$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lduy25Gjamsdxelnmu9QT_yFQSA.roa File: lduy25Gjamsdxelnmu9QT_yFQSA.roa (raw, json) Hash identifier: ZVeG8a9DiJKDJlHaPJv0BPwZIOxEMfAmA9ythGqWQ+U= Subject key identifier: 95:DB:B2:DB:91:A3:6A:6B:1D:C5:E9:67:9A:EF:50:4F:FC:85:41:20 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 39E8 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lduy25Gjamsdxelnmu9QT_yFQSA.roa Signing time: Fri 22 Aug 2025 08:46:47 +0000 ROA not before: Fri 22 Aug 2025 08:46:47 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 118.232.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14824 (0x39e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:47 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=95DBB2DB91A36A6B1DC5E9679AEF504FFC854120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:5a:8f:0c:39:43:fa:18:54:18:e8:35:c2:1e: 54:1d:2c:fd:6e:39:6e:86:86:70:84:c3:a1:ad:81: 58:c1:49:67:84:c0:7c:2d:88:47:37:73:f0:fb:34: 9d:83:e3:04:08:51:72:06:e3:3f:f1:6a:11:05:f9: 05:71:91:c6:a5:24:b8:8b:0e:1b:ae:40:64:8e:2a: dc:67:3f:be:82:da:aa:03:75:fe:85:f4:ee:69:64: c6:02:4b:4f:cb:e1:82:d7:10:b0:8b:8c:53:23:1b: c9:24:c3:3f:37:fc:fd:e2:6e:02:a3:9e:00:f2:b7: 1e:dc:cf:11:20:6a:3e:25:23:2f:ef:4b:85:55:68: a6:a8:9c:2d:57:40:81:d1:f5:de:8a:03:48:5f:8f: 93:d5:98:11:8f:d2:47:6a:8a:54:17:59:40:87:d9: 06:a8:47:ec:ee:0a:74:12:da:9c:ca:c3:68:94:dd: cb:95:2c:e8:b4:a3:7b:ab:db:d5:4b:f0:2c:50:fe: bf:58:e3:e2:c3:9a:d0:db:7a:64:44:03:a0:4a:96: 7a:71:0d:6f:bc:28:f9:f6:6c:41:11:31:0c:50:bd: c1:f9:8b:9c:23:d5:68:de:cf:86:41:10:53:62:ca: 9d:26:09:1b:9c:1e:df:a9:35:d7:f6:fa:72:61:ed: 4b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:DB:B2:DB:91:A3:6A:6B:1D:C5:E9:67:9A:EF:50:4F:FC:85:41:20 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lduy25Gjamsdxelnmu9QT_yFQSA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.124.0/22 Signature Algorithm: sha256WithRSAEncryption 2b:f5:e8:33:8b:7f:ce:d1:d4:2f:5b:d2:4f:9b:6a:47:40:4c: 52:bb:04:5e:10:39:53:22:98:47:5f:c6:6c:95:98:ce:2f:fd: ea:cd:be:41:be:7f:91:78:92:d9:91:fc:62:96:fa:5e:2f:75: a7:f9:ec:7c:44:5d:72:40:cb:cd:ca:51:42:e1:03:6e:9f:2b: 5f:31:ce:8e:1d:b9:24:a4:9c:86:2e:2b:ea:08:2d:b8:46:24: 05:e1:5e:8d:00:2d:45:52:4e:d9:1d:cd:a3:49:cb:98:c9:68: b4:b3:1d:4c:51:09:f1:22:73:fd:84:49:fc:d7:98:26:07:1e: 62:07:82:d1:5e:22:ff:d6:11:e8:40:bc:1b:63:4c:32:6e:03: df:1d:f1:04:dd:b5:b6:a2:17:09:23:25:8f:cc:d5:f5:2b:80: 30:b5:c4:d6:ce:5d:96:07:0e:5e:c0:1b:eb:dd:c0:d8:85:05: 69:97:71:35:29:d0:a0:2c:5d:da:df:d0:69:03:eb:d4:cb:86: 7c:c3:47:36:ca:f5:5f:c6:aa:70:68:86:16:a2:05:48:9a:a3: 00:f1:4f:7e:e3:4c:9a:fe:7e:5e:9c:b7:d4:5f:41:2c:cd:92: 12:86:38:c4:c1:f9:f9:a5:7a:aa:72:07:6d:fe:10:cd:61:82: a8:f2:b7:40 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOegwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2NDdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDk1REJCMkRCOTFBMzZB NkIxREM1RTk2NzlBRUY1MDRGRkM4NTQxMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCUWo8MOUP6GFQY6DXCHlQdLP1uOW6GhnCEw6GtgVjBSWeEwHwt iEc3c/D7NJ2D4wQIUXIG4z/xahEF+QVxkcalJLiLDhuuQGSOKtxnP76C2qoDdf6F 9O5pZMYCS0/L4YLXELCLjFMjG8kkwz83/P3ibgKjngDytx7czxEgaj4lIy/vS4VV aKaonC1XQIHR9d6KA0hfj5PVmBGP0kdqilQXWUCH2QaoR+zuCnQS2pzKw2iU3cuV LOi0o3ur29VL8CxQ/r9Y4+LDmtDbemREA6BKlnpxDW+8KPn2bEERMQxQvcH5i5wj 1Wjez4ZBEFNiyp0mCRucHt+pNdf2+nJh7UsLAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUlduy25Gjamsdxelnmu9QT/yFQSAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2xkdXkyNUdqYW1zZHhlbG5t dTlRVF95RlFTQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6HwwDQYJKoZIhvcNAQELBQADggEBACv16DOLf87R1C9b0k+bakdATFK7BF4QOVMi mEdfxmyVmM4v/erNvkG+f5F4ktmR/GKW+l4vdaf57HxEXXJAy83KUULhA26fK18x zo4duSSknIYuK+oILbhGJAXhXo0ALUVSTtkdzaNJy5jJaLSzHUxRCfEic/2ESfzX mCYHHmIHgtFeIv/WEehAvBtjTDJuA98d8QTdtbaiFwkjJY/M1fUrgDC1xNbOXZYH Dl7AG+vdwNiFBWmXcTUp0KAsXdrf0GkD69TLhnzDRzbK9V/GqnBohhaiBUiaowDx T37jTJr+fl6ct9RfQSzNkhKGOMTB+fmleqpyB23+EM1hgqjyt0A= -----END CERTIFICATE-----Generated at Fri Oct 24 19:24:28 2025 by rpki-client