$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tC0i2vVaedlN4JKvhzmoQK33iHU.roa File: tC0i2vVaedlN4JKvhzmoQK33iHU.roa (raw, json) Hash identifier: y9zMwgoeoM27VXGGtbheH/WZvP6LB4yvNMAI5suOwys= Subject key identifier: B4:2D:22:DA:F5:5A:79:D9:4D:E0:92:AF:87:39:A8:40:AD:F7:88:75 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 39D3 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tC0i2vVaedlN4JKvhzmoQK33iHU.roa Signing time: Fri 22 Aug 2025 08:46:42 +0000 ROA not before: Fri 22 Aug 2025 08:46:42 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 106.1.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14803 (0x39d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:42 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=B42D22DAF55A79D94DE092AF8739A840ADF78875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c3:98:c8:a7:2d:1f:54:c4:d6:df:b2:5c:70: 27:76:27:93:e3:b0:5a:7e:91:26:ae:88:98:11:36: 21:1e:de:35:8b:d8:db:91:78:1e:4c:1e:ae:c9:56: b6:ac:5c:07:06:d8:25:6c:ec:79:1a:32:b0:ce:8c: d8:f6:86:23:8d:7a:54:5d:32:63:d5:cc:2f:1a:d8: fa:04:79:15:32:3a:51:7f:85:68:55:06:9a:80:76: 35:bd:bc:ff:f9:16:8a:a3:62:01:35:0f:73:fd:13: 29:fa:3c:8f:a0:41:0f:dd:56:48:dd:5b:b3:81:ca: ad:e4:95:27:a7:41:d7:4c:13:8e:fb:23:5d:23:f9: 97:e5:a5:a5:a5:09:b8:85:03:78:2e:e3:56:7e:d1: e6:10:c5:a1:6e:7a:37:8e:9d:6d:83:51:9f:ce:bc: 27:6b:62:4a:b1:b8:5c:89:5f:cf:e5:52:cf:a6:25: aa:fb:dc:8b:7f:77:a5:f5:d7:44:aa:48:1a:b8:73: 17:25:27:ff:90:7e:1e:4e:63:df:e7:71:62:71:7c: 2c:ae:44:4e:bb:46:a9:bc:b3:d6:4a:34:e7:fd:c0: 4c:55:ec:c3:79:b2:d2:96:8c:e9:2d:9e:e8:98:13: d0:98:e3:09:12:ef:35:1b:c4:dd:d4:fc:25:3d:78: 1f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:2D:22:DA:F5:5A:79:D9:4D:E0:92:AF:87:39:A8:40:AD:F7:88:75 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tC0i2vVaedlN4JKvhzmoQK33iHU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.130.0/24 Signature Algorithm: sha256WithRSAEncryption 05:fb:b8:28:99:f7:d3:22:db:f4:44:52:22:21:71:ad:83:b1: 9d:99:b1:e5:f9:49:d0:94:a5:bd:42:07:56:e4:8e:d5:b6:ce: 75:b8:6b:22:02:3a:6a:c0:a3:0a:a2:dc:f1:56:70:db:e3:88: 12:1a:17:44:d8:53:fe:fe:06:70:17:d0:95:23:7f:7d:f0:4d: 63:9d:9a:c3:d2:c0:cd:82:75:a0:4b:f1:3d:b6:ff:b3:62:89: 48:b6:97:5c:e8:5d:8a:39:30:15:04:49:3e:b0:7e:30:86:e1: f9:ec:cc:37:99:b6:c4:0f:12:2f:47:96:16:f2:08:a4:5b:c4: 7f:d2:45:67:c8:fa:79:90:4c:d6:48:a1:29:4e:d7:e9:b4:6b: 3c:f9:62:e3:90:9e:0b:2e:4a:af:72:38:0b:77:12:f6:86:ee: c6:59:99:4e:3f:84:af:2a:5c:8a:f1:9d:88:d5:2e:87:8f:2d: 35:03:ab:f4:00:c3:51:df:f7:a1:78:6a:29:3d:64:7f:ca:ed: 4d:c4:55:0c:0b:3c:7b:8c:cf:9c:cf:57:36:51:c4:84:30:99: e8:90:f3:47:62:40:e7:c1:99:03:80:8a:53:84:6c:d3:73:85: 54:27:c2:db:ef:c2:e8:d8:3d:4d:aa:ba:72:f0:05:92:75:0d: 22:4d:63:b4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOdMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2NDJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEI0MkQyMkRBRjU1QTc5 RDk0REUwOTJBRjg3MzlBODQwQURGNzg4NzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCZw5jIpy0fVMTW37JccCd2J5PjsFp+kSauiJgRNiEe3jWL2NuR eB5MHq7JVrasXAcG2CVs7HkaMrDOjNj2hiONelRdMmPVzC8a2PoEeRUyOlF/hWhV BpqAdjW9vP/5FoqjYgE1D3P9Eyn6PI+gQQ/dVkjdW7OByq3klSenQddME477I10j +ZflpaWlCbiFA3gu41Z+0eYQxaFuejeOnW2DUZ/OvCdrYkqxuFyJX8/lUs+mJar7 3It/d6X110SqSBq4cxclJ/+Qfh5OY9/ncWJxfCyuRE67Rqm8s9ZKNOf9wExV7MN5 stKWjOktnuiYE9CY4wkS7zUbxN3U/CU9eB+xAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUtC0i2vVaedlN4JKvhzmoQK33iHUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3RDMGkydlZhZWRsTjRKS3Zo em1vUUszM2lIVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq AYIwDQYJKoZIhvcNAQELBQADggEBAAX7uCiZ99Mi2/REUiIhca2DsZ2ZseX5SdCU pb1CB1bkjtW2znW4ayICOmrAowqi3PFWcNvjiBIaF0TYU/7+BnAX0JUjf33wTWOd msPSwM2CdaBL8T22/7NiiUi2l1zoXYo5MBUEST6wfjCG4fnszDeZtsQPEi9Hlhby CKRbxH/SRWfI+nmQTNZIoSlO1+m0azz5YuOQngsuSq9yOAt3EvaG7sZZmU4/hK8q XIrxnYjVLoePLTUDq/QAw1Hf96F4aik9ZH/K7U3EVQwLPHuMz5zPVzZRxIQwmeiQ 80diQOfBmQOAilOEbNNzhVQnwtvvwujYPU2qunLwBZJ1DSJNY7Q= -----END CERTIFICATE-----Generated at Fri Oct 24 19:25:03 2025 by rpki-client