$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cViOfjl9FDrTQ0oJZIbYQVSaHhI.roa File: cViOfjl9FDrTQ0oJZIbYQVSaHhI.roa (raw, json) Hash identifier: JksGDk+9fmEQO7U3XbfWS4K/GqA1FmJef+6dmlgHMhk= Subject key identifier: 71:58:8E:7E:39:7D:14:3A:D3:43:4A:09:64:86:D8:41:54:9A:1E:12 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3994 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cViOfjl9FDrTQ0oJZIbYQVSaHhI.roa Signing time: Fri 22 Aug 2025 08:46:26 +0000 ROA not before: Fri 22 Aug 2025 08:46:26 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9924 IP address blocks: 123.193.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 07:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14740 (0x3994) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:26 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=71588E7E397D143AD3434A096486D841549A1E12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:aa:6a:46:57:36:16:76:83:83:0c:ef:72:57: e8:eb:5a:bb:cb:84:98:5a:24:74:55:cf:ce:e4:6f: 84:6e:3c:8e:ea:93:ea:8a:ae:c6:67:df:a6:1f:80: c7:90:c4:b1:52:eb:dc:63:70:45:dd:f0:e9:94:17: bf:a5:9c:df:af:b8:92:e5:1d:51:54:88:2f:1d:17: 84:64:24:7e:91:28:68:da:1f:94:b9:ce:57:93:42: 1b:2b:da:c4:d3:b2:7f:1d:45:d4:c3:8d:41:b7:70: 2c:09:7d:cc:43:49:78:68:e3:d2:f0:12:ed:6c:52: 3a:0a:6b:b4:b7:f5:19:aa:2d:ee:f3:80:84:6c:06: bc:2f:2d:e5:92:47:59:90:09:d5:d2:52:ed:7b:58: 1c:2d:f9:3f:18:75:ad:22:85:fa:f5:cc:87:3d:6e: 7b:18:6e:6c:14:cc:90:55:ab:95:a0:0d:b7:5e:52: fe:6f:81:23:68:cf:22:79:9f:aa:84:10:0f:9a:ee: e9:7a:71:6f:6b:1e:a5:3d:cb:55:b8:d1:71:08:d6: ab:8a:6a:67:21:3b:92:7d:c9:7f:cf:6c:99:09:5e: 00:18:f8:73:ef:23:81:da:12:4b:e1:ac:ed:de:a4: 3b:89:46:ca:f7:7c:7a:59:64:b0:81:1a:ff:1e:db: 6d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:58:8E:7E:39:7D:14:3A:D3:43:4A:09:64:86:D8:41:54:9A:1E:12 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cViOfjl9FDrTQ0oJZIbYQVSaHhI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.144.0/20 Signature Algorithm: sha256WithRSAEncryption 48:f4:9e:d7:f9:0c:63:4f:03:ae:bb:6a:04:d6:89:a4:e2:39: da:a0:db:c4:5f:92:bd:fd:65:5a:ab:25:48:d7:8c:0a:0d:1b: e0:19:16:49:d6:f6:5f:cf:25:62:ba:69:94:9f:de:72:cf:88: b6:b1:a4:8a:9e:18:4b:92:92:4a:dc:09:99:98:e8:dd:b5:6f: 0f:c2:4e:89:08:eb:34:e8:f8:3f:1c:3d:83:e7:62:d4:ab:40: 36:28:41:a6:92:b3:7d:38:7b:82:d7:5f:39:ca:e2:3c:72:87: 73:01:33:27:e7:24:5e:48:75:cd:1f:bd:c6:0b:89:02:a8:6b: 97:f2:1f:da:a5:7f:f7:f0:0b:06:6d:ce:6e:bf:31:1d:3c:a9: d6:71:2c:f2:5a:bd:8f:12:dd:54:24:4b:13:2c:01:3e:e9:1a: aa:58:3d:8d:19:89:62:2b:6a:8b:80:51:35:97:3d:3d:0e:62: b9:63:6a:82:9b:87:17:40:37:40:c1:99:77:e9:0a:b7:d3:b7: a3:8c:99:b4:82:f6:d3:38:2c:ec:bb:c1:5d:7c:16:1d:b8:48: 43:e0:e3:9d:2d:00:ad:5f:37:a9:44:b5:08:a5:f4:96:b3:59: 35:c1:0f:a2:e6:89:7a:df:c1:e5:97:19:8a:4e:a1:a7:c4:27: b3:17:91:49 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOZQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2MjZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDcxNTg4RTdFMzk3RDE0 M0FEMzQzNEEwOTY0ODZEODQxNTQ5QTFFMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuqmpGVzYWdoODDO9yV+jrWrvLhJhaJHRVz87kb4RuPI7qk+qK rsZn36YfgMeQxLFS69xjcEXd8OmUF7+lnN+vuJLlHVFUiC8dF4RkJH6RKGjaH5S5 zleTQhsr2sTTsn8dRdTDjUG3cCwJfcxDSXho49LwEu1sUjoKa7S39RmqLe7zgIRs BrwvLeWSR1mQCdXSUu17WBwt+T8Yda0ihfr1zIc9bnsYbmwUzJBVq5WgDbdeUv5v gSNozyJ5n6qEEA+a7ul6cW9rHqU9y1W40XEI1quKamchO5J9yX/PbJkJXgAY+HPv I4HaEkvhrO3epDuJRsr3fHpZZLCBGv8e2231AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUcViOfjl9FDrTQ0oJZIbYQVSaHhIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2NWaU9mamw5RkRyVFEwb0pa SWJZUVZTYUhoSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR7 wZAwDQYJKoZIhvcNAQELBQADggEBAEj0ntf5DGNPA667agTWiaTiOdqg28Rfkr39 ZVqrJUjXjAoNG+AZFknW9l/PJWK6aZSf3nLPiLaxpIqeGEuSkkrcCZmY6N21bw/C TokI6zTo+D8cPYPnYtSrQDYoQaaSs304e4LXXznK4jxyh3MBMyfnJF5Idc0fvcYL iQKoa5fyH9qlf/fwCwZtzm6/MR08qdZxLPJavY8S3VQkSxMsAT7pGqpYPY0ZiWIr aouAUTWXPT0OYrljaoKbhxdAN0DBmXfpCrfTt6OMmbSC9tM4LOy7wV18Fh24SEPg 450tAK1fN6lEtQil9JazWTXBD6LmiXrfweWXGYpOoafEJ7MXkUk= -----END CERTIFICATE-----Generated at Fri Oct 24 04:51:03 2025 by rpki-client