$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OfqcdHSyqN_aMqsnDqCGNgCxChk.roa File: OfqcdHSyqN_aMqsnDqCGNgCxChk.roa (raw, json) Hash identifier: 6VnxaHi/5iiHLDVPNSGytWDkqLJraN3qq1b5QQTTNtc= Subject key identifier: 39:FA:9C:74:74:B2:A8:DF:DA:32:AB:27:0E:A0:86:36:00:B1:0A:19 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 37E5 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OfqcdHSyqN_aMqsnDqCGNgCxChk.roa Signing time: Fri 22 Aug 2025 08:44:45 +0000 ROA not before: Fri 22 Aug 2025 08:44:45 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.193.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14309 (0x37e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:44:45 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=39FA9C7474B2A8DFDA32AB270EA0863600B10A19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:da:92:ae:76:c2:13:44:5c:ef:b5:a3:0e:e3: 41:ba:4c:9f:05:62:43:b4:4c:8b:a0:89:ca:cd:ed: 25:a4:8d:c9:72:bf:13:b3:8b:c8:d0:74:95:08:8b: f4:7e:02:3e:48:a0:91:17:4a:9a:96:3a:ef:73:d1: 9b:5f:39:f7:b3:56:cc:8e:78:dc:83:d7:a2:65:62: b7:49:6d:2c:7d:e7:d1:e9:33:39:34:76:47:13:99: 80:fd:fd:a0:40:4b:de:d2:03:46:95:c9:1e:8f:82: f7:00:7d:b0:19:6f:ca:f6:b5:77:84:a6:6d:67:e4: 02:40:33:8f:5d:23:a6:a2:3c:7c:df:f1:05:1b:1f: 12:b4:fb:31:51:c1:ee:43:b5:f5:57:af:98:0f:02: eb:11:04:5d:a1:b0:85:87:3c:53:ef:10:cc:45:f7: 0a:70:a7:ae:90:81:3d:ca:85:e0:da:63:9c:24:29: 56:2a:85:8b:f8:5e:72:78:29:3c:c6:87:f7:e4:ce: 61:2b:d6:28:70:80:3a:ce:d8:e9:64:e3:6f:f3:64: d6:88:b4:40:33:b7:61:40:77:86:79:47:7a:fa:f6: cc:b9:27:ce:57:f9:df:00:6f:ee:66:b2:b1:c9:2a: 0a:48:1f:8b:f8:fa:94:2f:62:cc:10:9b:65:86:77: 1b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:FA:9C:74:74:B2:A8:DF:DA:32:AB:27:0E:A0:86:36:00:B1:0A:19 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OfqcdHSyqN_aMqsnDqCGNgCxChk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.96.0/22 Signature Algorithm: sha256WithRSAEncryption 5d:41:d5:f0:1c:28:6d:ee:5f:01:19:30:92:bb:67:a2:5b:6c: 7e:1b:5e:c4:32:30:80:43:1d:6f:14:f5:5a:08:91:b0:a7:66: fc:11:f3:95:db:c6:9e:26:5d:ab:cd:af:98:5d:46:5b:76:f1: da:5b:08:4a:69:f1:8d:49:dd:72:21:f7:a0:70:9a:12:b7:a0: 09:d8:96:7e:9d:4f:b4:3a:60:e0:93:c9:34:ec:7c:84:ad:d7: da:5b:19:c2:d4:b6:eb:db:4d:e4:92:41:53:2f:06:b0:94:04: f9:48:5f:b0:3b:4e:0c:79:a6:68:2e:a8:e1:39:9f:e5:84:c6: db:c7:15:5e:11:ce:c2:c9:5e:0a:ef:e6:6b:72:1a:cc:3c:26: 21:cb:40:b2:02:83:21:5d:72:e0:be:ec:b5:31:c5:b4:ac:7f: a3:99:a9:bd:db:a6:0f:5b:c9:1b:49:f1:a4:57:b5:7b:6d:ab: d3:a1:35:e2:56:ee:e4:54:f3:3f:60:81:6f:e1:c7:7a:d0:b7: 8a:00:e7:c0:ad:d5:fd:89:cb:a3:63:0f:6b:da:a6:c6:b9:07: f4:ef:05:dc:e0:25:19:a3:26:60:21:eb:73:c4:72:76:eb:29: a5:ec:1b:7f:c4:80:66:f7:17:ed:6f:d3:e5:66:d3:6b:e1:bb: f2:d4:4e:4d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICN+UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ0NDVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDM5RkE5Qzc0NzRCMkE4 REZEQTMyQUIyNzBFQTA4NjM2MDBCMTBBMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC62pKudsITRFzvtaMO40G6TJ8FYkO0TIugicrN7SWkjclyvxOz i8jQdJUIi/R+Aj5IoJEXSpqWOu9z0ZtfOfezVsyOeNyD16JlYrdJbSx959HpMzk0 dkcTmYD9/aBAS97SA0aVyR6PgvcAfbAZb8r2tXeEpm1n5AJAM49dI6aiPHzf8QUb HxK0+zFRwe5DtfVXr5gPAusRBF2hsIWHPFPvEMxF9wpwp66QgT3KheDaY5wkKVYq hYv4XnJ4KTzGh/fkzmEr1ihwgDrO2Olk42/zZNaItEAzt2FAd4Z5R3r69sy5J85X +d8Ab+5msrHJKgpIH4v4+pQvYswQm2WGdxunAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUOfqcdHSyqN/aMqsnDqCGNgCxChkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL09mcWNkSFN5cU5fYU1xc25E cUNHTmdDeENoay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wWAwDQYJKoZIhvcNAQELBQADggEBAF1B1fAcKG3uXwEZMJK7Z6JbbH4bXsQyMIBD HW8U9VoIkbCnZvwR85Xbxp4mXavNr5hdRlt28dpbCEpp8Y1J3XIh96BwmhK3oAnY ln6dT7Q6YOCTyTTsfISt19pbGcLUtuvbTeSSQVMvBrCUBPlIX7A7Tgx5pmguqOE5 n+WExtvHFV4RzsLJXgrv5mtyGsw8JiHLQLICgyFdcuC+7LUxxbSsf6OZqb3bpg9b yRtJ8aRXtXttq9OhNeJW7uRU8z9ggW/hx3rQt4oA58Ct1f2Jy6NjD2vapsa5B/Tv BdzgJRmjJmAh63PEcnbrKaXsG3/EgGb3F+1v0+Vm02vhu/LUTk0= -----END CERTIFICATE-----Generated at Sun Aug 24 07:29:31 2025 by rpki-client