$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aBaDibCRMQjBqaZNb_ri-hDq3Cg.roa File: aBaDibCRMQjBqaZNb_ri-hDq3Cg.roa (raw, json) Hash identifier: bR2PU9pFaOw5HLCyk6oXATwCQkhhcZuxeJp1CIPjOxI= Subject key identifier: 68:16:83:89:B0:91:31:08:C1:A9:A6:4D:6F:FA:E2:FA:10:EA:DC:28 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3AB4 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aBaDibCRMQjBqaZNb_ri-hDq3Cg.roa Signing time: Fri 22 Aug 2025 08:47:40 +0000 ROA not before: Fri 22 Aug 2025 08:47:40 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9924 IP address blocks: 123.195.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15028 (0x3ab4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:40 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=68168389B0913108C1A9A64D6FFAE2FA10EADC28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6c:f1:2f:d6:14:30:98:a3:a0:56:8a:06:fe: b9:69:be:f2:f5:02:cc:3d:6b:1f:ba:61:64:b8:9c: 20:88:80:04:f2:15:35:17:e9:ed:0d:58:3f:50:69: 12:f3:9e:40:0e:48:d4:1f:75:d4:88:88:2f:5e:85: ed:0b:f7:e3:6c:f7:d7:da:1b:e9:a0:49:2a:9b:a6: 1a:06:e2:f2:dd:74:fe:c2:06:95:75:c9:99:d6:59: f0:e9:f6:bf:c2:8b:9b:ac:e6:5d:2d:a6:38:56:69: 77:43:28:d9:68:73:f0:54:0b:af:4e:c3:68:bd:74: 61:f4:30:01:bd:e7:b0:e5:4e:2f:33:dd:35:bd:28: 5c:24:26:52:62:ef:be:e0:30:1d:48:92:97:da:e2: 72:66:0a:fb:10:5d:18:fd:80:35:77:bf:4a:81:26: 28:15:12:94:0a:78:aa:32:24:91:20:9f:87:8e:c2: 82:15:02:9e:c2:b3:86:06:f1:17:2b:f2:f1:fe:4b: 90:ac:11:b7:72:08:b8:87:85:ad:2c:c5:97:6c:8a: f3:c2:bb:94:e1:62:c6:19:d6:91:b2:ba:4d:1f:8a: 76:1d:f4:15:62:46:39:32:cb:7c:81:dd:e4:7b:06: 82:f4:df:89:b8:34:e6:be:94:1f:3f:d2:a8:8e:b5: 65:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:16:83:89:B0:91:31:08:C1:A9:A6:4D:6F:FA:E2:FA:10:EA:DC:28 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aBaDibCRMQjBqaZNb_ri-hDq3Cg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.52.0/22 Signature Algorithm: sha256WithRSAEncryption 96:cd:36:ac:a9:1b:26:1a:29:d6:e8:7e:7f:3b:98:3a:58:bd: 98:b4:6e:33:e7:ec:85:8b:5f:d7:fa:d1:fb:13:b9:aa:ba:b2: 2d:27:8c:ba:ff:f7:63:8f:8a:5e:b5:26:f0:cb:44:b8:85:f6: eb:c7:fd:0c:d0:de:82:60:be:ff:49:99:5a:be:18:99:2c:df: 73:2c:31:11:cb:7a:d1:28:39:68:98:59:66:a4:db:23:0a:36: 02:98:a4:b1:fc:bd:ae:9f:47:35:50:1c:83:98:8e:d9:5b:69: 34:8e:d9:9a:b3:9b:ee:08:0b:32:56:f4:b2:11:35:3b:7c:a5: e0:4a:2f:07:34:43:d4:3c:9e:05:1f:59:49:1d:bf:82:0d:ba: ad:10:8e:a3:3c:3c:aa:b8:8b:6e:8c:ba:44:11:18:91:7e:0b: 10:ae:f6:f0:13:0d:33:32:a5:a6:f3:cf:f3:d5:87:e4:58:a8: da:63:fd:4e:df:4d:a0:6c:8f:0b:76:f9:84:50:dc:08:da:a4: 23:f2:80:82:8a:c9:67:fc:eb:66:a4:4d:08:40:ac:52:c9:ce: a1:14:df:86:62:af:ee:6d:16:87:05:ad:e2:99:86:b5:f3:3d: d5:7f:45:79:3f:9b:2e:64:36:30:3e:d8:38:e8:78:6b:73:d4: 18:27:d6:21 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOrQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3NDBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDY4MTY4Mzg5QjA5MTMx MDhDMUE5QTY0RDZGRkFFMkZBMTBFQURDMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQbPEv1hQwmKOgVooG/rlpvvL1Asw9ax+6YWS4nCCIgATyFTUX 6e0NWD9QaRLznkAOSNQfddSIiC9ehe0L9+Ns99faG+mgSSqbphoG4vLddP7CBpV1 yZnWWfDp9r/Ci5us5l0tpjhWaXdDKNloc/BUC69Ow2i9dGH0MAG957DlTi8z3TW9 KFwkJlJi777gMB1Ikpfa4nJmCvsQXRj9gDV3v0qBJigVEpQKeKoyJJEgn4eOwoIV Ap7Cs4YG8Rcr8vH+S5CsEbdyCLiHha0sxZdsivPCu5ThYsYZ1pGyuk0finYd9BVi Rjkyy3yB3eR7BoL034m4NOa+lB8/0qiOtWV3AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUaBaDibCRMQjBqaZNb/ri+hDq3CgwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2FCYURpYkNSTVFqQnFhWk5i X3JpLWhEcTNDZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wzQwDQYJKoZIhvcNAQELBQADggEBAJbNNqypGyYaKdbofn87mDpYvZi0bjPn7IWL X9f60fsTuaq6si0njLr/92OPil61JvDLRLiF9uvH/QzQ3oJgvv9JmVq+GJks33Ms MRHLetEoOWiYWWak2yMKNgKYpLH8va6fRzVQHIOYjtlbaTSO2Zqzm+4ICzJW9LIR NTt8peBKLwc0Q9Q8ngUfWUkdv4INuq0QjqM8PKq4i26MukQRGJF+CxCu9vATDTMy pabzz/PVh+RYqNpj/U7fTaBsjwt2+YRQ3AjapCPygIKKyWf862akTQhArFLJzqEU 34Zir+5tFocFreKZhrXzPdV/RXk/my5kNjA+2DjoeGtz1Bgn1iE= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:34 2025 by rpki-client