$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zmOvdrvjrfURHcE-O41VYY47nrU.roa File: zmOvdrvjrfURHcE-O41VYY47nrU.roa (raw, json) Hash identifier: n70pPL0fYjJQhPnNtAWSKxM7a2ze3g6wjUR+I64h/hI= Subject key identifier: CE:63:AF:76:BB:E3:AD:F5:11:1D:C1:3E:3B:8D:55:61:8E:3B:9E:B5 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3AA2 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zmOvdrvjrfURHcE-O41VYY47nrU.roa Signing time: Fri 22 Aug 2025 08:47:34 +0000 ROA not before: Fri 22 Aug 2025 08:47:34 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.193.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15010 (0x3aa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:34 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=CE63AF76BBE3ADF5111DC13E3B8D55618E3B9EB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2c:f2:a2:07:0c:d2:0f:bf:d8:a7:c7:8f:59: 1a:0c:ba:83:20:dd:d1:32:9f:34:82:3e:f9:f3:93: 24:fa:72:45:af:b3:a5:52:4d:cc:7a:b1:a1:07:cc: 30:a4:77:6e:03:96:a2:31:14:e3:4c:55:2e:c7:f5: 66:39:23:34:cd:96:f1:ab:3c:78:5a:17:be:81:8a: a9:ff:80:5a:e2:78:6f:5f:56:bb:3b:2c:35:e4:e6: 5a:32:9c:e8:22:45:5c:7d:0d:0e:cd:f4:39:6b:5a: 45:df:5a:1d:57:d9:27:6a:5b:83:ee:2f:9d:fb:74: 0a:3a:44:86:f0:de:58:a0:04:82:6e:cd:5c:d2:df: bd:8a:97:21:b1:4f:c9:90:5a:9b:bc:8b:d4:e4:1c: 6a:d2:55:bf:e6:b2:07:c5:00:ae:0b:52:4d:74:3d: cf:77:e5:bf:db:49:2f:e8:c1:46:b1:fa:e0:7f:15: 95:e1:f8:69:32:8e:df:18:cd:83:0c:af:57:74:43: 48:21:d4:9f:20:70:04:00:4e:01:4b:a2:5b:07:6f: 40:3f:b5:ba:c9:9b:dd:57:28:52:68:e0:0f:36:52: 66:36:60:24:0c:ec:c0:14:aa:55:35:d6:b9:09:9b: 5f:a0:21:91:23:8d:29:49:48:7e:b8:fd:df:29:68: 76:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:63:AF:76:BB:E3:AD:F5:11:1D:C1:3E:3B:8D:55:61:8E:3B:9E:B5 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zmOvdrvjrfURHcE-O41VYY47nrU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.48.0/20 Signature Algorithm: sha256WithRSAEncryption 8a:fe:83:2b:d2:c0:7d:9b:f1:22:66:24:f2:78:29:cc:12:1b: 3c:fc:6e:1b:14:7c:45:1e:e6:82:8a:24:09:64:30:ef:00:d0: ab:cd:84:f9:b9:8a:d5:81:aa:0a:2c:20:f4:d3:3e:45:53:b5: 72:10:c8:be:44:77:4d:11:c6:41:eb:eb:51:1c:ab:d4:aa:09: 06:22:49:7f:ae:cb:69:b1:6c:64:15:36:6f:dd:9d:a6:ad:98: 71:88:a4:99:de:17:2e:21:d2:71:fd:09:ea:bd:54:49:f9:78: ca:24:2b:1a:ce:40:b3:52:cb:fc:f2:72:95:d2:02:8e:de:40: d1:0a:89:b4:59:be:31:61:26:87:98:ab:3a:7c:de:17:29:2f: 96:14:f3:09:59:b9:6c:d2:97:f6:68:da:51:15:fb:87:bf:de: 38:a0:41:36:84:e0:ca:dd:56:13:c6:73:21:c8:6d:9c:fd:72: 13:73:6e:da:67:5d:aa:33:96:ce:78:82:2a:a6:ef:d7:10:5c: ad:bd:0f:bd:ae:bc:06:0c:eb:8f:f5:2a:95:82:00:59:38:ff: 20:ca:ce:12:3f:78:56:22:fe:0d:85:a2:49:bb:26:b0:2f:5f: 2f:42:49:78:9d:4c:0a:30:e4:9f:17:91:a1:85:15:3c:40:c0: ac:30:5c:1d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOqIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3MzRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKENFNjNBRjc2QkJFM0FE RjUxMTFEQzEzRTNCOEQ1NTYxOEUzQjlFQjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrLPKiBwzSD7/Yp8ePWRoMuoMg3dEynzSCPvnzkyT6ckWvs6VS Tcx6saEHzDCkd24DlqIxFONMVS7H9WY5IzTNlvGrPHhaF76Biqn/gFrieG9fVrs7 LDXk5loynOgiRVx9DQ7N9DlrWkXfWh1X2SdqW4PuL537dAo6RIbw3ligBIJuzVzS 372KlyGxT8mQWpu8i9TkHGrSVb/msgfFAK4LUk10Pc935b/bSS/owUax+uB/FZXh +Gkyjt8YzYMMr1d0Q0gh1J8gcAQATgFLolsHb0A/tbrJm91XKFJo4A82UmY2YCQM 7MAUqlU11rkJm1+gIZEjjSlJSH64/d8paHZrAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUzmOvdrvjrfURHcE+O41VYY47nrUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3ptT3ZkcnZqcmZVUkhjRS1P NDFWWVk0N25yVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR7 wTAwDQYJKoZIhvcNAQELBQADggEBAIr+gyvSwH2b8SJmJPJ4KcwSGzz8bhsUfEUe 5oKKJAlkMO8A0KvNhPm5itWBqgosIPTTPkVTtXIQyL5Ed00RxkHr61Ecq9SqCQYi SX+uy2mxbGQVNm/dnaatmHGIpJneFy4h0nH9Ceq9VEn5eMokKxrOQLNSy/zycpXS Ao7eQNEKibRZvjFhJoeYqzp83hcpL5YU8wlZuWzSl/Zo2lEV+4e/3jigQTaE4Mrd VhPGcyHIbZz9chNzbtpnXaozls54giqm79cQXK29D72uvAYM64/1KpWCAFk4/yDK zhI/eFYi/g2Fokm7JrAvXy9CSXidTAow5J8XkaGFFTxAwKwwXB0= -----END CERTIFICATE-----Generated at Fri Oct 24 19:27:25 2025 by rpki-client