lXBJo_U1K5_OP0_O18dpyw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.170.0/24 Signature Algorithm: sha256WithRSAEncryption 47:46:34:a0:f5:d5:96:2c:de:bb:db:d9:98:b0:cf:ef:2d:b1: 87:d6:5d:b3:ce:a4:19:20:9a:13:ff:24:cd:3f:6c:3d:4f:72: a8:38:fa:24:a8:44:3a:8c:53:03:1c:42:be:d5:3f:53:2a:87: a6:3b:be:67:f1:99:2e:49:bc:fb:60:77:a7:0f:7b:23:f5:50: d3:df:60:89:57:79:8e:07:8e:99:6b:f3:6a:04:b6:9c:a6:89: ab:22:25:ef:59:3e:a9:cf:94:82:f1:50:fa:60:a4:92:1a:6a: c6:b8:5a:2c:2b:ae:48:40:15:27:26:81:fd:9a:29:fd:f6:66: 1b:78:99:9b:12:ce:b8:bd:60:64:c4:82:b0:06:df:7d:8a:9f: 81:d4:48:2a:1b:f0:3e:21:55:92:da:cf:d9:ae:49:ab:9a:25: fa:7a:60:71:5e:e2:62:0f:44:e2:a0:73:7c:10:d1:ec:f2:37: bc:a5:5e:80:7d:e4:7e:e2:93:0d:fb:54:41:bc:f6:da:80:6e: 9b:7f:5a:9a:dc:64:6a:2d:99:d6:2c:aa:c7:5c:31:28:eb:ed: 9b:30:c4:26:ae:b7:e0:d0:f0:72:ae:93:9c:8d:f6:d7:0e:1f: b1:1e:5d:45:0d:53:da:0b:72:64:b8:e8:24:1a:cc:16:fb:78: b4:52:4d:10 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOCEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ0NTlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDZFOUVEMkQ2NTVDMTI2 OEZENEQ0QUU3RjM4RkQzRjNCNUYxREE3MkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAdTFpDhzoNiwDTLjDpX6DNBHBzIf7MgLgIP8ijSz4Cj12yuTa H4hqWSv6gazwbViV+vs11VvvEld9lzzJ+4Rg//DOSPOJVIH4uvQOa30YwicWDkEa 4A5P0snFXKuK7L0A5v8iSS0nrZznhB8UeW2YVh7djYLejqo5lupGGF6uSnp+r7E6 5Ii13bj9mzx0G3zyTP6s7mHwVB1LCwGKVRHmlKP25O/3+izSIxgDTeBdbwbqTwtk fDMTYsOGgC1WUfyggpf/mlp48pB0kVs80lfNlaHzABu2fTl+SmYfWhReFuEb7GTg kuA86MCmaC79r9uU8Qyj6thGcHwgt6wI6A+7AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUbp7S1lXBJo/U1K5/OP0/O18dpywwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2JwN1MxbFhCSm9fVTFLNV9P UDBfTzE4ZHB5dy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq AaowDQYJKoZIhvcNAQELBQADggEBAEdGNKD11ZYs3rvb2Ziwz+8tsYfWXbPOpBkg mhP/JM0/bD1Pcqg4+iSoRDqMUwMcQr7VP1Mqh6Y7vmfxmS5JvPtgd6cPeyP1UNPf YIlXeY4Hjplr82oEtpymiasiJe9ZPqnPlILxUPpgpJIaasa4WiwrrkhAFScmgf2a Kf32Zht4mZsSzri9YGTEgrAG332Kn4HUSCob8D4hVZLaz9muSauaJfp6YHFe4mIP ROKgc3wQ0ezyN7ylXoB95H7ikw37VEG89tqAbpt/WprcZGotmdYsqsdcMSjr7Zsw xCaut+DQ8HKuk5yN9tcOH7EeXUUNU9oLcmS46CQazBb7eLRSTRA= -----END CERTIFICATE-----Generated at Fri Oct 24 19:21:27 2025 by rpki-client