$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/S_4ozCs_srMBnww87PI_-s3tWNY.roa File: S_4ozCs_srMBnww87PI_-s3tWNY.roa (raw, json) Hash identifier: kzUqLHe4878/+i+RDCgompuFX7vT1zNLVX06Xvc/k6o= Subject key identifier: 4B:FE:28:CC:2B:3F:B2:B3:01:9F:0C:3C:EC:F2:3F:FA:CD:ED:58:D6 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 38DA Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/S_4ozCs_srMBnww87PI_-s3tWNY.roa Signing time: Fri 22 Aug 2025 08:45:42 +0000 ROA not before: Fri 22 Aug 2025 08:45:42 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.195.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14554 (0x38da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:42 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=4BFE28CC2B3FB2B3019F0C3CECF23FFACDED58D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:17:eb:03:87:8a:5d:4a:22:c9:8c:9e:7d:50: 18:4f:d5:80:e8:c6:04:63:dd:95:4d:5c:66:77:16: d9:f2:ca:17:6e:60:9d:37:22:48:2a:4b:c8:2e:1a: c3:a4:fe:b1:30:f2:b9:e1:20:82:34:c7:2c:55:8d: f0:8e:3c:8e:36:56:6f:03:d8:30:cb:57:c0:6a:0d: 6a:86:e7:44:66:f6:bf:c4:58:f7:61:b7:c6:04:d4: a6:2b:f5:0d:f5:36:1f:1a:0f:12:34:2c:5a:32:59: a4:bc:59:f9:3d:6c:f1:e5:a1:c2:06:68:13:96:71: 66:13:a9:6c:f8:72:06:4f:f0:51:ac:6c:c1:90:a6: f8:2a:14:da:f8:23:c7:e8:b9:16:74:f2:ea:ff:fc: 5c:b1:1f:0a:28:01:01:a3:ea:c9:32:e6:d3:b6:92: 30:19:c7:01:cb:73:30:c2:09:cc:a9:b9:b4:05:60: e1:ca:53:44:a7:1b:b4:da:00:ab:72:0b:b2:ee:f6: c5:6a:90:f0:74:8b:d5:ee:39:99:c9:07:17:a1:82: d9:ab:c0:2f:98:7a:ac:fa:9e:64:be:22:df:d6:66: 8c:9b:ef:b1:03:a5:d0:cd:ad:a6:df:7f:4c:f7:57: d6:91:4f:50:0a:45:d9:51:ac:5e:14:b1:18:8d:d0: 40:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:FE:28:CC:2B:3F:B2:B3:01:9F:0C:3C:EC:F2:3F:FA:CD:ED:58:D6 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/S_4ozCs_srMBnww87PI_-s3tWNY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.8.0/22 Signature Algorithm: sha256WithRSAEncryption 24:a4:78:a9:32:75:42:6b:44:d3:1e:8c:77:81:22:18:c9:bb: ab:a1:21:cd:53:78:cd:44:d3:f6:43:34:99:0a:68:53:ca:8e: eb:2f:b8:95:bf:92:7d:d6:59:bd:b5:f0:ca:78:09:6e:6b:fb: be:ad:b1:f2:88:83:8c:16:d9:c7:7e:09:75:58:64:bd:e4:44: 37:03:5c:dc:1f:8a:33:32:67:e4:d4:95:fe:d8:5f:e2:76:00: db:40:19:a0:b5:d5:be:d2:94:7a:04:85:14:89:98:d3:d2:06: 06:5c:ad:ce:da:7b:ac:65:67:f3:4b:af:05:f5:07:9e:6d:a7: 93:48:86:81:f3:be:a0:7d:1c:71:b8:22:34:66:1c:ff:c3:4c: 24:f6:f8:24:b9:a8:6d:cb:c6:83:c0:75:20:cc:28:96:f4:ad: 4b:64:90:51:00:d2:d4:5a:0a:cf:3c:fa:e5:99:fc:e6:fe:77: 6f:b6:88:bc:e7:89:69:8e:2d:23:58:99:b1:1f:69:f9:4d:95: 80:f9:81:3d:47:7a:fd:1c:8a:10:c2:43:0f:c1:e9:55:4c:d7: 24:bc:63:77:99:32:50:98:b5:57:4f:84:6a:d8:05:28:7d:9a: fd:be:d5:d1:e8:8c:34:be:7d:7c:e2:bc:8a:b8:12:37:88:04: 63:f6:37:37 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICONowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1NDJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDRCRkUyOENDMkIzRkIy QjMwMTlGMEMzQ0VDRjIzRkZBQ0RFRDU4RDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4F+sDh4pdSiLJjJ59UBhP1YDoxgRj3ZVNXGZ3FtnyyhduYJ03 IkgqS8guGsOk/rEw8rnhIII0xyxVjfCOPI42Vm8D2DDLV8BqDWqG50Rm9r/EWPdh t8YE1KYr9Q31Nh8aDxI0LFoyWaS8Wfk9bPHlocIGaBOWcWYTqWz4cgZP8FGsbMGQ pvgqFNr4I8fouRZ08ur//FyxHwooAQGj6sky5tO2kjAZxwHLczDCCcypubQFYOHK U0SnG7TaAKtyC7Lu9sVqkPB0i9XuOZnJBxehgtmrwC+Yeqz6nmS+It/WZoyb77ED pdDNrabff0z3V9aRT1AKRdlRrF4UsRiN0EBvAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUS/4ozCs/srMBnww87PI/+s3tWNYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1NfNG96Q3Nfc3JNQm53dzg3 UElfLXMzdFdOWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wwgwDQYJKoZIhvcNAQELBQADggEBACSkeKkydUJrRNMejHeBIhjJu6uhIc1TeM1E 0/ZDNJkKaFPKjusvuJW/kn3WWb218Mp4CW5r+76tsfKIg4wW2cd+CXVYZL3kRDcD XNwfijMyZ+TUlf7YX+J2ANtAGaC11b7SlHoEhRSJmNPSBgZcrc7ae6xlZ/NLrwX1 B55tp5NIhoHzvqB9HHG4IjRmHP/DTCT2+CS5qG3LxoPAdSDMKJb0rUtkkFEA0tRa Cs88+uWZ/Ob+d2+2iLzniWmOLSNYmbEfaflNlYD5gT1Hev0cihDCQw/B6VVM1yS8 Y3eZMlCYtVdPhGrYBSh9mv2+1dHojDS+fXzivIq4EjeIBGP2Nzc= -----END CERTIFICATE-----Generated at Sun Aug 24 05:34:02 2025 by rpki-client