$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OvgjDkc2NwLzuPjlSKj-6Yupc3k.roa File: OvgjDkc2NwLzuPjlSKj-6Yupc3k.roa (raw, json) Hash identifier: 40gXA9STXD3bX+bUhxHSYxEFXu1Q1845j12BHEkkQMc= Subject key identifier: 3A:F8:23:0E:47:36:37:02:F3:B8:F8:E5:48:A8:FE:E9:8B:A9:73:79 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 39F1 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OvgjDkc2NwLzuPjlSKj-6Yupc3k.roa Signing time: Fri 22 Aug 2025 08:46:50 +0000 ROA not before: Fri 22 Aug 2025 08:46:50 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.194.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14833 (0x39f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:50 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=3AF8230E47363702F3B8F8E548A8FEE98BA97379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2a:71:b1:21:50:2f:87:c5:aa:0c:54:68:28: b6:f7:d8:63:07:53:07:31:54:ab:97:83:14:41:34: 9a:ab:5d:64:9f:90:83:32:ec:75:61:e6:21:64:ba: ae:39:e5:86:0d:04:1d:fb:ac:d3:a3:5c:b7:b6:96: 7d:0d:f8:d8:74:92:57:44:3b:a4:29:74:10:db:51: 28:d9:1b:ff:e6:84:21:0b:e5:60:6d:30:7c:29:c9: 86:26:b0:14:41:0d:ae:2d:ab:1a:a9:ba:7d:de:46: 13:ca:20:34:24:5b:db:80:48:5c:57:a1:ee:be:65: 83:54:56:97:8a:69:31:60:60:22:32:7b:44:da:dd: e2:a8:b1:83:f1:fb:64:86:7b:2e:60:b1:ce:a6:f3: 4b:56:04:46:48:9d:94:3a:29:c5:df:75:3e:60:4a: 7c:49:ef:96:49:a7:12:20:a6:fb:8a:ae:7d:b6:de: 1a:4f:c6:80:1f:ec:c9:8b:2c:c0:ed:b0:bc:d5:50: 4e:73:ca:f9:c7:1d:0c:21:6a:69:04:b0:f8:17:88: 5e:8e:62:1e:0d:f6:f2:77:0f:71:4c:9a:79:0d:b5: e8:42:f2:76:4a:15:cf:e4:8c:59:24:c5:d2:6a:cd: 1d:63:6f:59:0f:65:2b:98:89:d4:07:ad:4d:56:73: 5a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:F8:23:0E:47:36:37:02:F3:B8:F8:E5:48:A8:FE:E9:8B:A9:73:79 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OvgjDkc2NwLzuPjlSKj-6Yupc3k.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.64.0/22 Signature Algorithm: sha256WithRSAEncryption 07:c9:7a:d2:a7:04:b7:0b:ec:8f:53:7b:36:05:21:cb:cc:37: a3:fa:0e:ef:a2:d0:6d:ce:94:37:cf:2c:43:48:ff:5a:3f:1e: 2d:56:ba:80:09:76:59:4f:9e:c1:1e:6a:95:49:bf:21:81:2d: 1a:97:d9:b3:8d:36:36:3a:bb:f9:ec:af:e8:35:c6:84:51:bb: 60:12:2f:07:ba:44:26:2b:68:92:04:f2:00:72:32:85:51:a4: 5f:31:44:65:dd:61:30:f2:fe:06:52:fb:83:a2:e1:c7:a2:9e: 4e:10:e4:09:b9:cd:8c:d0:0b:bd:17:63:a3:e6:1d:30:61:5b: eb:f2:56:d5:be:b7:b3:06:27:ba:79:23:ac:1f:d9:f8:de:e7: 45:97:b8:25:5a:8e:f2:30:5c:7c:69:12:f5:51:61:ff:78:db: b0:d6:55:fd:18:ec:47:da:6b:ae:eb:50:b3:34:4d:fc:c7:8a: 6f:a1:04:14:72:a3:46:3c:52:d2:6d:e4:1c:fc:15:81:f7:c4: e5:d5:a3:dd:97:cc:b8:3f:1b:0f:63:a0:47:bb:9b:cc:5f:0e: 1d:95:23:b6:0f:e2:17:9b:34:fb:59:91:c5:49:dc:74:2b:9e: 62:6f:7b:30:18:6e:35:e1:93:86:dc:e6:58:53:4a:fc:2c:61: ab:6a:a2:35 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOfEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2NTBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDNBRjgyMzBFNDczNjM3 MDJGM0I4RjhFNTQ4QThGRUU5OEJBOTczNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEKnGxIVAvh8WqDFRoKLb32GMHUwcxVKuXgxRBNJqrXWSfkIMy 7HVh5iFkuq455YYNBB37rNOjXLe2ln0N+Nh0kldEO6QpdBDbUSjZG//mhCEL5WBt MHwpyYYmsBRBDa4tqxqpun3eRhPKIDQkW9uASFxXoe6+ZYNUVpeKaTFgYCIye0Ta 3eKosYPx+2SGey5gsc6m80tWBEZInZQ6KcXfdT5gSnxJ75ZJpxIgpvuKrn223hpP xoAf7MmLLMDtsLzVUE5zyvnHHQwhamkEsPgXiF6OYh4N9vJ3D3FMmnkNtehC8nZK Fc/kjFkkxdJqzR1jb1kPZSuYidQHrU1Wc1q7AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUOvgjDkc2NwLzuPjlSKj+6Yupc3kwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL092Z2pEa2MyTndMenVQamxT S2otNll1cGMzay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wkAwDQYJKoZIhvcNAQELBQADggEBAAfJetKnBLcL7I9TezYFIcvMN6P6Du+i0G3O lDfPLENI/1o/Hi1WuoAJdllPnsEeapVJvyGBLRqX2bONNjY6u/nsr+g1xoRRu2AS Lwe6RCYraJIE8gByMoVRpF8xRGXdYTDy/gZS+4Oi4ceink4Q5Am5zYzQC70XY6Pm HTBhW+vyVtW+t7MGJ7p5I6wf2fje50WXuCVajvIwXHxpEvVRYf9427DWVf0Y7Efa a67rULM0TfzHim+hBBRyo0Y8UtJt5Bz8FYH3xOXVo92XzLg/Gw9joEe7m8xfDh2V I7YP4hebNPtZkcVJ3HQrnmJvezAYbjXhk4bc5lhTSvwsYatqojU= -----END CERTIFICATE-----Generated at Sun Aug 24 07:23:17 2025 by rpki-client