$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mY4dMHS6dta1LkivRkjuIzqD-Zc.roa File: mY4dMHS6dta1LkivRkjuIzqD-Zc.roa (raw, json) Hash identifier: LCQYDtiNkSitayOKGxbbNey6yrlCZdhNU7i+e/x1O7E= Subject key identifier: 99:8E:1D:30:74:BA:76:D6:B5:2E:48:AF:46:48:EE:23:3A:83:F9:97 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3AFC Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mY4dMHS6dta1LkivRkjuIzqD-Zc.roa Signing time: Fri 22 Aug 2025 08:47:57 +0000 ROA not before: Fri 22 Aug 2025 08:47:57 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.194.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15100 (0x3afc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:57 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=998E1D3074BA76D6B52E48AF4648EE233A83F997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b1:36:1b:9a:7d:03:dd:4b:ac:57:b0:86:21: 57:d4:d2:ea:29:5b:10:95:65:98:31:27:da:46:dd: 45:59:13:01:2c:53:16:ac:0c:f8:f7:bf:82:98:8a: 35:bf:7c:d6:11:db:93:c0:e0:38:de:a8:e8:d8:86: 71:6b:d1:3e:bf:a3:62:7c:ac:b4:26:58:8a:28:99: 36:0b:05:e7:73:61:bf:4b:07:d2:86:79:07:4f:c0: b8:38:ce:63:bc:d9:40:3a:ed:81:d6:d4:d4:6e:25: 60:e3:12:5b:27:50:8c:ef:b2:bf:56:eb:66:5d:f3: 59:c6:a3:12:9b:75:b5:57:90:27:74:05:16:d0:80: 97:2a:bb:de:ce:59:12:d1:94:c7:96:a1:52:46:5c: 8b:e1:2c:32:24:55:1d:2f:ac:8c:13:e5:4e:4f:b7: 6f:d1:64:d0:25:39:9c:d9:fc:f7:d4:5b:88:b5:39: 63:91:8c:88:f8:30:20:f0:96:51:49:41:c0:b5:15: d2:4c:87:c9:80:50:b1:5a:43:93:ad:43:6e:cd:3d: e7:f4:37:d3:e3:52:70:5a:4a:89:31:c7:06:65:29: eb:2f:bc:af:17:4c:18:7f:9a:8e:21:ea:9a:e8:cc: 38:85:15:50:fd:1e:bc:9d:c1:1c:58:b0:29:77:0a: 21:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:8E:1D:30:74:BA:76:D6:B5:2E:48:AF:46:48:EE:23:3A:83:F9:97 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mY4dMHS6dta1LkivRkjuIzqD-Zc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.68.0/22 Signature Algorithm: sha256WithRSAEncryption b7:50:9b:bc:c1:cd:ad:8e:8c:37:73:46:f3:19:78:dc:03:d4: 6c:f7:f0:d5:9e:f5:de:ff:48:82:93:66:a1:d9:48:5c:d8:2e: 19:cf:9d:84:1f:ec:a7:4c:5e:bb:f6:0c:02:b3:58:c1:02:54: 2a:70:5e:49:7a:02:2f:a1:b4:68:28:03:f9:e8:6e:12:42:f1: db:81:75:29:09:dd:18:d8:7e:0c:61:e9:93:5d:cd:9d:b4:ed: 09:18:55:20:18:98:bf:c9:96:c2:87:bc:5a:11:28:69:25:36: c2:03:7e:58:4e:22:d8:87:ce:d9:35:e5:66:30:6e:09:61:b0: 71:64:10:d2:25:26:00:fb:07:4d:0c:0d:ea:44:39:c7:7e:57: 78:f0:07:9d:44:9a:13:e6:ee:a6:58:ef:b2:d5:d6:3c:06:53: a0:1b:9f:e8:bb:49:28:4d:41:1f:e4:1f:01:c8:80:ee:d0:e6: 3c:72:24:8c:65:b8:3c:01:77:61:60:79:9a:94:b1:70:83:6c: 7c:c5:3b:a2:35:2b:d9:8e:12:89:80:e4:0d:01:1e:97:dd:30: 8f:cc:81:c6:cf:18:55:57:20:db:d8:18:a5:39:7a:c1:1c:4a: 83:0f:4f:ef:e0:ce:91:34:9e:e6:0e:97:6e:57:77:46:d8:e9: a4:71:40:78 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOvwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3NTdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDk5OEUxRDMwNzRCQTc2 RDZCNTJFNDhBRjQ2NDhFRTIzM0E4M0Y5OTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1sTYbmn0D3UusV7CGIVfU0uopWxCVZZgxJ9pG3UVZEwEsUxas DPj3v4KYijW/fNYR25PA4DjeqOjYhnFr0T6/o2J8rLQmWIoomTYLBedzYb9LB9KG eQdPwLg4zmO82UA67YHW1NRuJWDjElsnUIzvsr9W62Zd81nGoxKbdbVXkCd0BRbQ gJcqu97OWRLRlMeWoVJGXIvhLDIkVR0vrIwT5U5Pt2/RZNAlOZzZ/PfUW4i1OWOR jIj4MCDwllFJQcC1FdJMh8mAULFaQ5OtQ27NPef0N9PjUnBaSokxxwZlKesvvK8X TBh/mo4h6prozDiFFVD9HrydwRxYsCl3CiHrAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUmY4dMHS6dta1LkivRkjuIzqD+ZcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL21ZNGRNSFM2ZHRhMUxraXZS a2p1SXpxRC1aYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wkQwDQYJKoZIhvcNAQELBQADggEBALdQm7zBza2OjDdzRvMZeNwD1Gz38NWe9d7/ SIKTZqHZSFzYLhnPnYQf7KdMXrv2DAKzWMECVCpwXkl6Ai+htGgoA/nobhJC8duB dSkJ3RjYfgxh6ZNdzZ207QkYVSAYmL/JlsKHvFoRKGklNsIDflhOItiHztk15WYw bglhsHFkENIlJgD7B00MDepEOcd+V3jwB51EmhPm7qZY77LV1jwGU6Abn+i7SShN QR/kHwHIgO7Q5jxyJIxluDwBd2FgeZqUsXCDbHzFO6I1K9mOEomA5A0BHpfdMI/M gcbPGFVXINvYGKU5esEcSoMPT+/gzpE0nuYOl25Xd0bY6aRxQHg= -----END CERTIFICATE-----Generated at Fri Oct 24 19:27:45 2025 by rpki-client