$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dB_gOgxOoyXxJoTeUvSsbWAnZpQ.roa File: dB_gOgxOoyXxJoTeUvSsbWAnZpQ.roa (raw, json) Hash identifier: H2wTHpwzMRt9+g93Jb5TjzTWELnYhj7mJBWEhoK5k0U= Subject key identifier: 74:1F:E0:3A:0C:4E:A3:25:F1:26:84:DE:52:F4:AC:6D:60:27:66:94 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3AB9 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dB_gOgxOoyXxJoTeUvSsbWAnZpQ.roa Signing time: Fri 22 Aug 2025 08:47:42 +0000 ROA not before: Fri 22 Aug 2025 08:47:42 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.194.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15033 (0x3ab9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:42 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=741FE03A0C4EA325F12684DE52F4AC6D60276694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d5:8e:cd:89:3a:dd:65:61:a0:d3:36:34:e0: f8:77:bf:f6:0b:08:69:c1:d0:8e:ec:18:e2:f0:9a: 45:2f:ad:0e:d4:9c:25:55:3f:6d:c8:88:b3:ed:01: 12:62:2c:89:0a:2f:f3:e5:39:5c:e0:2d:dc:0f:bd: 87:2e:5b:ff:30:7d:58:a5:28:16:0b:5c:17:66:24: 49:45:ef:f5:ed:33:2d:ee:d1:b8:56:cb:36:e7:59: b7:84:c0:1a:38:e4:32:bd:b4:e9:12:8e:a7:79:28: e1:46:2c:18:14:3f:cc:1a:65:3f:20:43:ee:e1:77: d7:0b:a7:92:d0:01:ef:f6:09:3f:bf:06:6c:0f:39: 95:6d:ee:c8:67:9a:98:93:ad:fa:21:e6:22:a5:a0: 95:d3:eb:ae:ab:d8:26:e8:03:ba:fa:91:4b:a1:52: 7f:53:20:7a:b3:7d:25:d8:32:5a:fc:fd:84:72:cc: 4d:88:2b:dc:68:a2:81:f8:92:b9:34:59:36:50:0b: b2:e4:74:b0:25:62:78:95:2a:fd:2e:28:e9:6c:cc: ec:a5:36:43:90:f6:01:83:7c:18:a7:f1:05:a7:99: cd:4f:3f:98:e6:a7:54:f4:b8:1e:e7:fa:2b:f0:82: 5b:2f:c2:ab:f3:97:33:28:b0:f0:f4:5f:ea:96:c0: 4a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:1F:E0:3A:0C:4E:A3:25:F1:26:84:DE:52:F4:AC:6D:60:27:66:94 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dB_gOgxOoyXxJoTeUvSsbWAnZpQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.0.0/21 Signature Algorithm: sha256WithRSAEncryption 8f:dd:86:27:2b:f0:a7:a5:25:8d:bd:70:12:18:9c:03:9f:d2: 9b:39:43:b5:0a:b9:7b:95:e4:89:4f:0f:8d:92:c9:44:46:f8: f1:48:a7:10:48:eb:7a:81:0c:f6:7a:d5:da:aa:8e:3e:99:c2: ba:f8:a4:a5:f3:3c:c4:73:97:86:af:87:db:83:94:d7:1d:59: d0:39:d3:2e:74:4f:d5:00:bd:52:b8:3b:4e:77:0c:1a:56:68: c9:d7:64:4a:8c:bc:78:f7:ae:7e:da:87:6b:92:e9:4a:be:82: b3:78:d3:7c:da:d4:7b:9d:f4:54:f0:59:b4:50:8b:3d:40:8a: e6:b2:1f:73:5c:3b:e4:0e:b7:4e:c4:4b:ca:93:34:53:ae:73: 8f:15:48:e1:aa:07:b6:85:b0:5e:6f:64:a9:27:95:0d:a0:09: c3:67:15:53:a2:f6:45:a7:76:56:38:ef:78:f3:21:a8:75:8a: 2e:c3:73:c0:28:31:a8:36:55:9f:da:bf:03:32:77:c0:85:70: 6e:35:5e:b6:2c:0a:86:3c:34:bf:89:d8:5b:04:81:c7:2e:5f: cf:1b:a3:a7:1c:bd:76:2b:3b:c0:ca:0d:af:ea:a1:c0:27:8b: 3b:8b:ec:70:01:93:54:0b:03:c8:f6:db:c2:46:5b:bd:84:11: bb:3e:b4:6d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOrkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3NDJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDc0MUZFMDNBMEM0RUEz MjVGMTI2ODRERTUyRjRBQzZENjAyNzY2OTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCv1Y7NiTrdZWGg0zY04Ph3v/YLCGnB0I7sGOLwmkUvrQ7UnCVV P23IiLPtARJiLIkKL/PlOVzgLdwPvYcuW/8wfVilKBYLXBdmJElF7/XtMy3u0bhW yzbnWbeEwBo45DK9tOkSjqd5KOFGLBgUP8waZT8gQ+7hd9cLp5LQAe/2CT+/BmwP OZVt7shnmpiTrfoh5iKloJXT666r2CboA7r6kUuhUn9TIHqzfSXYMlr8/YRyzE2I K9xoooH4krk0WTZQC7LkdLAlYniVKv0uKOlszOylNkOQ9gGDfBin8QWnmc1PP5jm p1T0uB7n+ivwglsvwqvzlzMosPD0X+qWwEqdAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUdB/gOgxOoyXxJoTeUvSsbWAnZpQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2RCX2dPZ3hPb3lYeEpvVGVV dlNzYldBblpwUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wgAwDQYJKoZIhvcNAQELBQADggEBAI/dhicr8KelJY29cBIYnAOf0ps5Q7UKuXuV 5IlPD42SyURG+PFIpxBI63qBDPZ61dqqjj6Zwrr4pKXzPMRzl4avh9uDlNcdWdA5 0y50T9UAvVK4O053DBpWaMnXZEqMvHj3rn7ah2uS6Uq+grN403za1Hud9FTwWbRQ iz1AiuayH3NcO+QOt07ES8qTNFOuc48VSOGqB7aFsF5vZKknlQ2gCcNnFVOi9kWn dlY473jzIah1ii7Dc8AoMag2VZ/avwMyd8CFcG41XrYsCoY8NL+J2FsEgccuX88b o6ccvXYrO8DKDa/qocAnizuL7HABk1QLA8j228JGW72EEbs+tG0= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:21 2025 by rpki-client