$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wYqrySb9I6bqitM3aTdtjZcYx9s.roa File: wYqrySb9I6bqitM3aTdtjZcYx9s.roa (raw, json) Hash identifier: HIZo9GYsXy9qb83F4Ay7lnx/D4If+L41lbB6IZ/eWGc= Subject key identifier: C1:8A:AB:C9:26:FD:23:A6:EA:8A:D3:37:69:37:6D:8D:97:18:C7:DB Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3A70 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wYqrySb9I6bqitM3aTdtjZcYx9s.roa Signing time: Fri 22 Aug 2025 08:47:21 +0000 ROA not before: Fri 22 Aug 2025 08:47:21 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.192.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14960 (0x3a70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:21 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=C18AABC926FD23A6EA8AD33769376D8D9718C7DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:4c:9f:1d:0d:32:e3:7f:b4:1a:be:69:f8:e2: 83:b7:13:0b:22:f4:9a:d3:01:22:39:2a:b4:a9:c1: c8:32:b3:7d:cd:96:59:b2:63:78:c7:33:e2:a0:58: 05:31:e5:ef:66:c5:7d:d2:a7:64:65:99:69:07:50: 94:94:0d:de:e3:8f:9f:a2:c2:2d:33:05:df:48:bb: 0a:73:1c:f8:ba:94:ba:a5:49:13:4b:fe:2c:47:56: 8d:fb:4f:3d:e5:c4:c7:a6:39:73:2b:81:ca:05:52: 09:2c:64:1d:7c:4e:a9:42:74:6f:18:06:b5:c1:33: 41:09:ea:3e:e8:20:f0:61:23:70:a5:44:96:05:5b: ee:f7:29:1b:a3:b4:97:c2:09:78:27:c3:2d:9c:87: 96:1e:6b:02:87:81:be:7f:78:8e:a6:26:eb:ad:fe: d1:07:cd:8e:79:d6:4d:2b:63:39:56:26:34:21:58: 55:72:88:8e:44:8e:d6:e7:a8:f7:ce:c1:35:d9:e1: 09:17:26:e5:7a:16:e7:8a:08:d9:b9:a5:b1:7a:4c: 5e:0b:bb:a8:2f:69:b3:eb:bc:8e:7f:70:7d:a6:f9: d4:43:ce:b2:e4:d0:c5:1e:ff:00:e0:83:c9:43:ff: d8:0e:08:a2:51:8a:62:bc:ac:76:3e:7e:6a:be:4a: 8a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:8A:AB:C9:26:FD:23:A6:EA:8A:D3:37:69:37:6D:8D:97:18:C7:DB X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wYqrySb9I6bqitM3aTdtjZcYx9s.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.0.0/14 Signature Algorithm: sha256WithRSAEncryption 7c:d6:a3:f9:e2:63:dc:83:24:87:5a:6c:23:72:83:25:ba:b7: 6a:16:d3:03:6e:b7:c8:52:f7:2e:84:f9:79:28:ae:43:7e:61: 5b:21:dc:99:57:4f:b0:6d:1a:2b:b9:c7:36:65:c5:3d:87:d7: 90:d3:bd:94:72:93:52:dc:f4:9f:53:87:94:c2:26:b0:83:e3: 9b:61:e5:40:8d:c2:fe:38:05:4b:ca:c6:5e:b1:e9:05:cc:c6: c9:08:0e:fa:b2:6c:b9:df:d8:cf:cd:c7:2a:a7:53:05:10:c0: 4c:c1:dd:f1:fa:b2:cb:20:cc:14:9e:7c:0a:fa:55:f7:7f:30: 23:35:d4:79:6f:0d:9a:50:dc:c7:7f:eb:18:ab:e2:85:42:f7: 35:e7:0c:4c:d3:79:d3:48:41:2b:fc:f2:23:af:47:64:3f:e5: 18:43:ae:e9:d3:21:cf:c1:10:96:34:89:9b:47:f3:b1:2a:c6: ce:b5:48:78:03:61:af:17:73:97:02:8c:ce:82:32:3d:e2:34: 55:66:a8:be:ee:99:d0:2f:5a:04:fb:3f:d5:cc:37:15:11:6a: b3:46:0a:50:ee:34:20:f1:41:c6:c5:33:ce:b7:8e:03:89:bc: 6a:c1:75:fc:35:0f:e3:eb:63:82:2b:f8:80:37:24:bf:52:59: 9e:d6:21:88 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICOnAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3MjFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEMxOEFBQkM5MjZGRDIz QTZFQThBRDMzNzY5Mzc2RDhEOTcxOEM3REIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDcTJ8dDTLjf7Qavmn44oO3Ewsi9JrTASI5KrSpwcgys33Nllmy Y3jHM+KgWAUx5e9mxX3Sp2RlmWkHUJSUDd7jj5+iwi0zBd9IuwpzHPi6lLqlSRNL /ixHVo37Tz3lxMemOXMrgcoFUgksZB18TqlCdG8YBrXBM0EJ6j7oIPBhI3ClRJYF W+73KRujtJfCCXgnwy2ch5YeawKHgb5/eI6mJuut/tEHzY551k0rYzlWJjQhWFVy iI5EjtbnqPfOwTXZ4QkXJuV6FueKCNm5pbF6TF4Lu6gvabPrvI5/cH2m+dRDzrLk 0MUe/wDgg8lD/9gOCKJRimK8rHY+fmq+SorfAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUwYqrySb9I6bqitM3aTdtjZcYx9swHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3dZcXJ5U2I5STZicWl0TTNh VGR0alpjWXg5cy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwJ7 wDANBgkqhkiG9w0BAQsFAAOCAQEAfNaj+eJj3IMkh1psI3KDJbq3ahbTA263yFL3 LoT5eSiuQ35hWyHcmVdPsG0aK7nHNmXFPYfXkNO9lHKTUtz0n1OHlMImsIPjm2Hl QI3C/jgFS8rGXrHpBczGyQgO+rJsud/Yz83HKqdTBRDATMHd8fqyyyDMFJ58CvpV 938wIzXUeW8NmlDcx3/rGKvihUL3NecMTNN500hBK/zyI69HZD/lGEOu6dMhz8EQ ljSJm0fzsSrGzrVIeANhrxdzlwKMzoIyPeI0VWaovu6Z0C9aBPs/1cw3FRFqs0YK UO40IPFBxsUzzreOA4m8asF1/DUP4+tjgiv4gDckv1JZntYhiA== -----END CERTIFICATE-----Generated at Fri Oct 24 19:24:34 2025 by rpki-client