$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4l4CaUhAZi1YD7fP8c9uS7rDsOQ.roa File: 4l4CaUhAZi1YD7fP8c9uS7rDsOQ.roa (raw, json) Hash identifier: tim60O2QsVGFWr/uVcJpRB/fd3Nh+0hthUDxlk/O9kE= Subject key identifier: E2:5E:02:69:48:40:66:2D:58:0F:B7:CF:F1:CF:6E:4B:BA:C3:B0:E4 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3A7B Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4l4CaUhAZi1YD7fP8c9uS7rDsOQ.roa Signing time: Fri 22 Aug 2025 08:47:24 +0000 ROA not before: Fri 22 Aug 2025 08:47:24 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9924 IP address blocks: 180.176.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14971 (0x3a7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:24 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=E25E02694840662D580FB7CFF1CF6E4BBAC3B0E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:47:3e:1c:9c:77:96:7e:c6:d1:7b:88:bf:61: c8:82:ec:e8:b7:78:e8:af:f5:5b:31:cf:ff:cd:2a: 79:25:9f:1e:f2:a0:4f:aa:e3:37:38:92:4a:db:1f: 52:41:0d:e5:08:40:9d:3f:57:53:32:d2:b6:e5:98: 2d:df:45:45:9d:ed:ae:18:67:b9:30:f6:0a:b3:5f: 31:a6:03:b4:0d:ac:2f:00:b2:23:4c:2e:e5:00:4d: 50:d8:3d:17:fa:37:0f:4d:e8:ea:c6:13:63:9a:4e: 6d:c7:30:0d:81:e4:05:6a:fc:e9:d8:e2:4f:7f:52: 40:3c:08:e9:27:4c:d0:c1:db:a2:94:bc:69:e6:63: 50:27:8c:d2:ce:d1:96:4a:e5:27:0b:8c:18:fe:a5: 80:c7:d9:76:c1:25:b5:69:ac:0c:be:b4:bb:b3:d0: f9:f8:dc:af:5f:e2:4d:98:09:29:42:e7:c1:51:43: cb:51:d5:3d:62:19:70:66:c5:de:1b:db:6a:84:8a: 96:59:e8:db:eb:d4:e3:15:5d:86:13:59:9d:0f:95: 9d:39:4e:41:f8:75:47:1c:49:e6:71:f8:63:29:bb: 01:ec:ce:70:72:65:02:15:52:61:3b:bd:14:fa:b9: 8c:36:bd:b8:17:aa:b4:63:4c:79:39:37:15:7d:ca: c2:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:5E:02:69:48:40:66:2D:58:0F:B7:CF:F1:CF:6E:4B:BA:C3:B0:E4 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4l4CaUhAZi1YD7fP8c9uS7rDsOQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.220.0/23 Signature Algorithm: sha256WithRSAEncryption 62:d6:06:16:50:7d:af:ae:ea:db:08:94:4c:cf:af:74:c6:2a: 5d:bc:e7:db:51:88:e0:c8:de:27:1e:6b:01:bc:8c:42:55:69: b0:98:54:1d:78:fb:48:e6:6d:8a:b6:9d:d9:e0:31:fa:d6:7b: 82:42:ba:47:00:72:2d:c0:1f:6b:0f:bf:84:79:f8:74:a3:6a: ce:ce:f2:e6:20:12:56:61:e8:42:5f:b3:b6:be:62:73:68:99: 4c:5c:27:cd:0d:a8:49:a7:18:72:6c:90:17:f6:52:73:28:98: 9e:3a:95:01:5f:0c:b3:fb:3d:7b:10:95:36:3a:90:bd:82:4c: d5:99:72:08:79:c4:df:ba:00:9f:0e:40:f1:2c:a2:52:08:18: 03:d7:09:ee:41:f4:32:25:38:82:b9:7c:09:f9:c8:7b:a0:49: 4e:bd:5f:50:f8:9b:df:20:ea:37:36:37:e0:f2:16:bb:2c:dd: 13:5a:0e:37:5c:c6:d6:71:a4:3e:f5:ec:d6:26:ec:19:55:50: f7:b3:52:82:58:cc:63:27:da:c6:26:8f:ef:fd:89:b6:7a:99: af:b4:01:14:97:75:de:16:8c:a6:3f:04:5f:c6:d4:98:bd:b5: df:cf:60:02:41:a6:e7:6d:18:5e:a9:59:c1:e1:dd:7c:20:16: 23:83:66:a0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOnswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3MjRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEUyNUUwMjY5NDg0MDY2 MkQ1ODBGQjdDRkYxQ0Y2RTRCQkFDM0IwRTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5Rz4cnHeWfsbRe4i/YciC7Oi3eOiv9Vsxz//NKnklnx7yoE+q 4zc4kkrbH1JBDeUIQJ0/V1My0rblmC3fRUWd7a4YZ7kw9gqzXzGmA7QNrC8AsiNM LuUATVDYPRf6Nw9N6OrGE2OaTm3HMA2B5AVq/OnY4k9/UkA8COknTNDB26KUvGnm Y1AnjNLO0ZZK5ScLjBj+pYDH2XbBJbVprAy+tLuz0Pn43K9f4k2YCSlC58FRQ8tR 1T1iGXBmxd4b22qEipZZ6Nvr1OMVXYYTWZ0PlZ05TkH4dUccSeZx+GMpuwHsznBy ZQIVUmE7vRT6uYw2vbgXqrRjTHk5NxV9ysKXAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU4l4CaUhAZi1YD7fP8c9uS7rDsOQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzRsNENhVWhBWmkxWUQ3ZlA4 Yzl1UzdyRHNPUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG0 sNwwDQYJKoZIhvcNAQELBQADggEBAGLWBhZQfa+u6tsIlEzPr3TGKl2859tRiODI 3iceawG8jEJVabCYVB14+0jmbYq2ndngMfrWe4JCukcAci3AH2sPv4R5+HSjas7O 8uYgElZh6EJfs7a+YnNomUxcJ80NqEmnGHJskBf2UnMomJ46lQFfDLP7PXsQlTY6 kL2CTNWZcgh5xN+6AJ8OQPEsolIIGAPXCe5B9DIlOIK5fAn5yHugSU69X1D4m98g 6jc2N+DyFrss3RNaDjdcxtZxpD717NYm7BlVUPezUoJYzGMn2sYmj+/9ibZ6ma+0 ARSXdd4WjKY/BF/G1Ji9td/PYAJBpudtGF6pWcHh3XwgFiODZqA= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:18 2025 by rpki-client