$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/p-FzZ88sBzoAeRl4G1NWSiA2kvk.roa File: p-FzZ88sBzoAeRl4G1NWSiA2kvk.roa (raw, json) Hash identifier: Jmi2uhIiXcnZsdRD6jWVmG/8Eo3uJp4pmAL0kpAqVOw= Subject key identifier: A7:E1:73:67:CF:2C:07:3A:00:79:19:78:1B:53:56:4A:20:36:92:F9 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 37E3 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/p-FzZ88sBzoAeRl4G1NWSiA2kvk.roa Signing time: Fri 22 Aug 2025 08:44:44 +0000 ROA not before: Fri 22 Aug 2025 08:44:44 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 106.1.206.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14307 (0x37e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:44:44 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=A7E17367CF2C073A007919781B53564A203692F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:6c:ab:b6:23:00:8e:c0:ff:86:70:d6:38:f2: cd:e7:7c:a9:90:71:04:5f:bf:bc:e2:84:1d:66:9d: d8:d9:4e:86:7c:f2:e8:1b:c4:db:9d:61:79:22:dc: 37:2d:93:14:54:be:e4:19:e0:98:3d:6a:7b:5e:63: 2c:9e:f2:83:85:04:c0:4e:fd:f4:0a:17:56:38:5c: 27:8e:92:d5:5d:bd:30:21:98:5b:30:7e:71:97:a8: 94:00:c5:73:9e:f0:fd:dd:bb:3e:be:73:8b:39:ae: 83:54:6d:4b:98:b5:94:e4:1c:56:55:0f:92:19:db: ee:57:f9:89:0e:33:58:68:d1:e6:0f:53:3b:ed:28: 38:6c:3f:ef:d9:f4:e5:22:b4:44:7c:9a:96:eb:f1: cd:1a:3e:28:64:45:72:e3:d4:29:23:f3:d5:72:a8: 1e:9c:61:13:ac:60:d6:db:b6:27:5e:8c:3c:cb:b8: 64:5c:72:a2:5f:69:e7:3a:51:58:8b:73:c3:8f:14: 16:27:b0:d9:54:14:41:0f:10:e9:fb:ff:2f:e8:2b: 05:27:42:a5:2e:a7:67:cf:8b:3a:27:e1:b8:91:92: 83:19:e9:53:c2:cb:0d:7d:ce:b2:c3:e5:ca:f9:62: 39:3b:53:f9:0b:e5:f5:a6:31:28:b4:e0:30:f1:51: f9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:E1:73:67:CF:2C:07:3A:00:79:19:78:1B:53:56:4A:20:36:92:F9 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/p-FzZ88sBzoAeRl4G1NWSiA2kvk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.206.0/23 Signature Algorithm: sha256WithRSAEncryption ac:b4:5f:0c:eb:4f:bd:6b:e9:97:68:94:4f:5c:6c:a3:bf:f4: d0:8d:ad:ef:41:6d:c3:64:4e:25:10:8c:3f:15:b1:55:b9:82: 5e:c9:90:3d:cf:b2:ef:e9:1f:83:67:9e:7f:9b:37:7e:63:92: e1:1f:79:96:e1:ee:06:62:e2:a7:ab:f5:3e:68:05:61:86:9f: c4:dc:2d:67:b8:b1:7f:c1:5d:7b:1c:69:0b:15:c6:38:23:1a: 73:12:cc:01:ad:5b:d9:6c:55:12:cb:1c:53:22:1b:1d:39:4b: 59:f3:73:1c:c5:5e:75:23:0a:d4:3f:4a:ac:e2:61:a7:52:92: 48:d6:74:05:f5:38:e7:8d:f2:bb:98:c4:b5:b3:82:b4:d6:31: c4:81:2b:20:ec:d6:e2:20:b0:3d:f9:21:f3:fa:a2:eb:18:2d: 8b:dd:76:32:74:d3:39:55:89:a9:31:02:c2:88:b6:c7:55:04: 50:0d:39:3f:94:4c:f4:93:b3:59:cc:f4:50:4e:c9:cf:61:91: fc:1f:0a:ae:f2:f0:53:1b:b3:31:46:4b:a3:09:21:ec:5a:ef: 25:a8:86:6e:d4:88:02:51:61:bf:63:dd:58:cb:ce:11:43:54: 86:6b:7d:86:7a:22:b8:80:0b:eb:96:c3:aa:ed:6f:1d:ac:a4: d0:95:f7:65 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICN+MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ0NDRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEE3RTE3MzY3Q0YyQzA3 M0EwMDc5MTk3ODFCNTM1NjRBMjAzNjkyRjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDzbKu2IwCOwP+GcNY48s3nfKmQcQRfv7zihB1mndjZToZ88ugb xNudYXki3DctkxRUvuQZ4Jg9anteYyye8oOFBMBO/fQKF1Y4XCeOktVdvTAhmFsw fnGXqJQAxXOe8P3duz6+c4s5roNUbUuYtZTkHFZVD5IZ2+5X+YkOM1ho0eYPUzvt KDhsP+/Z9OUitER8mpbr8c0aPihkRXLj1Ckj89VyqB6cYROsYNbbtidejDzLuGRc cqJfaec6UViLc8OPFBYnsNlUFEEPEOn7/y/oKwUnQqUup2fPizon4biRkoMZ6VPC yw19zrLD5cr5Yjk7U/kL5fWmMSi04DDxUfkxAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUp+FzZ88sBzoAeRl4G1NWSiA2kvkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3AtRnpaODhzQnpvQWVSbDRH MU5XU2lBMmt2ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFq Ac4wDQYJKoZIhvcNAQELBQADggEBAKy0XwzrT71r6ZdolE9cbKO/9NCNre9BbcNk TiUQjD8VsVW5gl7JkD3Psu/pH4Nnnn+bN35jkuEfeZbh7gZi4qer9T5oBWGGn8Tc LWe4sX/BXXscaQsVxjgjGnMSzAGtW9lsVRLLHFMiGx05S1nzcxzFXnUjCtQ/Sqzi YadSkkjWdAX1OOeN8ruYxLWzgrTWMcSBKyDs1uIgsD35IfP6ousYLYvddjJ00zlV iakxAsKItsdVBFANOT+UTPSTs1nM9FBOyc9hkfwfCq7y8FMbszFGS6MJIexa7yWo hm7UiAJRYb9j3VjLzhFDVIZrfYZ6IriAC+uWw6rtbx2spNCV92U= -----END CERTIFICATE-----Generated at Fri Oct 24 19:21:30 2025 by rpki-client