$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cIJ9FaRp5lfrLAxp7ucVIU2RW-M.roa File: cIJ9FaRp5lfrLAxp7ucVIU2RW-M.roa (raw, json) Hash identifier: FBy8vYSC+MwX0BTuZHXOcl1SUMYcHQS+gKVs0jjEVEY= Subject key identifier: 70:82:7D:15:A4:69:E6:57:EB:2C:0C:69:EE:E7:15:21:4D:91:5B:E3 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3888 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cIJ9FaRp5lfrLAxp7ucVIU2RW-M.roa Signing time: Fri 22 Aug 2025 08:45:23 +0000 ROA not before: Fri 22 Aug 2025 08:45:23 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.195.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14472 (0x3888) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:23 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=70827D15A469E657EB2C0C69EEE715214D915BE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6f:e4:d7:a7:6e:e4:df:d1:f9:f9:2e:eb:53: 8e:19:75:2b:45:2a:df:76:4f:1a:c2:74:3d:b7:e7: 5d:9b:ea:8e:97:c2:c3:1d:e5:42:29:3c:3b:b2:15: e8:4c:81:a4:f6:59:f4:31:b9:56:96:9e:51:89:38: cc:a1:94:45:86:01:9a:60:32:12:aa:d0:b2:35:50: 92:40:4a:80:74:af:75:8a:cd:de:e2:89:dd:e3:9e: 44:ca:f7:29:d5:8d:ff:eb:33:07:bc:7d:dc:fb:4f: d2:f0:ce:f7:a4:ba:29:14:c3:46:5f:f7:85:97:97: b0:b5:b3:bf:f9:d6:29:17:8c:93:3e:57:49:39:20: 2e:2b:fd:d6:f5:4a:b7:e4:ba:0e:aa:b0:e8:e6:f9: 07:0f:ef:c7:4f:56:c4:89:62:f1:22:84:ff:b4:52: ac:35:62:0d:d5:04:63:92:d7:4d:b0:91:ba:86:25: 81:50:33:ad:ad:d5:65:cc:81:da:0a:79:78:ec:96: a0:71:0b:48:83:d7:4d:6c:a1:79:fb:87:01:01:01: 93:2e:9f:b8:16:5c:d9:ab:4e:a8:d6:58:1f:bc:10: 7d:17:18:75:98:18:af:59:4a:dc:53:cc:db:b1:93: 86:32:20:2e:16:a6:40:4e:92:79:23:4d:fd:8d:ed: b2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:82:7D:15:A4:69:E6:57:EB:2C:0C:69:EE:E7:15:21:4D:91:5B:E3 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cIJ9FaRp5lfrLAxp7ucVIU2RW-M.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.36.0/22 Signature Algorithm: sha256WithRSAEncryption 4e:ba:1e:4e:b7:bf:08:58:7f:30:7d:69:db:4e:ce:c2:7a:28: ca:41:ef:ab:e1:7f:62:0d:d2:32:a4:f4:8c:1c:2a:e1:ed:bd: bb:ad:19:63:b5:b1:aa:3d:2e:7f:12:0e:f2:d4:4e:cb:9e:1d: 82:ce:e9:31:1f:4f:21:05:a0:34:73:2c:46:c5:e9:b9:29:d4: b8:bb:4d:c4:0d:1d:8b:eb:75:b1:f0:44:a3:5e:49:48:0a:0b: aa:32:cd:f2:77:93:b3:4a:9b:75:86:c6:4e:ac:55:0e:e0:aa: 9f:08:72:2e:b5:c4:0b:64:c3:16:4b:0e:64:07:89:b0:7c:3d: c6:d9:21:12:71:ac:a8:ba:89:25:9a:2c:e6:73:1e:39:4c:52: 36:2d:4e:93:0d:c8:6b:80:d2:10:7a:5d:73:b7:c0:64:78:53: c9:c1:50:21:16:ea:33:bb:be:7f:6f:93:53:1e:a1:08:73:4d: 01:b8:9f:a0:2d:6d:60:ed:71:0e:20:2a:e3:c1:18:41:fd:27: c9:59:a4:6f:5b:23:4d:33:ef:12:fb:79:63:35:d3:98:26:92: ad:89:ad:e1:c3:a3:b0:d9:3e:10:66:00:96:e3:77:c6:30:76: fb:38:ee:31:a1:bc:2d:a1:d6:d9:a5:6c:6f:da:2d:e9:32:7e: c6:dc:95:eb -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOIgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1MjNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDcwODI3RDE1QTQ2OUU2 NTdFQjJDMEM2OUVFRTcxNTIxNEQ5MTVCRTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFb+TXp27k39H5+S7rU44ZdStFKt92TxrCdD23512b6o6XwsMd 5UIpPDuyFehMgaT2WfQxuVaWnlGJOMyhlEWGAZpgMhKq0LI1UJJASoB0r3WKzd7i id3jnkTK9ynVjf/rMwe8fdz7T9LwzvekuikUw0Zf94WXl7C1s7/51ikXjJM+V0k5 IC4r/db1Srfkug6qsOjm+QcP78dPVsSJYvEihP+0Uqw1Yg3VBGOS102wkbqGJYFQ M62t1WXMgdoKeXjslqBxC0iD101soXn7hwEBAZMun7gWXNmrTqjWWB+8EH0XGHWY GK9ZStxTzNuxk4YyIC4WpkBOknkjTf2N7bLVAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUcIJ9FaRp5lfrLAxp7ucVIU2RW+MwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2NJSjlGYVJwNWxmckxBeHA3 dWNWSVUyUlctTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wyQwDQYJKoZIhvcNAQELBQADggEBAE66Hk63vwhYfzB9adtOzsJ6KMpB76vhf2IN 0jKk9IwcKuHtvbutGWO1sao9Ln8SDvLUTsueHYLO6TEfTyEFoDRzLEbF6bkp1Li7 TcQNHYvrdbHwRKNeSUgKC6oyzfJ3k7NKm3WGxk6sVQ7gqp8Ici61xAtkwxZLDmQH ibB8PcbZIRJxrKi6iSWaLOZzHjlMUjYtTpMNyGuA0hB6XXO3wGR4U8nBUCEW6jO7 vn9vk1MeoQhzTQG4n6AtbWDtcQ4gKuPBGEH9J8lZpG9bI00z7xL7eWM105gmkq2J reHDo7DZPhBmAJbjd8Ywdvs47jGhvC2h1tmlbG/aLekyfsbcles= -----END CERTIFICATE-----Generated at Fri Oct 24 19:21:47 2025 by rpki-client