$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oq1j0tdSHnLyhjo3MkVvx7el-yM.roa File: oq1j0tdSHnLyhjo3MkVvx7el-yM.roa (raw, json) Hash identifier: SnuJqzRNRNdU/hNGWS9YeAAQkkagrOHmGngGk8YHpc8= Subject key identifier: A2:AD:63:D2:D7:52:1E:72:F2:86:3A:37:32:45:6F:C7:B7:A5:FB:23 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3AF8 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oq1j0tdSHnLyhjo3MkVvx7el-yM.roa Signing time: Fri 22 Aug 2025 08:47:56 +0000 ROA not before: Fri 22 Aug 2025 08:47:56 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.192.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15096 (0x3af8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:56 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=A2AD63D2D7521E72F2863A3732456FC7B7A5FB23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f3:70:17:47:0e:1c:74:80:01:35:cd:3d:2c: 8c:c8:96:ef:65:70:63:cb:26:24:98:13:d5:3a:dc: 32:71:70:ba:31:17:97:a0:81:92:8c:a0:c3:ca:e1: 6d:a1:20:7d:f0:fe:d7:4c:f2:8f:56:fe:d3:e3:6a: a5:64:82:93:2d:0c:fe:8a:c9:db:83:2e:7f:22:1f: 9c:af:be:86:58:9a:f2:75:a0:d0:0f:0b:8c:61:36: ca:b8:a7:8f:91:48:f9:d0:16:9e:d5:86:f5:f3:86: 98:b6:ed:ea:1a:fb:f5:c3:39:66:33:fe:25:8b:cb: 61:83:5b:c5:5b:e2:52:df:28:8f:18:33:14:cf:02: 20:58:20:59:74:93:93:4e:82:ae:50:52:ec:95:d2: c2:75:9d:6b:d2:1e:2a:64:f6:da:5a:04:34:ed:b2: 97:0f:0a:29:4d:ed:f1:8a:31:8d:da:16:b2:ff:d8: ad:17:86:5b:38:50:d2:c3:d4:52:59:b8:ca:79:a0: 95:da:9c:e1:d3:28:61:91:d9:fe:ac:46:5e:12:70: 85:d7:15:09:79:67:1e:b1:81:82:99:90:c4:96:63: d9:1f:e6:33:b3:50:97:93:e3:3a:de:80:cb:3d:60: b3:aa:1e:c1:ae:27:28:da:ab:f9:08:93:da:9c:b3: ed:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:AD:63:D2:D7:52:1E:72:F2:86:3A:37:32:45:6F:C7:B7:A5:FB:23 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oq1j0tdSHnLyhjo3MkVvx7el-yM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.108.0/22 Signature Algorithm: sha256WithRSAEncryption 48:47:a7:68:e9:54:5d:68:bd:72:43:f7:6a:11:a4:a3:5a:a3: 40:d3:61:52:f8:55:47:d0:c9:91:e5:35:67:0f:85:3b:23:fd: 89:58:45:99:cc:78:18:d5:61:2d:4c:a2:ad:9b:99:75:57:e9: f3:e7:21:79:ec:06:e0:5b:38:41:34:6c:8b:c6:dd:2c:73:f6: 80:45:20:25:69:18:ab:3d:e9:45:07:53:63:d8:b6:9c:b8:6a: d6:65:34:28:39:e9:6e:10:ba:b0:89:7c:4b:3f:96:72:4b:ed: 6a:01:8d:b8:25:54:03:c6:73:cd:a4:70:01:d2:c0:b7:8c:5f: 9d:51:da:3d:a3:94:3f:94:84:cf:ea:50:0d:4c:85:16:38:45: 37:cf:8c:7f:23:a3:88:71:44:ed:39:c0:72:29:48:81:8a:fd: ce:9d:04:f5:f8:6d:fc:24:43:c2:91:1a:c0:54:65:2a:ff:7e: 58:5a:dd:e7:80:5d:3f:47:16:25:00:13:c7:56:3c:3c:68:07: 71:3f:df:fa:de:f7:ea:fd:e4:61:20:59:54:2d:99:d1:da:42: 7e:e2:01:61:44:f9:ae:1a:f2:1d:7e:4c:77:9a:04:80:89:c7: c9:7b:d1:64:0c:bd:cc:ab:b2:d6:ed:4c:0e:d4:95:61:0e:8d: 11:f1:49:38 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOvgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3NTZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEEyQUQ2M0QyRDc1MjFF NzJGMjg2M0EzNzMyNDU2RkM3QjdBNUZCMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDc83AXRw4cdIABNc09LIzIlu9lcGPLJiSYE9U63DJxcLoxF5eg gZKMoMPK4W2hIH3w/tdM8o9W/tPjaqVkgpMtDP6KyduDLn8iH5yvvoZYmvJ1oNAP C4xhNsq4p4+RSPnQFp7VhvXzhpi27eoa+/XDOWYz/iWLy2GDW8Vb4lLfKI8YMxTP AiBYIFl0k5NOgq5QUuyV0sJ1nWvSHipk9tpaBDTtspcPCilN7fGKMY3aFrL/2K0X hls4UNLD1FJZuMp5oJXanOHTKGGR2f6sRl4ScIXXFQl5Zx6xgYKZkMSWY9kf5jOz UJeT4zregMs9YLOqHsGuJyjaq/kIk9qcs+0LAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUoq1j0tdSHnLyhjo3MkVvx7el+yMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL29xMWowdGRTSG5MeWhqbzNN a1Z2eDdlbC15TS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wGwwDQYJKoZIhvcNAQELBQADggEBAEhHp2jpVF1ovXJD92oRpKNao0DTYVL4VUfQ yZHlNWcPhTsj/YlYRZnMeBjVYS1Moq2bmXVX6fPnIXnsBuBbOEE0bIvG3Sxz9oBF ICVpGKs96UUHU2PYtpy4atZlNCg56W4QurCJfEs/lnJL7WoBjbglVAPGc82kcAHS wLeMX51R2j2jlD+UhM/qUA1MhRY4RTfPjH8jo4hxRO05wHIpSIGK/c6dBPX4bfwk Q8KRGsBUZSr/flha3eeAXT9HFiUAE8dWPDxoB3E/3/re9+r95GEgWVQtmdHaQn7i AWFE+a4a8h1+THeaBICJx8l70WQMvcyrstbtTA7UlWEOjRHxSTg= -----END CERTIFICATE-----Generated at Fri Oct 24 19:21:27 2025 by rpki-client