$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/j8ZYndKo7M3Cti4WFB718IkGQPA.roa File: j8ZYndKo7M3Cti4WFB718IkGQPA.roa (raw, json) Hash identifier: Kgu+57F6hkFbEjBjw+2qBm3Qi0vo9s3h6iJ/dOsckJc= Subject key identifier: 8F:C6:58:9D:D2:A8:EC:CD:C2:B6:2E:16:14:1E:F5:F0:89:06:40:F0 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3A78 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/j8ZYndKo7M3Cti4WFB718IkGQPA.roa Signing time: Fri 22 Aug 2025 08:47:23 +0000 ROA not before: Fri 22 Aug 2025 08:47:23 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 106.1.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14968 (0x3a78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:23 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=8FC6589DD2A8ECCDC2B62E16141EF5F0890640F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6a:83:94:13:37:fa:f1:63:12:b2:20:6b:cf: 01:23:04:e8:cd:bc:71:d5:a4:c1:a6:1a:a2:85:21: 1b:ac:10:e1:b0:dd:03:74:ae:9b:96:89:7d:e0:a3: 16:cc:dd:3e:66:03:6a:db:12:3b:66:f4:a0:ec:66: 27:cf:77:7d:80:cb:76:97:4d:04:71:59:d8:4c:42: 96:eb:24:8f:e8:5c:94:84:3d:c8:7e:4a:30:84:9c: 5a:84:59:80:7e:10:0f:73:3f:c4:dd:9b:82:58:5e: 13:1c:46:d6:4f:18:e7:1a:03:bd:d5:5e:4f:7b:ea: 9e:58:81:75:77:a8:04:e0:80:65:19:05:ee:8f:6b: 1c:de:d0:5a:9a:92:45:02:67:a4:0c:a5:3b:73:03: aa:a7:37:fe:8b:66:00:d8:56:de:8c:e1:94:12:a3: 85:64:af:f8:dc:04:de:e6:4f:5a:2f:c2:60:17:82: c1:ef:c5:ef:8d:e1:72:0b:79:8a:bf:3c:9b:3f:70: ac:c2:ca:f0:06:32:5a:57:3b:aa:e5:99:97:4e:db: 98:6d:ae:42:9e:05:93:25:ee:fd:36:d9:10:22:97: 54:6a:66:15:c9:b3:f1:4f:27:79:51:83:db:9c:d2: f3:1d:90:f9:41:78:cd:ac:fe:bb:c6:bd:8f:9e:a8: fc:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:C6:58:9D:D2:A8:EC:CD:C2:B6:2E:16:14:1E:F5:F0:89:06:40:F0 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/j8ZYndKo7M3Cti4WFB718IkGQPA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.102.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:30:85:10:0b:37:94:6f:5a:ff:9e:7e:20:11:e4:ea:d8:46: de:4b:a2:c6:73:fd:c6:4d:ed:e7:aa:27:bb:58:28:a4:6b:12: 1e:67:1c:bd:e5:d7:df:7c:5b:c6:df:0e:a8:72:85:be:e8:8d: 63:f8:cf:4b:65:3b:6f:48:1a:ff:2e:fd:25:b8:0c:c4:3d:84: 8b:51:8a:6c:9b:3a:7f:db:e3:ed:43:93:67:06:59:4d:ec:1c: 7e:a7:ff:2f:01:4e:25:43:21:c0:18:28:e6:3b:d6:66:c5:a6: f5:eb:05:c4:95:bb:90:b3:8f:c6:e1:80:6b:c2:04:27:b7:12: 95:7a:71:99:fb:17:48:02:af:96:20:83:a5:8a:ce:5d:f9:92: 79:bb:cb:1e:ae:ae:96:ff:ab:44:df:9c:a3:3f:07:e0:3f:c5: 81:15:54:31:3e:1e:18:44:94:42:15:d3:78:ac:38:bb:6f:b2: 21:74:e1:db:68:19:93:a8:1f:7b:80:5e:f5:56:e2:be:3d:88: 4c:c5:97:8e:da:04:08:25:a4:d3:86:2b:18:1d:50:01:4b:86: 5a:13:5b:e7:ef:2e:a1:cc:3b:1d:1c:27:d0:56:59:98:96:f6: cf:c2:21:1d:24:0d:87:aa:76:bb:d5:50:cc:3a:19:3d:89:dc: 8c:c0:82:4c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOngwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3MjNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDhGQzY1ODlERDJBOEVD Q0RDMkI2MkUxNjE0MUVGNUYwODkwNjQwRjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3aoOUEzf68WMSsiBrzwEjBOjNvHHVpMGmGqKFIRusEOGw3QN0 rpuWiX3goxbM3T5mA2rbEjtm9KDsZifPd32Ay3aXTQRxWdhMQpbrJI/oXJSEPch+ SjCEnFqEWYB+EA9zP8Tdm4JYXhMcRtZPGOcaA73VXk976p5YgXV3qATggGUZBe6P axze0FqakkUCZ6QMpTtzA6qnN/6LZgDYVt6M4ZQSo4Vkr/jcBN7mT1ovwmAXgsHv xe+N4XILeYq/PJs/cKzCyvAGMlpXO6rlmZdO25htrkKeBZMl7v022RAil1RqZhXJ s/FPJ3lRg9uc0vMdkPlBeM2s/rvGvY+eqPwtAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUj8ZYndKo7M3Cti4WFB718IkGQPAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2o4WlluZEtvN00zQ3RpNFdG QjcxOElrR1FQQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq AWYwDQYJKoZIhvcNAQELBQADggEBAIswhRALN5RvWv+efiAR5OrYRt5LosZz/cZN 7eeqJ7tYKKRrEh5nHL3l1998W8bfDqhyhb7ojWP4z0tlO29IGv8u/SW4DMQ9hItR imybOn/b4+1Dk2cGWU3sHH6n/y8BTiVDIcAYKOY71mbFpvXrBcSVu5Czj8bhgGvC BCe3EpV6cZn7F0gCr5Ygg6WKzl35knm7yx6urpb/q0TfnKM/B+A/xYEVVDE+HhhE lEIV03isOLtvsiF04dtoGZOoH3uAXvVW4r49iEzFl47aBAglpNOGKxgdUAFLhloT W+fvLqHMOx0cJ9BWWZiW9s/CIR0kDYeqdrvVUMw6GT2J3IzAgkw= -----END CERTIFICATE-----Generated at Fri Oct 24 19:21:23 2025 by rpki-client