$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jU9hZYmavhanx2WUbqtYGnW8wQE.roa File: jU9hZYmavhanx2WUbqtYGnW8wQE.roa (raw, json) Hash identifier: m/b+M+VfTRqSwnLnp44rKYhLNMYnz57mXwPHy1owJyQ= Subject key identifier: 8D:4F:61:65:89:9A:BE:16:A7:C7:65:94:6E:AB:58:1A:75:BC:C1:01 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3920 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jU9hZYmavhanx2WUbqtYGnW8wQE.roa Signing time: Fri 22 Aug 2025 08:45:59 +0000 ROA not before: Fri 22 Aug 2025 08:45:59 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 106.1.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14624 (0x3920) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:59 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=8D4F6165899ABE16A7C765946EAB581A75BCC101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:12:d9:d6:c3:5e:42:ed:4f:25:30:a6:9a:55: 22:e9:3f:60:f0:6d:82:e3:70:bc:09:62:07:5e:cc: 61:f5:07:26:25:6d:14:8b:17:fd:0c:e2:e2:84:eb: 35:47:1e:34:85:86:57:3f:f1:e2:dd:6f:af:be:ed: 57:67:65:57:94:e0:18:41:30:af:84:a4:1d:90:94: e0:6e:25:fd:36:44:71:6e:ed:07:a0:7e:d3:c5:24: 7d:68:94:0d:a4:42:b2:9c:4a:04:65:37:ce:e6:79: 12:e0:3e:a6:ee:b1:b1:7a:84:bc:b8:ee:38:cb:1e: 6c:33:4c:8d:48:31:ee:80:5a:6f:79:57:a4:50:c3: d9:35:d7:65:4f:a6:6c:d3:06:85:b0:67:f5:f3:d4: 63:69:e5:be:48:13:05:5e:c4:ca:08:13:30:ae:98: 25:15:4f:af:87:cd:2c:e6:a5:30:57:d3:e8:7b:2f: 76:8c:2f:a2:b0:72:2b:a7:ca:bc:d5:1f:ff:99:40: f7:36:3d:ae:c5:00:69:3b:8a:38:1f:d7:f8:df:f8: 7f:54:66:8c:89:6c:6b:9a:dc:16:c3:c9:7a:e3:85: 80:00:54:06:1e:68:92:3f:6f:b5:87:19:af:2a:31: 09:dd:60:ec:b9:44:f9:8c:4f:3e:e6:52:0c:49:77: 2b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:4F:61:65:89:9A:BE:16:A7:C7:65:94:6E:AB:58:1A:75:BC:C1:01 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jU9hZYmavhanx2WUbqtYGnW8wQE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.152.0/22 Signature Algorithm: sha256WithRSAEncryption 02:bb:4c:03:2e:13:bc:af:77:08:87:45:be:7d:35:25:50:81: c2:3c:46:bc:da:f4:22:c8:71:f8:fe:3e:a7:32:91:ed:0a:87: 7a:39:1b:a2:1b:19:d0:ae:9a:51:89:21:ee:67:6a:ce:68:a6: aa:9e:a8:00:7f:55:b1:ae:d2:7e:e1:71:f7:de:84:90:8c:94: fe:d2:0d:73:9c:62:6b:be:2d:72:a7:88:9c:98:c0:ed:da:f0: 31:da:66:d7:75:fb:b4:99:fd:96:00:87:05:e5:f0:6d:24:0f: 85:2b:02:98:26:c0:b4:78:42:4f:b0:2c:e9:d8:47:f8:c5:b5: c2:ea:3c:da:92:48:2b:64:b0:6d:ff:e2:5e:d4:d8:ff:5b:6d: 79:60:86:4c:f4:fe:63:d8:4e:ed:6f:70:7d:d5:8c:f0:16:7a: 01:af:e3:61:a5:4e:3d:62:14:17:01:f4:e2:c8:fa:a5:34:58: 38:93:80:39:19:7e:94:c2:ab:d2:1c:33:fd:1a:a9:c5:c5:3c: a6:00:b2:6c:de:df:d5:d1:61:43:63:7c:24:c0:24:ee:33:5c: e4:c2:da:b6:98:11:8c:d4:35:a6:a9:b0:01:15:34:b0:8e:66: 8a:5f:8c:7d:c0:55:22:80:77:2d:0c:25:0d:67:7d:2c:92:38: 00:e2:dd:45 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOSAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1NTlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDhENEY2MTY1ODk5QUJF MTZBN0M3NjU5NDZFQUI1ODFBNzVCQ0MxMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIEtnWw15C7U8lMKaaVSLpP2DwbYLjcLwJYgdezGH1ByYlbRSL F/0M4uKE6zVHHjSFhlc/8eLdb6++7VdnZVeU4BhBMK+EpB2QlOBuJf02RHFu7Qeg ftPFJH1olA2kQrKcSgRlN87meRLgPqbusbF6hLy47jjLHmwzTI1IMe6AWm95V6RQ w9k112VPpmzTBoWwZ/Xz1GNp5b5IEwVexMoIEzCumCUVT6+HzSzmpTBX0+h7L3aM L6KwciunyrzVH/+ZQPc2Pa7FAGk7ijgf1/jf+H9UZoyJbGua3BbDyXrjhYAAVAYe aJI/b7WHGa8qMQndYOy5RPmMTz7mUgxJdysRAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUjU9hZYmavhanx2WUbqtYGnW8wQEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2pVOWhaWW1hdmhhbngyV1Vi cXRZR25XOHdRRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq AZgwDQYJKoZIhvcNAQELBQADggEBAAK7TAMuE7yvdwiHRb59NSVQgcI8Rrza9CLI cfj+Pqcyke0Kh3o5G6IbGdCumlGJIe5nas5opqqeqAB/VbGu0n7hcffehJCMlP7S DXOcYmu+LXKniJyYwO3a8DHaZtd1+7SZ/ZYAhwXl8G0kD4UrApgmwLR4Qk+wLOnY R/jFtcLqPNqSSCtksG3/4l7U2P9bbXlghkz0/mPYTu1vcH3VjPAWegGv42GlTj1i FBcB9OLI+qU0WDiTgDkZfpTCq9IcM/0aqcXFPKYAsmze39XRYUNjfCTAJO4zXOTC 2raYEYzUNaapsAEVNLCOZopfjH3AVSKAdy0MJQ1nfSySOADi3UU= -----END CERTIFICATE-----Generated at Fri Oct 24 19:27:16 2025 by rpki-client