$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qTrtE4jHKVs0Uj7s9TmxbcJuQIA.roa File: qTrtE4jHKVs0Uj7s9TmxbcJuQIA.roa (raw, json) Hash identifier: gFj0N617cw+K34jfMjfrMQxRpQU7ojhEajfc4kjxX5M= Subject key identifier: A9:3A:ED:13:88:C7:29:5B:34:52:3E:EC:F5:39:B1:6D:C2:6E:40:80 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 38DB Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qTrtE4jHKVs0Uj7s9TmxbcJuQIA.roa Signing time: Fri 22 Aug 2025 08:45:42 +0000 ROA not before: Fri 22 Aug 2025 08:45:42 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.195.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14555 (0x38db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:42 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=A93AED1388C7295B34523EECF539B16DC26E4080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2c:43:07:fd:7c:03:89:1c:9c:d8:95:28:fe: e0:bd:17:55:2e:bb:d6:22:1e:75:2f:66:22:f2:63: b8:4c:50:0c:90:6d:49:15:9c:59:88:8e:37:d3:9c: 0f:ca:05:0d:b5:67:80:d4:03:01:0e:d1:33:38:bf: bb:c9:80:61:26:ef:8e:3a:56:6c:7c:5f:18:97:82: e2:5d:ba:8f:6b:87:a8:69:af:08:28:f1:4f:1a:e7: 2c:3b:a8:5b:63:cf:63:e6:5e:97:0d:c4:5d:22:c1: 32:b5:20:d2:09:35:94:12:2a:ed:b0:9f:db:ac:71: ea:09:17:09:69:c9:3c:4f:a2:23:6a:5a:14:6b:c4: e2:61:37:8c:51:11:0d:ac:f2:57:0f:eb:3d:eb:71: ac:61:2e:f6:9a:dd:d0:16:eb:1d:08:ea:b3:61:9e: 31:33:9f:8a:20:a8:b5:b2:9a:e4:e8:da:e0:7e:40: 1e:f2:c6:be:f8:5e:43:30:cf:fb:12:61:cd:88:e9: 21:d9:7d:1b:af:48:f4:c2:7e:45:0d:a7:3c:98:26: 63:ad:7e:17:dd:f7:87:1e:32:bb:c7:07:9d:a7:f2: 71:ce:59:b8:4d:05:db:b9:62:a3:ce:5b:fc:4e:25: e0:df:d9:20:bd:a1:55:a1:bf:f6:40:43:15:c7:26: 09:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:3A:ED:13:88:C7:29:5B:34:52:3E:EC:F5:39:B1:6D:C2:6E:40:80 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qTrtE4jHKVs0Uj7s9TmxbcJuQIA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.40.0/22 Signature Algorithm: sha256WithRSAEncryption 0c:2e:06:5b:20:ed:3a:e2:00:ef:a9:d8:8c:ef:76:66:c9:e7: 2c:67:1e:28:97:48:0f:f7:74:28:b9:53:c8:41:68:a8:a3:37: fb:4d:41:55:8f:58:a1:59:39:cd:e5:ff:38:8f:c3:3e:41:dd: 82:88:77:89:9b:93:12:b9:b7:ad:b0:50:83:a2:5d:9a:03:44: 03:ef:20:32:3e:a7:a0:03:36:ad:49:a1:a7:42:0d:1f:da:28: 04:5d:94:99:41:c1:d7:d4:97:aa:cd:56:10:00:ff:32:ce:b4: a2:6a:b1:26:33:46:4e:dd:27:85:4e:8d:5d:2c:fb:96:24:c9: a5:26:bb:05:e2:0f:d4:18:cd:f3:c4:df:15:4b:24:72:85:33: 77:14:92:51:5b:08:65:c9:de:0c:bb:89:79:19:b2:9c:8b:79: 03:7b:e0:7b:7b:31:ba:ab:af:3b:16:d1:89:de:57:ad:9d:35: a8:30:36:6e:8e:39:83:87:f7:27:59:17:06:6a:84:79:b1:c5: 1e:3b:31:78:47:2f:16:8e:fc:ca:5b:42:e4:6b:fa:88:02:82: 16:65:7c:8b:d9:ee:38:b9:08:f8:1f:c1:b7:e6:53:f3:b7:ef: dc:66:28:ac:f9:2e:2f:ee:1e:76:7d:20:b8:0c:b8:c2:a0:c6: d3:c3:57:e5 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICONswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1NDJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEE5M0FFRDEzODhDNzI5 NUIzNDUyM0VFQ0Y1MzlCMTZEQzI2RTQwODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2LEMH/XwDiRyc2JUo/uC9F1Uuu9YiHnUvZiLyY7hMUAyQbUkV nFmIjjfTnA/KBQ21Z4DUAwEO0TM4v7vJgGEm7446Vmx8XxiXguJduo9rh6hprwgo 8U8a5yw7qFtjz2PmXpcNxF0iwTK1INIJNZQSKu2wn9usceoJFwlpyTxPoiNqWhRr xOJhN4xREQ2s8lcP6z3rcaxhLvaa3dAW6x0I6rNhnjEzn4ogqLWymuTo2uB+QB7y xr74XkMwz/sSYc2I6SHZfRuvSPTCfkUNpzyYJmOtfhfd94ceMrvHB52n8nHOWbhN Bdu5YqPOW/xOJeDf2SC9oVWhv/ZAQxXHJgk1AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUqTrtE4jHKVs0Uj7s9TmxbcJuQIAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3FUcnRFNGpIS1ZzMFVqN3M5 VG14YmNKdVFJQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wygwDQYJKoZIhvcNAQELBQADggEBAAwuBlsg7TriAO+p2IzvdmbJ5yxnHiiXSA/3 dCi5U8hBaKijN/tNQVWPWKFZOc3l/ziPwz5B3YKId4mbkxK5t62wUIOiXZoDRAPv IDI+p6ADNq1JoadCDR/aKARdlJlBwdfUl6rNVhAA/zLOtKJqsSYzRk7dJ4VOjV0s +5YkyaUmuwXiD9QYzfPE3xVLJHKFM3cUklFbCGXJ3gy7iXkZspyLeQN74Ht7Mbqr rzsW0YneV62dNagwNm6OOYOH9ydZFwZqhHmxxR47MXhHLxaO/MpbQuRr+ogCghZl fIvZ7ji5CPgfwbfmU/O379xmKKz5Li/uHnZ9ILgMuMKgxtPDV+U= -----END CERTIFICATE-----Generated at Fri Oct 24 19:27:24 2025 by rpki-client