$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6laiJSwKBTQ7vx8MaCYMSkbtEWU.roa File: 6laiJSwKBTQ7vx8MaCYMSkbtEWU.roa (raw, json) Hash identifier: nifG9FIAy9zjwc8/C5VWwdSASNdNQH1IjeCz+s//ISc= Subject key identifier: EA:56:A2:25:2C:0A:05:34:3B:BF:1F:0C:68:26:0C:4A:46:ED:11:65 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3846 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6laiJSwKBTQ7vx8MaCYMSkbtEWU.roa Signing time: Fri 22 Aug 2025 08:45:07 +0000 ROA not before: Fri 22 Aug 2025 08:45:07 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 180.177.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14406 (0x3846) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:07 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=EA56A2252C0A05343BBF1F0C68260C4A46ED1165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7f:10:e0:44:a2:ba:53:4c:49:b2:eb:02:ba: eb:1c:d9:6c:bc:f9:24:50:9d:ba:76:6b:79:2e:54: f7:c1:36:af:16:22:29:db:07:65:a0:30:c2:ab:b0: e7:92:b1:5b:9d:9f:99:35:1d:f3:89:a1:cd:36:55: 64:b4:38:33:01:71:d8:d5:14:ef:9d:74:e9:d6:9b: a3:ed:b6:c6:f6:6a:b1:06:8b:05:f9:bb:b2:a8:a9: 8b:bf:57:d5:a0:ca:dc:0c:74:8f:bd:74:86:86:1a: 3d:f2:31:e2:82:95:d0:0d:b9:df:a9:8c:8b:27:e4: 61:da:b1:29:55:f7:9b:5a:0d:1d:e4:1a:c8:35:bd: 2f:46:86:85:33:46:64:72:3d:99:6c:48:b8:e4:80: 90:2a:44:19:24:85:b5:08:c2:8e:a8:f4:b5:86:fe: 1c:f4:31:63:34:e8:7c:1e:01:7f:e7:9c:0a:85:ec: 8a:fb:bb:85:60:d6:4e:91:ce:14:e8:47:1d:62:8b: 14:78:d3:ff:6f:9d:27:92:c9:d4:47:8f:14:45:d4: 40:c3:55:f4:66:f8:ba:fe:5e:39:ec:72:e7:e1:20: 9c:c7:62:c2:91:40:74:cc:d9:5d:e1:7a:40:55:97: 43:f4:17:56:02:6b:55:61:4d:97:58:b3:5b:9f:b7: af:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:56:A2:25:2C:0A:05:34:3B:BF:1F:0C:68:26:0C:4A:46:ED:11:65 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6laiJSwKBTQ7vx8MaCYMSkbtEWU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.208.0/22 Signature Algorithm: sha256WithRSAEncryption 2a:26:17:26:f0:93:9b:1f:c5:74:99:e5:94:62:95:b7:2c:2f: 8b:ad:77:68:09:20:e3:e4:6b:86:83:60:81:83:b2:1e:88:a1: bd:22:61:d8:60:d4:43:12:5c:4d:33:e0:9f:cc:95:ae:74:1f: 6e:d0:02:fc:8d:cd:36:9c:96:f7:8a:75:d1:ca:cd:f5:2c:5e: 76:94:09:12:01:57:33:b3:a1:91:34:2b:0f:d4:59:34:c6:6f: 82:5c:19:96:96:21:3c:3d:04:9d:d0:71:9f:66:00:a2:14:c3: 56:d9:e3:8c:c4:e6:77:41:30:b9:65:ae:d6:fc:50:2b:b7:45: fa:c6:07:13:2d:86:22:d3:5d:71:f9:20:71:b9:41:c9:44:83: 1a:d3:5f:72:68:1a:a2:c8:1d:1d:0a:69:7f:b8:ad:fb:c1:bb: 12:7a:23:b8:28:f7:77:7c:78:af:1a:8d:ed:05:19:50:93:45: e0:0e:fb:06:f8:34:ae:69:25:c0:e2:7e:c4:73:10:c3:05:6a: 2b:2e:51:05:3d:73:86:c5:e1:a0:09:c7:3d:df:aa:ef:b6:db: f6:85:30:9d:05:14:58:60:97:ac:5d:09:94:a9:6a:3e:2f:72: 74:69:95:12:30:28:7a:e8:03:04:84:e9:41:0e:60:19:85:5c: b6:a7:8b:1d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOEYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1MDdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEVBNTZBMjI1MkMwQTA1 MzQzQkJGMUYwQzY4MjYwQzRBNDZFRDExNjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHfxDgRKK6U0xJsusCuusc2Wy8+SRQnbp2a3kuVPfBNq8WIinb B2WgMMKrsOeSsVudn5k1HfOJoc02VWS0ODMBcdjVFO+ddOnWm6Pttsb2arEGiwX5 u7KoqYu/V9WgytwMdI+9dIaGGj3yMeKCldANud+pjIsn5GHasSlV95taDR3kGsg1 vS9GhoUzRmRyPZlsSLjkgJAqRBkkhbUIwo6o9LWG/hz0MWM06HweAX/nnAqF7Ir7 u4Vg1k6RzhToRx1iixR40/9vnSeSydRHjxRF1EDDVfRm+Lr+XjnscufhIJzHYsKR QHTM2V3hekBVl0P0F1YCa1VhTZdYs1uft68JAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU6laiJSwKBTQ7vx8MaCYMSkbtEWUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzZsYWlKU3dLQlRRN3Z4OE1h Q1lNU2tidEVXVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 sdAwDQYJKoZIhvcNAQELBQADggEBAComFybwk5sfxXSZ5ZRilbcsL4utd2gJIOPk a4aDYIGDsh6Iob0iYdhg1EMSXE0z4J/Mla50H27QAvyNzTaclveKddHKzfUsXnaU CRIBVzOzoZE0Kw/UWTTGb4JcGZaWITw9BJ3QcZ9mAKIUw1bZ44zE5ndBMLllrtb8 UCu3RfrGBxMthiLTXXH5IHG5QclEgxrTX3JoGqLIHR0KaX+4rfvBuxJ6I7go93d8 eK8aje0FGVCTReAO+wb4NK5pJcDifsRzEMMFaisuUQU9c4bF4aAJxz3fqu+22/aF MJ0FFFhgl6xdCZSpaj4vcnRplRIwKHroAwSE6UEOYBmFXLanix0= -----END CERTIFICATE-----Generated at Sun Aug 24 07:24:10 2025 by rpki-client