$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mvbwhlSCGQlSdYgN3dm-6eG60HI.roa File: mvbwhlSCGQlSdYgN3dm-6eG60HI.roa (raw, json) Hash identifier: vR+Xi5Dg+SeTYqKHMrj0lR68ippoHL0igyAIylXVBeQ= Subject key identifier: 9A:F6:F0:86:54:82:19:09:52:75:88:0D:DD:D9:BE:E9:E1:BA:D0:72 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3B27 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mvbwhlSCGQlSdYgN3dm-6eG60HI.roa Signing time: Fri 22 Aug 2025 08:48:07 +0000 ROA not before: Fri 22 Aug 2025 08:48:07 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 211.76.120.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15143 (0x3b27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:48:07 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=9AF6F086548219095275880DDDD9BEE9E1BAD072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a9:5a:9d:1b:76:a6:f8:dd:db:20:b5:b9:70: 5b:31:ae:7f:ce:e0:d4:db:66:c1:c7:c3:35:01:35: 1a:33:0b:61:2e:e4:22:68:56:2e:e5:bf:c3:9a:6c: 5c:3c:e4:bd:0b:c2:50:cb:6d:4e:3c:0d:24:a1:1b: 19:3a:82:d2:53:ef:ec:78:8f:69:11:84:eb:89:12: e4:ac:77:64:dd:f3:e4:e1:14:9c:be:48:8d:91:77: 4a:d5:f6:ec:11:78:b8:47:b6:cb:88:73:2a:18:54: cd:22:0d:c0:f2:74:dd:ec:2c:fc:b4:8a:87:07:d3: aa:de:d5:2a:60:a2:61:6e:d7:97:15:a7:7b:a1:0a: 56:11:df:4f:41:6e:05:f2:0b:38:ac:66:98:03:58: 89:35:3f:52:5d:b7:d5:30:51:74:11:8a:94:0c:47: be:de:03:80:48:c9:95:d1:1c:b1:58:d6:c3:50:b0: 08:63:62:28:47:6b:18:95:c0:ee:ca:b6:d9:71:3d: 5c:c5:8e:69:0d:f2:d8:a7:7d:90:3a:a1:4b:6a:33: f0:2e:c4:45:f8:6a:4e:fa:ae:0c:0b:34:59:be:d7: a9:de:1a:d9:b5:ac:d0:39:3a:e5:60:1e:4c:0e:6d: 84:76:0b:7d:77:a1:52:34:85:2b:97:db:b1:2e:dd: b8:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:F6:F0:86:54:82:19:09:52:75:88:0D:DD:D9:BE:E9:E1:BA:D0:72 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mvbwhlSCGQlSdYgN3dm-6eG60HI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.120.0/25 Signature Algorithm: sha256WithRSAEncryption 5b:0d:37:5f:c9:e9:05:c8:43:ff:0b:d3:41:22:fe:9d:24:89: b5:1a:86:3f:7b:9d:97:8e:00:12:64:e3:fd:68:03:91:1d:3d: 97:63:15:63:8e:1f:41:7f:05:30:ed:28:f8:ff:57:88:30:83: dc:0d:51:ce:c3:42:94:2d:3b:c6:53:89:35:d1:a3:04:7c:5e: ef:3e:18:9a:d5:41:a6:f4:e8:d4:4c:52:52:54:0d:fa:e6:e7: 05:1d:b4:41:a9:b9:1f:6f:6c:04:f1:d1:00:f9:28:0f:c6:8c: 6a:ac:48:d3:56:18:1a:97:44:b0:6c:68:a2:9f:25:06:dd:0d: 06:da:04:fd:15:f5:67:61:43:d1:19:14:75:07:09:f5:07:f6: 4e:f6:c6:76:b1:2b:b9:ab:66:47:db:37:eb:47:22:5a:8d:42: 75:5d:aa:b4:0f:53:f4:e3:3c:52:62:5e:f4:a3:f4:71:20:ea: b7:c9:c5:aa:49:32:ab:26:0e:7c:7e:77:4d:91:e1:fd:f5:6c: 1e:cf:51:c1:cb:d5:b2:1e:55:9b:38:6c:be:08:13:6a:cc:cf: d2:1c:3c:15:1f:7a:43:4d:26:40:8a:fd:77:49:9b:32:bc:b6: 32:ce:64:d0:78:01:7f:4e:bf:ea:61:3c:1a:4d:0b:c8:94:bf: 5e:8e:10:e6 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICOycwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ4MDdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDlBRjZGMDg2NTQ4MjE5 MDk1Mjc1ODgwRERERDlCRUU5RTFCQUQwNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLqVqdG3am+N3bILW5cFsxrn/O4NTbZsHHwzUBNRozC2Eu5CJo Vi7lv8OabFw85L0LwlDLbU48DSShGxk6gtJT7+x4j2kRhOuJEuSsd2Td8+ThFJy+ SI2Rd0rV9uwReLhHtsuIcyoYVM0iDcDydN3sLPy0iocH06re1SpgomFu15cVp3uh ClYR309BbgXyCzisZpgDWIk1P1Jdt9UwUXQRipQMR77eA4BIyZXRHLFY1sNQsAhj YihHaxiVwO7KttlxPVzFjmkN8tinfZA6oUtqM/AuxEX4ak76rgwLNFm+16neGtm1 rNA5OuVgHkwObYR2C313oVI0hSuX27Eu3bijAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUmvbwhlSCGQlSdYgN3dm+6eG60HIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL212YndobFNDR1FsU2RZZ04z ZG0tNmVHNjBISS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQfT THgAMA0GCSqGSIb3DQEBCwUAA4IBAQBbDTdfyekFyEP/C9NBIv6dJIm1GoY/e52X jgASZOP9aAORHT2XYxVjjh9BfwUw7Sj4/1eIMIPcDVHOw0KULTvGU4k10aMEfF7v Phia1UGm9OjUTFJSVA365ucFHbRBqbkfb2wE8dEA+SgPxoxqrEjTVhgal0SwbGii nyUG3Q0G2gT9FfVnYUPRGRR1Bwn1B/ZO9sZ2sSu5q2ZH2zfrRyJajUJ1Xaq0D1P0 4zxSYl70o/RxIOq3ycWqSTKrJg58fndNkeH99Wwez1HBy9WyHlWbOGy+CBNqzM/S HDwVH3pDTSZAiv13SZsyvLYyzmTQeAF/Tr/qYTwaTQvIlL9ejhDm -----END CERTIFICATE-----Generated at Fri Oct 24 19:21:30 2025 by rpki-client