$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DL0NP0yGyfs4pRk-RA5OPZ7kFJU.roa File: DL0NP0yGyfs4pRk-RA5OPZ7kFJU.roa (raw, json) Hash identifier: LCALY8K5l8VfUkQJQwTLMi+44eLPZLg/C4/Ym/r/EEI= Subject key identifier: 0C:BD:0D:3F:4C:86:C9:FB:38:A5:19:3E:44:0E:4E:3D:9E:E4:14:95 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 38CC Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DL0NP0yGyfs4pRk-RA5OPZ7kFJU.roa Signing time: Fri 22 Aug 2025 08:45:38 +0000 ROA not before: Fri 22 Aug 2025 08:45:38 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 180.176.0.0/15 maxlen: 16 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14540 (0x38cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:38 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=0CBD0D3F4C86C9FB38A5193E440E4E3D9EE41495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:49:18:f7:8f:3a:38:67:16:4d:68:35:95:5e: 09:4b:f8:11:a2:b1:22:1c:6d:a9:eb:ac:c3:63:c3: a1:29:62:36:bb:88:65:3b:2a:fc:5d:99:52:bd:15: 8f:17:6d:fa:41:87:87:ab:e5:4f:02:ca:e3:cb:4c: 16:c0:e8:6b:a4:be:23:8f:b6:c4:ef:90:cc:f1:70: bd:bc:4a:bd:d2:eb:03:34:15:93:e7:27:74:be:26: 01:e8:11:8d:85:bb:81:1e:dc:39:82:b2:f7:4d:c3: b2:7e:ee:66:c2:4a:27:e3:01:e0:d8:fe:21:0c:c8: 77:9c:21:28:13:57:27:5d:c6:1b:98:29:03:72:8b: 78:fd:94:3a:f3:1a:40:f0:3f:b0:56:de:b1:81:86: 21:1e:48:d9:df:86:84:e5:f8:3b:d3:ef:f4:4c:bd: 3a:90:fe:01:5b:39:60:8a:a9:52:a2:76:67:0b:52: c1:4a:2a:19:7a:56:7c:45:56:fc:71:cf:13:c6:07: 9d:ce:0c:21:f4:e8:16:9e:67:7c:24:88:f4:28:e3: 58:9e:a7:a4:34:2c:a7:a6:af:d9:9d:06:ea:09:d6: b7:f8:29:0a:a1:49:9d:37:d1:83:55:5e:34:7d:48: 72:ee:a6:94:fe:07:2c:49:b3:ea:97:6b:35:d2:08: 82:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:BD:0D:3F:4C:86:C9:FB:38:A5:19:3E:44:0E:4E:3D:9E:E4:14:95 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DL0NP0yGyfs4pRk-RA5OPZ7kFJU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.0.0/15 Signature Algorithm: sha256WithRSAEncryption 0a:60:cf:b7:a4:af:93:af:44:bf:b9:cc:93:96:60:70:3e:d0: 24:6d:67:22:0c:2c:0e:5c:52:ba:68:a0:04:79:35:ee:66:e1: c9:c1:86:f4:83:01:b6:2c:e4:c6:e4:d9:dd:98:87:be:ea:65: cb:0c:dc:05:ca:91:f0:21:f5:6f:f8:5e:3a:42:71:84:f3:06: e0:06:98:d4:c4:28:b6:43:d6:78:53:02:af:88:0b:b1:b4:04: dd:d8:94:c0:74:b2:b6:e4:86:94:29:b4:ea:45:49:26:36:1f: b2:28:d4:04:ce:ad:18:31:30:d2:95:40:c0:59:79:b7:c5:35: 88:a0:63:3f:3e:a0:14:07:23:50:e1:e3:cc:ed:d1:fd:ea:e3: d5:97:8a:ac:99:1f:9c:61:72:b9:e5:f6:8a:3b:42:26:ce:9f: f5:60:32:10:e7:16:5d:47:93:dd:bd:a4:1f:7f:67:40:06:10: be:78:85:1e:77:e1:2e:bf:32:a4:91:9f:54:b2:cf:ed:f8:de: eb:9b:b7:13:fc:4d:94:38:fb:75:a8:68:ea:08:cc:f6:52:6b: ea:43:bb:75:29:90:1d:06:3c:ca:5e:c0:a9:7a:a1:08:48:79: 96:44:78:11:d8:f1:97:eb:92:50:fa:cf:48:d0:e4:79:fa:74: 77:98:bc:e1 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICOMwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1MzhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDBDQkQwRDNGNEM4NkM5 RkIzOEE1MTkzRTQ0MEU0RTNEOUVFNDE0OTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrSRj3jzo4ZxZNaDWVXglL+BGisSIcbanrrMNjw6EpYja7iGU7 KvxdmVK9FY8XbfpBh4er5U8CyuPLTBbA6GukviOPtsTvkMzxcL28Sr3S6wM0FZPn J3S+JgHoEY2Fu4Ee3DmCsvdNw7J+7mbCSifjAeDY/iEMyHecISgTVyddxhuYKQNy i3j9lDrzGkDwP7BW3rGBhiEeSNnfhoTl+DvT7/RMvTqQ/gFbOWCKqVKidmcLUsFK Khl6VnxFVvxxzxPGB53ODCH06BaeZ3wkiPQo41iep6Q0LKemr9mdBuoJ1rf4KQqh SZ030YNVXjR9SHLuppT+ByxJs+qXazXSCIIDAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUDL0NP0yGyfs4pRk+RA5OPZ7kFJUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0RMME5QMHlHeWZzNHBSay1S QTVPUFo3a0ZKVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwG0 sDANBgkqhkiG9w0BAQsFAAOCAQEACmDPt6Svk69Ev7nMk5ZgcD7QJG1nIgwsDlxS umigBHk17mbhycGG9IMBtizkxuTZ3ZiHvuplywzcBcqR8CH1b/heOkJxhPMG4AaY 1MQotkPWeFMCr4gLsbQE3diUwHSytuSGlCm06kVJJjYfsijUBM6tGDEw0pVAwFl5 t8U1iKBjPz6gFAcjUOHjzO3R/erj1ZeKrJkfnGFyueX2ijtCJs6f9WAyEOcWXUeT 3b2kH39nQAYQvniFHnfhLr8ypJGfVLLP7fje65u3E/xNlDj7daho6gjM9lJr6kO7 dSmQHQY8yl7AqXqhCEh5lkR4Edjxl+uSUPrPSNDkefp0d5i84Q== -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:27 2025 by rpki-client