$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2mcd6bHoApMKHOKDLwLndhr6taE.roa File: 2mcd6bHoApMKHOKDLwLndhr6taE.roa (raw, json) Hash identifier: pUYnAoG4HFhAEBTxcrORULZnirSLeNc8rSrAlBslHCE= Subject key identifier: DA:67:1D:E9:B1:E8:02:93:0A:1C:E2:83:2F:02:E7:76:1A:FA:B5:A1 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 39EE Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2mcd6bHoApMKHOKDLwLndhr6taE.roa Signing time: Fri 22 Aug 2025 08:46:49 +0000 ROA not before: Fri 22 Aug 2025 08:46:49 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 180.177.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14830 (0x39ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:49 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=DA671DE9B1E802930A1CE2832F02E7761AFAB5A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cd:80:bb:f5:79:75:ff:9c:ec:19:29:31:da: c9:d7:0d:d2:e3:31:da:b9:ee:ad:1a:8f:54:60:ed: e1:b4:1a:e8:55:f1:2a:db:c0:76:d8:f1:d5:21:ab: 93:d7:25:d4:7a:c4:6b:3a:19:92:78:b2:98:9d:65: 27:7c:94:96:11:14:65:a5:39:fc:40:1f:4d:47:7d: ad:5e:4c:62:dc:6b:e3:41:20:6e:cf:8c:ac:82:ed: 60:ae:70:31:c6:c6:f4:4d:fc:ae:bd:ab:5e:31:5a: 72:5f:7d:50:aa:2c:2d:b0:ad:f6:72:8a:fa:7a:f9: 5c:37:9f:32:7d:f9:3b:5e:58:4d:53:bf:1d:f8:0d: e2:6d:97:fa:d5:bd:20:d9:37:bc:0c:25:cb:74:34: ec:7a:45:14:9d:57:0a:7b:cf:49:a3:4b:87:ef:b5: 6a:fa:91:2b:75:8a:28:58:c6:8c:f3:2c:ac:51:0f: 32:79:b1:02:0d:0e:77:83:5c:4f:17:69:86:25:07: 38:a2:2f:bf:e4:e6:ef:51:a5:3f:73:27:f3:92:2a: 58:3d:d0:19:06:b5:82:36:11:24:29:34:4a:81:49: 05:17:76:81:53:96:ae:98:4b:cb:b5:01:ff:e0:e8: 90:2b:c1:2c:88:28:64:1e:aa:01:2e:8c:89:07:9b: 94:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:67:1D:E9:B1:E8:02:93:0A:1C:E2:83:2F:02:E7:76:1A:FA:B5:A1 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2mcd6bHoApMKHOKDLwLndhr6taE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.40.0/22 Signature Algorithm: sha256WithRSAEncryption 94:d8:5e:91:8a:31:47:cc:38:48:ff:8a:f6:a7:4e:00:b7:f8: 87:f9:45:66:57:cd:4d:9d:df:8d:be:27:24:36:67:f6:85:7a: 74:38:17:4a:ac:f9:41:9f:fe:5b:a6:a3:97:ad:ec:06:ea:4b: ec:90:46:72:3a:fb:47:c7:5a:94:b7:a3:4c:3f:36:7c:2d:95: d4:a7:db:fe:99:b2:1c:d4:65:c6:fa:26:3f:f6:93:14:7c:7b: d6:ab:99:8a:da:d5:7e:19:86:9b:50:30:b4:be:14:97:9d:c7: ec:cc:29:62:b9:0d:56:50:b8:64:80:25:4c:24:5c:9b:e0:86: cf:70:1d:04:9d:cc:ad:6d:0e:f0:16:8d:2c:18:9f:ff:d1:85: 36:50:72:4e:26:c5:b3:19:75:43:6d:55:d6:f7:3d:bf:94:e2: ce:5e:a1:5c:b7:39:e7:52:f5:2d:62:4c:ff:36:6e:f9:b6:ab: 33:9d:d3:85:f4:4c:2c:69:be:c5:50:f4:b0:1f:4b:ca:49:3b: bd:c2:e8:df:5a:c6:fc:47:54:6f:d3:9e:b9:95:0d:2d:6d:8d: b7:2b:d3:7f:20:68:0e:a1:a2:f6:bb:0e:1d:f1:82:9f:b8:ba: 2c:80:55:73:6f:79:ec:28:6f:c0:f5:04:9d:08:a0:30:44:e4: 89:8a:33:2d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOe4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2NDlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKERBNjcxREU5QjFFODAy OTMwQTFDRTI4MzJGMDJFNzc2MUFGQUI1QTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0zYC79Xl1/5zsGSkx2snXDdLjMdq57q0aj1Rg7eG0GuhV8Srb wHbY8dUhq5PXJdR6xGs6GZJ4spidZSd8lJYRFGWlOfxAH01Hfa1eTGLca+NBIG7P jKyC7WCucDHGxvRN/K69q14xWnJffVCqLC2wrfZyivp6+Vw3nzJ9+TteWE1Tvx34 DeJtl/rVvSDZN7wMJct0NOx6RRSdVwp7z0mjS4fvtWr6kSt1iihYxozzLKxRDzJ5 sQINDneDXE8XaYYlBziiL7/k5u9RpT9zJ/OSKlg90BkGtYI2ESQpNEqBSQUXdoFT lq6YS8u1Af/g6JArwSyIKGQeqgEujIkHm5TVAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU2mcd6bHoApMKHOKDLwLndhr6taEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzJtY2Q2YkhvQXBNS0hPS0RM d0xuZGhyNnRhRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 sSgwDQYJKoZIhvcNAQELBQADggEBAJTYXpGKMUfMOEj/ivanTgC3+If5RWZXzU2d 342+JyQ2Z/aFenQ4F0qs+UGf/lumo5et7AbqS+yQRnI6+0fHWpS3o0w/NnwtldSn 2/6ZshzUZcb6Jj/2kxR8e9armYra1X4ZhptQMLS+FJedx+zMKWK5DVZQuGSAJUwk XJvghs9wHQSdzK1tDvAWjSwYn//RhTZQck4mxbMZdUNtVdb3Pb+U4s5eoVy3OedS 9S1iTP82bvm2qzOd04X0TCxpvsVQ9LAfS8pJO73C6N9axvxHVG/TnrmVDS1tjbcr 038gaA6hova7Dh3xgp+4uiyAVXNveewob8D1BJ0IoDBE5ImKMy0= -----END CERTIFICATE-----Generated at Sun Aug 24 05:34:03 2025 by rpki-client