$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/u3Pr2r9oTNQUgnaO7P65WV5JsEY.roa File: u3Pr2r9oTNQUgnaO7P65WV5JsEY.roa (raw, json) Hash identifier: aJAANk7ck0Pulo5mh10yu0+wyzUuM8xB1n2leihuJqs= Subject key identifier: BB:73:EB:DA:BF:68:4C:D4:14:82:76:8E:EC:FE:B9:59:5E:49:B0:46 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 38FB Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/u3Pr2r9oTNQUgnaO7P65WV5JsEY.roa Signing time: Fri 22 Aug 2025 08:45:50 +0000 ROA not before: Fri 22 Aug 2025 08:45:50 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9924 IP address blocks: 118.232.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 07:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14587 (0x38fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:50 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=BB73EBDABF684CD41482768EECFEB9595E49B046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f2:6e:1e:8a:04:f5:cc:3d:3a:55:86:24:49: 29:f0:51:a3:9e:dd:82:86:85:46:96:a6:a0:4d:bc: 52:ca:b0:75:b0:5f:85:f5:22:cb:07:35:d8:ad:6d: ed:f5:d2:3f:e8:81:bc:e9:b2:1d:07:6d:44:cb:4f: b7:eb:19:45:8d:73:a3:5d:3f:9f:0b:37:02:1b:c8: 19:b7:6d:b0:13:4e:9b:0f:a7:95:a5:54:22:c3:10: dc:f4:fb:08:3a:a3:17:f1:7a:36:42:6a:13:eb:50: e5:35:24:b8:b6:96:a1:5c:18:4b:93:c7:21:2e:7c: 5c:1b:f8:6a:e0:21:72:12:d1:d9:a1:44:a3:42:4e: 4f:8c:bc:64:e9:6f:b3:f7:30:8d:c4:59:b7:1d:2c: 70:e9:9a:5f:aa:13:3a:79:b4:7f:b2:9e:ce:2c:59: 26:57:26:94:f8:8e:bd:d6:fe:6e:72:fc:80:f5:19: 4c:b9:ad:02:29:a7:a9:45:bc:55:a4:c8:86:a8:f6: cc:91:52:70:87:59:c7:f6:fa:da:73:9b:5e:4b:37: c3:d8:26:d3:d2:25:fe:06:bf:f5:cd:59:1a:46:da: f3:19:55:40:6b:b6:7c:5d:4c:54:68:2f:15:f4:bd: 6d:27:aa:24:42:84:ea:2e:b3:b0:29:81:a7:e5:fc: eb:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:73:EB:DA:BF:68:4C:D4:14:82:76:8E:EC:FE:B9:59:5E:49:B0:46 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/u3Pr2r9oTNQUgnaO7P65WV5JsEY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.128.0/19 Signature Algorithm: sha256WithRSAEncryption 28:e9:49:64:32:06:71:44:05:8f:38:b2:30:d5:94:ea:4f:0d: 1b:ed:fb:2c:3e:f9:2c:00:c2:28:7a:00:76:0f:ff:46:30:7e: 39:f3:12:86:bc:b7:d5:d0:49:1d:ff:2a:77:04:89:e2:f7:f8: 59:55:1f:fe:28:31:ed:ea:01:52:21:56:3c:6f:ed:a8:e7:f4: d1:37:df:a5:f9:35:cb:5b:fa:5a:29:a9:0d:2d:e4:23:76:25: ef:b6:0b:4e:83:0a:08:d6:5c:af:af:cb:46:0c:6e:bf:13:59: 1d:28:ab:b1:a0:9f:5e:dd:83:14:77:c4:8a:cb:83:c1:58:44: 70:0c:44:1e:ee:8c:09:a6:52:c3:c9:eb:d8:e0:20:5c:a8:00: 2b:93:8b:80:89:15:b6:69:ab:bb:14:cc:56:f2:97:b8:7e:3b: d0:72:7e:6c:fb:77:e6:f5:85:ae:b0:99:42:bd:28:ba:a3:ed: 31:95:91:44:19:24:10:39:4c:69:bc:94:60:6f:de:38:d7:58: 86:e9:ba:04:c6:26:d4:5c:56:f8:21:86:68:84:77:5e:d7:ef: a8:f8:76:cc:57:fc:a3:4b:e6:e6:3b:cd:20:22:c0:14:51:0d: 6b:05:04:4c:0d:72:91:71:1d:9f:b8:69:c4:ec:19:cc:1e:cb: 05:47:db:44 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOPswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1NTBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEJCNzNFQkRBQkY2ODRD RDQxNDgyNzY4RUVDRkVCOTU5NUU0OUIwNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDC8m4eigT1zD06VYYkSSnwUaOe3YKGhUaWpqBNvFLKsHWwX4X1 IssHNditbe310j/ogbzpsh0HbUTLT7frGUWNc6NdP58LNwIbyBm3bbATTpsPp5Wl VCLDENz0+wg6oxfxejZCahPrUOU1JLi2lqFcGEuTxyEufFwb+GrgIXIS0dmhRKNC Tk+MvGTpb7P3MI3EWbcdLHDpml+qEzp5tH+yns4sWSZXJpT4jr3W/m5y/ID1GUy5 rQIpp6lFvFWkyIao9syRUnCHWcf2+tpzm15LN8PYJtPSJf4Gv/XNWRpG2vMZVUBr tnxdTFRoLxX0vW0nqiRChOous7Apgafl/OspAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUu3Pr2r9oTNQUgnaO7P65WV5JsEYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3UzUHIycjlvVE5RVWduYU83 UDY1V1Y1SnNFWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV2 6IAwDQYJKoZIhvcNAQELBQADggEBACjpSWQyBnFEBY84sjDVlOpPDRvt+yw++SwA wih6AHYP/0YwfjnzEoa8t9XQSR3/KncEieL3+FlVH/4oMe3qAVIhVjxv7ajn9NE3 36X5Nctb+lopqQ0t5CN2Je+2C06DCgjWXK+vy0YMbr8TWR0oq7Ggn17dgxR3xIrL g8FYRHAMRB7ujAmmUsPJ69jgIFyoACuTi4CJFbZpq7sUzFbyl7h+O9Byfmz7d+b1 ha6wmUK9KLqj7TGVkUQZJBA5TGm8lGBv3jjXWIbpugTGJtRcVvghhmiEd17X76j4 dsxX/KNL5uY7zSAiwBRRDWsFBEwNcpFxHZ+4acTsGcweywVH20Q= -----END CERTIFICATE-----Generated at Fri Oct 24 04:48:05 2025 by rpki-client