$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qIKKwytFEVlbYMBYHQDy709JRNY.roa File: qIKKwytFEVlbYMBYHQDy709JRNY.roa (raw, json) Hash identifier: +8fY+ukfiEztLLfrZmwCt3REXAdAJKX4WGGhG0V3bWc= Subject key identifier: A8:82:8A:C3:2B:45:11:59:5B:60:C0:58:1D:00:F2:EF:4F:49:44:D6 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 392F Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qIKKwytFEVlbYMBYHQDy709JRNY.roa Signing time: Fri 22 Aug 2025 08:46:03 +0000 ROA not before: Fri 22 Aug 2025 08:46:03 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 106.1.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14639 (0x392f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:03 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=A8828AC32B4511595B60C0581D00F2EF4F4944D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:48:2a:c5:82:71:3d:b2:7e:28:cc:41:3e:3e: ed:b5:5b:b7:40:34:d6:bd:c3:46:ff:58:85:a5:ce: 53:1f:fd:48:c0:37:aa:71:d3:c2:91:2a:e3:9a:c5: b7:88:8b:fe:20:70:65:91:8f:34:85:8b:bf:22:b4: a1:d6:cb:40:1f:27:41:ea:a3:51:ac:4c:86:19:b7: de:86:02:2f:9c:b0:0d:c9:fd:8f:a7:e6:1d:44:65: ab:a7:6f:54:eb:87:cd:24:65:96:7a:c6:51:e4:a7: 15:0f:23:de:c9:f7:68:9f:b9:5a:9e:2f:68:22:53: 1a:56:66:90:0e:28:b6:6f:c2:41:bd:10:47:7f:6c: ab:6f:4c:85:36:7d:5c:eb:f7:21:64:13:da:b4:cb: 36:21:e7:d4:7b:c5:f5:cd:47:82:4b:63:11:7d:cc: c6:aa:85:bf:7e:e5:c0:d8:c6:2d:5d:4b:82:26:b3: 14:3a:6c:fe:ca:9e:28:e6:f1:1c:a6:b8:4b:d5:dc: 4e:a3:06:10:1d:4b:f0:0b:55:32:76:8f:0c:65:8d: 47:61:8b:99:85:fe:37:36:27:7a:03:ad:d5:10:fa: 1c:b5:72:46:f7:28:2f:31:89:2c:eb:b6:fb:d5:2f: 90:12:3d:07:f0:02:8a:8b:1a:32:78:68:fc:ec:bc: 98:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:82:8A:C3:2B:45:11:59:5B:60:C0:58:1D:00:F2:EF:4F:49:44:D6 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qIKKwytFEVlbYMBYHQDy709JRNY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.223.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:2b:bf:e7:e5:21:61:7f:05:04:04:55:47:72:55:1a:5a:5d: 1c:84:25:07:8c:af:16:7f:47:0c:2a:bf:59:f0:48:07:71:f1: c0:4e:60:82:51:3b:27:6c:f4:85:23:ad:01:17:47:d1:8f:c7: d5:37:fa:c8:ec:ba:4e:53:d3:be:5f:d4:e9:0c:21:11:7a:b1: 13:a1:ed:be:b6:56:be:c9:32:fd:2e:f8:13:5c:1d:7a:c7:4c: a3:5c:02:ad:6f:e9:87:25:59:c8:bf:85:d1:92:0b:1a:7e:27: a9:a3:8e:cc:9e:f4:0e:96:67:b8:e2:c9:73:51:86:22:d3:f3: 0b:04:28:ce:c8:bb:f2:66:43:69:76:2e:46:95:10:87:2b:95: 70:62:8e:fc:a8:60:86:f5:e2:7c:17:de:6f:ee:d5:ab:ea:4e: 8a:2a:be:e8:c0:66:22:a3:61:dc:83:a2:aa:61:02:09:a5:83: 3b:d7:56:94:5d:a4:03:d0:17:79:86:9f:bb:ba:81:67:c5:0f: 59:fe:77:34:06:0d:ec:be:ae:c7:b0:20:99:18:6e:50:04:bb: 02:4b:e7:1d:8e:e9:c6:44:49:51:4f:f8:c4:e9:50:39:c9:1b: c1:da:eb:ff:c2:e3:f4:34:f2:bb:51:c3:98:0d:ce:46:58:34: c3:cd:f9:8e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOS8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2MDNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEE4ODI4QUMzMkI0NTEx NTk1QjYwQzA1ODFEMDBGMkVGNEY0OTQ0RDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCYSCrFgnE9sn4ozEE+Pu21W7dANNa9w0b/WIWlzlMf/UjAN6px 08KRKuOaxbeIi/4gcGWRjzSFi78itKHWy0AfJ0Hqo1GsTIYZt96GAi+csA3J/Y+n 5h1EZaunb1Trh80kZZZ6xlHkpxUPI97J92ifuVqeL2giUxpWZpAOKLZvwkG9EEd/ bKtvTIU2fVzr9yFkE9q0yzYh59R7xfXNR4JLYxF9zMaqhb9+5cDYxi1dS4ImsxQ6 bP7Knijm8RymuEvV3E6jBhAdS/ALVTJ2jwxljUdhi5mF/jc2J3oDrdUQ+hy1ckb3 KC8xiSzrtvvVL5ASPQfwAoqLGjJ4aPzsvJivAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUqIKKwytFEVlbYMBYHQDy709JRNYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3FJS0t3eXRGRVZsYllNQllI UUR5NzA5SlJOWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq Ad8wDQYJKoZIhvcNAQELBQADggEBAD8rv+flIWF/BQQEVUdyVRpaXRyEJQeMrxZ/ Rwwqv1nwSAdx8cBOYIJROyds9IUjrQEXR9GPx9U3+sjsuk5T075f1OkMIRF6sROh 7b62Vr7JMv0u+BNcHXrHTKNcAq1v6YclWci/hdGSCxp+J6mjjsye9A6WZ7jiyXNR hiLT8wsEKM7Iu/JmQ2l2LkaVEIcrlXBijvyoYIb14nwX3m/u1avqTooqvujAZiKj YdyDoqphAgmlgzvXVpRdpAPQF3mGn7u6gWfFD1n+dzQGDey+rsewIJkYblAEuwJL 5x2O6cZESVFP+MTpUDnJG8Ha6//C4/Q08rtRw5gNzkZYNMPN+Y4= -----END CERTIFICATE-----Generated at Fri Oct 24 19:21:47 2025 by rpki-client