$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/koXOHwACtGNKDDEWz2aYx3ko5as.roa File: koXOHwACtGNKDDEWz2aYx3ko5as.roa (raw, json) Hash identifier: w/JdsZsrmAu3ApOMADwJVrzn20C26Wc0/su8J9OlCh8= Subject key identifier: 92:85:CE:1F:00:02:B4:63:4A:0C:31:16:CF:66:98:C7:79:28:E5:AB Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 391F Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/koXOHwACtGNKDDEWz2aYx3ko5as.roa Signing time: Fri 22 Aug 2025 08:45:59 +0000 ROA not before: Fri 22 Aug 2025 08:45:59 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 106.1.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14623 (0x391f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:59 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=9285CE1F0002B4634A0C3116CF6698C77928E5AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:36:da:79:e9:8d:ba:73:07:91:a0:6f:e2:15: a9:7d:21:4a:f6:8f:c3:1d:b5:59:e7:a9:55:2f:28: 52:57:c8:02:c8:7b:21:03:b2:d9:f6:66:bc:ac:52: 88:c5:2c:74:d3:79:b9:d4:7c:b3:34:5c:1f:b2:5e: 08:55:9c:68:49:01:17:e9:d1:7c:13:61:4c:b1:b8: f3:5b:35:2f:1a:ee:2f:ff:90:c9:5b:14:f7:36:0d: b3:5e:bd:c2:83:2a:d5:df:67:c3:30:58:19:85:71: 86:03:eb:9a:4f:80:e4:c1:a3:5d:53:a0:6c:3c:ab: 09:e9:b8:22:6a:34:96:74:12:92:b5:64:1a:dd:02: aa:da:61:1c:dd:1a:3d:cb:f2:34:95:d8:cc:89:bc: f4:bd:69:26:e0:9e:49:ed:89:8b:b6:43:77:4d:d9: 5b:dd:21:81:a1:70:fd:35:9c:0e:46:7e:ee:a1:20: d8:40:43:74:49:70:72:18:37:02:4a:5d:ca:d5:fa: fd:c2:65:97:35:a5:2a:8d:62:6a:94:b6:f6:83:43: 0e:70:25:3f:84:1d:af:14:d1:60:12:95:59:30:62: b5:23:18:1e:f9:2a:d0:6e:48:b2:7e:6d:fe:d9:37: b6:8d:63:69:ba:e0:28:3b:67:40:fb:e0:25:aa:bb: ad:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:85:CE:1F:00:02:B4:63:4A:0C:31:16:CF:66:98:C7:79:28:E5:AB X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/koXOHwACtGNKDDEWz2aYx3ko5as.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.156.0/22 Signature Algorithm: sha256WithRSAEncryption 8b:4b:27:23:5e:0f:b6:6c:f9:e4:0f:ea:36:ac:7d:97:53:7a: ef:63:80:62:4c:5d:30:db:a6:04:8a:14:b5:9d:03:e4:8e:89: 6b:56:52:1c:4d:af:56:9d:8b:8b:55:64:bd:cd:44:69:68:62: 06:3d:6a:7a:79:7e:b9:34:7c:2f:c8:7f:bd:82:7d:17:82:f5: bb:c8:7c:91:e4:f1:c3:46:f7:70:a6:ee:2b:63:87:9c:b5:4b: 89:eb:54:6e:ab:41:fa:dd:fb:16:07:9a:1f:8a:f4:53:2f:d4: 3d:42:d0:17:ac:fc:83:52:92:6a:f8:67:52:73:ab:f5:31:cd: 3b:da:ff:a1:f8:2a:d4:c3:72:6f:91:d7:ab:35:1d:01:41:9e: e1:a4:40:d8:9d:a1:c8:63:f1:ba:55:c0:4c:c3:5c:2c:a8:8c: ff:3f:a6:ef:26:6e:f3:e4:26:64:7d:97:14:86:44:db:37:c6: 9f:35:75:71:3f:e2:b7:24:be:e4:29:60:c5:e1:48:14:68:29: 58:a5:a8:25:05:8c:4f:07:ae:89:3a:3a:44:66:81:cb:58:6a: eb:20:7a:5e:2a:53:a5:fc:a9:9c:f7:81:71:b6:fa:08:b7:ce: 32:32:5f:51:fa:31:8d:d3:d1:e6:42:91:a0:a5:d7:a1:76:b6: a4:3b:ad:65 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOR8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1NTlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDkyODVDRTFGMDAwMkI0 NjM0QTBDMzExNkNGNjY5OEM3NzkyOEU1QUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9Ntp56Y26cweRoG/iFal9IUr2j8MdtVnnqVUvKFJXyALIeyED stn2ZrysUojFLHTTebnUfLM0XB+yXghVnGhJARfp0XwTYUyxuPNbNS8a7i//kMlb FPc2DbNevcKDKtXfZ8MwWBmFcYYD65pPgOTBo11ToGw8qwnpuCJqNJZ0EpK1ZBrd AqraYRzdGj3L8jSV2MyJvPS9aSbgnkntiYu2Q3dN2VvdIYGhcP01nA5Gfu6hINhA Q3RJcHIYNwJKXcrV+v3CZZc1pSqNYmqUtvaDQw5wJT+EHa8U0WASlVkwYrUjGB75 KtBuSLJ+bf7ZN7aNY2m64Cg7Z0D74CWqu63XAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUkoXOHwACtGNKDDEWz2aYx3ko5aswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2tvWE9Id0FDdEdOS0RERVd6 MmFZeDNrbzVhcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq AZwwDQYJKoZIhvcNAQELBQADggEBAItLJyNeD7Zs+eQP6jasfZdTeu9jgGJMXTDb pgSKFLWdA+SOiWtWUhxNr1adi4tVZL3NRGloYgY9anp5frk0fC/If72CfReC9bvI fJHk8cNG93Cm7itjh5y1S4nrVG6rQfrd+xYHmh+K9FMv1D1C0Bes/INSkmr4Z1Jz q/UxzTva/6H4KtTDcm+R16s1HQFBnuGkQNidochj8bpVwEzDXCyojP8/pu8mbvPk JmR9lxSGRNs3xp81dXE/4rckvuQpYMXhSBRoKVilqCUFjE8Hrok6OkRmgctYausg el4qU6X8qZz3gXG2+gi3zjIyX1H6MY3T0eZCkaCl16F2tqQ7rWU= -----END CERTIFICATE-----Generated at Fri Oct 24 19:27:15 2025 by rpki-client