$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oyz39wuwLY3-0eQp9gWSavshcyg.roa File: oyz39wuwLY3-0eQp9gWSavshcyg.roa (raw, json) Hash identifier: N2TC42J0iWysBRbSmykbEtAodRZRURwNbI3S+k2p6f0= Subject key identifier: A3:2C:F7:F7:0B:B0:2D:8D:FE:D1:E4:29:F6:05:92:6A:FB:21:73:28 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3A94 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oyz39wuwLY3-0eQp9gWSavshcyg.roa Signing time: Fri 22 Aug 2025 08:47:31 +0000 ROA not before: Fri 22 Aug 2025 08:47:31 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.193.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14996 (0x3a94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:31 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=A32CF7F70BB02D8DFED1E429F605926AFB217328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b9:f5:fa:b1:04:5f:ee:77:01:4d:83:f6:03: c6:18:ee:14:01:18:ab:70:2c:3f:2c:b1:15:78:23: 6c:3f:70:a3:19:59:34:78:30:f4:2e:34:6a:97:80: 17:5c:45:fe:45:7a:ea:24:94:f9:f3:e7:92:8c:04: c6:9a:61:ed:43:81:d4:6d:1f:a0:f9:75:6a:d1:2d: 45:b7:e9:e9:ec:c8:69:2e:51:a3:18:4b:5e:63:1d: 8b:10:66:d9:e8:98:fa:ba:6d:c8:d4:e9:8b:b2:d2: 2f:53:5b:cc:42:5f:4f:c2:d8:27:94:1e:c0:ef:23: 77:63:80:d2:40:a5:53:1e:06:3e:6b:e0:7e:56:a1: b8:42:41:35:3b:e3:4e:41:fb:71:83:c0:3b:4c:8c: 8c:c8:4f:e0:6e:c2:f8:a0:1c:de:33:01:8d:1c:fb: 58:ec:1c:78:1f:e3:ac:cb:c6:a7:5b:c8:b8:16:d0: da:00:b9:70:17:9f:42:14:22:a3:96:68:9c:d8:9f: a7:53:24:33:90:6a:d3:7f:10:dc:b1:62:d7:e7:df: 95:6c:9b:85:b8:50:13:35:5e:2f:96:b3:ad:4f:ad: f0:e4:cf:ad:d0:07:9b:42:e6:5c:bb:92:b9:5a:88: bb:ac:25:ab:ac:a2:08:66:19:e4:ab:7d:39:f4:37: ec:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:2C:F7:F7:0B:B0:2D:8D:FE:D1:E4:29:F6:05:92:6A:FB:21:73:28 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oyz39wuwLY3-0eQp9gWSavshcyg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.64.0/21 Signature Algorithm: sha256WithRSAEncryption 4d:4c:19:4f:c9:2a:8d:ec:67:d0:0d:a9:2d:df:b7:71:e8:df: 5d:9b:8c:cf:38:6f:1f:64:50:e6:77:ec:af:b7:1e:b9:1d:ba: 28:1b:2a:8c:42:e9:c9:b1:8e:e6:9c:35:0c:6d:6f:a3:12:98: 62:ab:2b:7c:d3:37:5a:d0:4c:7b:7c:5b:ec:80:8a:3b:e5:89: 26:e5:c8:95:17:67:ad:bc:74:e9:1a:bf:ab:74:5f:ae:60:fc: b2:8d:13:a3:26:0f:91:1b:a2:58:13:ad:a4:b2:07:85:b3:fc: 23:43:f7:e1:b3:45:11:d5:0b:3e:62:67:7f:44:a0:aa:47:a2: b3:b9:3a:e1:49:07:1d:28:7c:ce:eb:c8:c2:74:b5:01:42:77: 59:02:21:33:47:dd:18:cf:7c:5b:65:4d:94:3f:a1:96:25:08: fa:de:42:ed:32:00:c8:8c:d0:24:47:cf:b6:5e:83:be:47:00: b4:c5:34:eb:80:10:3e:ab:e9:1f:ba:ef:7c:3f:b4:e8:e0:17: 30:e1:c1:c8:ae:ff:a2:34:b3:c9:8a:15:45:9d:87:c1:f2:d3: 58:1c:e5:b6:3e:ea:c5:44:e0:aa:11:b0:58:b8:b0:72:1e:b9: f6:3e:58:03:30:7c:31:4c:2a:ab:5a:58:f4:ad:9b:02:24:15: d3:c1:0d:1c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOpQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3MzFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEEzMkNGN0Y3MEJCMDJE OERGRUQxRTQyOUY2MDU5MjZBRkIyMTczMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBufX6sQRf7ncBTYP2A8YY7hQBGKtwLD8ssRV4I2w/cKMZWTR4 MPQuNGqXgBdcRf5FeuoklPnz55KMBMaaYe1DgdRtH6D5dWrRLUW36ensyGkuUaMY S15jHYsQZtnomPq6bcjU6Yuy0i9TW8xCX0/C2CeUHsDvI3djgNJApVMeBj5r4H5W obhCQTU7405B+3GDwDtMjIzIT+BuwvigHN4zAY0c+1jsHHgf46zLxqdbyLgW0NoA uXAXn0IUIqOWaJzYn6dTJDOQatN/ENyxYtfn35Vsm4W4UBM1Xi+Ws61PrfDkz63Q B5tC5ly7krlaiLusJausoghmGeSrfTn0N+wRAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUoyz39wuwLY3+0eQp9gWSavshcygwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL295ejM5d3V3TFkzLTBlUXA5 Z1dTYXZzaGN5Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wUAwDQYJKoZIhvcNAQELBQADggEBAE1MGU/JKo3sZ9ANqS3ft3Ho312bjM84bx9k UOZ37K+3HrkduigbKoxC6cmxjuacNQxtb6MSmGKrK3zTN1rQTHt8W+yAijvliSbl yJUXZ628dOkav6t0X65g/LKNE6MmD5EbolgTraSyB4Wz/CND9+GzRRHVCz5iZ39E oKpHorO5OuFJBx0ofM7ryMJ0tQFCd1kCITNH3RjPfFtlTZQ/oZYlCPreQu0yAMiM 0CRHz7Zeg75HALTFNOuAED6r6R+673w/tOjgFzDhwciu/6I0s8mKFUWdh8Hy01gc 5bY+6sVE4KoRsFi4sHIeufY+WAMwfDFMKqtaWPStmwIkFdPBDRw= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:18 2025 by rpki-client