$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/oocsVqRD6XsGABoScgdvPpARvjs.roa File: oocsVqRD6XsGABoScgdvPpARvjs.roa (raw, json) Hash identifier: skzmA1qrkx0Mj8WzIdHslgoAlW74pzyy5dEo1KdTeYw= Subject key identifier: A2:87:2C:56:A4:43:E9:7B:06:00:1A:12:72:07:6F:3E:90:11:BE:3B Certificate issuer: /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7 Certificate serial: 0E64 Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/oocsVqRD6XsGABoScgdvPpARvjs.roa Signing time: Fri 22 Aug 2025 08:58:14 +0000 ROA not before: Fri 22 Aug 2025 08:58:14 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131596 IP address blocks: 123.0.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3684 (0xe64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7 Validity Not Before: Aug 22 08:58:14 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=A2872C56A443E97B06001A1272076F3E9011BE3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:fb:c2:07:0e:16:a9:f2:48:d8:ba:b8:0b:ee: 5b:e1:0b:18:ee:2e:76:a3:bd:3e:93:20:06:b3:2c: 1f:0b:6a:72:c6:1c:18:54:51:7c:4c:c6:25:41:bd: 54:81:c5:8a:03:6e:e5:1c:b8:5a:00:6e:c7:ab:d0: c4:77:49:01:f3:70:4f:3f:65:dd:62:f5:12:87:f9: 6b:74:0c:ec:0a:db:21:7b:08:16:d9:53:32:a8:9f: 00:a2:59:c9:51:6c:9c:20:bf:9a:11:44:bd:20:e2: e2:64:8b:65:53:12:1e:aa:c7:64:ff:9b:74:f2:97: 3c:82:a5:4b:8e:97:f3:ff:03:f9:86:62:cb:25:48: fb:55:6f:13:df:33:98:30:d6:ec:1a:b4:05:13:84: 2d:39:80:8e:4f:73:f2:8c:e2:99:70:1b:ec:be:5f: 24:9c:91:2c:0f:4a:a8:f9:d8:71:75:67:9e:9d:8e: eb:6b:63:be:d6:07:2e:98:4b:d3:bb:f6:73:95:43: c3:46:2c:6b:94:01:49:65:48:a9:4b:ca:7f:e2:ea: 1a:19:eb:8b:08:1a:48:6f:74:10:cb:f8:43:5e:2b: cb:76:8d:7b:8e:ae:eb:4e:df:4b:56:4b:a8:0a:4d: 04:62:7a:e3:00:9e:13:1c:1a:18:df:59:f7:10:13: 8c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:87:2C:56:A4:43:E9:7B:06:00:1A:12:72:07:6F:3E:90:11:BE:3B X509v3 Authority Key Identifier: keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/oocsVqRD6XsGABoScgdvPpARvjs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.0.192.0/18 Signature Algorithm: sha256WithRSAEncryption 82:2d:de:2e:21:18:5a:61:fc:4b:2c:39:02:68:dc:8b:e8:e0: 74:30:58:32:0a:b2:93:f6:4c:95:9f:c5:c0:14:fb:72:0e:bc: 1e:0e:43:fa:23:01:b5:ed:40:dc:98:4c:7b:e3:e9:6e:8e:8c: 03:00:13:9d:f4:a0:16:7f:41:70:8f:75:22:a2:a9:22:9e:9d: 4b:92:01:7b:d2:94:3a:a0:d5:25:dd:e3:ea:af:eb:b6:3f:f3: 7c:ca:fb:8f:46:be:4c:d4:22:2d:02:1a:d2:c3:3d:73:e0:49: 17:7b:51:01:d0:d5:61:d0:49:f1:cc:2c:03:28:ee:d2:64:7b: 28:ad:71:9d:4f:e2:0b:35:28:91:15:17:55:5d:fd:b3:77:d8: fd:e9:c5:64:4c:ba:73:a1:fc:74:b0:ea:e4:74:1e:7d:fc:de: 22:8e:8c:23:ad:ca:42:54:f0:82:16:d7:3f:eb:e4:e1:be:ce: 64:9f:54:1b:e7:25:39:cd:56:a6:2f:ee:d9:4c:0a:aa:91:73: 0a:62:f0:cb:d3:82:86:cd:a5:b3:41:8a:e0:94:f5:f0:6b:d6: b0:46:35:34:f6:82:3a:f6:84:2d:da:3d:64:0c:68:a3:46:99: 5b:3d:32:16:ff:31:8d:6e:c9:39:ce:60:9f:96:c1:8e:69:05: c6:22:0e:17 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDmQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODMy NzIwRUIwQkVBMDA1QzNFREU1NzRFMzFDMEFCNzU2M0ZBMENDNzAeFw0yNTA4MjIw ODU4MTRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEEyODcyQzU2QTQ0M0U5 N0IwNjAwMUExMjcyMDc2RjNFOTAxMUJFM0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQ+8IHDhap8kjYurgL7lvhCxjuLnajvT6TIAazLB8LanLGHBhU UXxMxiVBvVSBxYoDbuUcuFoAbser0MR3SQHzcE8/Zd1i9RKH+Wt0DOwK2yF7CBbZ UzKonwCiWclRbJwgv5oRRL0g4uJki2VTEh6qx2T/m3TylzyCpUuOl/P/A/mGYssl SPtVbxPfM5gw1uwatAUThC05gI5Pc/KM4plwG+y+XySckSwPSqj52HF1Z56djutr Y77WBy6YS9O79nOVQ8NGLGuUAUllSKlLyn/i6hoZ64sIGkhvdBDL+ENeK8t2jXuO rutO30tWS6gKTQRieuMAnhMcGhjfWfcQE4zbAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUoocsVqRD6XsGABoScgdvPpARvjswHwYDVR0jBBgwFoAUgycg6wvqAFw+3ldO McCrdWP6DMcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEJDT00v Z3ljZzZ3dnFBRnctM2xkT01jQ3JkV1A2RE1jLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9neWNnNnd2cUFGdy0zbGRPTWNDcmRXUDZETWMuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQkNPTS9vb2NzVnFSRDZYc0dBQm9TY2dk dlBwQVJ2anMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGewDA MA0GCSqGSIb3DQEBCwUAA4IBAQCCLd4uIRhaYfxLLDkCaNyL6OB0MFgyCrKT9kyV n8XAFPtyDrweDkP6IwG17UDcmEx74+lujowDABOd9KAWf0Fwj3Uioqkinp1LkgF7 0pQ6oNUl3ePqr+u2P/N8yvuPRr5M1CItAhrSwz1z4EkXe1EB0NVh0EnxzCwDKO7S ZHsorXGdT+ILNSiRFRdVXf2zd9j96cVkTLpzofx0sOrkdB59/N4ijowjrcpCVPCC Ftc/6+Thvs5kn1Qb5yU5zVamL+7ZTAqqkXMKYvDL04KGzaWzQYrglPXwa9awRjU0 9oI69oQt2j1kDGijRplbPTIW/zGNbsk5zmCflsGOaQXGIg4X -----END CERTIFICATE-----Generated at Sun Aug 24 09:14:55 2025 by rpki-client