$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/loROvOxH55Lq741gCOPonICQouw.roa File: loROvOxH55Lq741gCOPonICQouw.roa (raw, json) Hash identifier: Q3OBHq1VV/pkFovqrJgQ9P/8AKlDIQS5rCfsakYXZeE= Subject key identifier: 96:84:4E:BC:EC:47:E7:92:EA:EF:8D:60:08:E3:E8:9C:80:90:A2:EC Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 38C1 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/loROvOxH55Lq741gCOPonICQouw.roa Signing time: Fri 22 Aug 2025 08:45:35 +0000 ROA not before: Fri 22 Aug 2025 08:45:35 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.195.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14529 (0x38c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:35 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=96844EBCEC47E792EAEF8D6008E3E89C8090A2EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:24:33:4d:37:44:84:ee:1a:51:2b:32:c2:da: 04:7d:08:f1:df:3a:2e:d2:54:3d:d8:83:7c:0a:aa: d2:47:2b:ae:c4:5a:78:7c:50:f7:de:b7:ae:af:0b: f1:cb:bc:5d:bf:68:b3:35:10:df:f5:b5:14:57:1e: 08:0a:8b:75:b3:bd:b4:2b:5e:2b:b0:74:ad:93:d2: 41:fe:99:7a:56:49:2a:27:3f:c5:e0:5e:e3:5b:c6: 78:aa:2a:ab:fb:56:00:6d:90:8b:72:3b:c7:f9:9a: 0a:e5:39:2e:3a:81:c8:7d:2b:2d:90:3a:96:21:04: 8f:d9:54:b9:c8:7c:f9:92:38:6f:44:e8:4f:12:78: 9b:ce:3d:af:b4:0b:f6:87:96:5a:aa:cd:53:2b:8d: 02:e2:ba:f5:ce:48:26:2c:d6:12:21:21:4b:f0:d3: 81:bd:4e:ee:08:ca:27:72:92:6b:14:85:99:b1:97: 2d:bf:35:41:e7:2c:8a:f0:87:d4:98:cd:54:20:42: 81:16:3a:1d:ca:aa:0d:b1:d9:c6:ef:95:c4:5c:31: b0:d2:33:4a:45:9f:92:03:5d:91:2f:82:84:cd:a6: 32:d6:c8:ef:34:d8:ef:8f:47:67:74:61:69:5f:8f: af:a2:21:ff:af:fc:4e:f2:9e:8d:36:83:95:c5:69: dc:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:84:4E:BC:EC:47:E7:92:EA:EF:8D:60:08:E3:E8:9C:80:90:A2:EC X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/loROvOxH55Lq741gCOPonICQouw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.238.0/24 Signature Algorithm: sha256WithRSAEncryption a8:89:e1:cd:ae:0f:07:c5:84:c2:17:81:95:8f:a8:e7:c4:8a: 8c:1c:17:c7:9d:d3:72:e0:84:97:93:78:a4:4e:24:b6:2f:80: 1b:45:d3:32:c8:8d:56:fb:90:2c:d6:c3:10:cd:89:dc:e8:04: f2:79:b3:f3:02:27:55:6c:89:32:27:06:ac:71:8d:3a:6b:4c: f4:7a:50:67:f7:76:75:93:ce:e8:51:3e:f0:2e:e8:9c:3e:66: c4:37:85:be:5b:fe:70:87:f0:ab:fb:a4:31:8f:ff:f2:24:d7: 0c:5d:fa:f8:33:bf:68:fa:82:40:c4:ee:ee:51:90:0c:01:09: 03:51:51:d7:40:a9:41:de:e2:13:cb:fc:8e:d2:e9:b9:fe:95: 70:5f:ab:78:05:30:94:f6:94:01:01:d5:7e:80:df:a6:f5:ff: 57:46:eb:8b:0e:3b:c0:17:e2:08:e6:de:79:00:ec:b6:a7:b8: f1:e2:51:b8:5d:22:27:a1:17:f6:55:34:7f:39:41:90:37:d2: d4:6d:7b:01:e2:57:eb:74:61:22:5b:0a:c9:b5:87:cd:f3:77: f7:e0:2c:18:04:fb:ac:9f:80:67:1b:b7:25:79:c4:f5:31:19: 16:9a:09:48:a8:bf:70:1b:c5:43:03:91:d3:2c:d7:4e:8e:50: 48:80:34:20 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOMEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1MzVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDk2ODQ0RUJDRUM0N0U3 OTJFQUVGOEQ2MDA4RTNFODlDODA5MEEyRUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdJDNNN0SE7hpRKzLC2gR9CPHfOi7SVD3Yg3wKqtJHK67EWnh8 UPfet66vC/HLvF2/aLM1EN/1tRRXHggKi3WzvbQrXiuwdK2T0kH+mXpWSSonP8Xg XuNbxniqKqv7VgBtkItyO8f5mgrlOS46gch9Ky2QOpYhBI/ZVLnIfPmSOG9E6E8S eJvOPa+0C/aHllqqzVMrjQLiuvXOSCYs1hIhIUvw04G9Tu4IyidykmsUhZmxly2/ NUHnLIrwh9SYzVQgQoEWOh3Kqg2x2cbvlcRcMbDSM0pFn5IDXZEvgoTNpjLWyO80 2O+PR2d0YWlfj6+iIf+v/E7yno02g5XFadztAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUloROvOxH55Lq741gCOPonICQouwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2xvUk92T3hINTVMcTc0MWdD T1BvbklDUW91dy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7 w+4wDQYJKoZIhvcNAQELBQADggEBAKiJ4c2uDwfFhMIXgZWPqOfEiowcF8ed03Lg hJeTeKROJLYvgBtF0zLIjVb7kCzWwxDNidzoBPJ5s/MCJ1VsiTInBqxxjTprTPR6 UGf3dnWTzuhRPvAu6Jw+ZsQ3hb5b/nCH8Kv7pDGP//Ik1wxd+vgzv2j6gkDE7u5R kAwBCQNRUddAqUHe4hPL/I7S6bn+lXBfq3gFMJT2lAEB1X6A36b1/1dG64sOO8AX 4gjm3nkA7LanuPHiUbhdIiehF/ZVNH85QZA30tRtewHiV+t0YSJbCsm1h83zd/fg LBgE+6yfgGcbtyV5xPUxGRaaCUiov3AbxUMDkdMs106OUEiANCA= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:50 2025 by rpki-client