$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ynit9RA1TGuKTjy3rk4a940UAbc.roa File: ynit9RA1TGuKTjy3rk4a940UAbc.roa (raw, json) Hash identifier: X+QvPV87dlVxNwRLoyZeO0S62J0xnDb9rMpXdsI9sFc= Subject key identifier: CA:78:AD:F5:10:35:4C:6B:8A:4E:3C:B7:AE:4E:1A:F7:8D:14:01:B7 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 38BB Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ynit9RA1TGuKTjy3rk4a940UAbc.roa Signing time: Fri 22 Aug 2025 08:45:34 +0000 ROA not before: Fri 22 Aug 2025 08:45:34 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9924 IP address blocks: 123.193.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 07:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14523 (0x38bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:34 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=CA78ADF510354C6B8A4E3CB7AE4E1AF78D1401B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:db:72:79:78:07:46:c3:90:70:09:78:59:cb: f8:50:25:a0:5d:13:62:db:5a:b4:2a:c5:d8:66:2d: 3d:0a:5f:d8:c0:6d:a4:12:c3:58:a9:a6:fa:e4:79: 8c:ba:14:0c:00:27:84:4e:7b:4b:44:e9:4b:01:54: 3c:20:bb:ba:22:a7:4d:37:37:a4:a9:c2:14:fa:0e: ac:55:78:e7:c4:c9:43:94:9b:05:a7:e9:32:35:9c: 7e:4c:5d:77:96:75:6a:b7:c0:6c:68:94:5e:78:be: 6e:be:4a:67:ff:cb:fa:2a:ce:c7:37:bc:37:a1:c4: 71:2a:3f:1d:a3:5b:16:78:dc:87:11:19:1c:f7:65: 73:09:2f:8e:1e:08:25:d6:08:b0:2c:e7:6e:36:fe: c2:81:14:63:46:c9:05:c6:51:bb:a6:83:1b:ad:1b: 97:ec:22:34:53:8e:a7:5a:a6:99:69:d4:e3:3a:93: ab:d9:2b:0d:6b:f5:dc:2b:35:fd:05:42:16:83:14: 7e:e7:00:a4:74:c4:5e:66:21:96:8c:c1:0c:08:74: 20:05:23:f9:45:8b:5b:b3:aa:18:14:19:58:57:0c: f3:59:02:4e:51:c9:79:71:c5:43:c4:b0:fb:46:2f: 62:10:8f:f8:a7:11:ea:e6:6b:45:77:55:5e:05:7f: fc:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:78:AD:F5:10:35:4C:6B:8A:4E:3C:B7:AE:4E:1A:F7:8D:14:01:B7 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ynit9RA1TGuKTjy3rk4a940UAbc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.64.0/20 Signature Algorithm: sha256WithRSAEncryption 29:56:77:81:97:fc:03:19:24:ec:cd:37:83:1d:90:5e:e7:b7: 62:29:89:04:4b:0f:80:41:99:8d:d7:49:ad:c9:f7:cf:d6:ae: 54:92:20:f6:da:43:a1:d5:c7:6b:86:cf:ae:e7:09:77:49:71: 25:98:65:5c:49:5a:54:b8:e9:2a:ab:9f:e7:76:8f:32:9d:50: 5a:58:80:09:f4:9d:59:0a:77:e5:c0:95:40:e1:cf:f7:15:5c: a2:98:66:19:ef:90:53:ad:3d:58:60:fe:2f:88:4a:a6:62:c9: 40:a9:f2:e8:a3:33:ea:5a:b9:18:20:97:b3:a4:a7:3b:0e:b9: 68:11:ad:19:1e:35:47:75:2a:3b:86:ac:ce:e4:1b:0b:1c:03: c5:8c:33:0a:f8:37:0c:2a:b6:f9:ec:b4:4c:2a:60:4b:b2:cf: 43:12:c9:d9:56:b6:6a:4d:ea:e7:9b:14:01:33:86:36:af:06: 1f:e4:31:c3:de:db:79:4a:5f:c6:e7:b0:d7:26:78:5e:0c:f1: ad:e2:22:af:ab:55:4c:7e:2a:f5:ba:b2:d8:16:1d:eb:e1:cc: 86:59:b0:a3:2e:6c:b2:c3:6f:20:c6:2e:89:c5:b5:4e:b3:85: 0a:32:79:d3:6d:75:92:de:2f:9b:51:a8:77:d4:ac:62:22:98: 71:72:5e:fc -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOLswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1MzRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKENBNzhBREY1MTAzNTRD NkI4QTRFM0NCN0FFNEUxQUY3OEQxNDAxQjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCR23J5eAdGw5BwCXhZy/hQJaBdE2LbWrQqxdhmLT0KX9jAbaQS w1ippvrkeYy6FAwAJ4ROe0tE6UsBVDwgu7oip003N6SpwhT6DqxVeOfEyUOUmwWn 6TI1nH5MXXeWdWq3wGxolF54vm6+Smf/y/oqzsc3vDehxHEqPx2jWxZ43IcRGRz3 ZXMJL44eCCXWCLAs5242/sKBFGNGyQXGUbumgxutG5fsIjRTjqdapplp1OM6k6vZ Kw1r9dwrNf0FQhaDFH7nAKR0xF5mIZaMwQwIdCAFI/lFi1uzqhgUGVhXDPNZAk5R yXlxxUPEsPtGL2IQj/inEerma0V3VV4Ff/z5AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUynit9RA1TGuKTjy3rk4a940UAbcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3luaXQ5UkExVEd1S1RqeTNy azRhOTQwVUFiYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR7 wUAwDQYJKoZIhvcNAQELBQADggEBAClWd4GX/AMZJOzNN4MdkF7nt2IpiQRLD4BB mY3XSa3J98/WrlSSIPbaQ6HVx2uGz67nCXdJcSWYZVxJWlS46Sqrn+d2jzKdUFpY gAn0nVkKd+XAlUDhz/cVXKKYZhnvkFOtPVhg/i+ISqZiyUCp8uijM+pauRggl7Ok pzsOuWgRrRkeNUd1KjuGrM7kGwscA8WMMwr4NwwqtvnstEwqYEuyz0MSydlWtmpN 6uebFAEzhjavBh/kMcPe23lKX8bnsNcmeF4M8a3iIq+rVUx+KvW6stgWHevhzIZZ sKMubLLDbyDGLonFtU6zhQoyedNtdZLeL5tRqHfUrGIimHFyXvw= -----END CERTIFICATE-----Generated at Fri Oct 24 04:51:05 2025 by rpki-client