$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fser4nDxPDKBY6iU5X-8qgmaJZc.roa File: fser4nDxPDKBY6iU5X-8qgmaJZc.roa (raw, json) Hash identifier: 8Laq3eIDuuVwsrX6xk9nGQd9oK6q2CWLMYpZ9PgLCoc= Subject key identifier: 7E:C7:AB:E2:70:F1:3C:32:81:63:A8:94:E5:7F:BC:AA:09:9A:25:97 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3963 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fser4nDxPDKBY6iU5X-8qgmaJZc.roa Signing time: Fri 22 Aug 2025 08:46:15 +0000 ROA not before: Fri 22 Aug 2025 08:46:15 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 118.233.40.0/21 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14691 (0x3963) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:15 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=7EC7ABE270F13C328163A894E57FBCAA099A2597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:8c:2b:88:2f:8a:b2:e4:a1:d0:ff:65:6a:9a: 2d:9a:87:2f:5b:76:aa:1e:c5:b8:ef:0f:8b:b9:c2: 6c:7b:06:28:02:fa:d0:bf:03:5a:17:36:4c:bc:b8: f4:0b:e3:3e:3f:d2:e8:42:0e:30:fc:c5:3b:ae:37: f9:9b:92:be:91:af:72:8b:0d:6f:b0:16:01:cc:74: 3a:e3:da:21:68:61:11:5a:60:c9:fa:de:92:18:a0: 43:08:6a:42:53:e2:15:d4:2e:6f:d5:25:56:d2:b1: 13:98:38:aa:ef:e1:88:cf:47:d3:fd:fd:5d:2e:e3: 5e:21:e5:48:84:88:55:73:5a:0c:00:49:7f:6e:c1: 4e:e9:d4:14:7a:0e:7b:d4:4a:66:39:10:77:27:c0: 5e:30:07:cb:5f:10:f5:c2:72:18:ff:b6:c3:b2:f5: ac:55:df:7d:59:11:e5:ec:de:7c:60:b1:a5:6e:f9: af:97:63:3c:a0:27:da:91:9f:30:41:79:e2:8a:81: f0:75:c6:68:38:68:89:50:22:12:74:96:78:83:4e: 88:33:bd:14:e1:76:8e:1c:6d:95:cf:e7:f3:1e:32: 86:d7:19:c7:98:64:94:c7:f8:d6:ae:77:12:95:9a: 47:2d:48:07:6e:9e:b0:2f:26:f3:2f:6b:c6:9e:2c: fc:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:C7:AB:E2:70:F1:3C:32:81:63:A8:94:E5:7F:BC:AA:09:9A:25:97 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fser4nDxPDKBY6iU5X-8qgmaJZc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.40.0/21 Signature Algorithm: sha256WithRSAEncryption 21:a2:02:97:bc:b8:99:92:2e:80:0a:d8:bb:cf:69:4f:ee:60: 84:55:d2:ba:8a:73:2b:c2:6b:ee:1d:33:13:dd:52:fa:8a:ef: 77:72:05:63:03:c8:cc:62:2d:d7:66:83:82:e2:0f:ff:f5:63: a0:1a:f1:20:3d:86:6b:e9:f3:7a:51:1c:10:52:da:c4:76:b0: ab:2f:df:78:c7:8b:40:fb:61:31:8f:3e:8b:40:12:24:26:5c: 05:ab:a2:72:41:5a:79:7e:46:8e:7e:1f:95:5f:92:dc:2d:a7: 5b:f8:5a:a5:db:63:35:d5:4b:c6:d5:27:ce:f1:06:25:98:c6: d2:8f:44:65:be:dc:70:59:a5:5d:cf:4f:e7:d1:25:e6:ab:86: 81:b5:57:48:34:cf:65:7c:56:2e:e3:0d:1f:58:50:dc:0c:0f: 3a:72:0b:43:cc:1a:94:70:b6:07:f1:1d:09:34:42:48:c8:98: af:2d:77:22:c1:9b:58:0f:53:62:b1:76:54:37:af:cb:85:8d: 8f:3d:81:b7:37:71:01:e0:70:5b:32:bc:2e:31:35:a3:98:52: ce:2c:7f:06:00:6d:03:25:23:98:be:bb:ed:b2:81:58:96:bf: 1f:f1:c0:75:02:76:62:5b:5d:fa:1f:94:a6:59:64:98:86:db: f5:cc:ed:c8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOWMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2MTVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDdFQzdBQkUyNzBGMTND MzI4MTYzQTg5NEU1N0ZCQ0FBMDk5QTI1OTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDrjCuIL4qy5KHQ/2Vqmi2ahy9bdqoexbjvD4u5wmx7BigC+tC/ A1oXNky8uPQL4z4/0uhCDjD8xTuuN/mbkr6Rr3KLDW+wFgHMdDrj2iFoYRFaYMn6 3pIYoEMIakJT4hXULm/VJVbSsROYOKrv4YjPR9P9/V0u414h5UiEiFVzWgwASX9u wU7p1BR6DnvUSmY5EHcnwF4wB8tfEPXCchj/tsOy9axV331ZEeXs3nxgsaVu+a+X YzygJ9qRnzBBeeKKgfB1xmg4aIlQIhJ0lniDTogzvRThdo4cbZXP5/MeMobXGceY ZJTH+NaudxKVmkctSAdunrAvJvMva8aeLPxfAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUfser4nDxPDKBY6iU5X+8qgmaJZcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2ZzZXI0bkR4UERLQlk2aVU1 WC04cWdtYUpaYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2 6SgwDQYJKoZIhvcNAQELBQADggEBACGiApe8uJmSLoAK2LvPaU/uYIRV0rqKcyvC a+4dMxPdUvqK73dyBWMDyMxiLddmg4LiD//1Y6Aa8SA9hmvp83pRHBBS2sR2sKsv 33jHi0D7YTGPPotAEiQmXAWronJBWnl+Ro5+H5Vfktwtp1v4WqXbYzXVS8bVJ87x BiWYxtKPRGW+3HBZpV3PT+fRJearhoG1V0g0z2V8Vi7jDR9YUNwMDzpyC0PMGpRw tgfxHQk0QkjImK8tdyLBm1gPU2KxdlQ3r8uFjY89gbc3cQHgcFsyvC4xNaOYUs4s fwYAbQMlI5i+u+2ygViWvx/xwHUCdmJbXfoflKZZZJiG2/XM7cg= -----END CERTIFICATE-----Generated at Fri Oct 24 19:27:17 2025 by rpki-client