$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aOCwePqBIWSgSl_ajwnZzFvs7bc.roa File: aOCwePqBIWSgSl_ajwnZzFvs7bc.roa (raw, json) Hash identifier: NIIcSuVdItOCsNdXFfLXfFmVTFSIQoWdfjqWjBe+dXM= Subject key identifier: 68:E0:B0:78:FA:81:21:64:A0:4A:5F:DA:8F:09:D9:CC:5B:EC:ED:B7 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3955 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aOCwePqBIWSgSl_ajwnZzFvs7bc.roa Signing time: Fri 22 Aug 2025 08:46:11 +0000 ROA not before: Fri 22 Aug 2025 08:46:11 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.193.208.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14677 (0x3955) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:11 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=68E0B078FA812164A04A5FDA8F09D9CC5BECEDB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:53:41:93:be:1b:9a:95:ae:44:a9:a4:b5:65: 55:89:02:b6:68:53:f5:09:af:7c:53:6b:89:15:08: 6e:b0:66:c8:cf:56:c0:b0:3b:21:92:97:ff:06:85: 1f:e9:0b:e1:af:80:c7:fb:d1:b8:ea:eb:7c:77:59: f8:56:79:f0:af:14:96:cf:b2:e0:c7:7f:d3:61:7b: 15:bf:51:69:08:fb:22:cd:11:6f:9a:5a:b2:55:04: 44:c1:bd:05:aa:49:1b:8d:ab:32:fb:ef:21:5b:6c: eb:66:0f:12:0e:5e:08:b4:b3:13:a2:e2:0f:cf:b1: f7:70:e8:a1:ed:a2:dc:b8:ea:6d:cf:0d:b0:88:8c: 09:29:a8:2b:0e:40:3b:e1:68:f4:46:df:a1:d5:9d: 2e:bf:a5:6d:b3:5e:e7:ab:8d:e1:ca:62:33:19:aa: e8:58:b1:30:3c:e4:53:1e:b8:d4:59:e0:53:6e:0e: ea:eb:cd:38:5b:38:3f:4a:4d:e6:fe:37:f3:87:0c: e8:36:31:d3:19:d7:25:fa:d6:14:89:3c:13:96:52: b4:94:ef:bb:74:3b:da:b2:f7:a8:d4:aa:61:19:1c: 59:5b:e9:f0:63:93:8c:0c:89:61:6a:bd:80:dc:95: d4:78:c2:46:58:67:c4:f7:08:e4:e4:54:f9:24:81: 0d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:E0:B0:78:FA:81:21:64:A0:4A:5F:DA:8F:09:D9:CC:5B:EC:ED:B7 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aOCwePqBIWSgSl_ajwnZzFvs7bc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.208.0/21 Signature Algorithm: sha256WithRSAEncryption 00:c3:53:37:0a:dd:80:ca:25:c9:da:cb:65:60:f5:d0:62:b5: 1c:cc:3b:72:11:32:ca:b3:40:12:09:7e:0e:e1:79:df:7a:69: 87:1b:36:21:3e:a7:95:9a:80:dc:be:75:16:7d:54:2f:c2:7d: da:03:02:08:97:c6:bf:d1:b9:b1:c3:a1:3f:ef:db:e5:2f:70: 4c:ef:e5:3f:11:08:4a:01:19:c9:46:7f:c9:e6:14:0e:9c:ec: d7:f3:57:35:bf:d5:a3:ce:c2:89:e8:d7:ca:56:30:5b:f2:16: bd:6c:87:ff:a2:f9:f7:64:3e:e2:a5:35:ca:ca:12:1e:2c:47: 40:04:25:23:a5:b5:d6:d9:46:02:d6:e0:73:98:23:52:3d:56: 9d:d4:0b:28:60:f5:61:7e:c7:c2:32:81:80:5d:f9:e8:45:ef: ea:16:05:f4:5e:33:91:60:f7:dd:ac:ea:7e:6d:29:de:01:05: 00:ad:db:d0:61:3f:15:04:d9:cd:98:9b:3a:16:cb:6f:05:bb: e3:be:f8:19:59:6a:4c:70:c1:ea:de:2c:38:65:ce:9b:27:66: a4:ff:57:80:20:5d:54:74:0b:cc:1c:58:c5:99:34:81:f9:35: 0d:c3:91:64:46:f5:9e:17:73:06:82:09:d0:4a:ed:70:5b:5b: 8c:15:98:33 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOVUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2MTFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDY4RTBCMDc4RkE4MTIx NjRBMDRBNUZEQThGMDlEOUNDNUJFQ0VEQjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD5U0GTvhuala5EqaS1ZVWJArZoU/UJr3xTa4kVCG6wZsjPVsCw OyGSl/8GhR/pC+GvgMf70bjq63x3WfhWefCvFJbPsuDHf9NhexW/UWkI+yLNEW+a WrJVBETBvQWqSRuNqzL77yFbbOtmDxIOXgi0sxOi4g/Psfdw6KHtoty46m3PDbCI jAkpqCsOQDvhaPRG36HVnS6/pW2zXuerjeHKYjMZquhYsTA85FMeuNRZ4FNuDurr zThbOD9KTeb+N/OHDOg2MdMZ1yX61hSJPBOWUrSU77t0O9qy96jUqmEZHFlb6fBj k4wMiWFqvYDcldR4wkZYZ8T3COTkVPkkgQ0xAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUaOCwePqBIWSgSl/ajwnZzFvs7bcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2FPQ3dlUHFCSVdTZ1NsX2Fq d25aekZ2czdiYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wdAwDQYJKoZIhvcNAQELBQADggEBAADDUzcK3YDKJcnay2Vg9dBitRzMO3IRMsqz QBIJfg7hed96aYcbNiE+p5WagNy+dRZ9VC/CfdoDAgiXxr/RubHDoT/v2+UvcEzv 5T8RCEoBGclGf8nmFA6c7NfzVzW/1aPOwono18pWMFvyFr1sh/+i+fdkPuKlNcrK Eh4sR0AEJSOltdbZRgLW4HOYI1I9Vp3UCyhg9WF+x8IygYBd+ehF7+oWBfReM5Fg 992s6n5tKd4BBQCt29BhPxUE2c2YmzoWy28Fu+O++BlZakxwwereLDhlzpsnZqT/ V4AgXVR0C8wcWMWZNIH5NQ3DkWRG9Z4XcwaCCdBK7XBbW4wVmDM= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:37 2025 by rpki-client