$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/q3AZcpxsHdY13SLz-88lDxdQBsM.roa File: q3AZcpxsHdY13SLz-88lDxdQBsM.roa (raw, json) Hash identifier: xguUA5L5CONimF/oMPbmbVM3F7daQ7RBNQJTE1nfB9E= Subject key identifier: AB:70:19:72:9C:6C:1D:D6:35:DD:22:F3:FB:CF:25:0F:17:50:06:C3 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3B0D Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/q3AZcpxsHdY13SLz-88lDxdQBsM.roa Signing time: Fri 22 Aug 2025 08:48:01 +0000 ROA not before: Fri 22 Aug 2025 08:48:01 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.192.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15117 (0x3b0d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:48:01 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=AB7019729C6C1DD635DD22F3FBCF250F175006C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d3:90:56:e8:03:dc:75:bc:1f:c5:47:25:aa: c8:25:c0:84:8a:97:2f:a8:6d:31:c7:f0:3a:84:b7: 69:a9:e6:3e:a1:b5:4e:e7:7a:41:62:99:27:2e:0f: df:0d:e6:d4:22:53:f7:fd:b9:7d:b4:6f:e7:06:b8: 7f:7a:ce:f1:57:4d:6d:f1:c0:dc:e8:c8:b9:ee:df: d3:90:44:98:ac:03:40:11:5c:27:4d:6c:65:81:14: 04:4e:14:c8:c0:9e:99:cc:12:a5:72:55:3b:fd:c6: 55:15:ad:55:8b:56:ba:96:41:23:8d:ff:99:e7:18: a4:91:29:30:c3:f1:6b:81:d3:bb:0c:38:03:d5:5c: ac:89:65:19:06:44:ff:0b:4e:0c:aa:d8:c6:02:33: 7c:80:16:e4:a9:66:66:75:9f:bf:b9:36:60:4f:cf: e4:48:f1:eb:cd:04:0e:55:89:c7:0d:14:f4:33:04: 9a:9b:ab:b2:7c:18:80:d6:ab:35:89:84:32:91:ed: 78:75:da:ef:f4:b8:44:d4:6a:0d:46:0a:01:91:3c: 67:f9:4e:e9:7d:ef:cf:88:24:c1:ac:60:e0:0c:a1: 63:0e:26:f1:4e:07:b9:65:d2:70:ff:a0:88:1d:7c: 19:fc:74:62:bb:9b:2a:ee:c8:3c:d5:ab:9b:8b:b5: 88:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:70:19:72:9C:6C:1D:D6:35:DD:22:F3:FB:CF:25:0F:17:50:06:C3 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/q3AZcpxsHdY13SLz-88lDxdQBsM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.216.0/22 Signature Algorithm: sha256WithRSAEncryption 65:cb:ee:08:e4:37:d0:36:4f:1f:b8:d2:e5:aa:ba:57:8f:cb: 0d:ee:04:28:e1:cb:5a:6b:d2:5c:43:39:eb:7c:9c:8a:bd:3d: ad:53:2c:20:d4:fd:b5:e9:ef:8b:1d:eb:0f:10:74:0c:23:c4: e3:05:f6:83:de:a6:41:75:68:fc:99:01:f5:cf:69:d7:6a:53: c7:62:ba:00:cd:86:de:06:74:4d:75:1e:68:33:32:a8:0c:42: 31:de:79:fe:97:f8:74:94:11:de:4e:ac:43:93:61:10:df:5a: be:0a:92:81:32:a4:6b:ce:7a:2c:8e:25:d7:7d:26:c7:21:4c: 17:1c:4e:66:01:75:a8:ff:f7:94:22:3c:a3:48:dd:f7:2d:c8: 3e:d6:d7:e3:39:aa:eb:a4:be:c4:17:4a:d9:6a:ef:f0:da:50: 89:55:7d:ab:c6:17:a5:88:ff:33:d7:e6:0d:4c:49:9f:92:f1: ec:39:3c:7b:29:da:9d:eb:68:60:dc:3c:fa:b9:6f:a2:75:a5: 95:a3:cc:78:48:9d:e4:1c:45:7d:7f:54:16:bd:39:96:8d:ba: 5f:2d:93:bc:4a:6b:54:b2:fd:d8:11:d1:6c:59:a0:51:bd:ee: 6a:f3:07:c6:85:0a:af:48:60:22:38:1f:8c:14:86:a5:57:45: c1:65:ab:05 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOw0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ4MDFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEFCNzAxOTcyOUM2QzFE RDYzNUREMjJGM0ZCQ0YyNTBGMTc1MDA2QzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDK05BW6APcdbwfxUclqsglwISKly+obTHH8DqEt2mp5j6htU7n ekFimScuD98N5tQiU/f9uX20b+cGuH96zvFXTW3xwNzoyLnu39OQRJisA0ARXCdN bGWBFAROFMjAnpnMEqVyVTv9xlUVrVWLVrqWQSON/5nnGKSRKTDD8WuB07sMOAPV XKyJZRkGRP8LTgyq2MYCM3yAFuSpZmZ1n7+5NmBPz+RI8evNBA5ViccNFPQzBJqb q7J8GIDWqzWJhDKR7Xh12u/0uETUag1GCgGRPGf5Tul978+IJMGsYOAMoWMOJvFO B7ll0nD/oIgdfBn8dGK7myruyDzVq5uLtYhvAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUq3AZcpxsHdY13SLz+88lDxdQBsMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3EzQVpjcHhzSGRZMTNTTHot ODhsRHhkUUJzTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wNgwDQYJKoZIhvcNAQELBQADggEBAGXL7gjkN9A2Tx+40uWqulePyw3uBCjhy1pr 0lxDOet8nIq9Pa1TLCDU/bXp74sd6w8QdAwjxOMF9oPepkF1aPyZAfXPaddqU8di ugDNht4GdE11HmgzMqgMQjHeef6X+HSUEd5OrEOTYRDfWr4KkoEypGvOeiyOJdd9 JschTBccTmYBdaj/95QiPKNI3fctyD7W1+M5quukvsQXStlq7/DaUIlVfavGF6WI /zPX5g1MSZ+S8ew5PHsp2p3raGDcPPq5b6J1pZWjzHhIneQcRX1/VBa9OZaNul8t k7xKa1Sy/dgR0WxZoFG97mrzB8aFCq9IYCI4H4wUhqVXRcFlqwU= -----END CERTIFICATE-----Generated at Fri Oct 24 19:24:37 2025 by rpki-client