$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rX70kjGG2s3VITgVilc6LxIJ9HE.roa File: rX70kjGG2s3VITgVilc6LxIJ9HE.roa (raw, json) Hash identifier: lq0uji7tx5QHIxaZv6gF+6JcGAqnoO5h8pw9jDiQOj8= Subject key identifier: AD:7E:F4:92:31:86:DA:CD:D5:21:38:15:8A:57:3A:2F:12:09:F4:71 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 37E4 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rX70kjGG2s3VITgVilc6LxIJ9HE.roa Signing time: Fri 22 Aug 2025 08:44:45 +0000 ROA not before: Fri 22 Aug 2025 08:44:45 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.195.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14308 (0x37e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:44:45 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=AD7EF4923186DACDD52138158A573A2F1209F471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:52:b0:f4:bf:99:ec:ca:30:a8:7d:47:f0:fd: c2:ad:b9:56:76:60:e9:35:52:48:aa:8a:db:5d:03: 54:56:d2:8f:6a:ad:75:ef:2f:4f:aa:32:89:6b:ed: c9:27:b3:c6:14:41:0a:e2:ee:cf:9b:52:e5:92:ed: 18:75:07:b6:31:c5:11:a7:d9:8e:78:a8:e3:b5:bd: 36:21:62:f6:02:df:43:f1:c6:3e:bd:ce:4e:09:78: 18:fa:e3:59:3b:fe:76:ca:0c:ee:79:28:9b:fd:92: 9a:73:b0:9f:52:e5:44:cb:83:db:3b:46:ba:c0:a0: a3:a0:fe:c8:68:68:40:48:3b:7a:47:6e:3b:7b:0f: 25:96:69:09:c3:91:4a:a0:83:12:a8:61:04:33:94: bb:42:b0:b1:8a:90:7f:ac:20:52:d8:c5:36:38:b2: bb:08:71:71:b5:87:19:d5:7f:06:de:84:73:cf:52: f7:35:ec:6e:42:7b:5a:cb:f0:67:7b:f0:6e:5c:87: 68:6f:fa:05:68:fc:51:9b:34:be:2c:4b:59:72:a3: d4:2c:d5:d1:54:4e:16:82:26:c8:2e:34:92:b7:d7: db:0a:77:33:a9:b2:ad:29:f3:fa:1e:30:65:e8:7f: fd:4d:27:6b:b3:9d:ef:f3:26:b1:c9:6b:76:90:a6: 38:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:7E:F4:92:31:86:DA:CD:D5:21:38:15:8A:57:3A:2F:12:09:F4:71 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rX70kjGG2s3VITgVilc6LxIJ9HE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.152.0/21 Signature Algorithm: sha256WithRSAEncryption 24:00:62:a9:39:e2:ca:7f:27:4a:e7:56:7d:c4:97:db:8e:92: 50:1d:dc:38:71:f0:8d:25:f3:76:bc:03:22:cd:86:41:fc:29: fc:2c:89:38:78:92:0a:ce:40:4d:30:31:22:f1:39:65:19:e6: 5a:a1:5d:3d:3a:4a:9b:c1:1b:98:9d:b2:1d:13:16:8b:c3:68: 2b:0a:19:f8:0c:ef:ad:01:c1:39:b8:e6:5f:5b:0f:de:b5:27: 7c:8f:ed:45:b4:a9:27:74:75:d3:8f:9f:9b:95:ac:41:a3:f0: b4:cd:3c:8c:84:e4:9a:5f:65:47:10:78:cd:3a:6a:66:b6:67: 25:c3:38:02:82:d0:37:59:22:18:cc:0c:8b:7a:e3:b9:27:62: 03:d7:5e:01:d5:77:93:83:47:4f:3b:61:2c:4d:87:cb:3f:3b: 85:ae:29:3e:f3:5c:df:bf:9e:44:75:aa:ea:32:60:2c:87:e1: fa:70:96:e6:54:f5:3b:89:ee:ba:fc:83:06:b7:38:05:1c:59: c4:86:a8:51:6d:a5:e7:21:ac:3a:ce:c0:29:9b:20:d8:c7:0c: 15:cc:8a:51:56:2a:99:6e:ac:ac:2c:24:7a:e5:60:d9:b1:7d: 74:fd:15:7d:68:44:0b:0d:88:0d:4e:46:54:90:05:ab:45:7b: fd:d8:dd:ef -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICN+QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ0NDVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEFEN0VGNDkyMzE4NkRB Q0RENTIxMzgxNThBNTczQTJGMTIwOUY0NzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtUrD0v5nsyjCofUfw/cKtuVZ2YOk1UkiqittdA1RW0o9qrXXv L0+qMolr7ckns8YUQQri7s+bUuWS7Rh1B7YxxRGn2Y54qOO1vTYhYvYC30Pxxj69 zk4JeBj641k7/nbKDO55KJv9kppzsJ9S5UTLg9s7RrrAoKOg/shoaEBIO3pHbjt7 DyWWaQnDkUqggxKoYQQzlLtCsLGKkH+sIFLYxTY4srsIcXG1hxnVfwbehHPPUvc1 7G5Ce1rL8Gd78G5ch2hv+gVo/FGbNL4sS1lyo9Qs1dFUThaCJsguNJK319sKdzOp sq0p8/oeMGXof/1NJ2uzne/zJrHJa3aQpjjNAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUrX70kjGG2s3VITgVilc6LxIJ9HEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3JYNzBrakdHMnMzVklUZ1Zp bGM2THhJSjlIRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 w5gwDQYJKoZIhvcNAQELBQADggEBACQAYqk54sp/J0rnVn3El9uOklAd3Dhx8I0l 83a8AyLNhkH8KfwsiTh4kgrOQE0wMSLxOWUZ5lqhXT06SpvBG5idsh0TFovDaCsK GfgM760BwTm45l9bD961J3yP7UW0qSd0ddOPn5uVrEGj8LTNPIyE5JpfZUcQeM06 ama2ZyXDOAKC0DdZIhjMDIt647knYgPXXgHVd5ODR087YSxNh8s/O4WuKT7zXN+/ nkR1quoyYCyH4fpwluZU9TuJ7rr8gwa3OAUcWcSGqFFtpechrDrOwCmbINjHDBXM ilFWKplurKwsJHrlYNmxfXT9FX1oRAsNiA1ORlSQBatFe/3Y3e8= -----END CERTIFICATE-----Generated at Fri Oct 24 19:18:36 2025 by rpki-client