$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yq6vST3LVCGC9YNvJuilpvZt42o.roa File: yq6vST3LVCGC9YNvJuilpvZt42o.roa (raw, json) Hash identifier: vf0VaQRk6BF5+tU4n+jezyA3V4v93V0HRtf1DqIgnaI= Subject key identifier: CA:AE:AF:49:3D:CB:54:21:82:F5:83:6F:26:E8:A5:A6:F6:6D:E3:6A Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3877 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yq6vST3LVCGC9YNvJuilpvZt42o.roa Signing time: Fri 22 Aug 2025 08:45:19 +0000 ROA not before: Fri 22 Aug 2025 08:45:19 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 118.233.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14455 (0x3877) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:19 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=CAAEAF493DCB542182F5836F26E8A5A6F66DE36A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a5:02:55:34:e3:9e:95:f6:82:6e:bb:07:b3: c8:b8:04:98:7b:8e:95:d5:6c:91:f9:24:4c:5c:c0: 33:b4:ec:a4:50:8c:9b:46:28:3f:25:15:9b:04:04: 1c:52:eb:44:c9:d0:ca:98:f1:3b:61:0d:a7:cb:e0: 7d:ec:c6:13:70:0b:03:b4:30:17:99:61:0c:c1:1a: f6:ab:31:47:7b:a7:fd:7a:b9:f2:07:d8:ee:b3:e3: 1d:11:17:fe:7b:34:81:30:bb:80:83:38:bf:ff:b3: bc:ce:28:c7:d9:26:61:65:94:74:0b:34:74:c6:a8: ba:c2:73:34:2d:43:c5:41:c4:a6:2c:df:d6:53:c9: c8:dc:3b:bf:06:bf:eb:ac:90:ed:fb:48:d7:50:d4: 93:d3:57:08:ea:07:06:5a:18:51:e2:33:a2:04:69: e7:36:4d:18:39:c2:da:af:90:0c:53:88:7d:b0:be: 98:0b:41:40:37:51:97:9f:0c:9e:ba:6f:e0:62:1b: 4e:60:f1:13:64:ce:d1:bc:a7:4b:30:c8:6e:88:19: c3:1b:e0:35:d1:6a:cd:e6:6c:10:bf:ab:74:45:42: a1:42:13:92:c6:79:2b:7d:1c:c3:bf:80:d3:c5:96: 89:9b:24:94:42:e7:7c:14:09:93:d6:09:0c:d5:ef: e8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:AE:AF:49:3D:CB:54:21:82:F5:83:6F:26:E8:A5:A6:F6:6D:E3:6A X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yq6vST3LVCGC9YNvJuilpvZt42o.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.52.0/22 Signature Algorithm: sha256WithRSAEncryption 77:33:7d:50:d0:8c:da:4d:74:32:75:44:c1:87:d1:66:e6:11: dd:13:9a:c4:a3:38:8c:1e:38:28:50:50:e8:0b:c6:4d:2c:36: 0c:ff:b9:d4:30:eb:bc:1a:8e:1f:0f:cd:74:9a:4a:72:f5:f6: 27:8a:d9:d2:c5:bc:fe:8c:be:e5:34:9e:c2:6a:ad:04:df:18: 06:d6:17:bd:f8:79:4d:d1:b4:3f:23:4f:2d:7d:86:91:36:17: 47:09:80:5a:02:87:75:49:65:64:48:73:6f:fe:19:cb:42:a7: 0e:ae:9f:1d:03:f5:6f:58:60:38:3d:5e:a2:4e:da:2f:cc:0c: 47:82:17:26:c2:80:cd:4a:e2:ff:50:e4:0b:b1:7d:e5:d7:10: 59:66:ba:cf:d9:4e:c1:16:b9:08:92:0e:6f:9c:4c:da:4f:10: 26:ac:24:d5:79:55:19:83:db:d0:e2:19:fa:21:a3:11:6c:54: bb:c0:93:55:e5:08:e6:9c:ac:f7:81:fe:5c:15:50:40:cd:0a: db:36:cd:09:15:5f:d3:59:6d:f6:d3:d1:9e:38:43:ac:f2:c5: 15:60:4a:cb:19:c0:fd:b1:63:18:fd:8c:02:2a:f8:7b:3b:72: f4:8d:40:4e:19:20:6d:2c:83:13:85:f0:e5:ca:d1:77:e3:83: 7b:12:55:9d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOHcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1MTlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKENBQUVBRjQ5M0RDQjU0 MjE4MkY1ODM2RjI2RThBNUE2RjY2REUzNkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCepQJVNOOelfaCbrsHs8i4BJh7jpXVbJH5JExcwDO07KRQjJtG KD8lFZsEBBxS60TJ0MqY8TthDafL4H3sxhNwCwO0MBeZYQzBGvarMUd7p/16ufIH 2O6z4x0RF/57NIEwu4CDOL//s7zOKMfZJmFllHQLNHTGqLrCczQtQ8VBxKYs39ZT ycjcO78Gv+uskO37SNdQ1JPTVwjqBwZaGFHiM6IEaec2TRg5wtqvkAxTiH2wvpgL QUA3UZefDJ66b+BiG05g8RNkztG8p0swyG6IGcMb4DXRas3mbBC/q3RFQqFCE5LG eSt9HMO/gNPFlombJJRC53wUCZPWCQzV7+gVAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUyq6vST3LVCGC9YNvJuilpvZt42owHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3lxNnZTVDNMVkNHQzlZTnZK dWlscHZadDQyby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6TQwDQYJKoZIhvcNAQELBQADggEBAHczfVDQjNpNdDJ1RMGH0WbmEd0TmsSjOIwe OChQUOgLxk0sNgz/udQw67wajh8PzXSaSnL19ieK2dLFvP6MvuU0nsJqrQTfGAbW F734eU3RtD8jTy19hpE2F0cJgFoCh3VJZWRIc2/+GctCpw6unx0D9W9YYDg9XqJO 2i/MDEeCFybCgM1K4v9Q5AuxfeXXEFlmus/ZTsEWuQiSDm+cTNpPECasJNV5VRmD 29DiGfohoxFsVLvAk1XlCOacrPeB/lwVUEDNCts2zQkVX9NZbfbT0Z44Q6zyxRVg SssZwP2xYxj9jAIq+Hs7cvSNQE4ZIG0sgxOF8OXK0Xfjg3sSVZ0= -----END CERTIFICATE-----Generated at Fri Oct 24 19:24:59 2025 by rpki-client