$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vbkHkNavJ2m1u5HBYVcYn8d1B28.roa File: vbkHkNavJ2m1u5HBYVcYn8d1B28.roa (raw, json) Hash identifier: FjoU0c3s7KN2P6H7UUQ2kz//vlRPWdn6598aRdm6Kk8= Subject key identifier: BD:B9:07:90:D6:AF:27:69:B5:BB:91:C1:61:57:18:9F:C7:75:07:6F Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3856 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vbkHkNavJ2m1u5HBYVcYn8d1B28.roa Signing time: Fri 22 Aug 2025 08:45:12 +0000 ROA not before: Fri 22 Aug 2025 08:45:12 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.192.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14422 (0x3856) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:12 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=BDB90790D6AF2769B5BB91C16157189FC775076F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:58:c2:88:9f:ab:fa:c3:2c:4a:94:1d:19:17: b5:10:70:03:e1:27:cc:f1:ce:c6:db:15:50:82:c0: 77:9f:09:ab:bb:77:94:57:d1:50:d6:63:aa:ce:7a: cd:0d:d6:6c:13:e5:72:60:20:da:10:0f:fd:47:1e: 1f:04:39:46:13:2f:54:d5:a4:66:00:e7:6d:7e:48: ea:66:b5:d0:a5:a3:76:8b:66:9f:f7:de:47:94:d2: e0:0c:66:83:4d:5c:02:6a:4a:4c:0c:0f:a5:08:2a: 0d:01:ba:0d:24:70:90:b8:01:62:4b:97:a5:0d:9c: d4:88:13:11:d9:b8:7b:ae:57:0d:d6:25:8e:1c:85: aa:77:f4:d6:63:92:df:26:12:7f:d0:d3:20:d6:ee: 1b:99:91:68:d7:c7:37:4b:6d:8b:af:1e:92:0d:0c: 5c:ef:00:f4:69:e0:20:93:8f:d7:c7:c2:b8:08:ad: 18:85:bd:fb:a0:2b:79:d1:37:3a:d3:71:d4:70:f9: b1:ed:4d:15:90:83:9e:42:5f:0f:a7:2e:66:90:f7: 47:06:0f:57:6b:d4:2c:88:1b:cb:a1:c8:82:37:b4: 11:ad:4a:60:c3:de:e1:e4:da:a2:ae:cb:3e:8d:96: 96:1c:1d:cc:f2:11:d2:4a:51:ba:ad:6d:91:77:92: 68:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:B9:07:90:D6:AF:27:69:B5:BB:91:C1:61:57:18:9F:C7:75:07:6F X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vbkHkNavJ2m1u5HBYVcYn8d1B28.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.188.0/22 Signature Algorithm: sha256WithRSAEncryption 22:53:6b:47:49:c2:11:33:3b:b4:35:0e:02:fd:49:e8:be:5f: d9:e2:fd:da:90:83:4a:53:4a:cd:2f:76:73:bd:e7:9c:70:0d: 20:d7:22:fc:27:b7:dd:e2:83:68:76:f1:75:e6:33:16:24:89: 48:7b:eb:4b:ba:48:56:f8:7c:5e:55:cb:19:92:6e:96:78:4e: b7:5f:67:e2:c6:2a:16:1c:ab:51:6d:35:20:89:75:67:e1:d2: 7b:9a:c4:c6:48:c6:fa:a1:59:43:d5:37:8e:21:e4:18:de:09: 99:24:55:73:d8:d6:9e:7f:15:1c:a3:21:10:85:14:23:a6:d7: 65:c6:68:e0:94:b5:b5:c6:8a:56:e2:d0:91:0c:f8:6c:76:84: f3:9e:fe:00:e1:a9:53:10:b9:fc:2c:60:75:ce:ab:38:23:1d: f5:55:ab:e2:41:9f:0e:88:7c:b9:f3:3e:0b:96:e8:6a:bc:6f: 51:99:0a:60:74:12:69:28:75:cb:b0:0d:82:d5:ff:fc:51:c6: 27:db:63:87:8a:da:19:b7:58:6a:44:c1:57:76:db:b6:86:3a: 94:ac:14:92:9e:fe:7e:f6:a8:bd:e4:16:5d:e2:ce:51:23:0d: c7:f1:50:b9:07:04:de:45:1a:e5:71:9c:95:67:24:0d:e1:a5: 0c:c7:81:11 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOFYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1MTJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEJEQjkwNzkwRDZBRjI3 NjlCNUJCOTFDMTYxNTcxODlGQzc3NTA3NkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCnWMKIn6v6wyxKlB0ZF7UQcAPhJ8zxzsbbFVCCwHefCau7d5RX 0VDWY6rOes0N1mwT5XJgINoQD/1HHh8EOUYTL1TVpGYA521+SOpmtdClo3aLZp/3 3keU0uAMZoNNXAJqSkwMD6UIKg0Bug0kcJC4AWJLl6UNnNSIExHZuHuuVw3WJY4c hap39NZjkt8mEn/Q0yDW7huZkWjXxzdLbYuvHpINDFzvAPRp4CCTj9fHwrgIrRiF vfugK3nRNzrTcdRw+bHtTRWQg55CXw+nLmaQ90cGD1dr1CyIG8uhyII3tBGtSmDD 3uHk2qKuyz6NlpYcHczyEdJKUbqtbZF3kmi5AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUvbkHkNavJ2m1u5HBYVcYn8d1B28wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3Zia0hrTmF2SjJtMXU1SEJZ VmNZbjhkMUIyOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wLwwDQYJKoZIhvcNAQELBQADggEBACJTa0dJwhEzO7Q1DgL9Sei+X9ni/dqQg0pT Ss0vdnO955xwDSDXIvwnt93ig2h28XXmMxYkiUh760u6SFb4fF5VyxmSbpZ4Trdf Z+LGKhYcq1FtNSCJdWfh0nuaxMZIxvqhWUPVN44h5BjeCZkkVXPY1p5/FRyjIRCF FCOm12XGaOCUtbXGilbi0JEM+Gx2hPOe/gDhqVMQufwsYHXOqzgjHfVVq+JBnw6I fLnzPguW6Gq8b1GZCmB0EmkodcuwDYLV//xRxifbY4eK2hm3WGpEwVd227aGOpSs FJKe/n72qL3kFl3izlEjDcfxULkHBN5FGuVxnJVnJA3hpQzHgRE= -----END CERTIFICATE-----Generated at Fri Oct 24 19:25:03 2025 by rpki-client