$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/oOd2jq6uUAtRp5fNdA28BQ7l-U4.roa File: oOd2jq6uUAtRp5fNdA28BQ7l-U4.roa (raw, json) Hash identifier: 9E0hj5bG7xWVXPw0wj4aNSed+yub2w97E6UeeDZB0WI= Subject key identifier: A0:E7:76:8E:AE:AE:50:0B:51:A7:97:CD:74:0D:BC:05:0E:E5:F9:4E Certificate issuer: /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7 Certificate serial: 0E77 Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/oOd2jq6uUAtRp5fNdA28BQ7l-U4.roa Signing time: Fri 22 Aug 2025 08:58:19 +0000 ROA not before: Fri 22 Aug 2025 08:58:19 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17709 IP address blocks: 123.240.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3703 (0xe77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7 Validity Not Before: Aug 22 08:58:19 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=A0E7768EAEAE500B51A797CD740DBC050EE5F94E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:dc:7c:3f:42:fe:0a:26:31:64:29:76:5c:97: b9:22:d6:20:91:08:59:9c:59:61:d5:a0:98:b6:8b: cc:9b:01:60:a5:1e:51:72:ae:83:2a:a8:0b:0e:64: 51:91:6e:00:09:d5:b3:e5:b6:03:ba:c3:41:04:11: d3:3d:f3:e0:c9:25:5a:3a:94:d6:e3:af:5c:d8:59: e8:39:aa:4e:2d:f3:5a:ad:d0:96:b1:ee:5b:7a:a4: 0d:86:84:86:f4:8e:41:f9:8d:6a:9b:75:5d:21:b3: 33:3a:12:12:44:8f:6b:4e:76:c4:63:0c:8c:97:ff: fa:77:e1:a5:9b:2c:1b:f0:1c:d6:a5:0d:d8:39:2b: 23:7b:f8:46:c2:9d:c1:03:0f:7e:e8:14:c7:84:2b: 35:e1:5c:cf:a9:a4:ce:2a:f1:88:13:e3:f4:17:c5: a1:18:39:ce:5b:87:f1:fc:f2:76:83:3a:81:d8:3d: 94:84:25:57:a0:8c:43:ef:73:ea:82:22:3c:93:41: 47:a1:0d:3e:9e:b1:03:03:eb:40:72:11:8b:72:eb: 25:b1:aa:df:c7:e2:19:98:50:eb:cc:b7:b3:ad:dc: 25:2d:42:f0:6f:5b:d6:54:32:ba:79:94:6b:92:68: 70:e5:97:51:e3:20:4d:45:58:37:eb:62:89:70:53: a9:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:E7:76:8E:AE:AE:50:0B:51:A7:97:CD:74:0D:BC:05:0E:E5:F9:4E X509v3 Authority Key Identifier: keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/oOd2jq6uUAtRp5fNdA28BQ7l-U4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.240.0.0/15 Signature Algorithm: sha256WithRSAEncryption 1c:63:6b:c2:87:ae:b8:38:99:2d:b2:ef:95:3f:83:61:42:b6: 87:4a:aa:b4:f9:bf:0b:54:56:2d:9c:6f:a4:f9:14:46:30:6f: 2d:e1:0f:3c:61:5c:08:d8:93:15:f9:f4:a2:b4:93:16:41:06: 56:cd:10:ff:f8:c7:a9:75:6e:af:7b:91:ba:8e:c4:1c:70:3e: 26:77:e7:b5:15:65:00:6b:4e:d9:af:c9:64:2e:a0:cd:0f:35: 00:a6:45:6f:78:1f:ef:9b:ed:b7:04:1b:38:ea:c0:ac:3c:df: 79:9f:9a:22:35:51:c0:b0:4b:30:bb:fe:6e:3d:70:cf:2a:9d: 59:a2:ed:18:7e:b6:c9:bd:9c:79:3a:09:58:53:10:53:8f:e4: 4c:ab:a1:c7:4d:e6:fd:d2:ee:a5:51:13:67:20:76:20:9d:8b: e2:a4:9c:e2:93:6b:33:43:2f:98:78:8c:34:73:47:b5:d9:7c: ef:77:17:3f:bb:2c:1c:47:c3:a0:2e:8c:27:7e:3d:59:f0:1c: b0:a9:1a:f7:86:0f:65:2e:cc:96:73:45:23:8b:2c:12:0a:9e: c5:65:bb:73:44:70:67:b5:c4:82:ca:02:00:b7:00:e5:59:06: 69:00:d8:8a:f4:59:12:e9:6e:57:2f:e9:1f:b4:6b:83:fe:25: 14:d6:6a:db -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICDncwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODMy NzIwRUIwQkVBMDA1QzNFREU1NzRFMzFDMEFCNzU2M0ZBMENDNzAeFw0yNTA4MjIw ODU4MTlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEEwRTc3NjhFQUVBRTUw MEI1MUE3OTdDRDc0MERCQzA1MEVFNUY5NEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDB3Hw/Qv4KJjFkKXZcl7ki1iCRCFmcWWHVoJi2i8ybAWClHlFy roMqqAsOZFGRbgAJ1bPltgO6w0EEEdM98+DJJVo6lNbjr1zYWeg5qk4t81qt0Jax 7lt6pA2GhIb0jkH5jWqbdV0hszM6EhJEj2tOdsRjDIyX//p34aWbLBvwHNalDdg5 KyN7+EbCncEDD37oFMeEKzXhXM+ppM4q8YgT4/QXxaEYOc5bh/H88naDOoHYPZSE JVegjEPvc+qCIjyTQUehDT6esQMD60ByEYty6yWxqt/H4hmYUOvMt7Ot3CUtQvBv W9ZUMrp5lGuSaHDll1HjIE1FWDfrYolwU6kVAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUoOd2jq6uUAtRp5fNdA28BQ7l+U4wHwYDVR0jBBgwFoAUgycg6wvqAFw+3ldO McCrdWP6DMcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEJDT00v Z3ljZzZ3dnFBRnctM2xkT01jQ3JkV1A2RE1jLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9neWNnNnd2cUFGdy0zbGRPTWNDcmRXUDZETWMuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQkNPTS9vT2QyanE2dVVBdFJwNWZOZEEy OEJRN2wtVTQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBe/Aw DQYJKoZIhvcNAQELBQADggEBABxja8KHrrg4mS2y75U/g2FCtodKqrT5vwtUVi2c b6T5FEYwby3hDzxhXAjYkxX59KK0kxZBBlbNEP/4x6l1bq97kbqOxBxwPiZ357UV ZQBrTtmvyWQuoM0PNQCmRW94H++b7bcEGzjqwKw833mfmiI1UcCwSzC7/m49cM8q nVmi7Rh+tsm9nHk6CVhTEFOP5EyrocdN5v3S7qVRE2cgdiCdi+KknOKTazNDL5h4 jDRzR7XZfO93Fz+7LBxHw6AujCd+PVnwHLCpGveGD2UuzJZzRSOLLBIKnsVlu3NE cGe1xILKAgC3AOVZBmkA2Ir0WRLpblcv6R+0a4P+JRTWats= -----END CERTIFICATE-----Generated at Wed Nov 5 21:24:20 2025 by rpki-client