$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/A0BMzrw5gLAacznfyq2I0EuyTDo.roa File: A0BMzrw5gLAacznfyq2I0EuyTDo.roa (raw, json) Hash identifier: cuvs5oNIraY/Ctquac1A3RuQVvZtEJDS23nlPQhsa0c= Subject key identifier: 03:40:4C:CE:BC:39:80:B0:1A:73:39:DF:CA:AD:88:D0:4B:B2:4C:3A Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3A1B Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/A0BMzrw5gLAacznfyq2I0EuyTDo.roa Signing time: Fri 22 Aug 2025 08:47:00 +0000 ROA not before: Fri 22 Aug 2025 08:47:00 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 180.177.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14875 (0x3a1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:00 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=03404CCEBC3980B01A7339DFCAAD88D04BB24C3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:23:c4:51:61:da:32:b9:27:c0:d8:84:f8:4f: a3:35:f3:46:88:0a:30:8e:c8:a9:9b:39:a2:5f:83: f2:ac:9e:9f:4e:ac:9e:c2:f6:37:45:3a:f1:91:55: 12:63:22:d0:a6:e1:3c:a8:f6:3d:ce:9c:9f:94:88: d8:c1:a6:87:2d:b1:d4:82:bf:a9:15:f0:a6:20:27: d4:5c:6e:28:5b:78:3c:34:fb:1a:56:e3:e3:3b:f9: db:c7:a9:94:a4:98:68:ad:0d:a9:a8:cc:c9:5e:86: 5a:08:b2:12:f0:18:79:a4:f3:30:5b:24:ad:69:50: 03:79:cd:19:29:56:e8:08:a2:21:59:ed:89:53:dc: 73:8d:36:c1:40:9c:85:e1:49:a8:82:dc:df:54:28: 61:70:25:20:75:39:71:c0:f7:a4:3e:04:91:01:bb: 77:a0:ea:b9:a3:d4:a4:e6:ee:4b:a9:81:6a:3a:fb: b1:1c:a3:73:03:f2:0b:d1:cc:f3:b1:4f:38:6b:d1: bd:57:b6:f8:cb:5c:12:28:02:8a:32:0a:ab:d7:28: 9e:b2:c8:81:ba:e4:b4:37:84:db:f6:1d:97:c6:cc: cc:9f:d9:6e:fc:4b:fd:d4:07:51:8f:37:a7:bb:b7: da:bb:77:45:d8:a6:41:98:3a:5a:d2:39:8e:56:81: f2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:40:4C:CE:BC:39:80:B0:1A:73:39:DF:CA:AD:88:D0:4B:B2:4C:3A X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/A0BMzrw5gLAacznfyq2I0EuyTDo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.248.0/22 Signature Algorithm: sha256WithRSAEncryption a1:49:0f:5c:1c:75:b4:12:e3:fe:86:67:49:b2:8e:93:4a:b7: 5c:dc:bc:f3:6b:24:60:1f:84:ee:c9:91:16:05:a5:61:73:2c: ae:f9:73:be:08:ef:fe:a1:9c:da:78:34:bb:b7:04:83:80:d0: 0b:0e:15:64:5b:ad:a5:94:d8:f9:ff:33:7c:81:df:ca:49:3d: 12:c3:68:d2:b6:e3:d1:72:13:1e:50:90:ec:53:17:26:45:ae: ae:b7:56:2d:1e:41:f1:b7:6f:05:4a:e6:a1:5f:d3:80:0b:62: 4a:af:cb:e3:33:65:9e:f9:49:8b:75:b0:6c:ee:00:f6:6b:fb: 01:44:1a:99:10:e5:ae:9a:44:b5:c3:25:18:80:54:73:6d:75: cb:c0:b5:62:f8:73:d3:38:10:42:f0:21:44:1f:dc:a1:ca:1d: 7a:a2:e8:0f:69:79:a0:a6:91:54:15:18:80:70:7b:65:2e:80: fd:49:09:de:58:3f:6b:34:22:e6:fa:8d:31:8a:e7:30:d0:eb: 7a:fa:eb:bc:3b:6e:9d:36:30:a8:1e:ce:a6:cc:c5:ca:0e:98: 1f:bd:09:bf:8b:d2:81:de:af:22:e6:cc:6c:10:1b:80:40:ea: 71:20:22:7c:43:ab:21:47:db:cc:49:51:eb:4c:c6:a3:0f:ae: ee:3e:64:74 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOhswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3MDBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDAzNDA0Q0NFQkMzOTgw QjAxQTczMzlERkNBQUQ4OEQwNEJCMjRDM0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDpI8RRYdoyuSfA2IT4T6M180aICjCOyKmbOaJfg/Ksnp9OrJ7C 9jdFOvGRVRJjItCm4Tyo9j3OnJ+UiNjBpoctsdSCv6kV8KYgJ9RcbihbeDw0+xpW 4+M7+dvHqZSkmGitDamozMlehloIshLwGHmk8zBbJK1pUAN5zRkpVugIoiFZ7YlT 3HONNsFAnIXhSaiC3N9UKGFwJSB1OXHA96Q+BJEBu3eg6rmj1KTm7kupgWo6+7Ec o3MD8gvRzPOxTzhr0b1XtvjLXBIoAooyCqvXKJ6yyIG65LQ3hNv2HZfGzMyf2W78 S/3UB1GPN6e7t9q7d0XYpkGYOlrSOY5WgfKZAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUA0BMzrw5gLAacznfyq2I0EuyTDowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0EwQk16cnc1Z0xBYWN6bmZ5 cTJJMEV1eVREby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 sfgwDQYJKoZIhvcNAQELBQADggEBAKFJD1wcdbQS4/6GZ0myjpNKt1zcvPNrJGAf hO7JkRYFpWFzLK75c74I7/6hnNp4NLu3BIOA0AsOFWRbraWU2Pn/M3yB38pJPRLD aNK249FyEx5QkOxTFyZFrq63Vi0eQfG3bwVK5qFf04ALYkqvy+MzZZ75SYt1sGzu APZr+wFEGpkQ5a6aRLXDJRiAVHNtdcvAtWL4c9M4EELwIUQf3KHKHXqi6A9peaCm kVQVGIBwe2UugP1JCd5YP2s0Iub6jTGK5zDQ63r667w7bp02MKgezqbMxcoOmB+9 Cb+L0oHeryLmzGwQG4BA6nEgInxDqyFH28xJUetMxqMPru4+ZHQ= -----END CERTIFICATE-----Generated at Sun Aug 24 07:28:21 2025 by rpki-client