$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gBH_JOCTI4lRjQ2wZi4y5NI440M.roa File: gBH_JOCTI4lRjQ2wZi4y5NI440M.roa (raw, json) Hash identifier: r+a3A4floP++afEYphp9fTomFAa2l2mA42bp1/X7VPY= Subject key identifier: 80:11:FF:24:E0:93:23:89:51:8D:0D:B0:66:2E:32:E4:D2:38:E3:43 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3AD5 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gBH_JOCTI4lRjQ2wZi4y5NI440M.roa Signing time: Fri 22 Aug 2025 08:47:49 +0000 ROA not before: Fri 22 Aug 2025 08:47:49 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.194.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15061 (0x3ad5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:49 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=8011FF24E0932389518D0DB0662E32E4D238E343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:17:83:f5:b7:ec:36:77:20:6b:1e:55:ff:ec: 81:8d:ad:d5:02:23:7f:33:ec:1b:a6:8e:85:f8:80: 87:e4:17:35:db:45:10:c8:ef:69:c7:15:92:1b:ec: 84:04:61:f8:56:3b:90:ba:4f:37:68:93:a3:e2:08: 75:9d:c8:13:d9:d5:d4:ea:b2:f8:11:fc:85:d7:bf: b1:f4:bc:3f:73:09:17:08:38:e7:69:30:f9:e2:bc: 12:77:ca:d9:a3:fe:75:05:c3:20:f0:47:fe:8b:0e: e2:8a:96:5b:db:41:a1:42:97:17:a8:fd:11:20:55: 7d:c6:55:3c:62:c3:3e:95:70:db:08:1f:ba:a8:85: b0:7f:99:1a:7f:1b:08:bf:f5:29:20:9c:4e:5a:38: a1:5a:72:7f:bf:73:27:17:fb:26:d8:cd:b2:5d:a2: ab:b0:b6:24:cf:22:8a:a7:c0:c5:e4:d0:72:3c:0c: f1:02:2a:47:df:37:b5:87:97:c0:b0:e7:de:33:d1: 37:12:79:a7:ae:ad:67:cc:97:e1:0c:64:06:4f:0d: 52:5e:47:cf:c7:7a:f3:f6:c2:ab:bf:00:df:82:8c: 66:5d:5d:21:b6:23:de:a1:d7:99:09:8f:13:27:5d: e7:7e:65:87:56:d7:93:a9:f8:e3:6f:31:c5:77:c8: f6:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:11:FF:24:E0:93:23:89:51:8D:0D:B0:66:2E:32:E4:D2:38:E3:43 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gBH_JOCTI4lRjQ2wZi4y5NI440M.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.192.0/21 Signature Algorithm: sha256WithRSAEncryption 85:5f:3d:0d:b8:bc:9b:37:8c:05:63:1c:72:d6:38:30:de:70: 4e:2d:c6:62:e7:f7:97:49:45:b2:2a:f9:1c:bd:6c:b8:75:5a: 7a:06:c2:33:ad:9f:5b:c5:32:91:9d:58:ef:0a:c3:a7:43:36: de:9d:c3:f2:93:b0:34:4e:eb:0e:6c:37:2e:6e:08:4d:ae:48: 4b:a8:69:b2:a1:40:88:da:c4:e5:cd:fc:d1:a7:f4:1b:69:94: 30:54:19:d3:68:3d:e4:71:4d:a0:56:a7:d0:72:ea:64:d9:0a: 51:87:de:5c:ff:bc:d6:8e:d6:17:b1:2a:8c:b4:1d:9f:27:e2: 3e:9f:69:cc:cf:e1:32:f6:1b:2c:4b:77:df:67:92:5e:84:c2: 05:35:dc:e1:d2:cc:90:14:d4:0c:8b:1f:cb:d1:93:e0:a0:d8: ae:25:a8:b1:07:86:57:fc:c4:85:d9:22:7f:c1:4e:f5:ff:0c: 47:5d:0c:1b:e4:02:9b:1e:e8:d5:88:37:e8:4e:02:2a:98:fc: 88:54:fe:e6:ce:83:cf:39:6a:32:3f:a8:e4:51:a6:7d:e0:05: 14:0c:e4:51:7f:9a:23:fe:13:a3:46:d6:f5:1c:1f:dc:31:b1: 28:0d:37:16:68:ab:e9:3f:a3:05:b3:82:c0:11:92:da:f8:a5: 0d:c7:27:22 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOtUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3NDlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDgwMTFGRjI0RTA5MzIz ODk1MThEMERCMDY2MkUzMkU0RDIzOEUzNDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXF4P1t+w2dyBrHlX/7IGNrdUCI38z7BumjoX4gIfkFzXbRRDI 72nHFZIb7IQEYfhWO5C6Tzdok6PiCHWdyBPZ1dTqsvgR/IXXv7H0vD9zCRcIOOdp MPnivBJ3ytmj/nUFwyDwR/6LDuKKllvbQaFClxeo/REgVX3GVTxiwz6VcNsIH7qo hbB/mRp/Gwi/9SkgnE5aOKFacn+/cycX+ybYzbJdoquwtiTPIoqnwMXk0HI8DPEC KkffN7WHl8Cw594z0TcSeaeurWfMl+EMZAZPDVJeR8/HevP2wqu/AN+CjGZdXSG2 I96h15kJjxMnXed+ZYdW15Op+ONvMcV3yPavAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUgBH/JOCTI4lRjQ2wZi4y5NI440MwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2dCSF9KT0NUSTRsUmpRMnda aTR5NU5JNDQwTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wsAwDQYJKoZIhvcNAQELBQADggEBAIVfPQ24vJs3jAVjHHLWODDecE4txmLn95dJ RbIq+Ry9bLh1WnoGwjOtn1vFMpGdWO8Kw6dDNt6dw/KTsDRO6w5sNy5uCE2uSEuo abKhQIjaxOXN/NGn9BtplDBUGdNoPeRxTaBWp9By6mTZClGH3lz/vNaO1hexKoy0 HZ8n4j6faczP4TL2GyxLd99nkl6EwgU13OHSzJAU1AyLH8vRk+Cg2K4lqLEHhlf8 xIXZIn/BTvX/DEddDBvkApse6NWIN+hOAiqY/IhU/ubOg885ajI/qORRpn3gBRQM 5FF/miP+E6NG1vUcH9wxsSgNNxZoq+k/owWzgsARktr4pQ3HJyI= -----END CERTIFICATE-----Generated at Fri Oct 24 19:21:29 2025 by rpki-client