$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bwX5UfTJaBqSR1qopI0naNkFv7k.roa File: bwX5UfTJaBqSR1qopI0naNkFv7k.roa (raw, json) Hash identifier: TG6aCLpxwQVzZgo8NxlE2PDbVCF38qF1pv3ZeWT+9Rs= Subject key identifier: 6F:05:F9:51:F4:C9:68:1A:92:47:5A:A8:A4:8D:27:68:D9:05:BF:B9 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3825 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bwX5UfTJaBqSR1qopI0naNkFv7k.roa Signing time: Fri 22 Aug 2025 08:45:00 +0000 ROA not before: Fri 22 Aug 2025 08:45:00 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.194.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14373 (0x3825) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:00 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=6F05F951F4C9681A92475AA8A48D2768D905BFB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:94:32:9b:c6:07:f0:96:2a:61:f4:28:54:ee: cc:ae:99:f8:90:71:04:9e:b1:f7:8a:64:a7:ca:56: 62:f1:2f:31:5d:94:c3:b2:21:53:f6:9d:bc:2f:7b: 18:e5:66:b8:f8:80:27:02:b2:81:5e:8c:93:c8:dc: b7:69:88:85:b2:21:03:dc:37:e5:89:e6:8a:03:1b: 7d:a2:fd:45:cc:1a:61:5d:45:51:0d:26:56:82:fc: cc:a4:dd:94:95:c5:37:15:ae:ee:34:8b:08:6a:0c: 3b:7c:e8:9e:bd:25:6c:99:2e:b0:8a:91:10:9f:9e: 8d:4a:03:83:cd:ca:a1:5e:a5:45:09:84:42:aa:0f: 03:0d:61:c3:56:aa:53:63:af:a3:a9:2a:17:9c:68: 9f:d6:f5:ef:43:59:f7:f4:65:b6:18:3c:55:34:a7: 6f:96:72:0b:af:d8:46:7a:b2:ea:28:8a:33:22:e5: 6d:c1:fa:7d:52:e5:45:78:47:9b:04:37:92:78:56: 37:50:a9:0d:25:9c:20:d0:29:5b:0e:4e:25:f9:5a: e4:d4:23:bd:42:cd:11:01:a5:a5:73:02:65:20:58: cf:46:58:ce:ef:9a:14:1f:8b:62:81:bc:3e:f8:35: 54:b6:b1:8a:3d:64:bf:88:7a:9e:b7:4f:b3:29:33: 30:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:05:F9:51:F4:C9:68:1A:92:47:5A:A8:A4:8D:27:68:D9:05:BF:B9 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bwX5UfTJaBqSR1qopI0naNkFv7k.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.176.0/20 Signature Algorithm: sha256WithRSAEncryption 7c:0b:9f:2f:69:85:df:a4:9c:f8:84:2d:b1:ec:a7:b4:c0:5f: 46:0f:ca:56:18:d1:fc:02:d8:bf:4e:51:28:fd:2e:bf:06:48: 16:6b:dd:ac:40:f1:79:02:27:b6:75:b6:ad:2c:82:00:21:b9: 26:5f:be:88:13:6a:e4:b7:cd:ae:5e:ab:40:bf:6c:41:6d:08: b6:77:f7:98:ff:01:34:8f:30:2f:b3:6d:e9:49:90:44:1c:96: 9a:ea:a0:ba:83:ac:ba:fd:37:b1:04:76:93:3d:b1:e8:cf:fc: 5b:52:e0:cc:cf:c3:b3:06:56:07:b7:71:ae:bf:5d:14:08:cd: 8f:90:a5:6d:f4:84:28:82:35:47:5c:41:a0:66:88:ef:47:a1: 68:96:b4:d7:c3:ba:90:0d:d0:62:72:c3:03:5a:9d:eb:89:90: 48:0c:7c:20:b1:9d:85:7c:12:5f:f8:39:2e:b2:fa:ba:db:e8: c4:2c:bc:8e:7c:04:20:71:d9:fa:84:87:84:be:3f:2e:54:59: c5:ec:25:f4:47:8c:9c:1a:5e:ba:ed:29:25:3b:e4:fd:8d:1b: c0:a4:90:38:45:0d:b7:a2:6f:9f:7f:cf:93:79:4c:df:29:20: a3:cd:e9:11:19:c0:c4:50:e4:80:d8:dd:47:2a:0f:b2:33:24: 1e:f5:01:3a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOCUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1MDBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDZGMDVGOTUxRjRDOTY4 MUE5MjQ3NUFBOEE0OEQyNzY4RDkwNUJGQjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDUlDKbxgfwliph9ChU7syumfiQcQSesfeKZKfKVmLxLzFdlMOy IVP2nbwvexjlZrj4gCcCsoFejJPI3LdpiIWyIQPcN+WJ5ooDG32i/UXMGmFdRVEN JlaC/Myk3ZSVxTcVru40iwhqDDt86J69JWyZLrCKkRCfno1KA4PNyqFepUUJhEKq DwMNYcNWqlNjr6OpKhecaJ/W9e9DWff0ZbYYPFU0p2+Wcguv2EZ6suooijMi5W3B +n1S5UV4R5sEN5J4VjdQqQ0lnCDQKVsOTiX5WuTUI71CzREBpaVzAmUgWM9GWM7v mhQfi2KBvD74NVS2sYo9ZL+Iep63T7MpMzAhAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUbwX5UfTJaBqSR1qopI0naNkFv7kwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2J3WDVVZlRKYUJxU1IxcW9w STBuYU5rRnY3ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR7 wrAwDQYJKoZIhvcNAQELBQADggEBAHwLny9phd+knPiELbHsp7TAX0YPylYY0fwC 2L9OUSj9Lr8GSBZr3axA8XkCJ7Z1tq0sggAhuSZfvogTauS3za5eq0C/bEFtCLZ3 95j/ATSPMC+zbelJkEQclprqoLqDrLr9N7EEdpM9sejP/FtS4MzPw7MGVge3ca6/ XRQIzY+QpW30hCiCNUdcQaBmiO9HoWiWtNfDupAN0GJywwNaneuJkEgMfCCxnYV8 El/4OS6y+rrb6MQsvI58BCBx2fqEh4S+Py5UWcXsJfRHjJwaXrrtKSU75P2NG8Ck kDhFDbeib59/z5N5TN8pIKPN6REZwMRQ5IDY3UcqD7IzJB71ATo= -----END CERTIFICATE-----Generated at Fri Oct 24 19:21:47 2025 by rpki-client