$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wBZsPSZPBh3LU2DEoSflg0axULE.roa File: wBZsPSZPBh3LU2DEoSflg0axULE.roa (raw, json) Hash identifier: SOiZJieCGc9B3mlMe6gOeXMiGVlG72hZfhxcWHfC+BI= Subject key identifier: C0:16:6C:3D:26:4F:06:1D:CB:53:60:C4:A1:27:E5:83:46:B1:50:B1 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3847 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wBZsPSZPBh3LU2DEoSflg0axULE.roa Signing time: Fri 22 Aug 2025 08:45:07 +0000 ROA not before: Fri 22 Aug 2025 08:45:07 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.194.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14407 (0x3847) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:07 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=C0166C3D264F061DCB5360C4A127E58346B150B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fe:40:55:f8:0e:ff:43:4d:21:0c:d8:e8:5d: 4b:3e:82:ba:9f:74:6b:99:07:a6:33:43:c4:e7:dd: c6:56:cf:73:fd:31:ef:dc:66:61:ce:e4:28:06:84: f3:5a:df:de:0c:14:e4:cc:e1:41:08:3e:56:ff:37: 76:4b:a8:3b:bd:92:d4:dc:6e:4b:13:64:16:d8:e2: 4a:db:35:95:6b:db:19:62:e4:c4:da:9a:ac:96:8b: 4d:98:8b:e9:dc:cc:a7:0a:eb:9d:4d:08:61:7a:df: 81:1a:61:62:21:5a:d5:22:ba:bb:b6:d6:a9:10:3c: f8:ad:4b:ce:39:97:b3:b6:a1:ed:26:a2:5a:44:d5: 3e:a4:37:dc:58:2b:5b:5d:86:92:9a:58:16:e3:53: 5b:bc:63:2f:8c:ba:5e:b0:e3:33:d0:4a:6e:9d:38: 34:2b:3e:44:fb:a6:af:f8:4f:40:a5:16:4b:51:52: df:f2:4d:20:12:30:88:57:84:49:61:6d:eb:7b:7e: c3:bd:4c:29:cd:7b:55:53:35:33:5f:f4:df:ba:0d: f9:ef:2b:c1:48:fe:f2:51:47:bf:0f:3a:bc:2c:65: 63:43:c6:44:c2:47:a5:a5:76:68:fa:97:91:64:9a: 57:d8:09:8a:7f:3b:29:07:6e:61:8e:15:03:08:22: 36:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:16:6C:3D:26:4F:06:1D:CB:53:60:C4:A1:27:E5:83:46:B1:50:B1 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wBZsPSZPBh3LU2DEoSflg0axULE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.148.0/22 Signature Algorithm: sha256WithRSAEncryption 59:9a:cb:0e:20:67:90:c6:8d:f5:f6:0e:c2:a7:13:27:0f:26: 49:e9:28:92:ac:8a:2c:21:28:7a:40:ca:73:b3:ed:86:c1:0a: b8:eb:aa:93:14:6b:fa:3c:3c:35:69:ca:e5:75:42:27:0a:28: 07:eb:48:36:4c:ee:29:9a:f3:af:7d:00:de:14:a5:7a:6c:7c: bb:f5:ba:be:3f:b1:ef:54:13:9e:7f:03:06:10:33:a2:71:ab: 64:f8:4b:8b:6c:a2:2a:f2:68:61:ef:8e:58:74:a7:36:53:9a: 74:37:df:13:55:a7:25:70:83:f4:25:10:81:81:83:e6:35:aa: 05:b2:2b:54:ed:57:c7:0d:b7:f8:51:cc:f9:e8:9c:52:7f:e6: 5c:45:95:21:4a:db:88:fc:85:0e:7a:6d:d0:e7:76:77:73:e9: e6:7d:d3:fa:3b:ab:ee:3d:10:4f:ad:fb:5a:1d:78:0d:43:f6: dd:9f:ee:c1:9c:70:8b:2e:cb:00:eb:de:5f:3d:ac:ee:17:9f: 7b:90:55:2d:aa:ff:4f:4c:2f:fb:56:ca:e6:5a:bc:a2:01:e7: 33:8c:d0:b6:04:61:0d:79:1c:6a:4b:63:a3:ed:33:84:ca:13: e7:7c:1a:79:c6:d6:a6:83:21:68:2e:98:6b:8a:38:51:c4:29: 61:16:97:54 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOEcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1MDdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEMwMTY2QzNEMjY0RjA2 MURDQjUzNjBDNEExMjdFNTgzNDZCMTUwQjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC//kBV+A7/Q00hDNjoXUs+grqfdGuZB6YzQ8Tn3cZWz3P9Me/c ZmHO5CgGhPNa394MFOTM4UEIPlb/N3ZLqDu9ktTcbksTZBbY4krbNZVr2xli5MTa mqyWi02Yi+nczKcK651NCGF634EaYWIhWtUiuru21qkQPPitS845l7O2oe0molpE 1T6kN9xYK1tdhpKaWBbjU1u8Yy+Mul6w4zPQSm6dODQrPkT7pq/4T0ClFktRUt/y TSASMIhXhElhbet7fsO9TCnNe1VTNTNf9N+6DfnvK8FI/vJRR78POrwsZWNDxkTC R6Wldmj6l5FkmlfYCYp/OykHbmGOFQMIIjadAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUwBZsPSZPBh3LU2DEoSflg0axULEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3dCWnNQU1pQQmgzTFUyREVv U2ZsZzBheFVMRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wpQwDQYJKoZIhvcNAQELBQADggEBAFmayw4gZ5DGjfX2DsKnEycPJknpKJKsiiwh KHpAynOz7YbBCrjrqpMUa/o8PDVpyuV1QicKKAfrSDZM7ima8699AN4UpXpsfLv1 ur4/se9UE55/AwYQM6Jxq2T4S4tsoiryaGHvjlh0pzZTmnQ33xNVpyVwg/QlEIGB g+Y1qgWyK1TtV8cNt/hRzPnonFJ/5lxFlSFK24j8hQ56bdDndndz6eZ90/o7q+49 EE+t+1odeA1D9t2f7sGccIsuywDr3l89rO4Xn3uQVS2q/09ML/tWyuZavKIB5zOM 0LYEYQ15HGpLY6PtM4TKE+d8GnnG1qaDIWgumGuKOFHEKWEWl1Q= -----END CERTIFICATE-----Generated at Fri Oct 24 19:18:35 2025 by rpki-client