$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kDe2DoQ3SPh_ERsPkj4mKcis1fs.roa File: kDe2DoQ3SPh_ERsPkj4mKcis1fs.roa (raw, json) Hash identifier: HOqTxp8bIpPLbuKKObEj77pZq9V7kG4A9aM45N7WIR4= Subject key identifier: 90:37:B6:0E:84:37:48:F8:7F:11:1B:0F:92:3E:26:29:C8:AC:D5:FB Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3917 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kDe2DoQ3SPh_ERsPkj4mKcis1fs.roa Signing time: Fri 22 Aug 2025 08:45:57 +0000 ROA not before: Fri 22 Aug 2025 08:45:57 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 106.1.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14615 (0x3917) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:57 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=9037B60E843748F87F111B0F923E2629C8ACD5FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:a0:59:d2:80:25:28:3a:7e:28:9c:db:a4:49: 67:a2:ba:91:48:7e:3c:39:e5:a1:fa:ab:6e:0b:4e: 40:31:8d:f2:77:c6:e7:d8:c1:7e:77:24:68:94:4b: 88:42:2b:bd:18:39:3e:dc:d6:1c:98:82:44:cb:a7: b1:b4:02:2d:19:51:45:eb:b2:b7:92:70:e4:78:cc: e3:be:60:4c:1f:92:f5:28:6d:61:d6:9e:60:86:f5: 02:89:9c:c4:51:2e:b2:24:99:bd:a0:59:0c:70:e0: 3d:eb:fb:f5:16:ea:bb:d4:40:26:e9:cc:88:d6:3e: 07:29:77:6c:58:71:bc:03:61:ba:5a:65:c3:b9:c8: 48:ae:9d:56:43:65:1f:a7:c5:81:71:de:32:7f:d2: 0e:4b:15:a5:b4:b3:65:fe:26:a6:cf:67:c9:99:ac: ff:d0:2c:bd:da:3f:28:82:ff:86:44:8d:d9:1c:3f: 73:9c:40:9d:b1:6f:10:85:51:d3:64:62:4e:d3:2c: 05:67:73:dc:79:fe:3a:0f:61:49:61:c2:2e:3b:31: 06:da:1f:c8:da:17:6d:6b:d1:7b:e0:a4:18:f9:9d: 2d:46:48:ef:9c:dc:7c:a9:88:08:1c:cc:eb:32:0a: 37:f2:59:d1:aa:a1:f2:2b:df:ed:c9:91:cc:cd:40: df:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:37:B6:0E:84:37:48:F8:7F:11:1B:0F:92:3E:26:29:C8:AC:D5:FB X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kDe2DoQ3SPh_ERsPkj4mKcis1fs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.176.0/22 Signature Algorithm: sha256WithRSAEncryption 39:2d:28:59:41:1d:53:e8:74:19:2e:6e:ba:7c:47:2a:be:8c: 83:3c:cd:e8:74:13:2c:75:a0:ff:6c:f4:7a:a6:2c:58:d3:f8: 51:ad:76:fd:86:84:c9:da:3c:4c:b3:57:01:10:cf:4e:77:9f: da:47:d2:7d:21:bf:2a:e3:27:72:d1:d7:aa:c8:50:b7:51:01: 8f:4e:6a:da:3f:22:58:57:4f:30:30:09:4a:0f:da:79:ca:cf: 60:e0:45:c5:68:86:be:aa:76:7a:8c:c8:b7:d7:13:67:67:85: aa:5f:4c:6f:3b:bf:b5:fc:9d:e6:ea:b5:1d:66:ca:94:b6:0a: 06:b2:13:36:99:87:4b:73:43:7d:ea:1a:79:48:01:59:07:93: 0b:fb:08:72:c1:04:ce:16:f1:ef:6a:c4:b1:d0:8d:be:14:45: 72:5e:78:9b:63:86:3e:32:f0:f1:40:66:75:2d:83:92:0e:a0: 73:56:b1:f9:38:7c:cf:c9:87:bd:4f:7b:0e:b1:28:03:70:3c: 25:2b:0c:ca:39:2a:56:18:0a:85:54:59:b6:5b:e2:99:4d:c6: cf:ac:d3:f0:92:15:7a:a9:ec:c6:19:06:31:b9:8d:de:0a:0a: 6e:bd:d8:0b:b4:ed:8d:29:b7:92:f3:26:5f:c1:54:45:61:d8: 7d:7a:70:ca -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICORcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1NTdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDkwMzdCNjBFODQzNzQ4 Rjg3RjExMUIwRjkyM0UyNjI5QzhBQ0Q1RkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDwoFnSgCUoOn4onNukSWeiupFIfjw55aH6q24LTkAxjfJ3xufY wX53JGiUS4hCK70YOT7c1hyYgkTLp7G0Ai0ZUUXrsreScOR4zOO+YEwfkvUobWHW nmCG9QKJnMRRLrIkmb2gWQxw4D3r+/UW6rvUQCbpzIjWPgcpd2xYcbwDYbpaZcO5 yEiunVZDZR+nxYFx3jJ/0g5LFaW0s2X+JqbPZ8mZrP/QLL3aPyiC/4ZEjdkcP3Oc QJ2xbxCFUdNkYk7TLAVnc9x5/joPYUlhwi47MQbaH8jaF21r0XvgpBj5nS1GSO+c 3HypiAgczOsyCjfyWdGqofIr3+3JkczNQN9jAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUkDe2DoQ3SPh/ERsPkj4mKcis1fswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2tEZTJEb1EzU1BoX0VSc1Br ajRtS2NpczFmcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq AbAwDQYJKoZIhvcNAQELBQADggEBADktKFlBHVPodBkubrp8Ryq+jIM8zeh0Eyx1 oP9s9HqmLFjT+FGtdv2GhMnaPEyzVwEQz053n9pH0n0hvyrjJ3LR16rIULdRAY9O ato/IlhXTzAwCUoP2nnKz2DgRcVohr6qdnqMyLfXE2dnhapfTG87v7X8nebqtR1m ypS2CgayEzaZh0tzQ33qGnlIAVkHkwv7CHLBBM4W8e9qxLHQjb4URXJeeJtjhj4y 8PFAZnUtg5IOoHNWsfk4fM/Jh71Pew6xKANwPCUrDMo5KlYYCoVUWbZb4plNxs+s 0/CSFXqp7MYZBjG5jd4KCm692Au07Y0pt5LzJl/BVEVh2H16cMo= -----END CERTIFICATE-----Generated at Fri Oct 24 19:27:42 2025 by rpki-client