$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/oK-ViXr7bj217cddUPIGwQOALGE.roa File: oK-ViXr7bj217cddUPIGwQOALGE.roa (raw, json) Hash identifier: +xq+21sa4g/iDyjlH5yDG+cVFg6rZUJ94bwVhBXiDVc= Subject key identifier: A0:AF:95:89:7A:FB:6E:3D:B5:ED:C7:5D:50:F2:06:C1:03:80:2C:61 Certificate issuer: /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7 Certificate serial: 0E5E Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/oK-ViXr7bj217cddUPIGwQOALGE.roa Signing time: Fri 22 Aug 2025 08:58:12 +0000 ROA not before: Fri 22 Aug 2025 08:58:12 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17709 IP address blocks: 2405:9200::/32 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 20:59:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3678 (0xe5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7 Validity Not Before: Aug 22 08:58:12 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=A0AF95897AFB6E3DB5EDC75D50F206C103802C61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6b:c6:3b:13:5f:2c:84:80:fb:92:66:38:8a: d5:bf:61:55:b2:41:e0:09:12:62:97:e4:32:fa:04: d6:34:8f:f1:ee:3d:7d:0a:d7:f1:6f:56:42:b1:4a: 9c:47:08:20:14:98:34:ae:ec:82:44:5e:6c:f8:99: 07:be:d3:56:0f:e8:4a:e2:30:94:6d:44:be:c1:a9: 1f:5c:50:0d:e1:1c:e4:00:38:e8:ad:4b:03:be:7c: 25:d5:32:17:ff:b7:68:b2:97:cf:d4:51:3a:f8:32: 66:45:a1:57:df:12:92:cd:08:06:7f:80:f0:44:80: a5:75:e1:23:2e:30:e3:b3:47:44:30:62:c9:86:e4: 66:b9:ef:7f:96:27:77:c9:30:b5:e6:5f:22:73:32: 3e:8b:d7:5c:9f:a8:b5:c0:e4:09:41:01:a7:b8:8d: 56:69:65:a4:55:b7:55:a6:63:46:14:ea:ca:83:94: 8a:95:54:08:7f:39:43:9b:79:5e:3e:b6:4c:2d:de: eb:3c:96:19:7c:4f:dc:67:5b:e7:f2:25:cc:bc:cc: c9:6f:2c:c0:2b:05:57:be:ed:08:7f:c6:50:93:43: 0c:54:8b:b6:15:04:7a:1a:41:09:d8:eb:37:b6:96: 39:d0:89:b8:3b:36:19:6f:bf:b0:2f:1e:43:db:54: 2e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:AF:95:89:7A:FB:6E:3D:B5:ED:C7:5D:50:F2:06:C1:03:80:2C:61 X509v3 Authority Key Identifier: keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/oK-ViXr7bj217cddUPIGwQOALGE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2405:9200::/32 Signature Algorithm: sha256WithRSAEncryption 43:cc:c6:30:61:6f:43:74:65:03:a3:99:05:76:1b:f2:95:17: 1f:e3:34:84:d5:3a:32:df:f8:50:10:ff:a1:cf:7e:54:40:e3: 74:8f:bd:44:da:2e:9b:95:fd:27:79:38:65:8c:62:ff:81:0b: cd:dc:a0:f8:43:b4:ea:95:76:44:ae:2b:25:2a:9b:8f:1d:8b: da:93:28:9a:76:70:29:f3:e7:df:40:47:ea:7c:ff:7a:f6:7c: 88:ac:48:ed:3a:42:77:3a:83:54:c4:8b:82:77:bd:29:15:da: cc:01:cb:78:e4:bd:29:39:42:78:ad:a5:e1:a9:94:06:a0:a9: 41:61:42:2c:31:a4:76:11:db:12:3a:1b:cd:64:69:cf:b5:cd: 38:2e:63:67:98:ec:5d:7d:2b:58:eb:cc:e0:52:1e:b1:a7:74: 7d:4b:38:b5:69:cb:35:0b:b3:0b:36:9b:1d:c6:24:cc:c2:1a: b3:56:fa:93:42:9e:fb:f0:c4:9c:67:e9:db:4a:05:10:03:05: d1:f8:9c:72:7b:2c:8c:7b:94:47:a4:6b:07:02:f7:8a:70:27: 8e:06:11:66:78:6a:e3:df:29:e2:4c:81:e8:c2:db:a0:7f:86: 96:42:c0:b7:63:81:e6:7c:87:b7:5e:cc:a9:65:d1:12:c2:6b: f1:d0:e4:ac -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICDl4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODMy NzIwRUIwQkVBMDA1QzNFREU1NzRFMzFDMEFCNzU2M0ZBMENDNzAeFw0yNTA4MjIw ODU4MTJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEEwQUY5NTg5N0FGQjZF M0RCNUVEQzc1RDUwRjIwNkMxMDM4MDJDNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxa8Y7E18shID7kmY4itW/YVWyQeAJEmKX5DL6BNY0j/HuPX0K 1/FvVkKxSpxHCCAUmDSu7IJEXmz4mQe+01YP6EriMJRtRL7BqR9cUA3hHOQAOOit SwO+fCXVMhf/t2iyl8/UUTr4MmZFoVffEpLNCAZ/gPBEgKV14SMuMOOzR0QwYsmG 5Ga573+WJ3fJMLXmXyJzMj6L11yfqLXA5AlBAae4jVZpZaRVt1WmY0YU6sqDlIqV VAh/OUObeV4+tkwt3us8lhl8T9xnW+fyJcy8zMlvLMArBVe+7Qh/xlCTQwxUi7YV BHoaQQnY6ze2ljnQibg7Nhlvv7AvHkPbVC6BAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUoK+ViXr7bj217cddUPIGwQOALGEwHwYDVR0jBBgwFoAUgycg6wvqAFw+3ldO McCrdWP6DMcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEJDT00v Z3ljZzZ3dnFBRnctM2xkT01jQ3JkV1A2RE1jLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9neWNnNnd2cUFGdy0zbGRPTWNDcmRXUDZETWMuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQkNPTS9vSy1WaVhyN2JqMjE3Y2RkVVBJ R3dRT0FMR0Uucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAWS ADANBgkqhkiG9w0BAQsFAAOCAQEAQ8zGMGFvQ3RlA6OZBXYb8pUXH+M0hNU6Mt/4 UBD/oc9+VEDjdI+9RNoum5X9J3k4ZYxi/4ELzdyg+EO06pV2RK4rJSqbjx2L2pMo mnZwKfPn30BH6nz/evZ8iKxI7TpCdzqDVMSLgne9KRXazAHLeOS9KTlCeK2l4amU BqCpQWFCLDGkdhHbEjobzWRpz7XNOC5jZ5jsXX0rWOvM4FIesad0fUs4tWnLNQuz CzabHcYkzMIas1b6k0Ke+/DEnGfp20oFEAMF0ficcnssjHuUR6RrBwL3inAnjgYR Znhq498p4kyB6MLboH+GlkLAt2OB5nyHt17MqWXREsJr8dDkrA== -----END CERTIFICATE-----Generated at Wed Nov 5 19:56:47 2025 by rpki-client