$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/l6u5ZOW17DZl4XHcZotPXLIp2AA.roa File: l6u5ZOW17DZl4XHcZotPXLIp2AA.roa (raw, json) Hash identifier: ziXmnOepAq/JK2Pfzr1e2oowMcQ5UqioaEV7dnJeNAI= Subject key identifier: 97:AB:B9:64:E5:B5:EC:36:65:E1:71:DC:66:8B:4F:5C:B2:29:D8:00 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 382C Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/l6u5ZOW17DZl4XHcZotPXLIp2AA.roa Signing time: Fri 22 Aug 2025 08:45:01 +0000 ROA not before: Fri 22 Aug 2025 08:45:01 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.192.144.64/26 maxlen: 26 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14380 (0x382c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:01 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=97ABB964E5B5EC3665E171DC668B4F5CB229D800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:9c:65:7b:73:54:29:47:04:aa:1c:0d:37:84: 4a:5c:b2:0a:f6:e6:7b:71:fe:67:e8:d0:07:ca:1a: fc:c9:4c:c7:39:72:e2:bf:67:ff:7f:8a:8e:04:ca: 66:a0:5a:ec:59:c5:99:56:38:98:93:3e:6a:46:d2: 0e:c1:d0:35:7f:e8:9c:a7:f6:59:ca:26:62:0b:80: b2:74:f1:ae:14:dc:38:80:86:84:88:9a:47:34:3b: ef:47:e0:e5:11:d5:40:54:e0:a5:63:90:54:5d:db: 08:a0:97:60:2c:59:87:60:e1:26:94:a9:97:62:ce: bf:f5:3e:62:87:5a:4d:a5:93:3c:26:08:bd:e2:87: 5e:a6:92:c1:44:ba:8e:33:d8:ea:e9:76:03:ba:29: ce:2c:75:58:a3:09:07:2e:2b:df:e8:e9:a5:06:83: 76:b9:75:97:e4:4c:85:d1:32:97:94:94:d6:e6:99: 93:cb:1e:cc:ba:7b:03:49:a4:0d:d9:82:04:80:17: 4a:9b:63:2f:77:4a:b1:43:f6:e9:f0:e2:ea:4c:31: d9:18:86:57:f5:20:ef:3a:3d:d5:bf:bc:47:41:0b: b9:9b:5c:63:f9:a3:fc:26:f8:78:45:1a:cb:a4:71: 06:d4:13:46:a0:82:82:2f:1f:b1:36:12:31:29:16: 19:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:AB:B9:64:E5:B5:EC:36:65:E1:71:DC:66:8B:4F:5C:B2:29:D8:00 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/l6u5ZOW17DZl4XHcZotPXLIp2AA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.144.64/26 Signature Algorithm: sha256WithRSAEncryption 68:86:1c:58:fd:ae:24:69:9c:a7:22:f4:ce:1a:8d:f3:06:c5: 66:aa:10:fe:f1:31:cc:2b:a1:b4:a5:24:e5:bb:8b:d1:79:1a: bc:2c:23:b1:55:7c:b9:69:7d:c4:20:98:34:c2:77:26:7f:1f: 36:c5:96:17:4b:a3:f3:df:ee:51:f3:2d:1e:cd:25:10:ff:69: fa:68:6a:39:91:80:cd:5c:6d:20:cb:57:8a:f7:39:8e:17:96: 45:50:d7:62:5e:d0:84:a4:d0:74:80:67:8f:21:b5:9d:75:dd: f8:aa:86:6a:c8:e8:27:21:02:e5:42:a9:4d:a6:79:c8:5a:c7: 1a:f6:fa:00:ce:a1:1a:f7:95:ef:65:33:2a:34:7e:3b:18:7a: f7:63:93:48:67:bc:9e:3b:71:dc:fb:9c:7d:69:91:c8:34:80: 3b:b0:49:23:c2:c8:7e:3c:b2:7c:fc:fa:6c:56:f2:9e:8a:49: 46:5f:28:35:35:ac:eb:3e:4f:4d:7a:84:4a:12:47:6d:29:c8: af:12:98:15:47:32:06:3b:ea:c1:31:a8:0d:f7:44:d8:1a:ab: ea:e6:f9:14:65:14:31:fb:a8:c7:d3:43:73:76:e0:ba:7f:83: d9:2e:45:b3:1e:0a:1f:39:81:c6:27:4a:e8:32:1e:20:63:99: e5:3b:b1:a6 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICOCwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1MDFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDk3QUJCOTY0RTVCNUVD MzY2NUUxNzFEQzY2OEI0RjVDQjIyOUQ4MDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDhnGV7c1QpRwSqHA03hEpcsgr25ntx/mfo0AfKGvzJTMc5cuK/ Z/9/io4EymagWuxZxZlWOJiTPmpG0g7B0DV/6Jyn9lnKJmILgLJ08a4U3DiAhoSI mkc0O+9H4OUR1UBU4KVjkFRd2wigl2AsWYdg4SaUqZdizr/1PmKHWk2lkzwmCL3i h16mksFEuo4z2OrpdgO6Kc4sdVijCQcuK9/o6aUGg3a5dZfkTIXRMpeUlNbmmZPL Hsy6ewNJpA3ZggSAF0qbYy93SrFD9unw4upMMdkYhlf1IO86PdW/vEdBC7mbXGP5 o/wm+HhFGsukcQbUE0aggoIvH7E2EjEpFhnFAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUl6u5ZOW17DZl4XHcZotPXLIp2AAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2w2dTVaT1cxN0RabDRYSGNa b3RQWExJcDJBQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQZ7 wJBAMA0GCSqGSIb3DQEBCwUAA4IBAQBohhxY/a4kaZynIvTOGo3zBsVmqhD+8THM K6G0pSTlu4vReRq8LCOxVXy5aX3EIJg0wncmfx82xZYXS6Pz3+5R8y0ezSUQ/2n6 aGo5kYDNXG0gy1eK9zmOF5ZFUNdiXtCEpNB0gGePIbWddd34qoZqyOgnIQLlQqlN pnnIWsca9voAzqEa95XvZTMqNH47GHr3Y5NIZ7yeO3Hc+5x9aZHINIA7sEkjwsh+ PLJ8/PpsVvKeiklGXyg1NazrPk9NeoRKEkdtKcivEpgVRzIGO+rBMagN90TYGqvq 5vkUZRQx+6jH00NzduC6f4PZLkWzHgofOYHGJ0roMh4gY5nlO7Gm -----END CERTIFICATE-----Generated at Fri Oct 24 19:27:24 2025 by rpki-client