$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Bn_MfhkmaH6MHVASWoZ_7TL26WE.roa File: Bn_MfhkmaH6MHVASWoZ_7TL26WE.roa (raw, json) Hash identifier: 1zAXqMrts4dQSQ5h2nVRo+T8TLq17xgvEw7BpEKB0r8= Subject key identifier: 06:7F:CC:7E:19:26:68:7E:8C:1D:50:12:5A:86:7F:ED:32:F6:E9:61 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 38F8 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Bn_MfhkmaH6MHVASWoZ_7TL26WE.roa Signing time: Fri 22 Aug 2025 08:45:49 +0000 ROA not before: Fri 22 Aug 2025 08:45:49 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 180.176.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14584 (0x38f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:49 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=067FCC7E1926687E8C1D50125A867FED32F6E961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4a:b3:2a:42:5c:e2:70:a7:f8:06:99:f3:d6: 1d:40:70:2e:54:cc:a6:1d:76:b1:eb:e8:aa:1d:88: 2a:96:be:a7:c6:a6:67:0e:82:28:7d:8f:c7:9a:53: 0e:e0:33:26:8f:ad:33:e1:95:22:90:bd:97:53:5a: ef:6c:d4:3d:59:db:76:74:ec:a3:c1:a9:45:29:94: 55:9e:b8:6d:b4:8d:69:dc:bb:67:c9:92:5e:ef:2a: 9e:63:83:df:ae:72:d1:20:f4:c2:48:4e:e8:43:ef: a6:95:c3:13:2b:68:3b:89:b6:cb:f4:59:a3:c7:29: b8:e3:9a:9f:72:9a:84:b2:18:48:13:ea:98:20:ec: aa:a4:97:81:31:5d:87:3f:40:09:f7:d5:5a:f0:5b: 4e:eb:9c:67:eb:3c:23:ca:28:45:0c:d7:45:bc:68: 33:d6:d6:a9:1f:f5:93:d9:40:cc:a0:9f:94:74:65: c5:0b:8a:ba:14:30:9c:22:fb:dc:1e:09:86:28:42: c3:ba:e8:86:e3:a7:6d:38:ba:26:7d:c3:9b:97:5f: 24:75:59:a3:f4:68:f9:9c:24:e7:2b:15:c7:ac:92: d8:df:d3:1c:99:c7:95:99:a8:a5:7c:11:69:7d:fb: b1:8e:28:a0:f7:59:8a:45:08:bb:91:3d:d8:09:85: 4a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:7F:CC:7E:19:26:68:7E:8C:1D:50:12:5A:86:7F:ED:32:F6:E9:61 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Bn_MfhkmaH6MHVASWoZ_7TL26WE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.253.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:f0:80:cc:15:31:a1:a1:29:07:f1:e6:2f:5c:0f:78:b4:8c: 2e:88:6f:51:9d:c5:4f:ee:48:e0:fc:5d:4f:55:5b:aa:63:a0: f8:70:b2:6f:65:f6:14:62:82:4c:fa:ab:d7:8d:ee:22:91:ac: 54:ff:3a:f0:da:12:f2:71:7e:aa:f8:1d:9e:74:90:39:f5:b4: 1e:23:4c:72:67:35:fa:50:dc:80:3b:59:7b:22:80:1c:8c:ef: aa:7c:43:e7:a0:b8:7b:85:16:1f:51:17:64:98:7d:0b:ef:fe: bb:19:2d:ec:65:01:6f:89:d3:9a:d7:e4:9a:2f:0c:27:d1:67: fc:d3:f4:2e:56:63:cd:5b:bf:50:23:d9:49:f7:26:6c:9b:d2: 73:81:17:1d:02:3c:e2:8d:8f:6a:1c:25:82:aa:77:3a:b6:89: bc:10:fb:c8:2c:d1:f1:68:e1:40:92:10:02:48:14:4b:f5:8a: ba:2b:35:11:bd:d7:e3:23:59:05:b8:c8:63:e6:78:08:2b:f3: b9:78:dc:55:62:2a:c3:b2:06:70:92:62:c1:31:53:cb:d5:30: ec:9a:9c:77:2d:9f:41:b8:a0:98:e9:d8:87:ba:25:bb:3d:79: 55:ef:a8:67:d0:46:cf:40:8f:30:e0:22:50:6c:9e:41:dd:c5: 32:c9:cc:7e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOPgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1NDlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDA2N0ZDQzdFMTkyNjY4 N0U4QzFENTAxMjVBODY3RkVEMzJGNkU5NjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpSrMqQlzicKf4Bpnz1h1AcC5UzKYddrHr6KodiCqWvqfGpmcO gih9j8eaUw7gMyaPrTPhlSKQvZdTWu9s1D1Z23Z07KPBqUUplFWeuG20jWncu2fJ kl7vKp5jg9+uctEg9MJITuhD76aVwxMraDuJtsv0WaPHKbjjmp9ymoSyGEgT6pgg 7Kqkl4ExXYc/QAn31VrwW07rnGfrPCPKKEUM10W8aDPW1qkf9ZPZQMygn5R0ZcUL iroUMJwi+9weCYYoQsO66Ibjp204uiZ9w5uXXyR1WaP0aPmcJOcrFcesktjf0xyZ x5WZqKV8EWl9+7GOKKD3WYpFCLuRPdgJhUo1AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUBn/MfhkmaH6MHVASWoZ/7TL26WEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0JuX01maGttYUg2TUhWQVNX b1pfN1RMMjZXRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0 sP0wDQYJKoZIhvcNAQELBQADggEBABrwgMwVMaGhKQfx5i9cD3i0jC6Ib1GdxU/u SOD8XU9VW6pjoPhwsm9l9hRigkz6q9eN7iKRrFT/OvDaEvJxfqr4HZ50kDn1tB4j THJnNfpQ3IA7WXsigByM76p8Q+eguHuFFh9RF2SYfQvv/rsZLexlAW+J05rX5Jov DCfRZ/zT9C5WY81bv1Aj2Un3Jmyb0nOBFx0CPOKNj2ocJYKqdzq2ibwQ+8gs0fFo 4UCSEAJIFEv1irorNRG91+MjWQW4yGPmeAgr87l43FViKsOyBnCSYsExU8vVMOya nHctn0G4oJjp2Ie6Jbs9eVXvqGfQRs9AjzDgIlBsnkHdxTLJzH4= -----END CERTIFICATE-----Generated at Sun Aug 24 05:34:05 2025 by rpki-client