$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ukBpppey_pvOFiWL4eVdrP0PsqE.roa File: ukBpppey_pvOFiWL4eVdrP0PsqE.roa (raw, json) Hash identifier: bZgNR1UjfKUWU8BhmfPyQH0VRxgF18inEOIfbAvi5Es= Subject key identifier: BA:40:69:A6:97:B2:FE:9B:CE:16:25:8B:E1:E5:5D:AC:FD:0F:B2:A1 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3981 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ukBpppey_pvOFiWL4eVdrP0PsqE.roa Signing time: Fri 22 Aug 2025 08:46:21 +0000 ROA not before: Fri 22 Aug 2025 08:46:21 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.193.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14721 (0x3981) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:21 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=BA4069A697B2FE9BCE16258BE1E55DACFD0FB2A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fa:e5:dc:c6:58:63:99:45:1a:c4:22:50:15: 53:7c:93:a8:57:66:5b:5c:f8:14:0a:37:ed:9c:99: a8:3c:7f:13:aa:2e:7a:5d:70:e0:de:a3:e3:93:09: a0:d8:38:8b:e0:36:ee:9d:60:b7:85:bf:54:1b:b7: 7d:58:49:8b:88:44:e5:f7:0e:7c:c7:5f:c1:32:e1: e3:89:50:96:bc:80:7d:a1:9d:e7:b5:f2:c1:a0:4e: 04:7d:f8:00:73:ee:a6:d4:f1:71:bd:fc:0c:61:ac: 79:94:34:f0:56:e3:8e:f3:00:45:58:41:a8:14:f2: b0:36:12:c9:88:72:08:dd:c6:99:2d:51:fa:0b:7c: d7:c3:75:fa:45:bd:5e:45:5d:07:7d:64:5b:4c:6d: fd:e5:c2:13:23:37:ff:6f:29:ef:e7:ed:20:e0:c4: b7:4f:e0:b6:c4:f8:4b:0b:b2:a1:7e:66:b5:15:f2: 8b:68:0f:56:eb:6f:05:54:72:ec:90:60:1f:58:e0: 5a:b2:82:bc:a0:26:bb:60:9f:06:8d:5f:d6:33:9c: b0:04:d6:df:c0:16:94:d1:c3:60:64:45:c5:c9:49: 3c:7d:fe:21:2d:09:4f:db:20:b2:70:40:38:4e:e2: fd:f6:bd:75:1b:c4:c5:a0:1e:7a:e8:1d:cd:6d:34: cf:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:40:69:A6:97:B2:FE:9B:CE:16:25:8B:E1:E5:5D:AC:FD:0F:B2:A1 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ukBpppey_pvOFiWL4eVdrP0PsqE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.9.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:da:e8:c8:8a:69:83:7d:e3:50:64:08:5d:05:b6:c9:1e:8e: 2c:8f:3c:a6:4a:09:64:ac:7f:58:7a:a6:6e:77:11:6d:7e:ff: 74:a2:a2:cf:42:c1:82:50:40:bc:0a:c8:f7:b2:16:60:8b:7b: ae:26:f0:c4:f9:e7:e8:45:85:04:dc:2b:0b:30:99:2d:4c:6e: 52:fe:6c:7f:30:f6:71:82:9f:30:b1:1b:03:8f:63:30:36:bd: e9:2f:42:c8:56:91:75:d4:68:c6:46:49:b1:6d:47:fe:ac:b4: a8:f6:07:21:05:ae:f4:f2:32:11:d2:e5:0f:62:5d:8c:f5:93: b5:dc:cc:a6:b2:fd:1b:d8:d3:84:7d:65:08:6e:59:67:90:29: db:4a:00:4b:94:17:48:b3:09:8e:a7:0f:e5:9c:7a:da:4e:c5: 03:c2:28:5a:43:db:e7:54:8a:2f:2d:35:f8:37:dd:b9:27:eb: bf:70:68:e1:5a:9d:0b:d1:85:52:a1:4c:f9:70:95:a0:01:fa: 0b:96:44:cf:af:cd:1c:52:80:4e:4d:98:9e:2e:bb:a5:b5:5e: 87:6a:9d:f3:45:8d:f8:f1:e7:f8:1e:ee:6d:e4:1b:52:d7:74: d8:79:33:37:28:fb:da:65:46:5f:b3:58:af:61:c8:86:60:cb: cf:40:03:2b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOYEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2MjFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEJBNDA2OUE2OTdCMkZF OUJDRTE2MjU4QkUxRTU1REFDRkQwRkIyQTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4+uXcxlhjmUUaxCJQFVN8k6hXZltc+BQKN+2cmag8fxOqLnpd cODeo+OTCaDYOIvgNu6dYLeFv1Qbt31YSYuIROX3DnzHX8Ey4eOJUJa8gH2hnee1 8sGgTgR9+ABz7qbU8XG9/AxhrHmUNPBW447zAEVYQagU8rA2EsmIcgjdxpktUfoL fNfDdfpFvV5FXQd9ZFtMbf3lwhMjN/9vKe/n7SDgxLdP4LbE+EsLsqF+ZrUV8oto D1brbwVUcuyQYB9Y4FqygrygJrtgnwaNX9YznLAE1t/AFpTRw2BkRcXJSTx9/iEt CU/bILJwQDhO4v32vXUbxMWgHnroHc1tNM97AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUukBpppey/pvOFiWL4eVdrP0PsqEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3VrQnBwcGV5X3B2T0ZpV0w0 ZVZkclAwUHNxRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7 wQkwDQYJKoZIhvcNAQELBQADggEBAEva6MiKaYN941BkCF0FtskejiyPPKZKCWSs f1h6pm53EW1+/3Sios9CwYJQQLwKyPeyFmCLe64m8MT55+hFhQTcKwswmS1MblL+ bH8w9nGCnzCxGwOPYzA2vekvQshWkXXUaMZGSbFtR/6stKj2ByEFrvTyMhHS5Q9i XYz1k7XczKay/RvY04R9ZQhuWWeQKdtKAEuUF0izCY6nD+WcetpOxQPCKFpD2+dU ii8tNfg33bkn679waOFanQvRhVKhTPlwlaAB+guWRM+vzRxSgE5NmJ4uu6W1Xodq nfNFjfjx5/ge7m3kG1LXdNh5Mzco+9plRl+zWK9hyIZgy89AAys= -----END CERTIFICATE-----Generated at Fri Oct 24 19:27:20 2025 by rpki-client