$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/liH3m2l5kclz-ofgK3MFWJZ4ezY.roa File: liH3m2l5kclz-ofgK3MFWJZ4ezY.roa (raw, json) Hash identifier: gyDG+7wjuaHatdA5XVSXYLpuBCVUwXH+yDTwS/Rj4fQ= Subject key identifier: 96:21:F7:9B:69:79:91:C9:73:FA:87:E0:2B:73:05:58:96:78:7B:36 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3958 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/liH3m2l5kclz-ofgK3MFWJZ4ezY.roa Signing time: Fri 22 Aug 2025 08:46:12 +0000 ROA not before: Fri 22 Aug 2025 08:46:12 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 106.1.48.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14680 (0x3958) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:12 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=9621F79B697991C973FA87E02B73055896787B36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7f:89:1f:79:0a:3c:1a:9a:24:6d:2f:9b:4d: e1:60:e5:f9:e1:88:e4:a8:04:e9:46:d8:d3:73:ff: 3c:93:17:6d:bd:ad:09:20:e2:91:d4:a9:ad:7d:aa: 3c:b2:49:1a:cb:6e:82:47:ad:f9:fb:e3:61:6c:f8: a9:a9:d4:dc:94:98:16:79:fe:90:a7:17:f7:ce:0b: 38:3e:50:05:72:e3:74:1f:a2:6d:52:38:21:8c:7a: 4c:35:fa:72:31:30:b6:18:ec:de:01:c3:6e:34:4e: de:32:7f:1a:f2:fe:ae:73:96:77:16:39:e3:52:4a: 90:33:41:a3:5c:a9:d7:19:7d:c3:80:66:17:fb:a9: 6d:a8:4a:ec:e1:3e:75:47:6d:c5:41:8a:7a:ad:56: 6f:99:b6:54:36:2e:44:65:5a:fe:8c:e5:cf:39:92: de:d0:6e:b2:92:34:18:a9:65:2c:13:0e:f1:87:8e: 51:10:f1:8b:b6:29:5f:6b:7e:82:77:bc:99:7c:70: 3f:d4:2c:49:a2:2f:ea:a6:76:ab:dd:ac:f0:7f:47: 09:7a:8e:a0:2c:a6:d2:6e:b9:d3:d3:17:56:6c:79: d7:e2:b7:0b:46:b4:cd:cf:35:87:ce:bf:ee:43:58: bc:12:68:93:18:1f:9c:90:04:c3:3d:37:fe:23:61: 12:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:21:F7:9B:69:79:91:C9:73:FA:87:E0:2B:73:05:58:96:78:7B:36 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/liH3m2l5kclz-ofgK3MFWJZ4ezY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.48.0/23 Signature Algorithm: sha256WithRSAEncryption 2f:36:f6:ca:e7:31:e5:6a:fc:f1:7f:a7:3f:34:2d:88:2b:9b: d7:2d:6c:55:02:1c:b6:63:26:73:df:7c:2c:30:b3:fc:62:cc: c8:a8:73:1b:67:b5:18:cf:9d:7c:03:a5:ed:fe:a0:95:a4:da: 25:5b:d8:8c:d4:f5:93:b0:ea:b4:22:da:1d:fd:e6:16:c3:2b: 81:d5:65:f5:65:3f:59:7f:54:c6:e5:9b:0e:5a:90:51:8a:5c: 25:ec:2e:2a:53:be:b9:3c:1c:b7:37:18:ad:b5:d2:0c:1d:34: 80:3c:25:57:d0:67:50:b3:17:8f:85:b7:2d:87:1e:52:65:9c: 55:4b:a6:f8:1d:a7:20:28:38:06:33:2b:be:92:17:15:6c:82: d5:bf:b6:41:d2:1c:60:f1:bf:e8:c6:6f:52:c0:2a:c9:69:83: d3:df:46:3b:54:2b:4f:32:64:b2:75:a8:5c:85:b3:13:e2:be: be:f0:05:39:84:37:56:98:fe:a5:c4:b6:65:58:f1:19:53:76: 6b:59:31:38:ea:07:19:1d:97:e2:d4:20:3e:ea:ca:72:a6:5f: 01:74:de:64:71:38:f7:6e:66:a5:25:78:fe:26:bb:46:33:28: 4c:04:e6:41:e2:a3:48:7d:b7:9a:9c:27:6c:85:2a:a7:12:dc: 06:8c:fb:11 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOVgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2MTJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDk2MjFGNzlCNjk3OTkx Qzk3M0ZBODdFMDJCNzMwNTU4OTY3ODdCMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMf4kfeQo8GpokbS+bTeFg5fnhiOSoBOlG2NNz/zyTF229rQkg 4pHUqa19qjyySRrLboJHrfn742Fs+Kmp1NyUmBZ5/pCnF/fOCzg+UAVy43Qfom1S OCGMekw1+nIxMLYY7N4Bw240Tt4yfxry/q5zlncWOeNSSpAzQaNcqdcZfcOAZhf7 qW2oSuzhPnVHbcVBinqtVm+ZtlQ2LkRlWv6M5c85kt7QbrKSNBipZSwTDvGHjlEQ 8Yu2KV9rfoJ3vJl8cD/ULEmiL+qmdqvdrPB/Rwl6jqAsptJuudPTF1ZsedfitwtG tM3PNYfOv+5DWLwSaJMYH5yQBMM9N/4jYRLLAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUliH3m2l5kclz+ofgK3MFWJZ4ezYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2xpSDNtMmw1a2Nsei1vZmdL M01GV0paNGV6WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFq ATAwDQYJKoZIhvcNAQELBQADggEBAC829srnMeVq/PF/pz80LYgrm9ctbFUCHLZj JnPffCwws/xizMiocxtntRjPnXwDpe3+oJWk2iVb2IzU9ZOw6rQi2h395hbDK4HV ZfVlP1l/VMblmw5akFGKXCXsLipTvrk8HLc3GK210gwdNIA8JVfQZ1CzF4+Fty2H HlJlnFVLpvgdpyAoOAYzK76SFxVsgtW/tkHSHGDxv+jGb1LAKslpg9PfRjtUK08y ZLJ1qFyFsxPivr7wBTmEN1aY/qXEtmVY8RlTdmtZMTjqBxkdl+LUID7qynKmXwF0 3mRxOPduZqUleP4mu0YzKEwE5kHio0h9t5qcJ2yFKqcS3AaM+xE= -----END CERTIFICATE-----Generated at Fri Oct 24 19:18:38 2025 by rpki-client