$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/d3kywhVBFzQf5yhjPAJU1O8mffA.roa File: d3kywhVBFzQf5yhjPAJU1O8mffA.roa (raw, json) Hash identifier: NLc7Me3LVC1n56Sebp5+11zZdo0F0NtfQN1oXsvIROI= Subject key identifier: 77:79:32:C2:15:41:17:34:1F:E7:28:63:3C:02:54:D4:EF:26:7D:F0 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3A80 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/d3kywhVBFzQf5yhjPAJU1O8mffA.roa Signing time: Fri 22 Aug 2025 08:47:26 +0000 ROA not before: Fri 22 Aug 2025 08:47:26 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.192.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14976 (0x3a80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:26 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=777932C2154117341FE728633C0254D4EF267DF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:14:37:bd:30:ce:e0:c6:3f:a6:4c:bc:7a:13: d3:31:f8:6d:45:a3:19:4b:0d:fe:5c:a4:51:65:14: 56:d3:3b:3b:f6:ac:94:2e:2c:4e:76:d2:cf:03:6f: 7c:05:ec:7c:7d:b1:53:04:d4:c3:8f:17:7e:89:78: d3:48:a5:32:7a:02:5c:e1:0d:12:2a:02:77:86:84: 0a:b9:e0:e1:61:e7:6e:dd:94:1f:7c:85:b3:cc:d0: b0:19:14:58:bb:3c:74:60:ff:b1:83:c1:60:7e:99: d0:7c:17:6e:f7:53:86:00:0a:3f:61:ca:ef:38:92: ea:39:a4:70:67:97:a4:ad:9a:e3:15:c0:f3:fc:b0: 52:61:cd:9b:21:cb:ef:f5:53:3e:d5:47:f5:4b:7f: 4b:0d:af:12:a0:25:94:7f:06:2d:c8:83:8d:fe:19: 31:88:65:4a:14:60:7c:d6:28:83:55:f0:22:eb:78: 07:69:f9:2e:42:de:44:77:85:73:93:12:5f:43:2c: a0:53:90:30:5e:39:19:15:72:ec:aa:f7:2b:5b:52: c8:29:89:26:59:44:43:46:50:19:bc:b8:d7:ff:8f: 21:a5:b9:6e:5c:2e:19:10:be:db:35:fc:54:3f:c4: 84:8a:62:55:7d:a6:2b:e7:af:4d:84:95:80:15:bc: 15:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:79:32:C2:15:41:17:34:1F:E7:28:63:3C:02:54:D4:EF:26:7D:F0 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/d3kywhVBFzQf5yhjPAJU1O8mffA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.0.0/20 Signature Algorithm: sha256WithRSAEncryption 7b:3a:5e:d0:fe:21:59:51:27:5e:68:e8:74:f4:25:47:d0:31: 55:a8:20:58:22:b0:7b:02:85:73:11:d0:f6:72:92:a9:05:19: 40:34:0e:d1:26:23:fa:1b:e2:98:c3:ca:51:97:0c:b4:27:81: a6:d0:9a:af:f9:32:00:f9:ff:88:76:a4:39:91:51:43:4e:37: a0:90:a1:f7:64:01:95:0b:6e:b6:dc:61:5b:a7:b1:41:8b:79: 2c:76:e1:f0:41:98:40:3d:f4:05:fe:87:e5:07:c9:76:c8:87: b2:fb:d1:fd:07:4d:d7:e4:93:f9:26:08:ea:e1:fc:c4:66:45: 3b:82:14:70:c1:8f:21:68:1c:a7:06:8f:e7:8c:a1:8e:60:1e: 98:44:c8:4d:d3:0d:f1:4b:9b:48:fb:e9:8b:e2:e6:29:fa:7c: 0d:b2:11:56:fb:36:a3:69:e9:34:68:68:74:2a:6e:75:a2:ee: 36:27:7f:ba:80:fa:3c:e4:c5:32:f1:4f:41:24:9f:fa:21:0c: 68:3e:33:01:90:76:00:92:40:7a:62:36:42:cc:7e:89:06:cd: 12:b2:4a:92:14:4d:7e:d7:96:f7:1e:3f:0e:69:88:cf:3b:7a: c7:e8:73:02:3f:e8:29:72:ba:0c:a7:83:4f:82:19:c9:5f:a2: 8d:a5:f2:a6 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOoAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3MjZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDc3NzkzMkMyMTU0MTE3 MzQxRkU3Mjg2MzNDMDI1NEQ0RUYyNjdERjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD1FDe9MM7gxj+mTLx6E9Mx+G1FoxlLDf5cpFFlFFbTOzv2rJQu LE520s8Db3wF7Hx9sVME1MOPF36JeNNIpTJ6AlzhDRIqAneGhAq54OFh527dlB98 hbPM0LAZFFi7PHRg/7GDwWB+mdB8F273U4YACj9hyu84kuo5pHBnl6StmuMVwPP8 sFJhzZshy+/1Uz7VR/VLf0sNrxKgJZR/Bi3Ig43+GTGIZUoUYHzWKINV8CLreAdp +S5C3kR3hXOTEl9DLKBTkDBeORkVcuyq9ytbUsgpiSZZRENGUBm8uNf/jyGluW5c LhkQvts1/FQ/xISKYlV9pivnr02ElYAVvBUrAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUd3kywhVBFzQf5yhjPAJU1O8mffAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2Qza3l3aFZCRnpRZjV5aGpQ QUpVMU84bWZmQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR7 wAAwDQYJKoZIhvcNAQELBQADggEBAHs6XtD+IVlRJ15o6HT0JUfQMVWoIFgisHsC hXMR0PZykqkFGUA0DtEmI/ob4pjDylGXDLQngabQmq/5MgD5/4h2pDmRUUNON6CQ ofdkAZULbrbcYVunsUGLeSx24fBBmEA99AX+h+UHyXbIh7L70f0HTdfkk/kmCOrh /MRmRTuCFHDBjyFoHKcGj+eMoY5gHphEyE3TDfFLm0j76Yvi5in6fA2yEVb7NqNp 6TRoaHQqbnWi7jYnf7qA+jzkxTLxT0Ekn/ohDGg+MwGQdgCSQHpiNkLMfokGzRKy SpIUTX7XlvcePw5piM87esfocwI/6Clyugyng0+CGclfoo2l8qY= -----END CERTIFICATE-----Generated at Fri Oct 24 19:24:37 2025 by rpki-client