$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tZkMjSF4d408MLW1Gao9icre7e0.roa File: tZkMjSF4d408MLW1Gao9icre7e0.roa (raw, json) Hash identifier: xne/qq5puRLViN4WlFzJl4ohNkuUNhDM4gqP9QMs6lg= Subject key identifier: B5:99:0C:8D:21:78:77:8D:3C:30:B5:B5:19:AA:3D:89:CA:DE:ED:ED Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3A46 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tZkMjSF4d408MLW1Gao9icre7e0.roa Signing time: Fri 22 Aug 2025 08:47:11 +0000 ROA not before: Fri 22 Aug 2025 08:47:11 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.194.144.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14918 (0x3a46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:11 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=B5990C8D2178778D3C30B5B519AA3D89CADEEDED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4b:3f:45:e3:96:f4:4f:4e:aa:de:be:f1:e7: 8b:76:5f:72:03:71:59:b4:40:67:7c:09:78:ec:e8: fa:80:1e:24:35:67:16:cc:19:62:4d:a5:c4:df:41: 1c:2c:ef:c8:ba:4d:e1:6f:7e:a6:87:c1:29:bc:c4: 20:81:cf:01:9a:5a:1a:bb:b3:de:51:39:64:99:53: a2:e4:ac:d9:01:d3:b7:88:23:2f:8b:71:bf:d2:08: 14:1d:63:b7:07:84:a0:ee:79:67:80:c0:a6:ec:bc: 33:19:0c:f2:11:3f:0c:ee:8a:36:a2:2a:0e:a0:95: 5e:ce:0c:aa:c2:b6:ee:0e:87:e4:6b:24:06:81:67: f7:49:13:46:c5:d2:73:0b:b4:9c:cf:69:9c:3a:1e: 61:98:d0:00:c7:ee:d1:eb:f7:5b:a4:0b:5f:d1:46: d5:60:c7:c3:64:d7:be:c7:7f:20:1e:43:8a:09:56: b6:1c:29:bb:ee:f7:b2:20:2f:4a:45:c9:87:7a:99: 8d:a5:eb:13:9f:78:73:09:97:6d:97:d6:50:a6:16: 72:88:fd:fb:c0:56:ef:1d:07:ac:34:7b:8c:d8:4f: 6a:6d:75:24:5b:9a:66:ff:42:cb:fe:5e:52:9e:2f: 86:d6:7e:e7:32:3c:a9:06:fb:3f:ef:93:01:c0:72: c9:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:99:0C:8D:21:78:77:8D:3C:30:B5:B5:19:AA:3D:89:CA:DE:ED:ED X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tZkMjSF4d408MLW1Gao9icre7e0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.144.0/21 Signature Algorithm: sha256WithRSAEncryption 82:db:fc:4d:c8:e5:b9:1e:0a:f1:9f:52:38:65:96:7d:c6:17: 80:f3:49:42:4f:31:f3:de:2f:6c:3c:a8:eb:9c:70:6c:0c:17: 7d:83:13:97:fe:64:72:c3:fd:ef:0d:ff:b5:76:44:6e:e4:52: bc:20:92:93:c3:b0:77:a1:c4:c7:79:ea:36:3a:9b:57:42:46: b2:4b:a9:63:05:be:82:16:86:4a:79:06:e2:11:86:59:09:7c: 19:b2:57:ee:a0:39:10:66:f5:ab:cc:b0:4c:25:77:b4:f7:88: 2c:6a:16:77:ab:5a:9a:c4:1b:6f:8f:60:13:aa:c1:9e:e8:82: a5:00:4f:41:fe:82:0e:f8:34:5d:87:cd:9c:5d:0c:99:65:c4: 55:8b:15:67:e7:c4:84:53:72:ca:63:18:f0:cd:9f:d4:16:16: de:ac:30:e0:73:af:8b:14:dd:c3:a8:20:87:dd:03:a5:6f:48: c7:5f:7b:0d:e7:ec:d0:c7:d1:c7:1a:2a:1b:39:d4:5a:dd:ea: c5:94:00:a2:ec:7c:7c:74:52:8c:40:e6:b8:a3:13:b8:77:15: 7a:5f:41:2e:3e:a8:b1:71:d7:17:1f:5e:23:81:2d:aa:fe:4e: 05:08:d6:19:f9:98:46:aa:8b:ee:e5:13:a4:1d:d7:44:45:64: e4:ca:d8:3c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOkYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3MTFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEI1OTkwQzhEMjE3ODc3 OEQzQzMwQjVCNTE5QUEzRDg5Q0FERUVERUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCySz9F45b0T06q3r7x54t2X3IDcVm0QGd8CXjs6PqAHiQ1ZxbM GWJNpcTfQRws78i6TeFvfqaHwSm8xCCBzwGaWhq7s95ROWSZU6LkrNkB07eIIy+L cb/SCBQdY7cHhKDueWeAwKbsvDMZDPIRPwzuijaiKg6glV7ODKrCtu4Oh+RrJAaB Z/dJE0bF0nMLtJzPaZw6HmGY0ADH7tHr91ukC1/RRtVgx8Nk177HfyAeQ4oJVrYc Kbvu97IgL0pFyYd6mY2l6xOfeHMJl22X1lCmFnKI/fvAVu8dB6w0e4zYT2ptdSRb mmb/Qsv+XlKeL4bWfucyPKkG+z/vkwHAcskXAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUtZkMjSF4d408MLW1Gao9icre7e0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3Raa01qU0Y0ZDQwOE1MVzFH YW85aWNyZTdlMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wpAwDQYJKoZIhvcNAQELBQADggEBAILb/E3I5bkeCvGfUjhlln3GF4DzSUJPMfPe L2w8qOuccGwMF32DE5f+ZHLD/e8N/7V2RG7kUrwgkpPDsHehxMd56jY6m1dCRrJL qWMFvoIWhkp5BuIRhlkJfBmyV+6gORBm9avMsEwld7T3iCxqFnerWprEG2+PYBOq wZ7ogqUAT0H+gg74NF2HzZxdDJllxFWLFWfnxIRTcspjGPDNn9QWFt6sMOBzr4sU 3cOoIIfdA6VvSMdfew3n7NDH0ccaKhs51Frd6sWUAKLsfHx0UoxA5rijE7h3FXpf QS4+qLFx1xcfXiOBLar+TgUI1hn5mEaqi+7lE6Qd10RFZOTK2Dw= -----END CERTIFICATE-----Generated at Fri Oct 24 19:27:25 2025 by rpki-client