$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/O3OvyfLqInI-OiIk7X19dyzS_XA.roa File: O3OvyfLqInI-OiIk7X19dyzS_XA.roa (raw, json) Hash identifier: q1iiTueY7vvPqa4fReyDCbqXJh5UIp7q2jWl7hp0djQ= Subject key identifier: 3B:73:AF:C9:F2:EA:22:72:3E:3A:22:24:ED:7D:7D:77:2C:D2:FD:70 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3843 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/O3OvyfLqInI-OiIk7X19dyzS_XA.roa Signing time: Fri 22 Aug 2025 08:45:07 +0000 ROA not before: Fri 22 Aug 2025 08:45:07 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 211.76.123.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14403 (0x3843) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:07 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=3B73AFC9F2EA22723E3A2224ED7D7D772CD2FD70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7d:b8:18:04:12:0c:4e:6e:15:af:4f:7e:61: 60:0e:a8:e7:d7:f3:5c:93:10:fa:bc:f5:b1:47:84: c7:50:d9:25:58:37:ee:e9:5f:d9:e2:8c:6a:fe:58: 51:75:e0:f6:de:14:6b:60:0e:d0:f6:c0:cb:b1:87: 05:4d:f3:aa:26:b0:b2:33:8f:0c:e3:70:a3:bf:60: 01:2f:67:8c:bf:96:c7:26:27:3c:af:7b:90:41:93: 76:71:7b:9a:87:90:a3:ac:58:4e:9e:d6:e8:b5:de: 9d:d5:01:9b:a1:12:6a:87:bb:a6:af:e6:d3:51:a0: 04:49:0e:1f:2f:99:1d:2c:68:e6:68:53:1d:cc:25: a1:53:68:5e:df:2b:e0:02:dd:12:e0:56:78:79:05: 1c:ba:9a:00:30:b1:a1:cb:03:e5:f8:10:eb:bb:35: 84:32:f7:41:b8:f4:4b:03:63:a1:69:33:60:da:3b: 0e:25:e3:c7:6f:87:b2:65:82:8d:36:49:12:2f:9a: 6f:08:03:05:8b:1e:c7:7d:7f:3f:88:c6:53:53:8f: 98:c2:d4:ef:ad:7f:0e:be:22:6c:0a:40:4b:db:a1: 90:a6:da:28:a6:54:c4:22:38:94:22:c0:32:dd:e0: 8f:5c:64:ce:ec:39:5f:33:90:f0:e5:7b:43:c9:e5: 65:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:73:AF:C9:F2:EA:22:72:3E:3A:22:24:ED:7D:7D:77:2C:D2:FD:70 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/O3OvyfLqInI-OiIk7X19dyzS_XA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.123.0/25 Signature Algorithm: sha256WithRSAEncryption 05:49:9c:a6:60:e0:21:a3:9b:ac:1e:d2:34:84:da:36:25:71: 80:dd:f4:0b:e0:cf:32:cf:e1:9e:49:df:69:ef:db:07:bc:5e: a4:9a:66:76:fc:74:b6:88:b2:5b:93:8c:10:30:86:0c:03:b5: 13:61:4e:99:13:5f:7c:3c:42:0b:2e:f6:7a:23:d5:ca:2f:37: 6e:1c:9b:42:f3:9c:f3:87:5c:4e:45:1a:b8:f3:09:ff:4e:af: 84:a0:08:ac:e6:11:fd:1e:db:e3:85:c6:84:0e:b0:e8:35:56: c9:bf:bc:8b:46:8e:65:ab:dd:c6:c7:19:9c:43:1f:49:fe:e2: 00:6f:60:2e:6f:0d:3b:6a:0d:63:9d:4e:61:e7:dc:0f:ca:ef: e2:1c:60:bb:3f:bd:39:77:0e:48:c5:fe:81:97:66:c7:73:f5: be:82:70:a8:5d:a3:2d:52:e6:eb:2b:9b:89:c0:8d:eb:f6:90: 8e:52:5e:84:39:cc:a4:7d:b8:f9:f5:80:0e:9b:d1:f9:58:4a: 8f:0a:69:73:5a:67:ca:72:ca:be:7b:95:e1:df:d6:2b:3d:9a: 89:fb:7f:18:12:9a:9a:3c:eb:5d:5f:4f:e6:c2:df:38:60:20: df:92:fc:17:b0:ca:a9:14:5a:af:63:6c:a8:66:83:e3:0b:a4: c8:22:b6:d0 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICOEMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1MDdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDNCNzNBRkM5RjJFQTIy NzIzRTNBMjIyNEVEN0Q3RDc3MkNEMkZENzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSfbgYBBIMTm4Vr09+YWAOqOfX81yTEPq89bFHhMdQ2SVYN+7p X9nijGr+WFF14PbeFGtgDtD2wMuxhwVN86omsLIzjwzjcKO/YAEvZ4y/lscmJzyv e5BBk3Zxe5qHkKOsWE6e1ui13p3VAZuhEmqHu6av5tNRoARJDh8vmR0saOZoUx3M JaFTaF7fK+AC3RLgVnh5BRy6mgAwsaHLA+X4EOu7NYQy90G49EsDY6FpM2DaOw4l 48dvh7Jlgo02SRIvmm8IAwWLHsd9fz+IxlNTj5jC1O+tfw6+ImwKQEvboZCm2iim VMQiOJQiwDLd4I9cZM7sOV8zkPDle0PJ5WWnAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUO3OvyfLqInI+OiIk7X19dyzS/XAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL08zT3Z5ZkxxSW5JLU9pSWs3 WDE5ZHl6U19YQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQfT THsAMA0GCSqGSIb3DQEBCwUAA4IBAQAFSZymYOAho5usHtI0hNo2JXGA3fQL4M8y z+GeSd9p79sHvF6kmmZ2/HS2iLJbk4wQMIYMA7UTYU6ZE198PEILLvZ6I9XKLzdu HJtC85zzh1xORRq48wn/Tq+EoAis5hH9HtvjhcaEDrDoNVbJv7yLRo5lq93Gxxmc Qx9J/uIAb2Aubw07ag1jnU5h59wPyu/iHGC7P705dw5Ixf6Bl2bHc/W+gnCoXaMt UubrK5uJwI3r9pCOUl6EOcykfbj59YAOm9H5WEqPCmlzWmfKcsq+e5Xh39YrPZqJ +38YEpqaPOtdX0/mwt84YCDfkvwXsMqpFFqvY2yoZoPjC6TIIrbQ -----END CERTIFICATE-----Generated at Sun Aug 24 07:29:30 2025 by rpki-client