$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hdldxYpveB8v8FevpKpQNqcUP0I.roa File: hdldxYpveB8v8FevpKpQNqcUP0I.roa (raw, json) Hash identifier: eYrdTCzKP76mCSTNQKnoe1KFqVC91OYOHm3+TDg+JL0= Subject key identifier: 85:D9:5D:C5:8A:6F:78:1F:2F:F0:57:AF:A4:AA:50:36:A7:14:3F:42 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3B08 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hdldxYpveB8v8FevpKpQNqcUP0I.roa Signing time: Fri 22 Aug 2025 08:48:00 +0000 ROA not before: Fri 22 Aug 2025 08:48:00 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9924 IP address blocks: 123.195.8.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 07:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15112 (0x3b08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:48:00 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=85D95DC58A6F781F2FF057AFA4AA5036A7143F42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4c:4f:55:c3:be:77:63:12:d0:80:36:26:53: 31:45:ce:08:10:d2:6a:a8:e0:a5:b5:18:e3:ac:be: 40:82:89:82:7b:c5:7e:07:11:2e:a8:0d:e4:e3:b7: f4:c6:9a:f1:9f:e0:fa:b2:ae:b2:fc:52:7e:29:c3: b3:1f:a1:60:51:4c:c8:23:7b:ab:dd:70:82:5f:33: a8:d2:9c:84:e9:9c:91:30:2c:92:37:6d:7a:16:1d: 36:90:c0:d5:c8:0c:07:58:86:64:dd:3f:d7:ec:71: 33:52:fb:aa:7f:85:7b:8b:2e:b8:1b:38:ab:33:f1: 38:c3:08:55:85:a1:3d:25:fe:1e:c8:aa:2d:a7:25: e3:fd:c8:5c:9c:80:d7:d8:c1:d3:d9:0e:07:c4:17: ac:59:82:6b:e4:c2:6d:82:14:34:54:e5:b9:50:85: 48:cb:53:7f:9f:24:f3:d4:00:69:24:b9:2e:61:21: c6:a1:13:f8:5e:57:26:c8:ac:f4:ef:0e:63:26:47: 4e:99:2b:3c:45:7f:e5:59:8b:c6:5c:7e:fb:cc:54: b9:3e:15:0e:47:3b:88:de:0a:88:cb:db:3d:63:e0: e7:54:a7:97:52:92:14:17:6d:3a:1b:49:f3:f8:c4: 1f:19:76:59:3f:e3:90:f0:96:c3:a4:7b:e4:32:04: 6f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D9:5D:C5:8A:6F:78:1F:2F:F0:57:AF:A4:AA:50:36:A7:14:3F:42 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hdldxYpveB8v8FevpKpQNqcUP0I.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.8.0/23 Signature Algorithm: sha256WithRSAEncryption 4d:58:4d:9a:1d:a1:78:49:fb:5e:2d:17:ea:21:1c:51:a2:7b: 48:97:10:df:69:d9:53:bf:fd:85:cf:30:06:8c:7e:b9:0f:06: 25:5a:4c:0c:8d:db:79:f3:09:a8:b4:76:61:27:b7:fe:4d:b7: 76:be:46:c9:0e:0c:95:3e:99:ce:00:91:b6:b0:6f:bb:89:79: f6:66:62:de:5a:b9:2f:ad:62:d0:07:fe:22:47:28:f5:05:be: e8:3b:9b:af:47:4a:43:fc:77:94:ba:b7:05:01:d8:fd:9d:e2: 47:08:f5:69:83:8d:c2:7b:e0:a3:ea:79:94:e9:9a:8a:a2:f5: ae:57:8b:64:11:f2:96:85:58:41:be:42:c9:e9:30:bd:e0:5b: bd:73:bd:d0:dc:ec:08:a7:9f:f8:0f:4e:09:f0:4b:5f:a5:59: d4:c8:9c:16:f7:7c:0f:9f:c9:c9:51:d2:38:38:eb:c8:c7:b0: a2:d0:ca:a5:b5:3a:10:c9:a4:a9:dd:c6:1d:d6:57:7d:08:fa: 77:18:0e:b5:d7:63:22:e9:e3:33:df:72:3e:6e:b1:4c:e6:8a: 03:27:21:09:7c:a7:a6:fd:2f:7c:11:87:e5:3a:1b:2a:56:97: 15:79:b6:1a:d9:0f:42:f2:d9:4e:09:ba:14:83:9d:26:9d:86: be:9e:77:c2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOwgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ4MDBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDg1RDk1REM1OEE2Rjc4 MUYyRkYwNTdBRkE0QUE1MDM2QTcxNDNGNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5TE9Vw753YxLQgDYmUzFFzggQ0mqo4KW1GOOsvkCCiYJ7xX4H ES6oDeTjt/TGmvGf4PqyrrL8Un4pw7MfoWBRTMgje6vdcIJfM6jSnITpnJEwLJI3 bXoWHTaQwNXIDAdYhmTdP9fscTNS+6p/hXuLLrgbOKsz8TjDCFWFoT0l/h7Iqi2n JeP9yFycgNfYwdPZDgfEF6xZgmvkwm2CFDRU5blQhUjLU3+fJPPUAGkkuS5hIcah E/heVybIrPTvDmMmR06ZKzxFf+VZi8ZcfvvMVLk+FQ5HO4jeCojL2z1j4OdUp5dS khQXbTobSfP4xB8Zdlk/45DwlsOke+QyBG/vAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUhdldxYpveB8v8FevpKpQNqcUP0IwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2hkbGR4WXB2ZUI4djhGZXZw S3BRTnFjVVAwSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF7 wwgwDQYJKoZIhvcNAQELBQADggEBAE1YTZodoXhJ+14tF+ohHFGie0iXEN9p2VO/ /YXPMAaMfrkPBiVaTAyN23nzCai0dmEnt/5Nt3a+RskODJU+mc4Akbawb7uJefZm Yt5auS+tYtAH/iJHKPUFvug7m69HSkP8d5S6twUB2P2d4kcI9WmDjcJ74KPqeZTp moqi9a5Xi2QR8paFWEG+QsnpML3gW71zvdDc7Ainn/gPTgnwS1+lWdTInBb3fA+f yclR0jg468jHsKLQyqW1OhDJpKndxh3WV30I+ncYDrXXYyLp4zPfcj5usUzmigMn IQl8p6b9L3wRh+U6GypWlxV5thrZD0Ly2U4JuhSDnSadhr6ed8I= -----END CERTIFICATE-----Generated at Fri Oct 24 04:48:24 2025 by rpki-client