$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sTBXjGZvZ2AWM94RH9-TU-olfsg.roa File: sTBXjGZvZ2AWM94RH9-TU-olfsg.roa (raw, json) Hash identifier: /tDiZq5Q4yzxQHSSONsCQWrh6z/EhJOQtRf5B2NAPSI= Subject key identifier: B1:30:57:8C:66:6F:67:60:16:33:DE:11:1F:DF:93:53:EA:25:7E:C8 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 38A6 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sTBXjGZvZ2AWM94RH9-TU-olfsg.roa Signing time: Fri 22 Aug 2025 08:45:30 +0000 ROA not before: Fri 22 Aug 2025 08:45:30 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 106.1.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14502 (0x38a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:30 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=B130578C666F67601633DE111FDF9353EA257EC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b6:9a:4f:51:65:92:13:3b:c3:ab:c7:df:3c: 0a:c8:62:33:95:de:38:e2:ea:0d:47:91:1f:0e:ba: 20:fd:04:93:ab:b2:31:c2:f6:34:a7:47:59:bb:b4: e3:f6:71:ad:4a:30:61:2e:f1:04:6a:04:fa:76:a5: 93:a0:50:92:51:0c:41:2b:fd:aa:fe:5a:aa:d9:88: 85:da:8e:c7:df:5a:39:9d:e2:f9:c7:9f:ee:05:ec: 13:56:4b:72:a4:fd:91:9f:5a:55:86:60:64:1f:b2: 6b:e9:6d:e3:cc:26:b0:1f:4a:b6:f6:f4:1b:f3:51: d5:dd:2d:23:46:50:10:2f:05:79:ae:91:78:8a:1b: 95:a3:88:13:db:02:79:02:77:06:e9:11:47:6a:b4: 6b:30:e3:26:f6:11:5a:07:fb:eb:91:57:11:e6:82: 80:fc:2e:e5:d2:86:59:81:92:f5:8d:95:73:6a:0c: bf:63:e3:cc:6a:93:88:c2:a8:cc:f9:b9:5b:9e:df: 2e:98:a1:43:94:95:14:e6:aa:2c:38:aa:50:12:37: 7a:4a:7d:e2:cf:d4:27:57:9b:ce:02:97:7f:2b:44: 6d:ea:ce:b8:cf:87:8f:a5:50:ea:05:ff:e6:27:da: 0a:09:2d:a9:34:df:70:e7:b3:35:d4:d4:d8:80:3f: 27:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:30:57:8C:66:6F:67:60:16:33:DE:11:1F:DF:93:53:EA:25:7E:C8 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sTBXjGZvZ2AWM94RH9-TU-olfsg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.72.0/21 Signature Algorithm: sha256WithRSAEncryption 0d:bb:d2:57:3a:e7:9f:24:02:52:0b:c3:b5:af:91:31:3e:d6: 4b:e6:26:78:97:a1:8e:66:e1:fb:8e:31:b0:37:1d:74:e9:1a: 28:38:04:97:58:4c:ab:49:c7:4c:f8:1e:3a:71:1d:9c:c6:1c: 50:c4:fe:e6:9e:f3:cf:f4:da:3f:3a:3f:a8:70:78:5d:c1:12: 45:68:fa:0d:1b:d4:c4:d1:78:22:95:79:4b:1b:09:bd:41:2e: ee:c3:a3:32:89:e7:c2:9c:21:55:40:b1:03:a4:65:0c:df:ff: ee:4c:1a:ad:dd:2e:b8:63:0a:2e:92:3e:95:8f:e8:43:fa:5b: 8d:23:55:b4:2f:15:e4:18:59:24:44:dc:39:e0:e6:2c:97:d0: 46:4a:45:50:2f:2e:38:26:41:fd:3d:cf:5a:31:f2:ea:ca:b6: 17:24:71:e0:e0:8c:61:03:bf:5a:3b:bb:10:d5:9b:65:cf:28: 06:3f:69:1d:f4:42:39:22:4c:07:33:cb:70:93:d5:84:e1:bd: ef:2b:cc:15:6a:5c:3d:3e:a3:0a:fc:e6:12:3c:41:f5:ea:91: 07:51:5b:69:4a:18:da:4c:70:6f:8d:8c:0a:4f:fb:58:db:c4: 2f:08:fc:c5:53:4a:82:aa:82:1c:b8:09:a1:13:38:95:09:8d: f2:01:84:d6 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOKYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1MzBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEIxMzA1NzhDNjY2RjY3 NjAxNjMzREUxMTFGREY5MzUzRUEyNTdFQzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0tppPUWWSEzvDq8ffPArIYjOV3jji6g1HkR8OuiD9BJOrsjHC 9jSnR1m7tOP2ca1KMGEu8QRqBPp2pZOgUJJRDEEr/ar+WqrZiIXajsffWjmd4vnH n+4F7BNWS3Kk/ZGfWlWGYGQfsmvpbePMJrAfSrb29BvzUdXdLSNGUBAvBXmukXiK G5WjiBPbAnkCdwbpEUdqtGsw4yb2EVoH++uRVxHmgoD8LuXShlmBkvWNlXNqDL9j 48xqk4jCqMz5uVue3y6YoUOUlRTmqiw4qlASN3pKfeLP1CdXm84Cl38rRG3qzrjP h4+lUOoF/+Yn2goJLak033DnszXU1NiAPydFAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUsTBXjGZvZ2AWM94RH9+TU+olfsgwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3NUQlhqR1p2WjJBV005NFJI OS1UVS1vbGZzZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBANq AUgwDQYJKoZIhvcNAQELBQADggEBAA270lc6558kAlILw7WvkTE+1kvmJniXoY5m 4fuOMbA3HXTpGig4BJdYTKtJx0z4HjpxHZzGHFDE/uae88/02j86P6hweF3BEkVo +g0b1MTReCKVeUsbCb1BLu7DozKJ58KcIVVAsQOkZQzf/+5MGq3dLrhjCi6SPpWP 6EP6W40jVbQvFeQYWSRE3Dng5iyX0EZKRVAvLjgmQf09z1ox8urKthckceDgjGED v1o7uxDVm2XPKAY/aR30QjkiTAczy3CT1YThve8rzBVqXD0+owr85hI8QfXqkQdR W2lKGNpMcG+NjApP+1jbxC8I/MVTSoKqghy4CaETOJUJjfIBhNY= -----END CERTIFICATE-----Generated at Fri Oct 24 19:21:26 2025 by rpki-client