$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/obQl4kso3PH2p7Mw0DUHxVJEXVk.roa File: obQl4kso3PH2p7Mw0DUHxVJEXVk.roa (raw, json) Hash identifier: FlCpRAf3aAh3smRkwiBBrTdG2dmsQlJS5n/rCaiOG04= Subject key identifier: A1:B4:25:E2:4B:28:DC:F1:F6:A7:B3:30:D0:35:07:C5:52:44:5D:59 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3A1E Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/obQl4kso3PH2p7Mw0DUHxVJEXVk.roa Signing time: Fri 22 Aug 2025 08:47:02 +0000 ROA not before: Fri 22 Aug 2025 08:47:02 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.193.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14878 (0x3a1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:02 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=A1B425E24B28DCF1F6A7B330D03507C552445D59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:23:c4:39:5f:1e:89:a0:bf:8f:8e:4c:dd:78: eb:45:21:c2:50:72:02:a0:9d:9d:81:a8:7f:bc:de: 83:db:aa:8e:e0:b8:85:c2:03:47:e9:ac:c0:f2:60: e2:0c:5e:f5:72:ab:e3:7f:80:56:3d:ce:c9:35:47: 5e:95:30:40:9a:68:17:78:ee:1e:cf:c2:a0:c3:91: 05:d8:a9:c6:c3:ac:9d:b7:4d:22:d8:26:34:79:c3: 2c:c3:78:94:e4:01:58:a6:7b:07:06:18:29:ea:32: 98:39:88:38:3a:d3:c1:3c:d5:b5:4f:b8:cf:69:eb: 23:64:b9:06:ef:da:c6:33:8f:3b:5c:9e:67:d8:c1: 60:12:e4:e7:98:ea:93:f7:63:1f:4c:2d:79:c5:7a: e9:bb:9f:99:9a:a3:ba:ea:d1:a9:da:35:b4:a6:17: 7a:11:da:ef:1b:e4:1e:a1:16:29:f9:b4:74:1d:3d: 58:d6:11:3d:04:df:e7:9c:81:c1:6d:87:65:81:80: b6:2a:df:41:27:94:72:e6:a8:df:3a:1a:0d:8b:0c: 57:7f:da:50:db:91:b0:db:c5:77:26:38:a1:c8:27: 85:06:26:f4:91:85:80:bd:01:78:f5:79:98:77:df: 72:94:20:1b:64:7b:2e:2a:af:9d:04:4f:b2:02:0e: 54:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:B4:25:E2:4B:28:DC:F1:F6:A7:B3:30:D0:35:07:C5:52:44:5D:59 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/obQl4kso3PH2p7Mw0DUHxVJEXVk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.0.0/21 Signature Algorithm: sha256WithRSAEncryption 57:27:48:19:05:53:c9:ff:47:9e:23:7b:43:f3:a0:97:13:0e: 8d:a6:c2:80:9d:ff:5f:1a:b0:50:54:48:ff:41:6c:b6:ea:c0: 65:52:08:65:ba:44:e8:cf:6a:3b:6d:10:83:84:79:9b:33:37: 2b:06:8a:4d:ec:9d:27:88:82:c3:9c:d4:62:84:48:86:d2:47: b4:c1:0b:43:fd:bc:03:d1:96:41:cc:da:de:49:1c:dc:ea:c9: d2:8a:c4:15:49:d2:0f:d9:89:c2:06:cb:77:ea:f4:56:6b:e0: 5a:f5:61:3e:8c:de:60:6e:67:fc:6c:00:9e:1d:db:d9:38:a3: 5c:c0:72:da:95:ca:2a:ec:9d:c9:42:9d:30:e0:1a:9b:39:84: 67:98:d3:03:05:22:fc:d8:55:f3:52:03:3a:76:78:2e:3c:ee: 49:43:1e:f7:53:b5:54:84:a0:93:5e:85:e4:12:f1:7e:90:d0: 00:ec:c5:0b:f8:87:52:a6:13:90:6d:6f:a7:ec:4f:21:8d:eb: e9:98:1f:c9:90:6e:89:5e:dd:81:70:3b:36:a7:a5:3d:25:a5: 6c:3e:f2:f7:61:b5:52:fa:8c:a9:5b:8d:c5:6d:c4:2c:41:60: 38:b6:c5:9e:ec:4a:58:1b:80:58:6e:a5:2b:ac:61:f5:07:f4: 79:88:32:d9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOh4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3MDJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEExQjQyNUUyNEIyOERD RjFGNkE3QjMzMEQwMzUwN0M1NTI0NDVENTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDI8Q5Xx6JoL+PjkzdeOtFIcJQcgKgnZ2BqH+83oPbqo7guIXC A0fprMDyYOIMXvVyq+N/gFY9zsk1R16VMECaaBd47h7PwqDDkQXYqcbDrJ23TSLY JjR5wyzDeJTkAVimewcGGCnqMpg5iDg608E81bVPuM9p6yNkuQbv2sYzjztcnmfY wWAS5OeY6pP3Yx9MLXnFeum7n5mao7rq0anaNbSmF3oR2u8b5B6hFin5tHQdPVjW ET0E3+ecgcFth2WBgLYq30EnlHLmqN86Gg2LDFd/2lDbkbDbxXcmOKHIJ4UGJvSR hYC9AXj1eZh333KUIBtkey4qr50ET7ICDlRfAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUobQl4kso3PH2p7Mw0DUHxVJEXVkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL29iUWw0a3NvM1BIMnA3TXcw RFVIeFZKRVhWay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wQAwDQYJKoZIhvcNAQELBQADggEBAFcnSBkFU8n/R54je0PzoJcTDo2mwoCd/18a sFBUSP9BbLbqwGVSCGW6ROjPajttEIOEeZszNysGik3snSeIgsOc1GKESIbSR7TB C0P9vAPRlkHM2t5JHNzqydKKxBVJ0g/ZicIGy3fq9FZr4Fr1YT6M3mBuZ/xsAJ4d 29k4o1zActqVyirsnclCnTDgGps5hGeY0wMFIvzYVfNSAzp2eC487klDHvdTtVSE oJNeheQS8X6Q0ADsxQv4h1KmE5Btb6fsTyGN6+mYH8mQbole3YFwOzanpT0lpWw+ 8vdhtVL6jKlbjcVtxCxBYDi2xZ7sSlgbgFhupSusYfUH9HmIMtk= -----END CERTIFICATE-----Generated at Sun Aug 24 07:32:00 2025 by rpki-client