$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KBT/C_OQL8GHwGL2pOKrjIZkyFdUXuU.roa File: C_OQL8GHwGL2pOKrjIZkyFdUXuU.roa (raw, json) Hash identifier: EAw3b2APTdRsAGp91U1befryZ+NqJz+DFQnc6oJr/rc= Subject key identifier: 0B:F3:90:2F:C1:87:C0:62:F6:A4:E2:AB:8C:86:64:C8:57:54:5E:E5 Certificate issuer: /CN=2DBED751DA8F01930418E2DE2432D0D03A97DA7C Certificate serial: 0E28 Authority key identifier: 2D:BE:D7:51:DA:8F:01:93:04:18:E2:DE:24:32:D0:D0:3A:97:DA:7C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/C_OQL8GHwGL2pOKrjIZkyFdUXuU.roa Signing time: Fri 22 Aug 2025 09:03:30 +0000 ROA not before: Fri 22 Aug 2025 09:03:30 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18042 IP address blocks: 61.67.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3624 (0xe28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DBED751DA8F01930418E2DE2432D0D03A97DA7C Validity Not Before: Aug 22 09:03:30 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=0BF3902FC187C062F6A4E2AB8C8664C857545EE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c7:a6:a3:10:4e:c9:1d:6d:60:45:3f:e5:33: 1c:9e:7b:54:41:57:42:c6:33:f8:0f:14:55:d9:92: c4:e4:72:a1:ca:cd:ed:d1:86:72:da:39:da:c6:af: dd:13:2d:db:46:2a:28:d7:8d:39:c2:d1:51:bb:0a: c9:d1:78:bf:a6:c8:81:29:90:f4:7e:2c:6e:f0:6d: 59:21:c9:c5:df:93:41:0c:0e:42:ee:61:fc:40:d9: bc:6e:7f:50:18:64:42:9f:84:d7:b9:15:6f:7d:fe: 12:cc:a1:cd:be:4e:d9:97:a4:0a:d0:81:a5:72:8a: 9a:70:db:ec:31:18:6b:45:da:05:1b:cd:98:60:f3: 6c:b7:4a:51:1b:44:57:88:e7:7a:84:e7:03:37:f4: b4:77:93:73:e8:bf:29:ce:02:6d:73:f3:a1:af:f6: 3c:de:f7:33:d5:a8:5b:d4:62:79:23:39:c2:90:72: f2:40:3e:9a:70:90:25:21:cd:6c:d5:fa:f3:b7:db: fe:4d:1d:08:c3:97:a9:e8:52:33:67:49:3a:7a:1f: d6:39:d6:3f:b1:0c:06:55:97:c5:52:e3:a7:73:53: 67:6a:08:5a:d5:7c:12:bb:56:07:1b:d8:b7:bd:b9: 38:de:d7:7e:2f:de:41:ac:91:fb:4f:b8:20:75:7c: cd:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:F3:90:2F:C1:87:C0:62:F6:A4:E2:AB:8C:86:64:C8:57:54:5E:E5 X509v3 Authority Key Identifier: keyid:2D:BE:D7:51:DA:8F:01:93:04:18:E2:DE:24:32:D0:D0:3A:97:DA:7C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/C_OQL8GHwGL2pOKrjIZkyFdUXuU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.67.207.0/24 Signature Algorithm: sha256WithRSAEncryption 32:d5:2a:6a:09:e0:23:c8:f8:74:ac:f4:0f:4d:aa:a2:d5:04: e9:3e:e6:d1:38:37:b0:70:7b:d0:c4:13:99:42:ea:37:74:18: bd:19:8b:cf:0f:3c:64:e1:31:50:a1:c4:05:9d:2a:0f:98:af: 39:da:f0:38:3a:51:e3:26:70:92:e9:f4:58:b5:ea:18:59:53: 98:47:68:36:ef:0a:c6:2c:19:0d:8f:61:e2:d2:c2:21:17:88: 3c:55:7e:20:7c:99:82:3d:80:71:81:97:a9:79:92:d0:a2:07: b6:47:8d:b7:b1:89:a0:71:44:13:d7:98:f0:a7:9f:a7:98:41: 4f:5f:cf:a0:99:23:b4:bb:4f:91:7e:1a:3b:bc:5c:d1:7d:cf: b0:3a:08:e6:16:60:a9:5d:67:fb:ec:f7:fd:f6:f7:04:70:e0: 13:01:be:20:e8:5d:bf:b2:29:ea:55:96:a0:7b:74:7a:f2:83: d2:dd:ac:cc:98:e1:cf:23:69:29:db:a4:94:20:f6:f5:fe:67: e5:5d:70:cc:26:1b:0f:48:4b:60:3c:ad:6d:21:67:89:3e:6b: ff:2c:c1:d6:81:e8:16:a3:3b:94:05:74:47:cc:ec:ff:d1:c3: 05:f3:1a:e6:fa:91:1d:48:09:0a:64:4d:45:6e:de:22:5c:1c: 2f:cc:1e:00 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDigwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkRC RUQ3NTFEQThGMDE5MzA0MThFMkRFMjQzMkQwRDAzQTk3REE3QzAeFw0yNTA4MjIw OTAzMzBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDBCRjM5MDJGQzE4N0Mw NjJGNkE0RTJBQjhDODY2NEM4NTc1NDVFRTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrx6ajEE7JHW1gRT/lMxyee1RBV0LGM/gPFFXZksTkcqHKze3R hnLaOdrGr90TLdtGKijXjTnC0VG7CsnReL+myIEpkPR+LG7wbVkhycXfk0EMDkLu YfxA2bxuf1AYZEKfhNe5FW99/hLMoc2+TtmXpArQgaVyippw2+wxGGtF2gUbzZhg 82y3SlEbRFeI53qE5wM39LR3k3PovynOAm1z86Gv9jze9zPVqFvUYnkjOcKQcvJA PppwkCUhzWzV+vO32/5NHQjDl6noUjNnSTp6H9Y51j+xDAZVl8VS46dzU2dqCFrV fBK7Vgcb2Le9uTje134v3kGskftPuCB1fM1lAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUC/OQL8GHwGL2pOKrjIZkyFdUXuUwHwYDVR0jBBgwFoAULb7XUdqPAZMEGOLe JDLQ0DqX2nwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0JUL0xi N1hVZHFQQVpNRUdPTGVKRExRMERxWDJudy5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev TGI3WFVkcVBBWk1FR09MZUpETFEwRHFYMm53LmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvS0JUL0NfT1FMOEdId0dMMnBPS3JqSVpreUZk VVh1VS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAA9Q88wDQYJ KoZIhvcNAQELBQADggEBADLVKmoJ4CPI+HSs9A9NqqLVBOk+5tE4N7Bwe9DEE5lC 6jd0GL0Zi88PPGThMVChxAWdKg+Yrzna8Dg6UeMmcJLp9Fi16hhZU5hHaDbvCsYs GQ2PYeLSwiEXiDxVfiB8mYI9gHGBl6l5ktCiB7ZHjbexiaBxRBPXmPCnn6eYQU9f z6CZI7S7T5F+Gju8XNF9z7A6COYWYKldZ/vs9/329wRw4BMBviDoXb+yKepVlqB7 dHryg9LdrMyY4c8jaSnbpJQg9vX+Z+VdcMwmGw9IS2A8rW0hZ4k+a/8swdaB6Baj O5QFdEfM7P/RwwXzGub6kR1ICQpkTUVu3iJcHC/MHgA= -----END CERTIFICATE-----Generated at Sun Aug 24 11:38:30 2025 by rpki-client