$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oXR6l-I00engqnwNAUSnzqoAbE4.roa File: oXR6l-I00engqnwNAUSnzqoAbE4.roa (raw, json) Hash identifier: /tBPoQcxvmdIq2H7sOx+2ZTQdRr3cytAwfIWIcOnDJw= Subject key identifier: A1:74:7A:97:E2:34:D1:E9:E0:AA:7C:0D:01:44:A7:CE:AA:00:6C:4E Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 398E Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oXR6l-I00engqnwNAUSnzqoAbE4.roa Signing time: Fri 22 Aug 2025 08:46:25 +0000 ROA not before: Fri 22 Aug 2025 08:46:25 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 103.224.192.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14734 (0x398e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:25 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=A1747A97E234D1E9E0AA7C0D0144A7CEAA006C4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:66:e1:19:90:76:c9:9f:1f:43:8b:1c:9a:5c: d6:98:d1:8f:38:db:01:16:ec:b9:d0:83:48:98:d2: ae:17:a1:69:89:f4:dc:86:f6:4c:c5:7f:e9:87:3a: a8:c2:8b:96:80:e0:24:5a:cf:9f:8f:1e:d4:f8:c4: b8:7a:e1:b5:11:0e:18:dd:91:72:de:3c:4e:8a:74: 60:d8:73:2d:00:5e:d5:d4:eb:0a:4b:a6:73:6d:a4: 1e:e5:a5:0c:01:20:2c:2a:e8:09:4c:27:c7:ff:b2: 23:e5:e8:16:93:65:1c:7b:9b:a5:31:8e:fd:b8:d7: 8c:1c:2c:52:42:34:80:b7:8f:ab:63:d3:80:f5:27: 22:ee:8e:83:db:a1:0e:0d:94:41:c7:10:97:d2:4f: 4f:ce:36:61:a9:49:ae:05:69:ba:cb:86:32:a8:d2: 0e:1f:59:91:b9:68:d0:7a:0d:e3:b6:1b:9f:f1:7b: c4:e0:59:e2:d2:b7:f7:67:ff:48:da:38:d0:e2:7d: dc:52:f1:70:63:50:d1:f0:25:a8:19:c1:7d:26:d4: 62:cf:7e:2c:cb:b5:6e:11:55:c1:85:5b:78:de:9d: 3b:77:dc:61:5c:bb:43:52:d3:12:a8:fe:41:23:98: 6e:3a:09:7e:14:00:30:2a:21:30:ff:12:e9:c7:12: e9:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:74:7A:97:E2:34:D1:E9:E0:AA:7C:0D:01:44:A7:CE:AA:00:6C:4E X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oXR6l-I00engqnwNAUSnzqoAbE4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.224.192.0/22 Signature Algorithm: sha256WithRSAEncryption 7e:8e:6b:27:5e:da:3b:a0:61:3c:1a:1f:38:7f:ed:f1:a1:b5: e9:37:72:ba:16:61:8c:ce:bd:2d:01:9a:39:4b:7e:46:6d:2a: 95:d1:c7:eb:2a:4b:51:a4:24:c6:37:85:e8:56:bf:b3:9f:de: 61:d7:7a:8e:b7:60:9a:55:34:32:bc:c8:8b:52:3c:78:ad:11: bb:b4:a5:3c:a1:7b:48:01:f0:56:67:39:af:e1:bd:73:1c:11: 7f:0d:cb:47:af:48:76:bc:84:00:50:75:35:c1:62:6d:9b:07: a8:07:6c:f5:c6:d1:ea:39:db:ad:5b:f9:0e:00:61:ba:39:e1: 37:3b:fd:24:87:72:a8:c5:80:27:a9:0c:42:2f:ef:d8:d5:67: d6:e1:c7:cc:5e:80:13:21:fe:f0:7b:da:65:16:d3:3c:47:ed: 27:5a:0a:15:62:bc:19:38:00:3e:97:7c:69:0d:de:52:5a:c9: 58:b6:a6:89:83:26:2e:6b:d7:cb:2a:d7:cd:ff:77:40:81:44: fc:b4:ec:88:34:11:be:d8:f6:f1:f9:28:a5:b1:1e:86:c8:29: 45:0c:1c:0b:b4:f1:b2:ab:b8:50:28:a2:95:e1:ef:2b:a8:4d: 2c:12:8d:ac:5b:2e:fe:04:d8:59:c3:97:9a:fe:4b:26:df:50: c6:7e:df:21 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOY4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2MjVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEExNzQ3QTk3RTIzNEQx RTlFMEFBN0MwRDAxNDRBN0NFQUEwMDZDNEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYZuEZkHbJnx9DixyaXNaY0Y842wEW7LnQg0iY0q4XoWmJ9NyG 9kzFf+mHOqjCi5aA4CRaz5+PHtT4xLh64bURDhjdkXLePE6KdGDYcy0AXtXU6wpL pnNtpB7lpQwBICwq6AlMJ8f/siPl6BaTZRx7m6Uxjv2414wcLFJCNIC3j6tj04D1 JyLujoPboQ4NlEHHEJfST0/ONmGpSa4FabrLhjKo0g4fWZG5aNB6DeO2G5/xe8Tg WeLSt/dn/0jaONDifdxS8XBjUNHwJagZwX0m1GLPfizLtW4RVcGFW3jenTt33GFc u0NS0xKo/kEjmG46CX4UADAqITD/EunHEumFAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUoXR6l+I00engqnwNAUSnzqoAbE4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL29YUjZsLUkwMGVuZ3Fud05B VVNuenFvQWJFNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJn 4MAwDQYJKoZIhvcNAQELBQADggEBAH6Oayde2jugYTwaHzh/7fGhtek3croWYYzO vS0BmjlLfkZtKpXRx+sqS1GkJMY3hehWv7Of3mHXeo63YJpVNDK8yItSPHitEbu0 pTyhe0gB8FZnOa/hvXMcEX8Ny0evSHa8hABQdTXBYm2bB6gHbPXG0eo5261b+Q4A Ybo54Tc7/SSHcqjFgCepDEIv79jVZ9bhx8xegBMh/vB72mUW0zxH7SdaChVivBk4 AD6XfGkN3lJayVi2pomDJi5r18sq183/d0CBRPy07Ig0Eb7Y9vH5KKWxHobIKUUM HAu08bKruFAoopXh7yuoTSwSjaxbLv4E2FnDl5r+SybfUMZ+3yE= -----END CERTIFICATE-----Generated at Fri Oct 24 19:24:32 2025 by rpki-client