$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OCQCDCNuWV-JCwuMhcrMICKjO7Y.roa File: OCQCDCNuWV-JCwuMhcrMICKjO7Y.roa (raw, json) Hash identifier: e7K8NvkPscApDkqMGIywYbQvmem+Any+vGYLcvC2GG0= Subject key identifier: 38:24:02:0C:23:6E:59:5F:89:0B:0B:8C:85:CA:CC:20:22:A3:3B:B6 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3A77 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OCQCDCNuWV-JCwuMhcrMICKjO7Y.roa Signing time: Fri 22 Aug 2025 08:47:23 +0000 ROA not before: Fri 22 Aug 2025 08:47:23 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.195.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14967 (0x3a77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:23 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=3824020C236E595F890B0B8C85CACC2022A33BB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:19:a7:98:d1:59:99:06:6a:3c:b7:0a:3e:e8: 7a:af:14:f1:bc:8d:26:a7:fb:0d:88:ef:8a:86:48: ef:07:fd:a4:eb:1e:74:a9:e1:81:3d:85:15:83:05: b8:35:5e:75:34:29:67:d5:af:e5:1c:8e:d3:5e:b1: b9:9c:f1:54:6d:e8:aa:6b:c5:6d:e1:fe:91:57:b9: 43:c4:04:3a:5a:45:cf:7e:ca:42:63:0e:65:02:05: b5:7d:da:18:69:e3:be:35:33:ab:e6:01:98:10:a6: 5b:bd:89:72:54:1e:da:38:5d:b6:b0:5d:fc:3a:a3: 29:42:cd:66:a6:58:92:e5:8a:49:6b:93:06:3d:e7: fe:07:a4:fd:b1:e4:6c:53:cb:82:95:08:b7:94:c9: 70:03:a7:2c:55:67:1e:2e:54:61:d2:35:8d:35:7d: bd:84:9d:1b:45:a7:af:77:59:78:21:5a:29:95:9f: f9:06:44:c6:4c:c4:8b:58:47:b4:bd:ca:97:a1:db: 86:ca:d7:20:e0:fe:ca:17:4f:ce:a7:63:d1:e8:c3: 1a:2e:0e:c6:88:c2:9f:cd:11:8e:b2:ad:00:07:dd: 13:c4:e8:74:7d:fd:e0:d7:00:1a:3f:70:c8:18:79: 47:63:b4:4d:22:14:20:27:b4:e1:da:29:a0:d8:0f: 2a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:24:02:0C:23:6E:59:5F:89:0B:0B:8C:85:CA:CC:20:22:A3:3B:B6 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OCQCDCNuWV-JCwuMhcrMICKjO7Y.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.248.0/22 Signature Algorithm: sha256WithRSAEncryption 9c:f3:87:bf:83:6e:85:59:7d:5a:e5:dc:79:dc:34:9f:5f:5a: 42:e8:96:8d:8b:6c:13:ad:9d:47:ce:52:e5:1d:17:98:13:dc: 27:e8:44:30:20:3d:7c:c4:a0:60:97:ab:57:ca:3b:af:3a:9c: 45:e5:91:6b:46:de:19:b7:ba:83:cc:5d:40:9e:d0:05:fd:cf: 2e:71:9d:b4:b6:d2:e7:c4:0a:18:27:3d:ce:36:87:10:b4:cf: d7:94:2c:75:b9:f7:9f:95:8e:13:d3:11:c7:03:d0:6e:34:7f: 97:bd:d5:28:7c:07:c4:a4:94:c4:91:e2:41:0d:36:93:b0:4f: 4e:09:07:31:66:a8:75:d6:14:c8:78:20:c2:fd:58:59:d5:ea: 31:7c:4f:ff:62:95:c5:48:5b:9c:0c:8b:6d:ae:92:5e:43:ed: f8:e4:da:ec:df:32:ea:9a:df:3e:08:f4:e7:84:57:15:8d:72: dd:75:d9:e6:c5:f3:87:93:fe:73:bc:85:02:05:ca:e0:8b:03: b5:0b:d9:bc:ef:be:0b:ad:a4:b5:12:3a:23:76:57:23:58:a2: 4d:62:96:dd:2e:99:d2:7f:09:87:68:a8:82:b5:5a:58:52:bf: 31:a5:56:4c:96:d2:5e:4a:3b:6f:c6:c2:20:14:28:12:b9:0d: 38:01:7e:e4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOncwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3MjNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDM4MjQwMjBDMjM2RTU5 NUY4OTBCMEI4Qzg1Q0FDQzIwMjJBMzNCQjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDrGaeY0VmZBmo8two+6HqvFPG8jSan+w2I74qGSO8H/aTrHnSp 4YE9hRWDBbg1XnU0KWfVr+UcjtNesbmc8VRt6KprxW3h/pFXuUPEBDpaRc9+ykJj DmUCBbV92hhp4741M6vmAZgQplu9iXJUHto4XbawXfw6oylCzWamWJLliklrkwY9 5/4HpP2x5GxTy4KVCLeUyXADpyxVZx4uVGHSNY01fb2EnRtFp693WXghWimVn/kG RMZMxItYR7S9ypeh24bK1yDg/soXT86nY9HowxouDsaIwp/NEY6yrQAH3RPE6HR9 /eDXABo/cMgYeUdjtE0iFCAntOHaKaDYDyr3AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUOCQCDCNuWV+JCwuMhcrMICKjO7YwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL09DUUNEQ051V1YtSkN3dU1o Y3JNSUNLak83WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 w/gwDQYJKoZIhvcNAQELBQADggEBAJzzh7+DboVZfVrl3HncNJ9fWkLolo2LbBOt nUfOUuUdF5gT3CfoRDAgPXzEoGCXq1fKO686nEXlkWtG3hm3uoPMXUCe0AX9zy5x nbS20ufEChgnPc42hxC0z9eULHW595+VjhPTEccD0G40f5e91Sh8B8SklMSR4kEN NpOwT04JBzFmqHXWFMh4IML9WFnV6jF8T/9ilcVIW5wMi22ukl5D7fjk2uzfMuqa 3z4I9OeEVxWNct112ebF84eT/nO8hQIFyuCLA7UL2bzvvgutpLUSOiN2VyNYok1i lt0umdJ/CYdoqIK1WlhSvzGlVkyW0l5KO2/GwiAUKBK5DTgBfuQ= -----END CERTIFICATE-----Generated at Fri Oct 24 19:21:53 2025 by rpki-client