$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vM0YKPp8TQmvNI_0yd5CPflSEeM.roa File: vM0YKPp8TQmvNI_0yd5CPflSEeM.roa (raw, json) Hash identifier: nhPy+xNynBR/VAum1Hy/nZ/nNPHQ38u3KYgbbk8T+FE= Subject key identifier: BC:CD:18:28:FA:7C:4D:09:AF:34:8F:F4:C9:DE:42:3D:F9:52:11:E3 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 386F Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vM0YKPp8TQmvNI_0yd5CPflSEeM.roa Signing time: Fri 22 Aug 2025 08:45:17 +0000 ROA not before: Fri 22 Aug 2025 08:45:17 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.192.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14447 (0x386f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:17 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=BCCD1828FA7C4D09AF348FF4C9DE423DF95211E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ed:82:05:12:66:48:cd:e2:99:3e:93:f9:79: 4a:68:c4:22:d9:44:8a:b0:8d:a4:96:a9:cd:ef:04: 8c:c1:51:70:38:c4:80:41:48:e4:aa:65:20:89:f9: 8e:a1:a9:69:a0:96:9e:f5:4f:df:f4:71:ad:d4:cf: 33:db:f5:8a:c1:69:88:c9:6a:bc:da:35:94:3b:8c: 71:39:18:d7:dc:07:d4:3c:19:2b:3a:b7:b3:09:d8: 80:47:ce:ed:75:98:23:16:af:a2:24:1d:a9:8f:91: 5a:10:89:fc:0d:d4:2b:cd:59:9b:9b:ce:b9:fc:b8: 76:d1:e1:ee:c4:86:85:4e:a7:7e:03:c7:3b:18:b6: ac:a3:08:05:88:e4:48:89:9a:f2:fa:f6:3b:25:cb: 8b:78:fb:2b:e9:36:fa:01:17:07:8e:9c:d2:b9:9c: 9b:4c:4a:d4:cb:af:46:99:a6:4c:89:ae:76:fa:fc: 75:e2:3c:5a:19:81:13:92:56:b3:5a:fd:49:d2:a8: 25:83:cf:25:7d:fa:c1:85:b5:51:99:cb:1a:12:9d: 0f:69:0c:7f:3a:0a:f0:1e:16:45:93:f9:04:e4:1a: ac:70:3b:23:78:b3:2c:bc:f9:34:62:be:9f:20:ef: 8c:2b:60:5c:ac:50:1a:fa:0e:d2:6f:f0:20:cb:eb: 9a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:CD:18:28:FA:7C:4D:09:AF:34:8F:F4:C9:DE:42:3D:F9:52:11:E3 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vM0YKPp8TQmvNI_0yd5CPflSEeM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.112.0/21 Signature Algorithm: sha256WithRSAEncryption 74:63:3d:e6:93:a7:38:32:e1:a0:19:b2:dd:9b:7f:53:fc:82: 22:00:a5:77:d9:4c:a7:35:07:db:f4:36:66:69:5c:e9:ea:05: 02:3b:8e:ca:b0:b2:0e:27:35:bd:b9:e2:42:83:5b:bc:f1:d1: 8f:8d:0e:1b:81:81:df:80:f2:af:54:e7:6f:c0:82:df:8e:52: 38:9d:92:86:65:e3:bd:c8:6e:01:41:3c:a7:15:5e:01:3a:08: 3f:15:49:15:0a:89:b5:ad:11:e2:0d:2e:d5:0d:cd:6f:ca:d9: 12:dc:ca:29:65:9f:eb:1f:6f:13:38:db:f0:b1:fc:6f:80:6d: db:c1:20:5f:bb:40:1b:3b:70:7a:40:73:7f:eb:53:35:44:da: 09:cc:18:aa:8b:00:2c:78:d1:18:fe:41:0b:e7:68:03:03:a7: 8b:b3:79:b1:df:35:d7:17:e8:9a:04:16:b1:9e:4b:7a:70:a6: 7d:09:4c:c9:ae:63:11:1b:2b:c9:f7:2a:ea:16:78:d4:23:ee: 35:39:10:d8:94:9a:a9:0b:e6:14:2e:d6:32:98:b7:ca:4a:ae: d2:bd:14:4e:ac:81:ed:fa:4d:f7:bf:65:92:a4:7e:61:60:c4: 2a:73:1f:8c:56:c7:0b:9e:d5:4d:10:14:e7:ac:30:8e:f3:1d: bc:38:f5:2b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOG8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1MTdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEJDQ0QxODI4RkE3QzRE MDlBRjM0OEZGNEM5REU0MjNERjk1MjExRTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDf7YIFEmZIzeKZPpP5eUpoxCLZRIqwjaSWqc3vBIzBUXA4xIBB SOSqZSCJ+Y6hqWmglp71T9/0ca3UzzPb9YrBaYjJarzaNZQ7jHE5GNfcB9Q8GSs6 t7MJ2IBHzu11mCMWr6IkHamPkVoQifwN1CvNWZubzrn8uHbR4e7EhoVOp34DxzsY tqyjCAWI5EiJmvL69jsly4t4+yvpNvoBFweOnNK5nJtMStTLr0aZpkyJrnb6/HXi PFoZgROSVrNa/UnSqCWDzyV9+sGFtVGZyxoSnQ9pDH86CvAeFkWT+QTkGqxwOyN4 syy8+TRivp8g74wrYFysUBr6DtJv8CDL65o7AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUvM0YKPp8TQmvNI/0yd5CPflSEeMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3ZNMFlLUHA4VFFtdk5JXzB5 ZDVDUGZsU0VlTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wHAwDQYJKoZIhvcNAQELBQADggEBAHRjPeaTpzgy4aAZst2bf1P8giIApXfZTKc1 B9v0NmZpXOnqBQI7jsqwsg4nNb254kKDW7zx0Y+NDhuBgd+A8q9U52/Agt+OUjid koZl473IbgFBPKcVXgE6CD8VSRUKibWtEeINLtUNzW/K2RLcyilln+sfbxM42/Cx /G+AbdvBIF+7QBs7cHpAc3/rUzVE2gnMGKqLACx40Rj+QQvnaAMDp4uzebHfNdcX 6JoEFrGeS3pwpn0JTMmuYxEbK8n3KuoWeNQj7jU5ENiUmqkL5hQu1jKYt8pKrtK9 FE6sge36Tfe/ZZKkfmFgxCpzH4xWxwue1U0QFOesMI7zHbw49Ss= -----END CERTIFICATE-----Generated at Fri Oct 24 19:27:15 2025 by rpki-client