$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/plnmidBscDx9z0caT60cK6e2qyM.roa File: plnmidBscDx9z0caT60cK6e2qyM.roa (raw, json) Hash identifier: //eHq8UtqCJ7tv4h21kpq5VTlGGDYQ/xbn3PsS/DAyI= Subject key identifier: A6:59:E6:89:D0:6C:70:3C:7D:CF:47:1A:4F:AD:1C:2B:A7:B6:AB:23 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 384E Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/plnmidBscDx9z0caT60cK6e2qyM.roa Signing time: Fri 22 Aug 2025 08:45:09 +0000 ROA not before: Fri 22 Aug 2025 08:45:09 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9924 IP address blocks: 123.193.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 07:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14414 (0x384e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:09 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=A659E689D06C703C7DCF471A4FAD1C2BA7B6AB23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d8:30:6d:08:98:8e:25:4d:27:ed:c8:d8:fa: 21:05:db:ee:64:ba:48:21:79:18:86:60:68:3c:59: cb:6f:63:b3:5f:cd:c3:92:a3:11:3e:4a:a3:5f:56: 40:f3:12:6b:9e:16:25:fe:32:bf:25:62:ce:a7:b7: ff:14:30:90:a9:73:3d:e7:53:d7:6a:4b:32:f3:63: 91:c4:2f:c8:14:8a:10:d1:4c:6a:54:03:fa:6a:31: a0:19:74:51:52:24:e8:20:40:4e:3d:a6:dc:d5:94: fb:57:7d:b0:55:71:85:6c:88:f8:00:5d:60:c6:6d: d5:91:1d:9c:37:e3:df:b0:69:46:ab:d9:d3:40:44: e4:9f:46:63:02:cb:2e:b0:f1:c7:8f:16:cb:bc:49: 6a:8f:ae:ef:49:12:65:08:68:79:57:85:6e:39:ff: 41:b7:f2:22:b9:45:0f:d9:55:7e:b6:47:66:42:6b: f1:e0:08:a6:e9:59:43:b9:85:8e:d9:96:f4:de:f3: 84:69:8b:f8:8c:e0:92:10:9f:78:7e:83:06:b4:b4: ba:44:09:f0:e0:d2:4a:6f:95:36:af:c2:d4:42:27: df:b5:c6:a9:b2:77:48:2f:5b:41:92:63:ba:b5:1a: c3:1e:b3:e5:94:07:db:34:67:77:65:7d:51:a7:4a: 42:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:59:E6:89:D0:6C:70:3C:7D:CF:47:1A:4F:AD:1C:2B:A7:B6:AB:23 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/plnmidBscDx9z0caT60cK6e2qyM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.125.0/24 Signature Algorithm: sha256WithRSAEncryption 58:41:7a:13:4d:71:18:6e:a9:15:77:2e:65:58:27:00:e4:fd: 20:1a:5a:43:8b:9a:1d:4b:0d:67:1a:b9:64:c0:9a:b5:23:36: 11:e3:d6:2f:92:26:4a:88:1e:c8:4c:2d:3a:bd:9d:36:2e:14: fa:b0:ef:c0:a9:31:82:e4:f1:44:9d:7d:19:24:9d:47:61:c4: 8c:c6:31:8e:67:05:74:a3:39:9e:79:fb:0c:b9:b3:c8:8a:ae: 2e:0b:94:60:4c:c3:66:13:91:cc:80:7e:16:9e:3e:1f:9c:e3: a8:1e:b1:33:ba:90:b0:d9:2f:e7:78:59:a7:4a:33:6f:46:54: 82:8d:7c:f3:03:bf:92:6a:15:05:84:0c:3e:5e:cf:13:1a:fb: 2e:4d:54:9e:a0:9f:6d:28:c3:09:d5:3a:ec:20:4d:a7:51:15: 37:2a:b1:a9:6e:07:f0:ea:90:0b:3f:53:af:6b:e1:4e:4d:53: 08:33:8a:7d:f3:f2:10:2c:13:4b:74:c2:4a:07:e0:75:29:a8: 6a:4a:8b:64:a6:f0:24:af:9e:26:8a:fc:84:e9:d9:92:d4:07: a4:4e:20:c6:31:10:b3:a3:8f:d8:ec:d3:df:27:b6:34:20:2a: 2e:fa:0a:43:45:22:42:03:22:e0:8b:7e:08:db:37:63:70:22: a8:6c:42:3d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOE4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1MDlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEE2NTlFNjg5RDA2Qzcw M0M3RENGNDcxQTRGQUQxQzJCQTdCNkFCMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJ2DBtCJiOJU0n7cjY+iEF2+5kukgheRiGYGg8WctvY7NfzcOS oxE+SqNfVkDzEmueFiX+Mr8lYs6nt/8UMJCpcz3nU9dqSzLzY5HEL8gUihDRTGpU A/pqMaAZdFFSJOggQE49ptzVlPtXfbBVcYVsiPgAXWDGbdWRHZw349+waUar2dNA ROSfRmMCyy6w8cePFsu8SWqPru9JEmUIaHlXhW45/0G38iK5RQ/ZVX62R2ZCa/Hg CKbpWUO5hY7ZlvTe84Rpi/iM4JIQn3h+gwa0tLpECfDg0kpvlTavwtRCJ9+1xqmy d0gvW0GSY7q1GsMes+WUB9s0Z3dlfVGnSkJnAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUplnmidBscDx9z0caT60cK6e2qyMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3Bsbm1pZEJzY0R4OXowY2FU NjBjSzZlMnF5TS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7 wX0wDQYJKoZIhvcNAQELBQADggEBAFhBehNNcRhuqRV3LmVYJwDk/SAaWkOLmh1L DWcauWTAmrUjNhHj1i+SJkqIHshMLTq9nTYuFPqw78CpMYLk8USdfRkknUdhxIzG MY5nBXSjOZ55+wy5s8iKri4LlGBMw2YTkcyAfhaePh+c46gesTO6kLDZL+d4WadK M29GVIKNfPMDv5JqFQWEDD5ezxMa+y5NVJ6gn20owwnVOuwgTadRFTcqsaluB/Dq kAs/U69r4U5NUwgzin3z8hAsE0t0wkoH4HUpqGpKi2Sm8CSvniaK/ITp2ZLUB6RO IMYxELOjj9js098ntjQgKi76CkNFIkIDIuCLfgjbN2NwIqhsQj0= -----END CERTIFICATE-----Generated at Fri Oct 24 04:48:24 2025 by rpki-client