$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BDGQtcUerqIsnOJdz-qQ0usvdtQ.roa File: BDGQtcUerqIsnOJdz-qQ0usvdtQ.roa (raw, json) Hash identifier: zgo0gjkB+jecP34hdGHrP+Pf6s0U4DTGwWEctEB0lwk= Subject key identifier: 04:31:90:B5:C5:1E:AE:A2:2C:9C:E2:5D:CF:EA:90:D2:EB:2F:76:D4 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 380C Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BDGQtcUerqIsnOJdz-qQ0usvdtQ.roa Signing time: Fri 22 Aug 2025 08:44:54 +0000 ROA not before: Fri 22 Aug 2025 08:44:54 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 180.176.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14348 (0x380c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:44:54 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=043190B5C51EAEA22C9CE25DCFEA90D2EB2F76D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c1:ef:b7:75:5f:45:20:f4:44:c0:92:b5:a2: 39:aa:ec:46:2e:6f:07:38:56:6b:65:34:08:c7:c1: 4d:ea:47:88:c8:32:81:05:26:bf:7c:86:cb:2f:63: 4b:97:42:87:8b:6c:22:80:12:65:f3:70:4a:a0:a8: cf:4d:49:d8:3c:b9:1e:7b:15:35:8d:3f:27:99:c1: 24:ed:99:ea:fa:b8:ec:70:66:11:14:cf:40:18:25: af:d2:0e:44:e0:da:4c:fc:a0:8f:16:96:81:d4:17: 13:3f:08:6d:24:68:5c:bb:7f:8f:95:af:4a:1c:21: 29:2d:9c:d6:d9:a6:ed:3a:48:09:34:1c:4e:6f:63: 81:f9:f8:9c:91:3b:58:25:e1:21:d0:fb:d0:08:61: 27:6e:1d:c1:0a:de:3e:8c:55:ae:2f:51:09:68:c2: c5:9a:59:59:76:61:95:4a:0d:42:94:49:fe:52:71: c3:87:f0:e7:48:40:f1:a1:6d:52:32:a3:ab:2e:c5: c8:bd:85:e8:58:af:57:4f:85:26:e9:54:88:b1:12: e3:ea:df:a5:fd:81:1d:70:43:43:fe:3c:20:8f:2e: da:2d:a3:de:6a:ff:3d:af:6b:30:12:e2:6b:4d:6e: c2:e8:c5:13:d0:29:fe:b8:df:f8:1e:4b:3b:09:6d: f3:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:31:90:B5:C5:1E:AE:A2:2C:9C:E2:5D:CF:EA:90:D2:EB:2F:76:D4 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BDGQtcUerqIsnOJdz-qQ0usvdtQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.144.0/22 Signature Algorithm: sha256WithRSAEncryption a4:3a:10:65:d2:50:08:75:27:ad:99:74:2d:82:4b:43:71:2c: 3c:1f:f0:77:5b:db:e1:4d:aa:9b:99:fa:4f:06:79:a6:42:ef: 77:38:79:96:5a:18:c0:f8:e5:86:9c:60:37:69:e7:ab:bb:12: 99:b0:97:4e:52:1b:12:f4:47:26:de:63:44:2f:1f:63:f9:86: 34:13:42:bc:64:d0:5d:4e:ab:04:3c:94:82:1e:84:57:e7:b9: e2:1b:01:14:c9:aa:a1:c2:83:2d:6e:c3:c4:9a:c9:6c:1c:2f: ef:43:67:d7:be:8c:51:c5:67:1c:83:53:d5:c0:a1:85:2c:9f: 16:0a:2b:40:03:4e:6e:ee:fb:6f:17:6b:f5:9a:db:66:6c:da: 1e:e4:cc:9e:30:a4:4c:02:0a:a4:ba:3f:73:ec:90:a4:8a:44: 6c:4a:11:d7:44:44:5b:a8:53:84:2b:81:cc:e4:8e:3e:13:09: 01:0f:ee:95:fd:67:63:23:cf:85:bd:2f:28:b1:30:ec:11:84: b5:34:23:d8:5d:5f:58:04:8a:b0:99:2d:9d:7a:21:2b:9a:d4: 39:ec:68:73:58:a7:f4:93:21:db:48:fd:5c:b3:f1:d6:41:cc: 3e:f5:9f:77:84:da:14:40:c5:d1:4d:32:f2:13:67:49:ad:0d: 13:e4:8b:3d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOAwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ0NTRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDA0MzE5MEI1QzUxRUFF QTIyQzlDRTI1RENGRUE5MEQyRUIyRjc2RDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEwe+3dV9FIPREwJK1ojmq7EYubwc4VmtlNAjHwU3qR4jIMoEF Jr98hssvY0uXQoeLbCKAEmXzcEqgqM9NSdg8uR57FTWNPyeZwSTtmer6uOxwZhEU z0AYJa/SDkTg2kz8oI8WloHUFxM/CG0kaFy7f4+Vr0ocISktnNbZpu06SAk0HE5v Y4H5+JyRO1gl4SHQ+9AIYSduHcEK3j6MVa4vUQlowsWaWVl2YZVKDUKUSf5SccOH 8OdIQPGhbVIyo6suxci9hehYr1dPhSbpVIixEuPq36X9gR1wQ0P+PCCPLtoto95q /z2vazAS4mtNbsLoxRPQKf643/geSzsJbfNLAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUBDGQtcUerqIsnOJdz+qQ0usvdtQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0JER1F0Y1VlcnFJc25PSmR6 LXFRMHVzdmR0US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 sJAwDQYJKoZIhvcNAQELBQADggEBAKQ6EGXSUAh1J62ZdC2CS0NxLDwf8Hdb2+FN qpuZ+k8GeaZC73c4eZZaGMD45YacYDdp56u7Epmwl05SGxL0RybeY0QvH2P5hjQT Qrxk0F1OqwQ8lIIehFfnueIbARTJqqHCgy1uw8SayWwcL+9DZ9e+jFHFZxyDU9XA oYUsnxYKK0ADTm7u+28Xa/Wa22Zs2h7kzJ4wpEwCCqS6P3PskKSKRGxKEddERFuo U4Qrgczkjj4TCQEP7pX9Z2Mjz4W9LyixMOwRhLU0I9hdX1gEirCZLZ16ISua1Dns aHNYp/STIdtI/Vyz8dZBzD71n3eE2hRAxdFNMvITZ0mtDRPkiz0= -----END CERTIFICATE-----Generated at Sun Aug 24 07:29:31 2025 by rpki-client