$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cEz-8Gtm7IHmxPM1z1vF90SvoU8.roa File: cEz-8Gtm7IHmxPM1z1vF90SvoU8.roa (raw, json) Hash identifier: iXupTsijHJz7/5N1CJ7KyKAAGALDh7vVIL1NsU49gUM= Subject key identifier: 70:4C:FE:F0:6B:66:EC:81:E6:C4:F3:35:CF:5B:C5:F7:44:AF:A1:4F Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 387D Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cEz-8Gtm7IHmxPM1z1vF90SvoU8.roa Signing time: Fri 22 Aug 2025 08:45:21 +0000 ROA not before: Fri 22 Aug 2025 08:45:21 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.193.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14461 (0x387d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:21 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=704CFEF06B66EC81E6C4F335CF5BC5F744AFA14F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:6e:55:ad:5a:94:85:fa:29:cf:20:4c:ad:e5: 0b:06:22:4f:af:4a:70:e7:a4:7f:44:07:c8:11:91: 9e:08:9c:f5:ff:5a:5b:50:92:54:b6:5b:b9:8c:f9: dc:6e:8a:a1:e1:9b:a2:9c:12:13:5c:83:99:1e:0d: ae:d8:0a:7d:26:44:cd:9c:92:ba:bc:9b:ef:95:1f: 02:23:41:14:60:c2:30:8f:e5:f1:7f:21:7b:79:90: 77:6b:d8:18:ca:75:c9:02:a2:90:18:e1:cb:0e:a9: 6c:57:cc:35:f7:89:23:73:2c:2b:bc:f8:56:94:23: 27:3d:7b:05:b4:58:17:15:78:d8:14:1d:28:88:e8: 36:06:88:b1:a9:d1:cd:1b:fc:7b:d8:58:23:a5:db: 11:4b:21:2b:67:c4:fc:ad:c0:fa:b0:41:4a:b9:a1: 34:8e:ac:4a:f6:fc:9c:cb:da:14:5a:e6:b2:95:16: 76:a0:3c:4b:db:19:b2:36:09:58:6f:1e:18:e7:fd: 0b:85:25:da:d5:e5:5a:af:e5:a6:09:ce:42:d0:03: 13:69:f0:30:6a:a0:7a:2e:1a:cd:9f:8e:a5:5e:22: 85:f6:43:0e:27:9a:f1:f3:26:55:f2:98:fa:f7:44: 0c:1b:2e:8b:f3:a1:6e:2e:e6:87:43:fe:47:67:a5: 3d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:4C:FE:F0:6B:66:EC:81:E6:C4:F3:35:CF:5B:C5:F7:44:AF:A1:4F X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cEz-8Gtm7IHmxPM1z1vF90SvoU8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.216.0/23 Signature Algorithm: sha256WithRSAEncryption 05:2a:74:5e:37:33:66:48:6f:d7:e7:bc:e7:84:1b:b6:66:f3: e2:1d:9a:50:87:fa:e6:1c:ad:14:62:2a:42:17:8a:b1:d6:c2: ea:e7:6d:db:33:60:88:e7:3f:33:cc:5a:0e:cc:37:9d:b0:a8: 24:44:b0:79:58:4a:eb:94:f7:42:7e:6b:c2:f5:a9:61:fb:fa: 07:73:79:ec:7b:44:bd:81:fd:63:31:8d:d4:9d:5d:8d:65:db: 44:57:ae:2d:4e:7a:65:eb:0f:bc:9f:88:09:de:a9:d3:34:d6: 0c:10:e0:ff:8a:8e:e6:6e:05:0d:0b:b8:d5:4b:0d:8c:30:43: 7d:1b:85:6c:73:3c:3b:27:8e:67:5c:55:0e:3f:f7:2d:71:e7: b6:ce:40:5a:b0:d3:e5:82:54:53:62:73:bc:5f:c3:99:d2:fd: a6:25:dd:a1:1b:2a:3e:2f:95:ef:33:2e:c9:40:ef:a9:51:b9: 59:b2:1a:62:fb:7a:dd:64:aa:3d:23:da:9e:5b:ac:34:b0:1a: 69:33:34:ac:9f:c5:e6:5c:eb:47:bc:06:21:cb:fd:05:74:4b: a1:96:2a:74:9d:5f:29:65:88:57:c9:ba:14:99:ef:5b:39:1c: 25:33:64:e3:da:44:6a:3f:43:94:fe:df:63:01:dd:0d:c8:b3: 95:04:63:40 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOH0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1MjFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDcwNENGRUYwNkI2NkVD ODFFNkM0RjMzNUNGNUJDNUY3NDRBRkExNEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWblWtWpSF+inPIEyt5QsGIk+vSnDnpH9EB8gRkZ4InPX/WltQ klS2W7mM+dxuiqHhm6KcEhNcg5keDa7YCn0mRM2ckrq8m++VHwIjQRRgwjCP5fF/ IXt5kHdr2BjKdckCopAY4csOqWxXzDX3iSNzLCu8+FaUIyc9ewW0WBcVeNgUHSiI 6DYGiLGp0c0b/HvYWCOl2xFLIStnxPytwPqwQUq5oTSOrEr2/JzL2hRa5rKVFnag PEvbGbI2CVhvHhjn/QuFJdrV5Vqv5aYJzkLQAxNp8DBqoHouGs2fjqVeIoX2Qw4n mvHzJlXymPr3RAwbLovzoW4u5odD/kdnpT25AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUcEz+8Gtm7IHmxPM1z1vF90SvoU8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2NFei04R3RtN0lIbXhQTTF6 MXZGOTBTdm9VOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF7 wdgwDQYJKoZIhvcNAQELBQADggEBAAUqdF43M2ZIb9fnvOeEG7Zm8+IdmlCH+uYc rRRiKkIXirHWwurnbdszYIjnPzPMWg7MN52wqCREsHlYSuuU90J+a8L1qWH7+gdz eex7RL2B/WMxjdSdXY1l20RXri1OemXrD7yfiAneqdM01gwQ4P+KjuZuBQ0LuNVL DYwwQ30bhWxzPDsnjmdcVQ4/9y1x57bOQFqw0+WCVFNic7xfw5nS/aYl3aEbKj4v le8zLslA76lRuVmyGmL7et1kqj0j2p5brDSwGmkzNKyfxeZc60e8BiHL/QV0S6GW KnSdXylliFfJuhSZ71s5HCUzZOPaRGo/Q5T+32MB3Q3Is5UEY0A= -----END CERTIFICATE-----Generated at Fri Oct 24 19:25:02 2025 by rpki-client