$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/psf3miOe17HDX7ESyo3PPL_Okus.roa File: psf3miOe17HDX7ESyo3PPL_Okus.roa (raw, json) Hash identifier: IYjrRfRjAdej8e7Ns4xVWs6a/9CPkD4i4267zVvIewg= Subject key identifier: A6:C7:F7:9A:23:9E:D7:B1:C3:5F:B1:12:CA:8D:CF:3C:BF:CE:92:EB Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3830 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/psf3miOe17HDX7ESyo3PPL_Okus.roa Signing time: Fri 22 Aug 2025 08:45:02 +0000 ROA not before: Fri 22 Aug 2025 08:45:02 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.192.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14384 (0x3830) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:02 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=A6C7F79A239ED7B1C35FB112CA8DCF3CBFCE92EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c1:e9:86:be:e2:4f:c3:2d:9d:c9:a5:a5:78: 5b:ea:41:8c:93:3d:91:89:4f:44:8d:b4:a0:32:97: c3:2f:65:28:08:37:5e:37:a8:ac:c2:67:a0:ba:47: 42:13:a4:bb:ae:5c:58:13:e0:02:ac:9f:9a:3a:09: ef:3b:3c:a5:82:46:fe:8d:d0:47:2b:e8:bd:7a:77: 9b:cc:9a:d0:8c:45:33:db:6d:33:de:ec:90:7e:7a: 11:14:cf:34:b3:23:a3:47:20:bc:fa:fc:bb:bb:f4: aa:c3:05:94:91:28:94:49:21:95:c5:6a:4c:96:c1: 49:9b:93:42:bc:cc:24:ea:94:2f:98:b1:44:9d:d9: 7d:be:c8:cc:c8:5e:d3:26:c5:a8:2c:01:aa:8e:da: 83:21:55:3b:cc:af:a9:e2:59:75:d6:a0:1f:38:ee: b4:a7:d5:5e:3a:82:fd:43:1e:f2:51:80:f0:08:3d: 5c:fb:1b:b1:46:32:f9:cb:ca:5b:65:5f:72:ff:03: 9a:26:40:2c:eb:dd:8f:9e:91:7b:5a:33:b9:ae:3e: 63:ce:ac:b7:9e:bd:5a:3c:7d:5c:d3:4f:eb:c7:5b: d4:5d:e6:2e:97:44:76:a3:89:c4:c1:eb:77:c6:7b: b9:63:ee:27:35:fa:7b:b8:9f:2e:8a:4c:ec:e3:e5: 9d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:C7:F7:9A:23:9E:D7:B1:C3:5F:B1:12:CA:8D:CF:3C:BF:CE:92:EB X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/psf3miOe17HDX7ESyo3PPL_Okus.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.160.0/22 Signature Algorithm: sha256WithRSAEncryption 4e:be:a4:68:53:72:b2:07:6c:37:3f:db:db:3c:77:da:72:4c: 11:62:a4:f3:40:cb:3d:27:c9:c0:e7:84:c4:27:7e:53:cf:5d: e4:a8:0b:a0:42:86:07:15:28:8a:12:3d:80:aa:b3:c8:46:ae: 82:2f:93:bc:ff:14:ff:08:85:35:cb:7d:17:2d:a6:be:16:86: 47:87:c4:37:15:82:ae:44:db:49:59:50:83:e5:8d:37:b8:6c: 02:5f:74:2d:1a:5d:4d:74:84:47:90:36:9b:9e:e0:ca:30:f4: a3:f2:f6:c2:b5:31:68:93:1b:6f:9c:a3:2c:c3:e4:a2:0c:bb: 92:16:ce:a2:b5:b7:4f:71:53:d4:ab:99:0a:97:ee:a9:a5:81: cc:90:8e:be:9b:f7:05:20:91:d6:d7:4d:2a:5e:4a:c8:c5:4f: 8c:d7:6a:7e:6e:df:42:9a:36:1a:a9:59:1a:73:9f:b0:46:a5: cb:03:cf:ae:36:0f:0e:6f:a8:01:ef:d0:7d:96:b5:a5:0d:78: 91:bf:35:ed:88:e5:12:31:48:c7:d7:22:6d:5a:c6:db:fe:9f: 49:b9:42:ee:2b:be:98:c9:64:68:ea:67:15:0c:18:d7:13:b6: d1:82:f2:14:a9:ca:5c:f7:4f:52:bc:b5:c7:36:de:8f:c6:8f: 1b:8b:d8:46 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICODAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1MDJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEE2QzdGNzlBMjM5RUQ3 QjFDMzVGQjExMkNBOERDRjNDQkZDRTkyRUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJwemGvuJPwy2dyaWleFvqQYyTPZGJT0SNtKAyl8MvZSgIN143 qKzCZ6C6R0ITpLuuXFgT4AKsn5o6Ce87PKWCRv6N0Ecr6L16d5vMmtCMRTPbbTPe 7JB+ehEUzzSzI6NHILz6/Lu79KrDBZSRKJRJIZXFakyWwUmbk0K8zCTqlC+YsUSd 2X2+yMzIXtMmxagsAaqO2oMhVTvMr6niWXXWoB847rSn1V46gv1DHvJRgPAIPVz7 G7FGMvnLyltlX3L/A5omQCzr3Y+ekXtaM7muPmPOrLeevVo8fVzTT+vHW9Rd5i6X RHajicTB63fGe7lj7ic1+nu4ny6KTOzj5Z2rAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUpsf3miOe17HDX7ESyo3PPL/OkuswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3BzZjNtaU9lMTdIRFg3RVN5 bzNQUExfT2t1cy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wKAwDQYJKoZIhvcNAQELBQADggEBAE6+pGhTcrIHbDc/29s8d9pyTBFipPNAyz0n ycDnhMQnflPPXeSoC6BChgcVKIoSPYCqs8hGroIvk7z/FP8IhTXLfRctpr4WhkeH xDcVgq5E20lZUIPljTe4bAJfdC0aXU10hEeQNpue4Mow9KPy9sK1MWiTG2+coyzD 5KIMu5IWzqK1t09xU9SrmQqX7qmlgcyQjr6b9wUgkdbXTSpeSsjFT4zXan5u30Ka NhqpWRpzn7BGpcsDz642Dw5vqAHv0H2WtaUNeJG/Ne2I5RIxSMfXIm1axtv+n0m5 Qu4rvpjJZGjqZxUMGNcTttGC8hSpylz3T1K8tcc23o/GjxuL2EY= -----END CERTIFICATE-----Generated at Sun Aug 24 05:32:15 2025 by rpki-client