$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OUFCMh_4GOXZFhhOPgQX0QuNl2Y.roa File: OUFCMh_4GOXZFhhOPgQX0QuNl2Y.roa (raw, json) Hash identifier: yOWysO3IoI1oJkXQHGocOcHhc7yer9Qr+14t3Jx5TEE= Subject key identifier: 39:41:42:32:1F:F8:18:E5:D9:16:18:4E:3E:04:17:D1:0B:8D:97:66 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3835 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OUFCMh_4GOXZFhhOPgQX0QuNl2Y.roa Signing time: Fri 22 Aug 2025 08:45:03 +0000 ROA not before: Fri 22 Aug 2025 08:45:03 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.194.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14389 (0x3835) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:03 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=394142321FF818E5D916184E3E0417D10B8D9766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:11:a1:99:80:0e:95:d3:22:36:67:b2:07:c1: 43:35:01:bf:80:81:db:49:3c:e3:74:04:d2:9c:19: 2e:c9:df:f3:20:d8:08:7e:98:0d:bc:eb:41:44:dc: c8:80:fb:88:6f:a8:cc:43:b6:c6:b0:70:3f:c6:aa: a4:20:f8:d0:bc:a6:2f:87:6a:c3:75:f5:37:15:df: f3:9d:1a:5b:8d:98:86:82:58:2b:32:9b:7e:48:fd: 20:0a:de:cc:f3:66:cd:02:63:ff:72:fd:1a:55:4d: 5b:7d:71:03:a8:ff:e5:4c:e5:22:2c:0e:43:65:0e: bf:3a:93:c8:a8:fb:0a:8e:30:24:7e:a8:0b:d8:5c: dc:c2:d1:04:6f:d7:1b:6e:11:9b:81:f9:6c:3f:d5: 50:c6:65:8a:88:a0:c3:b6:08:36:44:2c:e5:b4:73: 0b:96:24:31:34:cd:d1:f8:f2:3a:a6:42:23:18:00: 18:0f:f6:91:8b:1b:aa:3e:b7:f7:e1:b3:26:5e:a7: e2:2b:51:f8:37:e2:41:54:c4:76:f1:75:c0:47:bd: f1:1d:18:9f:0b:ef:dd:a8:c0:72:85:75:f1:f8:88: b2:dc:d9:f9:89:03:c8:1a:66:8a:a7:14:7e:ae:2c: 15:0e:fc:1a:60:62:ce:50:46:94:41:d8:46:f8:2b: 2a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:41:42:32:1F:F8:18:E5:D9:16:18:4E:3E:04:17:D1:0B:8D:97:66 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OUFCMh_4GOXZFhhOPgQX0QuNl2Y.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.204.0/22 Signature Algorithm: sha256WithRSAEncryption 3e:1f:70:be:20:2f:04:95:d8:e8:b8:8d:fd:1c:55:9b:64:39: 4f:d1:82:9f:1c:b1:9a:ba:60:21:85:c9:a2:d8:d6:03:a8:25: 17:ba:99:40:44:79:4d:22:a3:98:fa:7c:ff:19:d9:1f:54:ae: de:29:52:8e:5e:00:4e:2e:4f:bd:69:d5:67:b1:2d:ac:03:98: 39:d4:b5:b9:95:64:1f:4c:bc:ed:fa:f8:77:68:52:41:fc:7c: 00:96:b9:8f:29:70:f8:55:4e:15:84:c8:4f:45:40:75:02:c5: 9f:0b:9b:68:64:86:f0:a2:5f:19:90:2f:b9:33:fe:86:bd:f4: bd:38:bb:d0:8d:a0:9b:fd:6b:5c:65:d6:1f:bb:35:7e:a8:be: a3:29:48:b1:94:38:ef:cd:ec:66:89:22:c4:a7:c0:69:d1:ae: 89:01:4d:66:a3:53:88:f8:0a:e1:22:f1:a9:71:87:13:46:f0: 24:bc:3b:cf:2b:09:6e:05:b3:67:0d:53:73:d4:f4:4d:9e:c6: 0a:8d:f6:89:e6:23:03:d8:0b:b1:73:92:70:ce:3f:16:f5:4b: 90:c6:64:d6:aa:eb:89:34:01:41:4d:db:3e:4b:75:5c:63:d2: 5d:2a:12:2f:c2:a2:1d:0d:6f:ef:35:95:ad:c7:ec:55:7d:dc: 91:7c:0b:5e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICODUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1MDNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDM5NDE0MjMyMUZGODE4 RTVEOTE2MTg0RTNFMDQxN0QxMEI4RDk3NjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNEaGZgA6V0yI2Z7IHwUM1Ab+AgdtJPON0BNKcGS7J3/Mg2Ah+ mA2860FE3MiA+4hvqMxDtsawcD/GqqQg+NC8pi+HasN19TcV3/OdGluNmIaCWCsy m35I/SAK3szzZs0CY/9y/RpVTVt9cQOo/+VM5SIsDkNlDr86k8io+wqOMCR+qAvY XNzC0QRv1xtuEZuB+Ww/1VDGZYqIoMO2CDZELOW0cwuWJDE0zdH48jqmQiMYABgP 9pGLG6o+t/fhsyZep+IrUfg34kFUxHbxdcBHvfEdGJ8L792owHKFdfH4iLLc2fmJ A8gaZoqnFH6uLBUO/BpgYs5QRpRB2Eb4Kyp7AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUOUFCMh/4GOXZFhhOPgQX0QuNl2YwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL09VRkNNaF80R09YWkZoaE9Q Z1FYMFF1TmwyWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wswwDQYJKoZIhvcNAQELBQADggEBAD4fcL4gLwSV2Oi4jf0cVZtkOU/Rgp8csZq6 YCGFyaLY1gOoJRe6mUBEeU0io5j6fP8Z2R9Urt4pUo5eAE4uT71p1WexLawDmDnU tbmVZB9MvO36+HdoUkH8fACWuY8pcPhVThWEyE9FQHUCxZ8Lm2hkhvCiXxmQL7kz /oa99L04u9CNoJv9a1xl1h+7NX6ovqMpSLGUOO/N7GaJIsSnwGnRrokBTWajU4j4 CuEi8alxhxNG8CS8O88rCW4Fs2cNU3PU9E2exgqN9onmIwPYC7FzknDOPxb1S5DG ZNaq64k0AUFN2z5LdVxj0l0qEi/Coh0Nb+81la3H7FV93JF8C14= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:51 2025 by rpki-client