$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oKzbkNW3JJcrHJ7wCAkUNsrI9Wo.roa File: oKzbkNW3JJcrHJ7wCAkUNsrI9Wo.roa (raw, json) Hash identifier: zM69raRozJS1UtMwuOUVQO50EiOBLTZ37Cy99viDqKM= Subject key identifier: A0:AC:DB:90:D5:B7:24:97:2B:1C:9E:F0:08:09:14:36:CA:C8:F5:6A Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 38C9 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oKzbkNW3JJcrHJ7wCAkUNsrI9Wo.roa Signing time: Fri 22 Aug 2025 08:45:38 +0000 ROA not before: Fri 22 Aug 2025 08:45:38 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.195.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14537 (0x38c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:38 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=A0ACDB90D5B724972B1C9EF008091436CAC8F56A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ed:d1:05:48:c2:08:c0:6c:87:a1:c9:86:40: d7:16:5a:b9:61:5a:96:23:f0:68:8b:b8:ea:58:9f: 3e:ea:77:da:72:7e:66:84:be:a4:93:ef:94:13:38: 58:0a:ae:15:2a:15:1e:13:66:59:be:10:af:1d:e1: 7a:e2:e2:8d:e8:1a:ae:f7:86:27:78:cb:66:f2:36: f8:ab:b1:a8:c2:0b:84:3d:e2:c4:96:87:69:21:d3: 5f:a5:2b:ee:cc:96:bc:bf:a5:a5:87:57:03:4e:0a: a9:c6:0d:ef:86:0b:e2:01:f2:79:2b:35:75:db:76: 72:25:84:be:29:7b:33:dd:8e:7a:a7:06:e8:ff:10: ae:79:d7:6d:88:53:39:7c:18:dc:2a:1e:87:dc:ec: ac:e2:3a:64:bb:98:1e:d9:5d:66:17:be:35:f4:0a: 1e:ee:b0:45:80:c6:d5:8d:d7:86:84:41:5b:b5:6d: b3:c0:3b:6d:47:3f:7f:3f:ac:66:6b:0f:6a:9b:40: 5b:31:6b:a0:74:2b:6d:c5:b1:a6:49:2c:da:07:33: 8a:de:6b:6d:f5:09:25:82:8b:20:9b:ce:81:fc:22: 80:4d:57:e4:37:c3:87:85:d8:37:62:21:68:6d:6b: 28:39:be:71:06:1c:79:c7:fb:f0:f2:91:cd:a1:4e: 66:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:AC:DB:90:D5:B7:24:97:2B:1C:9E:F0:08:09:14:36:CA:C8:F5:6A X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oKzbkNW3JJcrHJ7wCAkUNsrI9Wo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.64.0/21 Signature Algorithm: sha256WithRSAEncryption b8:8b:79:be:43:70:f8:fe:78:81:4f:6b:6d:26:f3:33:c8:85: 37:21:64:f2:7d:80:ec:66:15:1b:bf:72:cc:c6:65:03:99:7d: 9d:eb:f2:e5:7d:04:0f:35:48:9b:71:b4:a2:1d:f9:c3:9a:86: 2e:c2:94:99:8c:5e:00:17:80:0a:d1:0b:78:65:45:42:2f:f7: 11:f6:d1:6f:f0:cc:e2:2a:e3:77:cf:7f:d7:d6:59:70:3e:65: b9:92:78:b5:94:27:7a:5c:53:10:54:ef:1b:51:38:64:b3:85: 51:9a:df:27:29:c3:a9:f3:ce:8b:77:47:6a:7a:12:43:b8:0a: 18:0a:42:4d:c2:0f:41:bf:5f:a9:09:80:d2:00:e7:54:0c:8f: f8:0c:ee:87:09:f4:9c:f9:e6:c8:f0:c0:85:47:fb:7d:39:96: 62:58:5d:0e:fe:3b:7b:c3:2d:6b:af:e1:1a:e5:0c:d1:59:70: e0:93:ce:e7:15:51:94:0b:3e:bb:e2:b5:74:b0:a6:9d:74:df: 4a:c9:e6:7a:06:1c:f5:47:df:75:d0:47:b6:d7:f9:ae:83:c8: 4c:c7:30:68:ce:c0:2a:24:3e:d5:67:3f:d5:33:1e:c8:9f:78: fd:41:aa:54:26:b5:6a:f9:d7:63:cb:d1:90:11:49:ef:44:28: 4f:a3:b4:72 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOMkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1MzhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEEwQUNEQjkwRDVCNzI0 OTcyQjFDOUVGMDA4MDkxNDM2Q0FDOEY1NkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDj7dEFSMIIwGyHocmGQNcWWrlhWpYj8GiLuOpYnz7qd9pyfmaE vqST75QTOFgKrhUqFR4TZlm+EK8d4Xri4o3oGq73hid4y2byNvirsajCC4Q94sSW h2kh01+lK+7Mlry/paWHVwNOCqnGDe+GC+IB8nkrNXXbdnIlhL4pezPdjnqnBuj/ EK55122IUzl8GNwqHofc7KziOmS7mB7ZXWYXvjX0Ch7usEWAxtWN14aEQVu1bbPA O21HP38/rGZrD2qbQFsxa6B0K23FsaZJLNoHM4rea231CSWCiyCbzoH8IoBNV+Q3 w4eF2DdiIWhtayg5vnEGHHnH+/Dykc2hTmbTAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUoKzbkNW3JJcrHJ7wCAkUNsrI9WowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL29LemJrTlczSkpjckhKN3dD QWtVTnNySTlXby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 w0AwDQYJKoZIhvcNAQELBQADggEBALiLeb5DcPj+eIFPa20m8zPIhTchZPJ9gOxm FRu/cszGZQOZfZ3r8uV9BA81SJtxtKId+cOahi7ClJmMXgAXgArRC3hlRUIv9xH2 0W/wzOIq43fPf9fWWXA+ZbmSeLWUJ3pcUxBU7xtROGSzhVGa3ycpw6nzzot3R2p6 EkO4ChgKQk3CD0G/X6kJgNIA51QMj/gM7ocJ9Jz55sjwwIVH+305lmJYXQ7+O3vD LWuv4RrlDNFZcOCTzucVUZQLPrvitXSwpp1030rJ5noGHPVH33XQR7bX+a6DyEzH MGjOwCokPtVnP9UzHsifeP1BqlQmtWr512PL0ZARSe9EKE+jtHI= -----END CERTIFICATE-----Generated at Fri Oct 24 19:24:31 2025 by rpki-client