$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0YYTYKqa8kox_eTu3JcJN0cqozc.roa File: 0YYTYKqa8kox_eTu3JcJN0cqozc.roa (raw, json) Hash identifier: pnB48HPcyXwcm/ujtz0bwCEvsQ2dIvpMcQW8Wvy+G+E= Subject key identifier: D1:86:13:60:AA:9A:F2:4A:31:FD:E4:EE:DC:97:09:37:47:2A:A3:37 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 38A8 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0YYTYKqa8kox_eTu3JcJN0cqozc.roa Signing time: Fri 22 Aug 2025 08:45:30 +0000 ROA not before: Fri 22 Aug 2025 08:45:30 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 180.176.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14504 (0x38a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:30 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=D1861360AA9AF24A31FDE4EEDC970937472AA337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b9:41:30:99:e2:13:cd:42:bb:d4:04:e3:83: fc:e7:8a:14:a1:c9:e4:81:bb:6a:1b:3c:c4:d7:e2: 33:5e:29:11:01:18:b6:d2:f8:6d:a3:2f:f7:2d:c2: 47:df:dd:98:10:45:b1:9d:ca:44:1c:c3:e9:bd:c3: dc:41:ae:66:6b:c0:bb:99:53:52:6e:47:12:1a:88: 36:ea:5f:c2:c7:c0:6e:ce:25:8f:af:cf:50:1d:13: 30:dc:ed:c9:78:3f:a9:2c:48:56:b2:4d:02:d7:2d: bd:8c:bf:31:ae:16:6b:ce:29:56:9f:68:c2:45:9e: 24:5a:62:8e:ab:31:ab:d7:39:42:69:94:d5:e9:3f: ba:9f:66:8a:ec:5a:cf:2a:7c:a7:5c:50:6f:29:6c: c2:5b:78:cd:94:ff:cb:ad:70:2c:1e:ef:53:91:f6: 11:e8:f4:f4:25:19:ec:11:49:26:72:c6:2b:7f:56: e9:6d:4f:fb:59:0c:b5:46:1d:6b:dd:fc:57:52:d8: 5a:52:3e:cf:89:7d:b2:25:71:df:1b:13:ff:17:ee: 44:07:83:69:93:2a:7f:8f:1e:6d:31:1a:b7:3b:21: 5a:4c:2b:1c:b6:5f:8c:0f:e6:ab:57:c5:0a:fb:38: 43:47:c2:f8:73:76:29:8f:14:67:9d:70:e5:19:21: 02:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:86:13:60:AA:9A:F2:4A:31:FD:E4:EE:DC:97:09:37:47:2A:A3:37 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0YYTYKqa8kox_eTu3JcJN0cqozc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.176.0/21 Signature Algorithm: sha256WithRSAEncryption 23:d0:bd:39:d7:2b:de:ca:1f:dd:9c:8c:be:37:cd:dc:2b:12: 41:eb:2e:6c:8b:4c:97:2e:da:a9:11:28:eb:4f:d2:8d:f9:c0: bd:1c:df:ac:50:3e:a1:49:0d:32:34:8d:93:79:f5:24:c6:a4: df:e2:21:55:06:87:a5:b7:c8:72:4b:ed:7e:d3:d8:a3:3f:ff: 44:31:99:ba:7f:86:84:b7:a0:21:59:c6:85:41:3e:bb:42:62: 0a:54:28:88:b2:e5:33:b9:2d:7d:ba:d4:6b:ca:6f:43:f2:15: 2d:4d:7b:6e:d6:93:7b:ed:44:01:a9:17:0e:4e:cf:7a:3c:71: da:91:17:f1:8b:be:24:ab:59:56:38:ce:e8:50:79:da:39:43: 94:2c:73:e3:d3:87:74:80:dc:f6:d1:55:3a:06:ab:56:f8:f0: 34:c3:5c:88:fe:d0:61:6a:21:5d:43:f8:5a:0c:78:18:21:a3: 12:fc:14:2a:b7:bd:4c:53:32:21:29:fc:f5:ad:c7:24:57:55: 10:01:7e:a0:21:84:02:5e:e2:2f:7e:13:2d:13:00:60:41:c8: 6f:76:3a:8b:58:6e:7b:53:ee:bd:30:61:da:16:c6:d9:0d:7c: 39:2b:82:93:6e:89:1a:cc:09:59:1f:76:09:7b:82:5f:a8:a3: ca:d1:d4:bb -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOKgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1MzBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEQxODYxMzYwQUE5QUYy NEEzMUZERTRFRURDOTcwOTM3NDcyQUEzMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4uUEwmeITzUK71ATjg/znihShyeSBu2obPMTX4jNeKREBGLbS +G2jL/ctwkff3ZgQRbGdykQcw+m9w9xBrmZrwLuZU1JuRxIaiDbqX8LHwG7OJY+v z1AdEzDc7cl4P6ksSFayTQLXLb2MvzGuFmvOKVafaMJFniRaYo6rMavXOUJplNXp P7qfZorsWs8qfKdcUG8pbMJbeM2U/8utcCwe71OR9hHo9PQlGewRSSZyxit/Vult T/tZDLVGHWvd/FdS2FpSPs+JfbIlcd8bE/8X7kQHg2mTKn+PHm0xGrc7IVpMKxy2 X4wP5qtXxQr7OENHwvhzdimPFGedcOUZIQKLAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU0YYTYKqa8kox/eTu3JcJN0cqozcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzBZWVRZS3FhOGtveF9lVHUz SmNKTjBjcW96Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 sLAwDQYJKoZIhvcNAQELBQADggEBACPQvTnXK97KH92cjL43zdwrEkHrLmyLTJcu 2qkRKOtP0o35wL0c36xQPqFJDTI0jZN59STGpN/iIVUGh6W3yHJL7X7T2KM//0Qx mbp/hoS3oCFZxoVBPrtCYgpUKIiy5TO5LX261GvKb0PyFS1Ne27Wk3vtRAGpFw5O z3o8cdqRF/GLviSrWVY4zuhQedo5Q5Qsc+PTh3SA3PbRVToGq1b48DTDXIj+0GFq IV1D+FoMeBghoxL8FCq3vUxTMiEp/PWtxyRXVRABfqAhhAJe4i9+Ey0TAGBByG92 OotYbntT7r0wYdoWxtkNfDkrgpNuiRrMCVkfdgl7gl+oo8rR1Ls= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:49 2025 by rpki-client