$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bOLNHdNvMeeDcNlt6VeSgI6RyKA.roa File: bOLNHdNvMeeDcNlt6VeSgI6RyKA.roa (raw, json) Hash identifier: oIOPIzskUOjSHPan/YD290hZQ703YdtqqrHDdyeJFjQ= Subject key identifier: 6C:E2:CD:1D:D3:6F:31:E7:83:70:D9:6D:E9:57:92:80:8E:91:C8:A0 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 391D Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bOLNHdNvMeeDcNlt6VeSgI6RyKA.roa Signing time: Fri 22 Aug 2025 08:45:58 +0000 ROA not before: Fri 22 Aug 2025 08:45:58 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.195.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14621 (0x391d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:58 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=6CE2CD1DD36F31E78370D96DE95792808E91C8A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:57:b5:9a:35:22:ea:21:d7:5a:e2:b2:bc:9f: b3:51:0d:94:71:3a:f9:cf:a0:98:2b:28:50:5d:a9: d5:93:13:b6:6d:57:68:85:6b:74:f1:07:1c:e7:07: 20:66:53:d5:3a:16:3c:cc:e2:8f:db:82:6e:5b:d4: 63:80:72:62:2f:18:90:44:92:c4:a9:f5:11:86:63: 3f:88:27:1e:6c:17:69:1a:fd:4a:98:ba:c3:15:24: bb:ca:51:28:47:0e:75:a3:ca:2f:a8:16:10:c4:a4: ef:6a:bf:73:c2:d7:c0:f8:4f:32:41:af:1d:db:43: 2f:e1:38:f3:1b:bf:82:d1:ba:1b:98:40:b0:68:9e: 43:a6:54:72:12:5f:ae:c6:84:65:2c:dd:fb:2f:8f: d6:20:52:98:67:ea:7d:45:d6:0b:fa:fa:f4:82:53: 66:ec:41:ee:72:49:c3:7e:6d:3c:ae:51:66:f4:68: e6:3c:e4:e1:b2:bb:9b:79:bd:81:8c:d4:7b:0b:02: 8b:cd:10:48:81:84:a3:31:8c:71:37:a3:04:e8:26: a6:4d:9b:0d:c6:df:21:f2:5d:b5:0c:ff:63:1d:e3: e9:c1:e3:79:9c:84:98:59:f7:b6:4c:ed:e1:d4:28: 27:a9:04:e7:8c:f5:01:43:68:69:d2:02:f8:90:00: fe:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:E2:CD:1D:D3:6F:31:E7:83:70:D9:6D:E9:57:92:80:8E:91:C8:A0 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bOLNHdNvMeeDcNlt6VeSgI6RyKA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.228.0/22 Signature Algorithm: sha256WithRSAEncryption 44:3d:53:7e:eb:cd:63:bb:5a:81:00:53:98:32:7a:9d:32:a0: e2:b8:2d:ed:34:a4:96:c9:d4:1b:7b:dc:9e:42:72:00:ac:1f: ee:73:cc:bc:bc:3e:83:b5:93:7a:27:03:c8:bb:26:02:11:63: a1:5c:b9:15:92:5a:bd:6c:07:2a:ef:a1:b7:4c:0e:c5:b6:d5: e8:ea:6a:03:db:3d:d9:4d:ea:c6:3d:6e:36:0a:53:42:33:74: 4c:62:da:89:da:9f:85:f3:3a:e7:56:88:08:43:87:6d:23:da: 93:37:2d:15:39:e1:ae:b5:0c:90:11:48:22:a2:db:9c:26:db: 76:68:2f:b8:40:63:8f:ff:04:28:d8:39:36:04:ae:83:bf:0a: ac:08:33:20:40:d1:d5:6e:b1:f8:00:1e:b3:52:a2:2c:ba:43: 89:a8:45:04:d7:9c:06:10:b4:c5:aa:8a:13:e3:54:84:5d:dd: a1:1f:c5:33:04:81:1a:90:31:b0:13:61:4f:59:c6:18:78:19: 68:9f:c2:03:1a:9e:32:2d:aa:d2:4d:21:da:e1:61:af:58:d7: 98:e2:27:51:4d:c4:51:28:75:2e:72:ee:2c:d3:40:df:8b:04: 47:c5:40:29:7b:9a:5c:ba:58:0c:96:cf:a7:63:f0:0b:3f:ae: bc:15:02:16 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOR0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1NThaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDZDRTJDRDFERDM2RjMx RTc4MzcwRDk2REU5NTc5MjgwOEU5MUM4QTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqV7WaNSLqIdda4rK8n7NRDZRxOvnPoJgrKFBdqdWTE7ZtV2iF a3TxBxznByBmU9U6FjzM4o/bgm5b1GOAcmIvGJBEksSp9RGGYz+IJx5sF2ka/UqY usMVJLvKUShHDnWjyi+oFhDEpO9qv3PC18D4TzJBrx3bQy/hOPMbv4LRuhuYQLBo nkOmVHISX67GhGUs3fsvj9YgUphn6n1F1gv6+vSCU2bsQe5yScN+bTyuUWb0aOY8 5OGyu5t5vYGM1HsLAovNEEiBhKMxjHE3owToJqZNmw3G3yHyXbUM/2Md4+nB43mc hJhZ97ZM7eHUKCepBOeM9QFDaGnSAviQAP5LAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUbOLNHdNvMeeDcNlt6VeSgI6RyKAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2JPTE5IZE52TWVlRGNObHQ2 VmVTZ0k2UnlLQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 w+QwDQYJKoZIhvcNAQELBQADggEBAEQ9U37rzWO7WoEAU5gyep0yoOK4Le00pJbJ 1Bt73J5CcgCsH+5zzLy8PoO1k3onA8i7JgIRY6FcuRWSWr1sByrvobdMDsW21ejq agPbPdlN6sY9bjYKU0IzdExi2onan4XzOudWiAhDh20j2pM3LRU54a61DJARSCKi 25wm23ZoL7hAY4//BCjYOTYEroO/CqwIMyBA0dVusfgAHrNSoiy6Q4moRQTXnAYQ tMWqihPjVIRd3aEfxTMEgRqQMbATYU9Zxhh4GWifwgManjItqtJNIdrhYa9Y15ji J1FNxFEodS5y7izTQN+LBEfFQCl7mly6WAyWz6dj8As/rrwVAhY= -----END CERTIFICATE-----Generated at Fri Oct 24 19:27:48 2025 by rpki-client