$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rBPNocRxfhcW7vh4kK7SPOw_EX8.roa File: rBPNocRxfhcW7vh4kK7SPOw_EX8.roa (raw, json) Hash identifier: ZAZ7uNPz6E+K06g3le2Rb28GvYO0YEU4xLmzVDkDegs= Subject key identifier: AC:13:CD:A1:C4:71:7E:17:16:EE:F8:78:90:AE:D2:3C:EC:3F:11:7F Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3B29 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rBPNocRxfhcW7vh4kK7SPOw_EX8.roa Signing time: Fri 22 Aug 2025 08:48:07 +0000 ROA not before: Fri 22 Aug 2025 08:48:07 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.194.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15145 (0x3b29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:48:07 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=AC13CDA1C4717E1716EEF87890AED23CEC3F117F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c3:08:bb:f3:e9:fc:e0:22:df:70:bc:c9:ed: 6a:12:d5:69:4a:3f:a8:b5:bf:83:d5:09:89:2b:0e: 1a:8f:7a:67:cd:ea:75:5c:b5:8b:47:cb:82:ec:dc: e9:bf:52:fb:8e:01:2d:3e:8b:91:12:88:58:03:50: d5:d6:db:80:e8:99:a8:dc:ea:77:13:61:e3:bc:6a: f1:42:fa:a8:16:dc:f1:02:b8:be:c4:1c:13:f3:bd: 77:3c:c4:47:00:1a:99:27:75:1c:b6:db:48:3b:d0: 49:c8:27:08:54:2b:63:ce:39:bd:16:a4:48:ad:fd: 30:aa:bf:a1:34:8a:f3:86:85:a9:8f:92:ba:23:c4: 90:21:cb:36:41:44:a0:0a:9d:03:86:d5:71:5d:6d: 63:67:4d:f7:34:03:f2:16:4f:02:74:c5:7c:57:51: f2:22:5f:e5:68:55:2a:af:f5:12:16:0e:c4:51:05: 07:a0:35:49:6c:ee:67:9b:b7:0c:ed:96:c9:09:49: d9:25:38:db:e2:00:91:35:39:11:a6:cb:59:7a:b0: 9e:20:0c:01:ff:d5:ea:2b:11:f6:92:3d:94:cf:a1: 0e:78:b7:6a:a8:5e:db:57:36:9f:6b:cb:db:6a:1d: bb:7f:e7:68:79:ed:0c:01:4f:e0:71:3f:f3:75:93: af:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:13:CD:A1:C4:71:7E:17:16:EE:F8:78:90:AE:D2:3C:EC:3F:11:7F X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rBPNocRxfhcW7vh4kK7SPOw_EX8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.16.0/22 Signature Algorithm: sha256WithRSAEncryption 07:7d:e6:f5:7d:38:88:3e:80:d0:9b:c3:01:e8:8f:13:8c:af: 51:7e:3a:58:d3:85:37:00:05:7b:0f:fa:4c:5c:29:69:23:fc: 92:49:1c:c8:cf:96:2e:38:21:82:ce:de:53:b0:1b:11:0b:e4: 71:9c:2e:e5:7a:10:7a:35:b9:61:e1:10:ba:c5:58:96:0d:82: 91:ab:f8:7e:76:82:51:52:95:3e:0f:9d:4f:11:76:9a:96:5a: 3f:04:c3:a2:43:18:78:57:2b:29:26:c0:93:9e:11:7a:7f:de: 1e:72:1c:df:4f:e4:8a:4e:88:cb:eb:a7:5c:50:7d:3a:ed:d4: ab:02:a0:77:59:92:29:5e:7e:c0:c4:e5:a1:f2:81:80:84:6d: 5c:e2:e9:be:9a:92:40:3b:5d:69:ae:c2:2e:cc:69:5f:93:fd: 05:0f:1d:d6:7d:09:4b:66:54:b9:01:af:af:49:3d:e6:07:23: c3:57:ea:ef:ad:8c:cb:5e:87:8a:d3:bc:f4:a5:44:4e:1a:4a: be:e4:45:30:1a:a0:d4:25:f0:2e:bd:7b:f0:13:15:db:e5:51: df:89:90:2f:f6:78:ad:a0:03:65:a5:88:a5:e8:13:b0:49:4c: 16:44:23:29:41:c8:b4:e1:9b:e2:c7:9c:63:7b:c5:08:12:b1: 8a:ff:92:a3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOykwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ4MDdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEFDMTNDREExQzQ3MTdF MTcxNkVFRjg3ODkwQUVEMjNDRUMzRjExN0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9wwi78+n84CLfcLzJ7WoS1WlKP6i1v4PVCYkrDhqPemfN6nVc tYtHy4Ls3Om/UvuOAS0+i5ESiFgDUNXW24Domajc6ncTYeO8avFC+qgW3PECuL7E HBPzvXc8xEcAGpkndRy220g70EnIJwhUK2POOb0WpEit/TCqv6E0ivOGhamPkroj xJAhyzZBRKAKnQOG1XFdbWNnTfc0A/IWTwJ0xXxXUfIiX+VoVSqv9RIWDsRRBQeg NUls7mebtwztlskJSdklONviAJE1ORGmy1l6sJ4gDAH/1eorEfaSPZTPoQ54t2qo XttXNp9ry9tqHbt/52h57QwBT+BxP/N1k6/nAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUrBPNocRxfhcW7vh4kK7SPOw/EX8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3JCUE5vY1J4ZmhjVzd2aDRr SzdTUE93X0VYOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 whAwDQYJKoZIhvcNAQELBQADggEBAAd95vV9OIg+gNCbwwHojxOMr1F+OljThTcA BXsP+kxcKWkj/JJJHMjPli44IYLO3lOwGxEL5HGcLuV6EHo1uWHhELrFWJYNgpGr +H52glFSlT4PnU8RdpqWWj8Ew6JDGHhXKykmwJOeEXp/3h5yHN9P5IpOiMvrp1xQ fTrt1KsCoHdZkilefsDE5aHygYCEbVzi6b6akkA7XWmuwi7MaV+T/QUPHdZ9CUtm VLkBr69JPeYHI8NX6u+tjMteh4rTvPSlRE4aSr7kRTAaoNQl8C69e/ATFdvlUd+J kC/2eK2gA2WliKXoE7BJTBZEIylByLThm+LHnGN7xQgSsYr/kqM= -----END CERTIFICATE-----Generated at Fri Oct 24 19:21:55 2025 by rpki-client