$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tF3BbEQ91bXE_UaadxgtCAkyDdA.roa File: tF3BbEQ91bXE_UaadxgtCAkyDdA.roa (raw, json) Hash identifier: XEAmM1d/CHaVZqBJJpNZni/Edu9+pBu4omXjWM7fNhE= Subject key identifier: B4:5D:C1:6C:44:3D:D5:B5:C4:FD:46:9A:77:18:2D:08:09:32:0D:D0 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3A1A Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tF3BbEQ91bXE_UaadxgtCAkyDdA.roa Signing time: Fri 22 Aug 2025 08:47:00 +0000 ROA not before: Fri 22 Aug 2025 08:47:00 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 118.233.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14874 (0x3a1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:00 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=B45DC16C443DD5B5C4FD469A77182D0809320DD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:4a:f8:3a:fa:a2:3a:f8:8a:8a:d1:0d:ba:e4: 08:16:0d:23:6d:8b:03:ef:cf:0b:df:dd:ee:38:6b: 0c:50:9c:0b:fc:00:d9:8c:cc:b3:97:78:99:5c:9c: ad:d6:21:56:f1:cf:f7:de:b6:92:c5:3d:0b:1b:71: 75:92:5d:cb:82:39:1c:45:61:d6:f8:26:76:db:ad: 35:7b:93:4c:ed:2f:b6:01:63:cb:c7:c0:75:67:00: 0c:63:16:e8:4a:27:f4:8d:fc:73:ee:4b:d8:8c:01: 9a:1a:1e:b6:cb:55:22:2b:e1:f7:be:68:e9:17:f8: d3:d3:4a:e9:dd:60:9f:eb:cc:9f:1e:ec:bc:ec:3d: 3f:00:e4:43:25:f3:c9:73:19:0f:43:0e:b8:a9:14: 3f:8b:4f:98:c0:2b:fc:6e:ea:6a:4c:ad:25:bb:cb: 44:8b:81:01:e8:a3:46:94:fc:e7:61:ae:dd:41:e6: 21:0b:21:a7:38:fe:dc:53:2e:e5:35:e5:06:97:50: 71:5d:49:c1:f1:28:82:bb:cb:9c:fc:89:10:02:44: ae:9d:18:40:83:0a:2f:e3:08:e0:b9:9a:41:6a:eb: 95:5b:c9:48:f6:d2:79:7b:c0:89:96:53:e2:e5:da: 92:71:c7:f1:74:3c:c7:17:05:d4:5f:22:a2:c2:a3: 14:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:5D:C1:6C:44:3D:D5:B5:C4:FD:46:9A:77:18:2D:08:09:32:0D:D0 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tF3BbEQ91bXE_UaadxgtCAkyDdA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.144.0/22 Signature Algorithm: sha256WithRSAEncryption 35:d0:c3:a2:6b:7a:3b:ce:9e:b2:8e:29:47:43:77:28:bd:a3: 4a:9a:f3:83:21:98:78:17:72:d6:63:30:a2:90:11:82:15:4d: a3:1b:6f:51:4d:29:07:05:a5:9b:88:4b:c2:46:ad:49:7a:25: 33:15:41:3c:8a:9b:83:21:8d:ac:70:ae:e8:45:39:3a:a8:ee: 44:b9:e6:b5:91:69:77:a4:44:c3:f5:3f:e9:ec:53:42:6d:a6: 67:9b:80:ad:bc:e3:c6:4c:33:d9:5a:1f:94:59:41:5a:b7:9f: 70:1f:a6:17:2f:90:8e:3a:f1:07:46:45:d8:be:c9:e9:99:e5: 09:dc:91:48:f2:12:ec:68:f6:66:41:b7:e5:d7:c9:43:4c:84: 93:2e:ad:e7:1a:ab:ce:68:bf:ef:30:42:2a:a5:65:5a:f3:27: e1:a2:6e:08:18:41:73:c4:b9:5c:69:a5:a3:35:30:e4:19:08: 3b:ad:e9:81:c8:0b:a6:c0:36:f4:79:7d:d5:4e:7d:32:cf:2d: 9b:1c:00:b8:23:fb:1f:e7:b1:f9:06:f7:b3:72:c0:46:26:95: ed:15:0d:e8:61:43:15:39:45:fb:ee:2c:9c:30:a5:27:55:5d: fd:93:c3:31:c9:4c:c9:84:91:9b:c9:6f:3a:dc:3a:8e:7d:d4: 39:89:c1:c4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOhowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3MDBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEI0NURDMTZDNDQzREQ1 QjVDNEZENDY5QTc3MTgyRDA4MDkzMjBERDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYSvg6+qI6+IqK0Q265AgWDSNtiwPvzwvf3e44awxQnAv8ANmM zLOXeJlcnK3WIVbxz/fetpLFPQsbcXWSXcuCORxFYdb4JnbbrTV7k0ztL7YBY8vH wHVnAAxjFuhKJ/SN/HPuS9iMAZoaHrbLVSIr4fe+aOkX+NPTSundYJ/rzJ8e7Lzs PT8A5EMl88lzGQ9DDripFD+LT5jAK/xu6mpMrSW7y0SLgQHoo0aU/Odhrt1B5iEL Iac4/txTLuU15QaXUHFdScHxKIK7y5z8iRACRK6dGECDCi/jCOC5mkFq65VbyUj2 0nl7wImWU+Ll2pJxx/F0PMcXBdRfIqLCoxTfAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUtF3BbEQ91bXE/UaadxgtCAkyDdAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3RGM0JiRVE5MWJYRV9VYWFk eGd0Q0FreURkQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6ZAwDQYJKoZIhvcNAQELBQADggEBADXQw6JrejvOnrKOKUdDdyi9o0qa84MhmHgX ctZjMKKQEYIVTaMbb1FNKQcFpZuIS8JGrUl6JTMVQTyKm4MhjaxwruhFOTqo7kS5 5rWRaXekRMP1P+nsU0JtpmebgK2848ZMM9laH5RZQVq3n3AfphcvkI468QdGRdi+ yemZ5QnckUjyEuxo9mZBt+XXyUNMhJMurecaq85ov+8wQiqlZVrzJ+GibggYQXPE uVxppaM1MOQZCDut6YHIC6bANvR5fdVOfTLPLZscALgj+x/nsfkG97NywEYmle0V DehhQxU5RfvuLJwwpSdVXf2TwzHJTMmEkZvJbzrcOo591DmJwcQ= -----END CERTIFICATE-----Generated at Fri Oct 24 19:24:29 2025 by rpki-client