$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4edSiKme21Lmc2qB_z4_t7cAFH8.roa File: 4edSiKme21Lmc2qB_z4_t7cAFH8.roa (raw, json) Hash identifier: 5cnxIvlZFeh4AdnUB4EfYup4NF71HIlPz2yO0Tsl2SY= Subject key identifier: E1:E7:52:88:A9:9E:DB:52:E6:73:6A:81:FF:3E:3F:B7:B7:00:14:7F Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3ACB Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4edSiKme21Lmc2qB_z4_t7cAFH8.roa Signing time: Fri 22 Aug 2025 08:47:46 +0000 ROA not before: Fri 22 Aug 2025 08:47:46 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 180.177.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15051 (0x3acb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:46 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=E1E75288A99EDB52E6736A81FF3E3FB7B700147F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ac:2a:89:02:e1:22:b5:c2:d9:c9:39:9d:d7: 00:38:5f:06:44:ba:76:5d:96:76:21:0b:1a:6b:53: bf:63:f3:c0:5e:a0:db:e5:8f:12:09:a8:b0:b4:f5: 3f:7b:82:33:a2:a1:20:54:9f:4a:b0:84:5e:76:72: 08:48:2d:96:f2:7e:03:09:31:03:81:f2:a1:01:73: 4a:b1:ba:52:db:f8:1b:66:75:6b:29:45:58:b4:dc: 99:bb:48:0a:d3:f6:5b:67:ad:c3:2c:b5:ab:89:e8: 23:1d:d3:10:42:9e:35:1f:b0:77:a8:6f:b8:6d:c1: 35:11:a2:a2:48:2c:90:e9:00:82:db:a7:49:30:66: ad:0c:00:dd:05:69:0f:54:8d:d3:74:83:df:d7:57: 84:67:6e:68:cf:76:73:52:27:43:ae:13:52:70:90: 25:23:4c:73:4d:6a:ea:7c:a8:7a:44:38:06:7c:6b: d1:30:44:ea:ea:ce:db:c6:b1:54:72:c5:37:3c:24: ac:d4:20:09:d1:78:83:09:44:61:91:01:39:ee:ef: 6c:28:65:f8:f8:b9:89:5a:5b:8d:3d:af:71:07:e1: 9a:d4:8a:23:e4:fe:8a:c1:f8:5a:79:f9:fd:bd:0f: 8b:81:9d:49:a2:7a:c0:40:e5:18:57:d2:0f:5e:e4: 3e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:E7:52:88:A9:9E:DB:52:E6:73:6A:81:FF:3E:3F:B7:B7:00:14:7F X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4edSiKme21Lmc2qB_z4_t7cAFH8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.48.0/21 Signature Algorithm: sha256WithRSAEncryption 5b:f9:a8:74:8e:32:54:7e:f2:f2:8f:1e:b7:ef:1b:91:7e:65: f0:e3:94:fc:70:c0:30:9f:a7:61:16:25:2f:66:8e:da:45:61: 70:77:72:05:83:9c:61:91:3c:26:f3:00:69:f5:e0:25:c8:8c: db:7a:43:a5:0f:95:d8:f1:01:69:b7:58:52:eb:8f:ef:a5:de: 59:60:89:44:5a:dc:e7:29:5d:17:71:be:14:36:d4:e0:a8:63: 6d:dc:34:e9:e4:a0:dd:b1:97:83:1f:01:f1:89:91:aa:0e:42: 6f:60:28:63:09:13:0f:fd:3a:eb:0c:57:da:6d:47:b3:99:a5: 5a:7f:06:59:98:a0:c3:f8:85:c0:c8:88:f2:ca:e1:ca:81:ec: 52:58:e3:05:f6:97:27:87:37:2f:b7:cb:ea:39:04:c2:11:14: 7b:12:91:fa:2a:29:0b:11:b3:53:9e:85:cc:d1:21:ad:62:5b: 55:ca:b2:11:78:f8:88:74:28:76:8c:6f:59:02:ac:0e:8d:7e: 08:da:45:6c:aa:f6:d4:4f:8a:02:d6:e8:25:01:77:eb:b8:17: 7f:41:3e:94:10:09:9d:24:81:fb:61:6f:5e:2b:5e:86:c8:14: 2c:b0:44:d1:46:5f:ac:74:0e:1a:09:82:17:f7:2e:0d:ba:9c: c0:9c:c4:41 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOsswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3NDZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEUxRTc1Mjg4QTk5RURC NTJFNjczNkE4MUZGM0UzRkI3QjcwMDE0N0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDrCqJAuEitcLZyTmd1wA4XwZEunZdlnYhCxprU79j88BeoNvl jxIJqLC09T97gjOioSBUn0qwhF52cghILZbyfgMJMQOB8qEBc0qxulLb+BtmdWsp RVi03Jm7SArT9ltnrcMstauJ6CMd0xBCnjUfsHeob7htwTURoqJILJDpAILbp0kw Zq0MAN0FaQ9UjdN0g9/XV4RnbmjPdnNSJ0OuE1JwkCUjTHNNaup8qHpEOAZ8a9Ew ROrqztvGsVRyxTc8JKzUIAnReIMJRGGRATnu72woZfj4uYlaW409r3EH4ZrUiiPk /orB+Fp5+f29D4uBnUmiesBA5RhX0g9e5D7xAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU4edSiKme21Lmc2qB/z4/t7cAFH8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzRlZFNpS21lMjFMbWMycUJf ejRfdDdjQUZIOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 sTAwDQYJKoZIhvcNAQELBQADggEBAFv5qHSOMlR+8vKPHrfvG5F+ZfDjlPxwwDCf p2EWJS9mjtpFYXB3cgWDnGGRPCbzAGn14CXIjNt6Q6UPldjxAWm3WFLrj++l3llg iURa3OcpXRdxvhQ21OCoY23cNOnkoN2xl4MfAfGJkaoOQm9gKGMJEw/9OusMV9pt R7OZpVp/BlmYoMP4hcDIiPLK4cqB7FJY4wX2lyeHNy+3y+o5BMIRFHsSkfoqKQsR s1OehczRIa1iW1XKshF4+Ih0KHaMb1kCrA6NfgjaRWyq9tRPigLW6CUBd+u4F39B PpQQCZ0kgfthb14rXobIFCywRNFGX6x0DhoJghf3Lg26nMCcxEE= -----END CERTIFICATE-----Generated at Sun Aug 24 05:34:05 2025 by rpki-client