$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oMBHQ--ZhmHNZR4zFX6LRHfBUls.roa File: oMBHQ--ZhmHNZR4zFX6LRHfBUls.roa (raw, json) Hash identifier: fkOaYDgXkki+hqAKWqhH+Jh95Z87x/fJopqVfdguNeU= Subject key identifier: A0:C0:47:43:EF:99:86:61:CD:65:1E:33:15:7E:8B:44:77:C1:52:5B Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 398C Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oMBHQ--ZhmHNZR4zFX6LRHfBUls.roa Signing time: Fri 22 Aug 2025 08:46:24 +0000 ROA not before: Fri 22 Aug 2025 08:46:24 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.195.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14732 (0x398c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:24 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=A0C04743EF998661CD651E33157E8B4477C1525B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:02:ef:66:a3:09:6c:33:0f:d1:72:1c:86:3b: c8:cf:d7:93:9b:62:6f:c9:ef:fb:91:4c:56:57:d5: 46:76:a3:c4:59:1f:4b:b9:f5:07:83:6e:8c:96:e3: 38:fd:01:4b:df:5f:de:23:a6:cf:c7:05:9a:47:69: f4:db:6d:91:a7:db:61:53:5d:2a:7f:e9:3d:6b:cf: 5e:ea:12:d5:73:47:d8:29:ca:84:45:b8:5c:c4:79: 40:5e:f4:15:e4:d1:30:54:55:6d:ae:fb:ea:1a:0d: 74:b7:e1:44:ac:1d:02:80:91:a5:99:24:a6:dc:6d: 72:d2:a3:e3:bf:bc:c0:db:eb:4d:4d:52:65:ed:65: dc:4c:10:f9:0f:e0:67:1b:c8:38:e8:73:c7:a8:bb: 80:5a:6a:55:eb:8f:b4:ec:e1:bf:79:d7:e7:bd:b3: 4e:76:10:a6:ab:e8:2b:44:de:ef:37:a7:ad:b8:f7: ea:ff:98:d6:95:ec:ff:00:ba:a1:af:73:f6:fb:b9: 3d:59:9b:a7:a8:78:fe:54:54:f0:17:10:a0:2e:64: 57:e5:94:cd:ff:df:46:9c:0c:75:12:36:8c:12:a9: af:f3:09:3d:ce:14:59:a8:f5:61:6d:5c:fa:74:a3: 99:95:37:a9:e5:04:23:c1:d6:54:fc:64:94:9e:e9: 31:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:C0:47:43:EF:99:86:61:CD:65:1E:33:15:7E:8B:44:77:C1:52:5B X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oMBHQ--ZhmHNZR4zFX6LRHfBUls.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.112.0/22 Signature Algorithm: sha256WithRSAEncryption 8d:11:c7:8e:92:a2:c0:db:dd:71:9f:39:b8:be:97:d3:dd:27: 73:01:b7:a8:02:85:3c:ba:02:ec:93:8f:c6:af:8c:e4:38:d7: 80:c4:98:66:23:1a:e7:dc:85:05:fb:a0:73:ac:1e:0c:6d:fe: 79:bb:20:44:26:1b:81:8e:73:43:aa:a0:7d:3c:21:6f:6b:6f: 45:d6:84:af:4d:fc:ed:20:5e:b1:9b:65:d9:e4:86:a0:5e:30: 0c:f6:f6:90:57:d7:08:d2:5f:03:c9:16:b7:eb:5d:64:cc:16: f2:ce:7e:a5:83:7e:0f:30:c9:46:63:eb:21:ce:67:e0:60:da: e7:aa:73:6e:28:49:a6:34:e1:21:b3:af:bf:a9:ee:cd:41:84: 52:a9:4d:79:f5:b1:bd:91:7d:6b:b7:b1:f7:34:12:c4:f6:9a: ab:c9:ad:6c:d9:bd:bf:62:fb:c8:32:4c:53:d4:e4:f0:d9:c2: 0d:98:c4:9b:fa:45:4e:9d:da:d3:4e:26:c9:4f:a3:f0:49:d4: a3:bb:24:af:60:5a:69:c2:f5:ba:70:aa:0b:65:73:b6:f1:68: 57:f8:44:9e:45:4d:12:c1:47:aa:89:33:62:27:ad:c3:ce:df: df:af:ac:6d:d7:bd:6a:89:38:51:58:92:c3:42:9f:98:7b:57: a6:38:f2:84 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOYwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2MjRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEEwQzA0NzQzRUY5OTg2 NjFDRDY1MUUzMzE1N0U4QjQ0NzdDMTUyNUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD3Au9mowlsMw/RchyGO8jP15ObYm/J7/uRTFZX1UZ2o8RZH0u5 9QeDboyW4zj9AUvfX94jps/HBZpHafTbbZGn22FTXSp/6T1rz17qEtVzR9gpyoRF uFzEeUBe9BXk0TBUVW2u++oaDXS34USsHQKAkaWZJKbcbXLSo+O/vMDb601NUmXt ZdxMEPkP4GcbyDjoc8eou4BaalXrj7Ts4b951+e9s052EKar6CtE3u83p6249+r/ mNaV7P8AuqGvc/b7uT1Zm6eoeP5UVPAXEKAuZFfllM3/30acDHUSNowSqa/zCT3O FFmo9WFtXPp0o5mVN6nlBCPB1lT8ZJSe6TG/AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUoMBHQ++ZhmHNZR4zFX6LRHfBUlswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL29NQkhRLS1aaG1ITlpSNHpG WDZMUkhmQlVscy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 w3AwDQYJKoZIhvcNAQELBQADggEBAI0Rx46SosDb3XGfObi+l9PdJ3MBt6gChTy6 AuyTj8avjOQ414DEmGYjGufchQX7oHOsHgxt/nm7IEQmG4GOc0OqoH08IW9rb0XW hK9N/O0gXrGbZdnkhqBeMAz29pBX1wjSXwPJFrfrXWTMFvLOfqWDfg8wyUZj6yHO Z+Bg2ueqc24oSaY04SGzr7+p7s1BhFKpTXn1sb2RfWu3sfc0EsT2mqvJrWzZvb9i +8gyTFPU5PDZwg2YxJv6RU6d2tNOJslPo/BJ1KO7JK9gWmnC9bpwqgtlc7bxaFf4 RJ5FTRLBR6qJM2InrcPO39+vrG3XvWqJOFFYksNCn5h7V6Y48oQ= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:54 2025 by rpki-client