$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kycAE-zzPXhKLFPAiZZq-9CpXCk.roa File: kycAE-zzPXhKLFPAiZZq-9CpXCk.roa (raw, json) Hash identifier: m6So2Bozw2luCnY4aqYnO/mjM2cGj4aoGVhq73QdJRg= Subject key identifier: 93:27:00:13:EC:F3:3D:78:4A:2C:53:C0:89:96:6A:FB:D0:A9:5C:29 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3891 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kycAE-zzPXhKLFPAiZZq-9CpXCk.roa Signing time: Fri 22 Aug 2025 08:45:25 +0000 ROA not before: Fri 22 Aug 2025 08:45:25 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.195.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14481 (0x3891) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:25 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=93270013ECF33D784A2C53C089966AFBD0A95C29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:1b:12:ab:10:ea:e0:e6:89:c0:91:fa:f7:ac: 9f:52:7a:db:13:d4:d1:bf:bc:ba:46:3a:51:de:19: cd:5f:61:f9:c3:14:6c:b4:24:43:84:4d:8f:39:cf: ef:8b:cb:2d:1e:14:c0:ea:ab:5c:eb:4b:39:32:85: 2b:25:3e:dc:7e:03:f9:46:dd:34:6c:d4:34:f1:e4: c2:ce:5a:d1:f3:18:20:2b:16:f2:7d:a0:02:8e:fd: 39:5b:a5:c3:1f:96:13:a3:52:e9:da:de:da:be:3e: 5c:0c:d7:1c:f1:27:da:bc:d9:68:b2:5b:c7:cf:54: 0e:10:76:ed:ed:a1:a5:75:81:9b:24:d1:91:f7:bf: 9b:ed:b0:45:2e:e8:51:45:df:0a:1f:7a:11:a8:cf: 59:b0:22:2a:f8:80:88:ab:f4:14:40:c5:dc:21:05: c0:db:61:a8:3b:33:d8:f9:be:86:a3:a8:41:dc:aa: c4:b1:5d:54:61:d8:26:bb:d5:b1:48:14:23:bf:7b: fd:36:e9:0a:42:2c:a7:f5:73:5d:3a:e8:04:db:f4: 09:0a:38:4a:55:dc:6d:01:c1:89:07:44:a2:03:6f: 4d:ad:05:53:25:96:a7:12:06:e8:0b:59:9e:8d:78: 74:66:76:98:b2:67:3e:11:63:51:80:a7:15:c3:06: 2f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:27:00:13:EC:F3:3D:78:4A:2C:53:C0:89:96:6A:FB:D0:A9:5C:29 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kycAE-zzPXhKLFPAiZZq-9CpXCk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.237.0/24 Signature Algorithm: sha256WithRSAEncryption 51:55:90:f3:53:e7:65:e4:56:89:72:1c:1f:02:f5:eb:c7:71: a8:9b:43:d8:f0:19:7b:45:78:cd:d1:8d:4f:d7:91:e5:69:22: 4e:bb:1a:a3:5c:d8:e3:37:4d:6c:08:fc:fe:52:a0:4b:54:48: 6b:41:90:41:0b:b3:1f:94:42:13:2e:48:e1:55:c7:f5:ef:a2: 59:46:f3:93:12:78:12:58:97:73:0f:05:35:1a:e6:b3:e3:ce: 0b:04:1e:4e:c1:eb:d6:a3:bd:d3:dd:7e:f9:bf:42:a7:02:07: 38:92:ee:07:f3:10:58:ce:ab:02:8f:43:bb:34:1b:84:aa:52: 47:54:f1:96:8f:4c:11:ef:16:3e:bd:fc:1f:7b:15:9f:5f:c0: 62:de:97:4c:7e:e3:55:83:dd:6b:8c:8e:a4:5e:b9:fa:e7:54: b7:f2:a3:d3:76:5c:a5:8c:39:7d:6d:24:f1:4d:80:f7:c3:9e: 8f:9c:eb:2b:b1:9e:d7:d2:7f:6d:c1:21:91:3f:8c:9e:45:a1: 87:f5:21:db:23:c3:45:58:75:f6:2c:b2:57:62:36:75:e2:38: 6c:aa:cf:37:81:92:a4:20:91:d4:58:d4:05:b3:69:b5:d9:06: ae:5b:4e:d3:66:a2:ca:3d:18:c7:9e:8f:cc:39:fb:71:fa:f8: 4e:79:5f:13 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOJEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1MjVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDkzMjcwMDEzRUNGMzNE Nzg0QTJDNTNDMDg5OTY2QUZCRDBBOTVDMjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDsGxKrEOrg5onAkfr3rJ9SetsT1NG/vLpGOlHeGc1fYfnDFGy0 JEOETY85z++Lyy0eFMDqq1zrSzkyhSslPtx+A/lG3TRs1DTx5MLOWtHzGCArFvJ9 oAKO/TlbpcMflhOjUuna3tq+PlwM1xzxJ9q82WiyW8fPVA4Qdu3toaV1gZsk0ZH3 v5vtsEUu6FFF3wofehGoz1mwIir4gIir9BRAxdwhBcDbYag7M9j5voajqEHcqsSx XVRh2Ca71bFIFCO/e/026QpCLKf1c1066ATb9AkKOEpV3G0BwYkHRKIDb02tBVMl lqcSBugLWZ6NeHRmdpiyZz4RY1GApxXDBi8XAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUkycAE+zzPXhKLFPAiZZq+9CpXCkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2t5Y0FFLXp6UFhoS0xGUEFp WlpxLTlDcFhDay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7 w+0wDQYJKoZIhvcNAQELBQADggEBAFFVkPNT52XkVolyHB8C9evHcaibQ9jwGXtF eM3RjU/XkeVpIk67GqNc2OM3TWwI/P5SoEtUSGtBkEELsx+UQhMuSOFVx/XvollG 85MSeBJYl3MPBTUa5rPjzgsEHk7B69ajvdPdfvm/QqcCBziS7gfzEFjOqwKPQ7s0 G4SqUkdU8ZaPTBHvFj69/B97FZ9fwGLel0x+41WD3WuMjqReufrnVLfyo9N2XKWM OX1tJPFNgPfDno+c6yuxntfSf23BIZE/jJ5FoYf1Idsjw0VYdfYssldiNnXiOGyq zzeBkqQgkdRY1AWzabXZBq5bTtNmoso9GMeej8w5+3H6+E55XxM= -----END CERTIFICATE-----Generated at Fri Oct 24 19:24:33 2025 by rpki-client