$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/p4697XNoF6mvNhGnOgWAqudYHzs.roa File: p4697XNoF6mvNhGnOgWAqudYHzs.roa (raw, json) Hash identifier: LO93wWIpYga+PTKwg3CwFfJZInSCN0LYKKHLFV31m+s= Subject key identifier: A7:8E:BD:ED:73:68:17:A9:AF:36:11:A7:3A:05:80:AA:E7:58:1F:3B Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3A51 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/p4697XNoF6mvNhGnOgWAqudYHzs.roa Signing time: Fri 22 Aug 2025 08:47:13 +0000 ROA not before: Fri 22 Aug 2025 08:47:13 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 2407:4d00:ff02::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14929 (0x3a51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:13 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=A78EBDED736817A9AF3611A73A0580AAE7581F3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b8:39:93:54:fa:b5:ac:22:bd:ba:81:c1:f7: f0:ad:c0:78:ee:fc:f1:db:5e:09:84:fe:68:cb:f9: 45:51:1a:fd:fe:83:44:0d:91:5a:c9:a0:ff:0f:08: c2:60:b4:18:1c:99:01:ce:0d:c8:6b:60:f5:d0:aa: d4:61:17:00:6e:13:7d:56:51:bf:53:4d:fe:5f:b1: 22:94:e3:83:3c:24:c3:da:44:a3:18:f9:42:4d:86: 64:62:5f:aa:8e:87:d7:c0:c6:a1:58:28:83:56:2f: a6:bd:81:08:2f:c6:76:08:54:e1:ac:78:2c:7e:af: 61:8e:49:45:43:14:2c:e9:aa:67:ea:8e:e7:21:2e: 1b:b6:28:82:54:9e:5b:0a:0a:6b:c4:bc:e7:3a:ff: 3a:75:b5:19:7c:2f:5b:d6:05:35:d1:0f:c4:b9:b0: d9:2e:2f:8f:09:45:fb:e4:d0:af:29:62:5f:31:78: af:2c:93:f2:f4:d1:d5:21:8a:b1:76:03:50:f7:d0: c3:d1:81:ae:a0:0a:d4:4d:22:8a:cd:fc:24:91:42: 30:da:dc:b2:31:d5:62:66:0a:cc:0b:e0:b2:38:91: 77:ca:3a:2d:8a:44:05:38:9d:dc:3e:18:9f:ea:d2: e6:0d:43:9b:74:2a:2f:81:0b:6a:a1:1f:77:da:45: c9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:8E:BD:ED:73:68:17:A9:AF:36:11:A7:3A:05:80:AA:E7:58:1F:3B X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/p4697XNoF6mvNhGnOgWAqudYHzs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:4d00:ff02::/48 Signature Algorithm: sha256WithRSAEncryption 78:5b:70:79:b1:04:c6:c0:e2:67:01:6d:36:36:1a:e6:11:91: 18:4c:05:43:6f:be:d0:58:df:a9:74:40:dc:39:14:aa:2e:34: dc:d4:7e:2d:f7:45:ef:1c:1d:c7:f0:73:70:4f:da:97:93:b7: da:11:ad:a9:3b:8e:24:6f:bf:52:f3:d2:7c:d2:af:52:d4:b1: e6:5e:c6:f0:5c:9c:e1:a4:52:7a:bb:ef:0b:29:5d:b0:b6:8c: 01:fe:4e:5d:cd:e2:31:0c:24:46:98:52:52:ad:50:31:f8:ce: ad:db:9f:09:ec:28:5d:4e:0e:57:69:e6:53:95:f4:11:22:b4: 39:65:bb:2e:6f:3e:0a:5c:92:c7:e5:ac:8d:22:6d:a5:26:57: 1f:4f:32:c5:a1:dd:35:66:85:7c:a3:6c:50:37:43:09:57:87: 28:3b:5a:ab:06:f2:bb:dd:35:80:0f:65:1a:31:26:10:4c:c0: ea:2c:cb:f6:da:d5:61:af:f3:92:0f:db:43:3d:d6:57:a7:d3: c6:03:82:ef:b1:bd:3f:f0:d6:93:32:05:82:3c:9f:86:32:dc: c2:bc:e9:8b:7e:f8:63:53:db:37:47:59:c2:24:11:00:7b:95: 34:ce:b7:8e:b7:91:f4:a0:c9:5e:84:d9:13:2c:33:d4:f7:36: 45:47:e3:d6 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICOlEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3MTNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEE3OEVCREVENzM2ODE3 QTlBRjM2MTFBNzNBMDU4MEFBRTc1ODFGM0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2uDmTVPq1rCK9uoHB9/CtwHju/PHbXgmE/mjL+UVRGv3+g0QN kVrJoP8PCMJgtBgcmQHODchrYPXQqtRhFwBuE31WUb9TTf5fsSKU44M8JMPaRKMY +UJNhmRiX6qOh9fAxqFYKINWL6a9gQgvxnYIVOGseCx+r2GOSUVDFCzpqmfqjuch Lhu2KIJUnlsKCmvEvOc6/zp1tRl8L1vWBTXRD8S5sNkuL48JRfvk0K8pYl8xeK8s k/L00dUhirF2A1D30MPRga6gCtRNIorN/CSRQjDa3LIx1WJmCswL4LI4kXfKOi2K RAU4ndw+GJ/q0uYNQ5t0Ki+BC2qhH3faRcktAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUp4697XNoF6mvNhGnOgWAqudYHzswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3A0Njk3WE5vRjZtdk5oR25P Z1dBcXVkWUh6cy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk B00A/wIwDQYJKoZIhvcNAQELBQADggEBAHhbcHmxBMbA4mcBbTY2GuYRkRhMBUNv vtBY36l0QNw5FKouNNzUfi33Re8cHcfwc3BP2peTt9oRrak7jiRvv1Lz0nzSr1LU seZexvBcnOGkUnq77wspXbC2jAH+Tl3N4jEMJEaYUlKtUDH4zq3bnwnsKF1ODldp 5lOV9BEitDlluy5vPgpcksflrI0ibaUmVx9PMsWh3TVmhXyjbFA3QwlXhyg7WqsG 8rvdNYAPZRoxJhBMwOosy/ba1WGv85IP20M91len08YDgu+xvT/w1pMyBYI8n4Yy 3MK86Yt++GNT2zdHWcIkEQB7lTTOt463kfSgyV6E2RMsM9T3NkVH49Y= -----END CERTIFICATE-----Generated at Fri Oct 24 19:21:44 2025 by rpki-client