$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nKSidEJwQYySDpg7D5kqh_cHl-Q.roa File: nKSidEJwQYySDpg7D5kqh_cHl-Q.roa (raw, json) Hash identifier: DIqtX7R0mhduCqNu8odjlvZwL1nngOqVAIU+3Vw3t9g= Subject key identifier: 9C:A4:A2:74:42:70:41:8C:92:0E:98:3B:0F:99:2A:87:F7:07:97:E4 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3A54 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nKSidEJwQYySDpg7D5kqh_cHl-Q.roa Signing time: Fri 22 Aug 2025 08:47:14 +0000 ROA not before: Fri 22 Aug 2025 08:47:14 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 106.1.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14932 (0x3a54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:14 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=9CA4A2744270418C920E983B0F992A87F70797E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9a:fd:22:34:93:95:b7:a1:91:e0:7d:9c:d1: 83:eb:46:3f:d8:f9:24:36:b9:f9:e9:4c:21:e6:92: 62:4e:29:14:2f:b0:ec:be:67:da:29:55:04:b0:09: db:e9:3a:a1:dd:03:13:90:d7:f8:55:f8:a2:c7:c7: 26:36:21:e8:56:3a:86:9b:d2:33:fb:66:0b:0f:88: cb:b0:4c:fe:ae:e2:b4:80:70:d1:0e:d2:f2:36:e3: a6:11:fb:05:cb:7c:44:2c:7a:74:c3:c2:c5:91:87: df:c9:e2:2b:35:bb:40:22:5e:8d:87:52:0e:01:19: f4:81:f0:06:de:44:46:f9:de:a3:48:2c:d3:d1:dc: 93:0d:45:d2:54:1d:9a:26:b1:78:d3:56:05:2f:b7: 8b:63:ed:da:be:a0:ad:7e:25:d2:f8:4c:79:6f:73: 4a:27:9e:70:86:f0:f1:48:1b:49:a6:a6:8a:3e:36: 06:a0:b6:1e:8f:4e:c8:8b:31:db:94:d6:dd:92:a7: 8c:25:8f:fc:14:02:42:23:f4:76:d0:cc:be:68:da: cd:2d:5b:cd:b1:4f:c8:6e:2b:f5:5f:d2:a9:e0:95: 15:d0:99:44:43:da:e9:91:68:a2:51:6b:12:80:9f: fc:7c:1a:78:b7:60:a7:97:00:1b:c3:c3:5f:f9:07: 35:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:A4:A2:74:42:70:41:8C:92:0E:98:3B:0F:99:2A:87:F7:07:97:E4 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nKSidEJwQYySDpg7D5kqh_cHl-Q.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.88.0/22 Signature Algorithm: sha256WithRSAEncryption 30:48:66:40:0b:65:57:f4:95:d5:b5:df:58:ef:4b:d9:07:af: 0f:81:a9:fd:76:7c:cd:9a:ab:71:88:c3:e1:9c:cd:36:6f:14: 3d:23:e3:df:bf:58:da:54:c6:57:c9:8c:6e:1c:9b:de:d4:0e: 3c:85:03:05:c7:f3:65:d7:f2:87:4e:87:fb:d8:3f:85:3d:82: c6:e4:94:7b:31:3a:a5:9f:d6:ee:ad:c7:be:0a:c3:50:76:c4: c4:42:31:1c:80:67:63:5a:b9:0c:46:b1:27:28:4a:9a:d4:b7: 96:45:ae:5d:f5:3a:b6:eb:94:ec:cc:56:20:79:18:5a:30:c2: 73:6c:24:34:19:85:19:f7:4c:c1:0d:81:5f:22:d5:64:b8:5c: 80:45:15:d7:c6:a9:d3:bb:ec:c3:39:aa:29:ef:9e:e1:6b:1d: 83:b1:e6:bc:f7:ed:24:ce:08:6a:21:26:38:c6:dc:97:87:c7: 99:f0:8f:c2:57:70:f7:b2:26:bf:d0:64:85:d8:00:dd:67:78: 10:0e:22:14:19:94:da:14:5d:e1:e9:10:8d:55:2f:61:03:5d: d7:cd:25:5b:74:13:e1:ec:f4:39:f1:45:7e:77:47:38:99:67: ec:91:24:e5:ff:55:98:c9:43:19:0a:8c:74:e0:d2:a9:51:f8: 43:f9:e0:36 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOlQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3MTRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDlDQTRBMjc0NDI3MDQx OEM5MjBFOTgzQjBGOTkyQTg3RjcwNzk3RTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtmv0iNJOVt6GR4H2c0YPrRj/Y+SQ2ufnpTCHmkmJOKRQvsOy+ Z9opVQSwCdvpOqHdAxOQ1/hV+KLHxyY2IehWOoab0jP7ZgsPiMuwTP6u4rSAcNEO 0vI246YR+wXLfEQsenTDwsWRh9/J4is1u0AiXo2HUg4BGfSB8AbeREb53qNILNPR 3JMNRdJUHZomsXjTVgUvt4tj7dq+oK1+JdL4THlvc0onnnCG8PFIG0mmpoo+Ngag th6PTsiLMduU1t2Sp4wlj/wUAkIj9HbQzL5o2s0tW82xT8huK/Vf0qnglRXQmURD 2umRaKJRaxKAn/x8Gni3YKeXABvDw1/5BzW1AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUnKSidEJwQYySDpg7D5kqh/cHl+QwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL25LU2lkRUp3UVl5U0RwZzdE NWtxaF9jSGwtUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq AVgwDQYJKoZIhvcNAQELBQADggEBADBIZkALZVf0ldW131jvS9kHrw+Bqf12fM2a q3GIw+GczTZvFD0j49+/WNpUxlfJjG4cm97UDjyFAwXH82XX8odOh/vYP4U9gsbk lHsxOqWf1u6tx74Kw1B2xMRCMRyAZ2NauQxGsScoSprUt5ZFrl31OrbrlOzMViB5 GFowwnNsJDQZhRn3TMENgV8i1WS4XIBFFdfGqdO77MM5qinvnuFrHYOx5rz37STO CGohJjjG3JeHx5nwj8JXcPeyJr/QZIXYAN1neBAOIhQZlNoUXeHpEI1VL2EDXdfN JVt0E+Hs9DnxRX53RziZZ+yRJOX/VZjJQxkKjHTg0qlR+EP54DY= -----END CERTIFICATE-----Generated at Fri Oct 24 19:21:23 2025 by rpki-client