$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iqMt0lf8iv-M59NKm0-ImwZh3vo.roa File: iqMt0lf8iv-M59NKm0-ImwZh3vo.roa (raw, json) Hash identifier: Xiqk/CS8PcRACk+m1OWoJcLuWFg5iZw7d6wvvPBWkEQ= Subject key identifier: 8A:A3:2D:D2:57:FC:8A:FF:8C:E7:D3:4A:9B:4F:88:9B:06:61:DE:FA Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3823 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iqMt0lf8iv-M59NKm0-ImwZh3vo.roa Signing time: Fri 22 Aug 2025 08:44:59 +0000 ROA not before: Fri 22 Aug 2025 08:44:59 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.192.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14371 (0x3823) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:44:59 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=8AA32DD257FC8AFF8CE7D34A9B4F889B0661DEFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:fe:37:7d:a9:9b:ea:d5:b9:c5:12:d1:1a:a5: fc:f2:3b:53:64:9d:b5:ff:70:a0:cb:42:54:2e:cd: e3:17:53:8a:68:5e:62:2e:21:38:70:1f:a2:bb:c1: c0:da:0a:61:c3:a0:47:44:b1:43:5c:9d:16:a2:78: 3a:2c:ae:36:65:bc:3e:ed:5b:95:62:f1:06:17:de: 92:6d:b7:94:b5:6d:d1:14:1e:1a:ce:47:a0:0e:51: 45:f7:0c:ab:fd:53:c1:d1:b4:ce:ef:6f:d4:60:2c: fb:d0:5b:9b:af:72:a0:8f:07:f9:74:47:da:b9:a0: 18:e7:20:1c:66:3e:ea:e4:10:57:8f:5d:43:7f:66: af:13:15:0c:c3:24:d9:bb:01:35:ae:09:20:be:e2: 61:a0:07:7d:25:68:5f:48:47:4f:be:94:5b:b1:a6: 9d:9e:1e:40:5b:9f:a0:b0:1e:90:7b:96:6d:5d:de: b9:56:8f:f4:b2:3a:d1:89:6e:7b:13:a2:56:63:a5: 6d:57:a2:90:14:bb:87:02:87:54:20:8c:e8:dc:44: 44:e8:d2:86:bd:be:84:67:7d:32:eb:d5:83:ca:5a: ec:4f:dd:11:fd:5a:f2:52:b0:a7:0b:06:85:29:63: e1:09:1b:e5:51:6a:8e:48:67:e0:06:a7:69:a3:54: 50:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:A3:2D:D2:57:FC:8A:FF:8C:E7:D3:4A:9B:4F:88:9B:06:61:DE:FA X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iqMt0lf8iv-M59NKm0-ImwZh3vo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.8.0/21 Signature Algorithm: sha256WithRSAEncryption 89:d6:8e:48:99:c8:9a:87:17:b0:6d:f5:da:73:b2:9b:0b:02: 74:48:2a:83:0e:06:58:3e:3b:5f:2b:8d:1a:e4:5b:fa:8d:97: b4:25:b6:f1:d7:59:48:5a:c0:de:e7:2b:8d:a1:2a:48:4f:da: e4:e5:44:e1:3a:4b:d2:22:53:01:a5:a7:a0:78:6f:8f:94:d0: ee:1b:14:02:92:63:d1:b0:28:42:29:8b:49:d1:ef:db:60:c2: 1e:9d:05:00:57:e9:fe:f3:60:1e:ce:31:e0:e4:b2:a4:41:21: d5:6f:24:3d:89:7c:c1:0e:55:24:30:71:85:e0:24:86:6a:f8: 04:d9:82:d5:f6:b0:ca:04:3b:3c:16:41:9e:27:a0:1f:43:56: d3:7d:be:20:84:63:72:df:47:a3:16:dd:84:d4:bd:10:c1:fe: 9d:7d:02:2d:01:10:f1:84:e1:1a:73:54:23:a7:a1:af:4d:3c: a0:a9:18:45:c4:fc:da:cc:66:ee:47:c9:45:19:02:c7:d9:c9: fa:35:70:6f:9e:e2:f4:12:9d:54:98:c0:61:7b:95:54:16:e1: 9a:bb:ed:45:8c:cc:9c:fa:bd:d4:2d:d3:c5:f1:f9:95:dc:c1: 3f:80:48:55:e9:42:40:8c:00:71:f9:ee:55:cd:58:9f:8f:1b: c0:80:1d:cc -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOCMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ0NTlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDhBQTMyREQyNTdGQzhB RkY4Q0U3RDM0QTlCNEY4ODlCMDY2MURFRkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDq/jd9qZvq1bnFEtEapfzyO1NknbX/cKDLQlQuzeMXU4poXmIu IThwH6K7wcDaCmHDoEdEsUNcnRaieDosrjZlvD7tW5Vi8QYX3pJtt5S1bdEUHhrO R6AOUUX3DKv9U8HRtM7vb9RgLPvQW5uvcqCPB/l0R9q5oBjnIBxmPurkEFePXUN/ Zq8TFQzDJNm7ATWuCSC+4mGgB30laF9IR0++lFuxpp2eHkBbn6CwHpB7lm1d3rlW j/SyOtGJbnsTolZjpW1XopAUu4cCh1QgjOjcRETo0oa9voRnfTLr1YPKWuxP3RH9 WvJSsKcLBoUpY+EJG+VRao5IZ+AGp2mjVFBRAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUiqMt0lf8iv+M59NKm0+ImwZh3vowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2lxTXQwbGY4aXYtTTU5Tktt MC1JbXdaaDN2by5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wAgwDQYJKoZIhvcNAQELBQADggEBAInWjkiZyJqHF7Bt9dpzspsLAnRIKoMOBlg+ O18rjRrkW/qNl7QltvHXWUhawN7nK42hKkhP2uTlROE6S9IiUwGlp6B4b4+U0O4b FAKSY9GwKEIpi0nR79tgwh6dBQBX6f7zYB7OMeDksqRBIdVvJD2JfMEOVSQwcYXg JIZq+ATZgtX2sMoEOzwWQZ4noB9DVtN9viCEY3LfR6MW3YTUvRDB/p19Ai0BEPGE 4RpzVCOnoa9NPKCpGEXE/NrMZu5HyUUZAsfZyfo1cG+e4vQSnVSYwGF7lVQW4Zq7 7UWMzJz6vdQt08Xx+ZXcwT+ASFXpQkCMAHH57lXNWJ+PG8CAHcw= -----END CERTIFICATE-----Generated at Fri Oct 24 19:24:57 2025 by rpki-client