$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jBNbSNZvmpj25MUi0L7_wwhyerk.roa File: jBNbSNZvmpj25MUi0L7_wwhyerk.roa (raw, json) Hash identifier: uxHtBq+tjNJj56F1/nkXD1dhfHfw4AQJVMkq8zGX6wU= Subject key identifier: 8C:13:5B:48:D6:6F:9A:98:F6:E4:C5:22:D0:BE:FF:C3:08:72:7A:B9 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 39EC Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jBNbSNZvmpj25MUi0L7_wwhyerk.roa Signing time: Fri 22 Aug 2025 08:46:48 +0000 ROA not before: Fri 22 Aug 2025 08:46:48 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 118.232.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14828 (0x39ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:48 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=8C135B48D66F9A98F6E4C522D0BEFFC308727AB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c5:30:bd:e0:08:31:91:3e:e8:b6:bf:86:80: cf:c8:a5:3a:46:1f:4a:90:3b:59:32:43:f6:a3:18: ef:1c:fd:a6:6f:72:c6:78:41:3e:90:9e:8c:c0:4b: a5:6b:e3:33:ea:59:f2:28:83:7a:74:cc:a5:7c:50: 44:29:52:f2:d2:a6:a4:56:2e:dd:f4:68:f5:12:d4: 56:2b:ea:b0:b9:db:2c:57:32:83:f3:77:96:b7:73: b1:f8:a3:d6:31:cc:2e:27:74:81:15:cc:50:85:e7: 1a:8b:4b:71:2a:bd:b3:83:d5:4a:c6:8f:8f:be:e4: e1:a5:9b:f5:a3:c2:bd:d7:35:12:18:b0:08:7f:d2: a6:fa:36:58:49:96:e7:62:6d:7c:7b:02:4c:00:48: 7d:50:26:17:b7:d8:f3:40:bd:0a:20:35:02:a9:99: 19:e8:b6:03:c3:f3:6b:88:df:5d:c0:aa:7e:7a:b3: d9:0d:a9:ef:9b:fe:e0:f4:f9:e9:20:69:7a:07:d9: a2:4d:96:1e:ea:76:53:64:13:b7:c6:38:77:30:5a: 05:96:dd:53:58:49:1d:eb:8e:1b:00:63:e5:d8:40: 79:4f:b3:f5:74:19:83:24:86:94:cb:0a:05:b8:db: 32:2d:eb:c4:8a:b5:ff:32:b5:ad:1b:78:c8:72:c5: ae:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:13:5B:48:D6:6F:9A:98:F6:E4:C5:22:D0:BE:FF:C3:08:72:7A:B9 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jBNbSNZvmpj25MUi0L7_wwhyerk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.48.0/22 Signature Algorithm: sha256WithRSAEncryption 60:0b:44:de:69:5c:3c:fa:f3:71:c6:d6:bb:ef:58:86:53:db: 19:b2:48:a4:0f:4b:31:cd:ee:7f:2f:3f:07:21:7b:e1:06:cb: 0a:f6:08:e1:d6:b7:52:92:be:0e:30:8d:b2:a4:b4:2b:6b:26: 7a:64:98:bb:94:b9:60:f0:03:bd:71:e5:10:02:11:d5:86:a7: ad:e5:62:1a:7b:ea:ea:d6:5f:b2:56:34:fe:b8:69:46:da:62: 1c:10:ca:ad:da:a7:f6:49:c5:a5:19:05:92:22:d2:d9:d9:ad: e3:5f:6d:88:e1:77:69:ef:60:e9:b3:bf:76:d8:97:d0:d8:64: 76:13:58:68:a6:63:4d:1a:07:16:d7:a6:b0:bc:0c:7b:39:97: 15:b3:0f:84:75:b3:8f:35:72:32:09:9e:ca:c7:0d:3f:fa:a9: 17:25:c9:a2:9f:1d:f3:b7:26:29:6a:f4:47:a1:7d:da:08:12: 68:7a:09:88:c9:02:e7:c4:31:e5:85:3e:df:b7:88:d6:2a:79: df:c2:f9:f1:92:b6:e5:2b:1e:07:99:c5:63:b0:17:31:87:71: d7:47:7e:62:b3:28:52:6c:a3:95:cd:a9:66:6b:64:c2:1b:3f: ae:68:5c:4c:07:77:7b:76:bd:b1:e1:58:f9:dd:01:21:64:d9: c2:5f:1e:70 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOewwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2NDhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDhDMTM1QjQ4RDY2RjlB OThGNkU0QzUyMkQwQkVGRkMzMDg3MjdBQjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAxTC94AgxkT7otr+GgM/IpTpGH0qQO1kyQ/ajGO8c/aZvcsZ4 QT6QnozAS6Vr4zPqWfIog3p0zKV8UEQpUvLSpqRWLt30aPUS1FYr6rC52yxXMoPz d5a3c7H4o9YxzC4ndIEVzFCF5xqLS3EqvbOD1UrGj4++5OGlm/Wjwr3XNRIYsAh/ 0qb6NlhJludibXx7AkwASH1QJhe32PNAvQogNQKpmRnotgPD82uI313Aqn56s9kN qe+b/uD0+ekgaXoH2aJNlh7qdlNkE7fGOHcwWgWW3VNYSR3rjhsAY+XYQHlPs/V0 GYMkhpTLCgW42zIt68SKtf8yta0beMhyxa4BAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUjBNbSNZvmpj25MUi0L7/wwhyerkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2pCTmJTTlp2bXBqMjVNVWkw TDdfd3doeWVyay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6DAwDQYJKoZIhvcNAQELBQADggEBAGALRN5pXDz683HG1rvvWIZT2xmySKQPSzHN 7n8vPwche+EGywr2COHWt1KSvg4wjbKktCtrJnpkmLuUuWDwA71x5RACEdWGp63l Yhp76urWX7JWNP64aUbaYhwQyq3ap/ZJxaUZBZIi0tnZreNfbYjhd2nvYOmzv3bY l9DYZHYTWGimY00aBxbXprC8DHs5lxWzD4R1s481cjIJnsrHDT/6qRclyaKfHfO3 Jilq9EehfdoIEmh6CYjJAufEMeWFPt+3iNYqed/C+fGStuUrHgeZxWOwFzGHcddH fmKzKFJso5XNqWZrZMIbP65oXEwHd3t2vbHhWPndASFk2cJfHnA= -----END CERTIFICATE-----Generated at Fri Oct 24 19:21:44 2025 by rpki-client