$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OxvB5fsVH8sPtxj1A0C8wRCSuGo.roa File: OxvB5fsVH8sPtxj1A0C8wRCSuGo.roa (raw, json) Hash identifier: sKuLSQ6Ni/JRXTiL3m0X+Sqcik7OdZrDI9QFTiArOMU= Subject key identifier: 3B:1B:C1:E5:FB:15:1F:CB:0F:B7:18:F5:03:40:BC:C1:10:92:B8:6A Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 37D9 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OxvB5fsVH8sPtxj1A0C8wRCSuGo.roa Signing time: Fri 22 Aug 2025 08:44:42 +0000 ROA not before: Fri 22 Aug 2025 08:44:42 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.194.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14297 (0x37d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:44:42 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=3B1BC1E5FB151FCB0FB718F50340BCC11092B86A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:16:08:69:48:6e:c2:68:9b:e2:43:2c:00:1f: d0:b4:01:9a:ce:c2:31:89:7b:be:7f:b2:b5:53:f9: 24:c8:11:5b:7b:67:2f:80:e1:78:e0:9e:20:94:64: 59:53:37:9b:3b:2d:d0:6a:4a:1e:26:82:03:99:ad: 23:b2:e1:2e:fe:84:25:42:67:86:13:dd:b2:fd:25: 3c:e7:31:11:87:dc:dd:64:b8:2a:ed:21:6e:aa:c7: 8c:7d:d9:0b:11:62:62:5d:f6:56:c8:ef:ab:f9:d2: 42:33:18:ad:87:03:34:2d:6b:ce:4a:df:a0:e5:d0: 88:89:d1:4b:81:f2:98:cd:8d:81:83:0d:81:82:77: 61:98:05:dd:c2:6c:2a:e9:fb:82:94:d5:4c:ec:13: 1f:70:35:34:cc:75:15:ab:39:09:4d:95:20:ad:71: 39:f0:da:13:96:f0:a3:b9:3e:0f:a5:ad:36:e3:88: 8a:e4:f8:c9:66:50:61:c5:43:4f:a0:d9:35:41:43: 9b:7d:81:92:f8:c0:0a:e2:3f:39:f0:a8:3e:99:a6: c0:b5:cc:2a:e5:9b:df:59:c8:ca:79:b4:a6:62:90: f8:a6:a3:1c:05:2e:b9:64:dd:09:97:c0:83:91:4a: 05:5c:d5:91:3c:d4:7b:f3:6d:59:ec:0e:81:f4:70: 34:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:1B:C1:E5:FB:15:1F:CB:0F:B7:18:F5:03:40:BC:C1:10:92:B8:6A X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OxvB5fsVH8sPtxj1A0C8wRCSuGo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.104.0/22 Signature Algorithm: sha256WithRSAEncryption 41:5d:75:fb:44:ab:d4:ce:e5:8a:ea:5e:b5:3f:0e:f9:f5:19: 39:6f:9e:3d:3c:22:bc:2c:a6:3d:d9:14:7e:8e:be:12:3e:b1: eb:3b:44:dc:e3:39:75:67:13:47:54:9f:a2:1a:34:f8:de:1f: 95:9d:7a:85:52:ed:f9:d1:bd:cd:bd:2d:e5:ab:44:33:5f:0b: 4e:7c:5e:3d:d5:70:ba:ef:a9:e6:4a:9c:24:9c:e9:c4:bf:c5: 7a:d5:39:18:6a:1e:9a:98:ba:c8:fc:ec:f4:8f:c2:d8:b8:23: 29:23:f5:af:9b:c7:d8:18:1f:e6:0f:10:7b:1a:fc:f6:18:df: 00:2f:40:b7:ce:e4:52:ac:ff:87:62:aa:6f:5b:e5:75:f8:7c: 17:c8:97:45:4d:9e:e1:03:db:97:40:b1:ee:3c:7b:8e:ae:8d: c5:a2:16:7a:31:a6:5d:1a:45:5e:09:46:72:cd:97:a6:00:9b: 62:12:e0:f3:70:02:46:ab:8b:17:18:0f:10:34:bb:08:56:b2: ab:7c:0c:f3:48:63:ea:66:96:52:47:58:77:17:14:21:7a:f1: 64:d5:70:52:5f:e4:0b:7f:5a:94:93:c3:31:92:1d:e9:df:f9: aa:5e:a2:ba:44:d7:75:c3:e0:85:fe:8b:9a:57:54:f0:e6:08: 0d:cf:32:68 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICN9kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ0NDJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDNCMUJDMUU1RkIxNTFG Q0IwRkI3MThGNTAzNDBCQ0MxMTA5MkI4NkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1FghpSG7CaJviQywAH9C0AZrOwjGJe75/srVT+STIEVt7Zy+A 4XjgniCUZFlTN5s7LdBqSh4mggOZrSOy4S7+hCVCZ4YT3bL9JTznMRGH3N1kuCrt IW6qx4x92QsRYmJd9lbI76v50kIzGK2HAzQta85K36Dl0IiJ0UuB8pjNjYGDDYGC d2GYBd3CbCrp+4KU1UzsEx9wNTTMdRWrOQlNlSCtcTnw2hOW8KO5Pg+lrTbjiIrk +MlmUGHFQ0+g2TVBQ5t9gZL4wAriPznwqD6ZpsC1zCrlm99ZyMp5tKZikPimoxwF Lrlk3QmXwIORSgVc1ZE81HvzbVnsDoH0cDRHAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUOxvB5fsVH8sPtxj1A0C8wRCSuGowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL094dkI1ZnNWSDhzUHR4ajFB MEM4d1JDU3VHby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wmgwDQYJKoZIhvcNAQELBQADggEBAEFddftEq9TO5YrqXrU/Dvn1GTlvnj08Irws pj3ZFH6OvhI+ses7RNzjOXVnE0dUn6IaNPjeH5WdeoVS7fnRvc29LeWrRDNfC058 Xj3VcLrvqeZKnCSc6cS/xXrVORhqHpqYusj87PSPwti4Iykj9a+bx9gYH+YPEHsa /PYY3wAvQLfO5FKs/4diqm9b5XX4fBfIl0VNnuED25dAse48e46ujcWiFnoxpl0a RV4JRnLNl6YAm2IS4PNwAkarixcYDxA0uwhWsqt8DPNIY+pmllJHWHcXFCF68WTV cFJf5At/WpSTwzGSHenf+apeorpE13XD4IX+i5pXVPDmCA3PMmg= -----END CERTIFICATE-----Generated at Fri Oct 24 19:18:41 2025 by rpki-client