$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yjoVbKrIFomxnHDthrVfzNNRDo8.roa File: yjoVbKrIFomxnHDthrVfzNNRDo8.roa (raw, json) Hash identifier: c5AeTwq/CZxrGf2kqU04AkgYjRV9PKc1pdM0NNx/W7c= Subject key identifier: CA:3A:15:6C:AA:C8:16:89:B1:9C:70:ED:86:B5:5F:CC:D3:51:0E:8F Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3A62 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yjoVbKrIFomxnHDthrVfzNNRDo8.roa Signing time: Fri 22 Aug 2025 08:47:18 +0000 ROA not before: Fri 22 Aug 2025 08:47:18 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.195.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14946 (0x3a62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:18 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=CA3A156CAAC81689B19C70ED86B55FCCD3510E8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ca:53:7e:40:8b:cd:6d:81:ed:7e:e1:2d:7f: e3:0f:c8:0f:de:fa:87:e9:1d:45:cd:01:76:89:d0: 19:3a:59:25:21:61:91:6c:67:88:14:08:7d:70:15: e3:4e:73:1f:dd:7c:d9:42:c2:c9:a4:a6:19:99:8a: 60:ab:52:e2:3c:08:8f:6f:9b:99:45:a0:05:c4:5c: 6a:65:1d:f5:fc:03:e8:69:79:57:50:3d:41:3d:1d: cc:04:27:6a:26:cf:8e:c2:5c:2e:f0:48:eb:59:9e: 3b:c9:a4:23:bf:1a:4a:b7:eb:c7:ba:38:95:da:16: 1f:f6:64:17:ef:92:8e:5f:ba:e1:09:e6:4b:4c:f7: 60:5d:13:22:3b:70:3e:c6:6f:7f:48:87:b4:15:3a: 68:a7:fd:8d:f6:cf:b6:e3:d7:10:e2:6a:97:9e:3b: c9:49:bf:63:c7:6d:44:05:71:25:c3:95:25:f5:16: d4:8b:a5:61:7e:5a:c5:25:9b:f9:b6:dd:28:4e:d7: 68:cb:9c:92:9e:62:92:3f:05:b5:2f:b5:e6:53:bd: 23:0e:49:c9:8b:3c:de:69:82:3a:38:01:43:a4:9b: 40:bb:ef:04:a9:6c:b4:b8:57:bd:91:93:e8:0c:d7: 6b:2d:da:3f:e5:11:89:9c:de:36:b5:a5:d0:8c:a5: ec:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:3A:15:6C:AA:C8:16:89:B1:9C:70:ED:86:B5:5F:CC:D3:51:0E:8F X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yjoVbKrIFomxnHDthrVfzNNRDo8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.96.0/21 Signature Algorithm: sha256WithRSAEncryption 28:72:d6:b1:ab:0f:85:41:9e:d5:cc:e8:54:95:c2:de:4e:77: 69:9b:5b:9a:b4:bc:d8:d0:8d:ac:86:c4:f2:88:9c:65:c7:10: 50:5a:16:f2:a3:db:3a:19:42:ac:ac:34:aa:45:0d:75:ad:4b: 62:30:85:d6:58:c3:b4:ee:6f:e4:f7:7a:d7:06:35:54:0e:60: b5:65:76:1e:5c:ce:d1:d4:b0:b0:89:28:55:45:28:7c:f2:b2: ff:c0:87:20:c0:1d:fd:23:79:6e:b2:85:52:3e:a3:b7:d7:a7: 76:47:94:f7:15:fc:e2:a2:39:fe:34:2b:e9:be:d8:49:44:04: e8:f6:66:c9:11:b6:98:16:c6:8b:6f:8b:99:01:66:41:a5:89: 7b:90:db:5e:51:8d:c8:63:d6:ba:c7:d7:79:6a:ca:d2:c5:a9: 01:12:2e:cc:f8:2b:61:b3:ab:69:dc:27:3f:fa:8b:48:cd:94: b1:01:d2:df:b5:62:3b:1b:15:82:28:20:44:13:ac:f4:14:f8: cb:06:22:24:a5:c2:fc:18:51:4c:5d:90:0c:df:e3:1b:1d:9f: 29:68:9e:45:0d:c9:ff:5e:ba:e4:eb:ae:73:28:f9:67:7e:f6: d7:f3:33:a9:1c:1b:3d:c5:b5:30:51:4f:45:00:ba:7d:2e:df: 7b:b9:1b:7b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOmIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3MThaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKENBM0ExNTZDQUFDODE2 ODlCMTlDNzBFRDg2QjU1RkNDRDM1MTBFOEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8ylN+QIvNbYHtfuEtf+MPyA/e+ofpHUXNAXaJ0Bk6WSUhYZFs Z4gUCH1wFeNOcx/dfNlCwsmkphmZimCrUuI8CI9vm5lFoAXEXGplHfX8A+hpeVdQ PUE9HcwEJ2omz47CXC7wSOtZnjvJpCO/Gkq368e6OJXaFh/2ZBfvko5fuuEJ5ktM 92BdEyI7cD7Gb39Ih7QVOmin/Y32z7bj1xDiapeeO8lJv2PHbUQFcSXDlSX1FtSL pWF+WsUlm/m23ShO12jLnJKeYpI/BbUvteZTvSMOScmLPN5pgjo4AUOkm0C77wSp bLS4V72Rk+gM12st2j/lEYmc3ja1pdCMpewLAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUyjoVbKrIFomxnHDthrVfzNNRDo8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3lqb1ZiS3JJRm9teG5IRHRo clZmek5OUkRvOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 w2AwDQYJKoZIhvcNAQELBQADggEBAChy1rGrD4VBntXM6FSVwt5Od2mbW5q0vNjQ jayGxPKInGXHEFBaFvKj2zoZQqysNKpFDXWtS2IwhdZYw7Tub+T3etcGNVQOYLVl dh5cztHUsLCJKFVFKHzysv/AhyDAHf0jeW6yhVI+o7fXp3ZHlPcV/OKiOf40K+m+ 2ElEBOj2ZskRtpgWxotvi5kBZkGliXuQ215Rjchj1rrH13lqytLFqQESLsz4K2Gz q2ncJz/6i0jNlLEB0t+1YjsbFYIoIEQTrPQU+MsGIiSlwvwYUUxdkAzf4xsdnylo nkUNyf9euuTrrnMo+Wd+9tfzM6kcGz3FtTBRT0UAun0u33u5G3s= -----END CERTIFICATE-----Generated at Sun Aug 24 07:24:09 2025 by rpki-client