$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GMlkPnll0IgOtYc5PyE0cRI1BAg.roa File: GMlkPnll0IgOtYc5PyE0cRI1BAg.roa (raw, json) Hash identifier: /J/6Xk3qnKtakWs9aN0IZAiToc0vNj1iwPK0pXWt0ys= Subject key identifier: 18:C9:64:3E:79:65:D0:88:0E:B5:87:39:3F:21:34:71:12:35:04:08 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 39B2 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GMlkPnll0IgOtYc5PyE0cRI1BAg.roa Signing time: Fri 22 Aug 2025 08:46:34 +0000 ROA not before: Fri 22 Aug 2025 08:46:34 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 180.176.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14770 (0x39b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:34 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=18C9643E7965D0880EB587393F21347112350408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:89:07:c8:ab:f4:bf:e3:65:19:47:16:36:32: 13:66:76:c4:19:05:8b:df:a1:04:23:8f:db:35:1e: a0:79:d0:26:a4:f1:16:d0:d3:c0:d9:de:20:27:d5: a9:e1:13:a4:ba:69:86:8f:c9:e0:8b:e2:09:dc:0d: 36:ff:72:4b:ab:c7:4c:57:d8:52:ad:c4:af:ac:31: 04:36:52:39:10:e1:d6:95:74:30:dd:13:7c:d8:90: 3a:21:01:de:88:38:45:b5:fe:02:d2:63:74:3e:22: 9a:11:b3:25:67:2d:93:18:f3:d0:b3:40:79:8b:38: dd:e5:e9:03:11:60:1a:f0:22:12:e3:ac:7b:22:d9: f8:06:4b:b9:90:9e:fd:78:fb:75:fd:92:4d:2d:75: 6c:1e:5b:2e:cb:e1:c1:21:a9:1e:42:ed:e6:70:83: 93:ce:48:0c:2b:95:21:af:00:fe:09:df:60:46:76: fa:89:c2:e9:3f:7f:de:f6:94:c8:2b:4d:c2:dc:4d: 53:15:84:0c:83:1f:81:0d:cf:38:8c:70:22:33:ac: 4f:08:49:70:f8:16:5e:81:83:3d:d3:57:c6:07:bf: 07:5e:bf:66:8a:54:29:4a:d8:c5:57:74:60:40:82: eb:69:93:53:d7:8e:9f:97:35:63:db:b8:c6:32:1e: 1b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:C9:64:3E:79:65:D0:88:0E:B5:87:39:3F:21:34:71:12:35:04:08 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GMlkPnll0IgOtYc5PyE0cRI1BAg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.64.0/22 Signature Algorithm: sha256WithRSAEncryption af:f3:23:a3:37:67:a8:f3:c4:ba:75:f8:74:3d:9a:81:ca:99: 55:c6:14:21:58:00:5f:1c:b5:92:fd:08:3b:ed:e6:ee:30:4b: 04:85:fb:d1:ef:15:e0:3f:58:f7:a9:f7:1c:c9:db:66:e5:a0: d5:00:86:d2:b8:4b:fc:97:a7:bb:8e:22:5f:92:11:3a:f8:c7: 31:02:e9:b0:2e:5e:da:78:e9:34:b9:a4:88:be:a9:ee:71:09: 68:18:cc:b5:66:c3:4e:0e:ae:21:d9:91:c0:be:5c:7b:2d:95: 09:d8:22:8f:40:90:c3:a8:43:de:d2:42:56:a6:47:c6:2a:3d: 8d:4f:e1:6f:8f:87:1a:99:94:9c:d2:9d:2e:01:5e:61:4b:4d: f9:d5:a0:3e:af:7f:e3:06:4e:e8:ef:b6:d5:02:78:07:c9:c7: 2c:60:fa:02:d2:6b:71:96:43:03:80:4e:61:bb:d6:b3:c0:a1: b8:3c:f2:ad:a7:ac:57:54:12:27:6b:12:b7:d2:77:54:cd:91: 5b:4b:72:a4:a8:e2:57:2c:1d:49:0d:3e:a9:6b:61:31:01:ac: 29:3e:9c:52:4d:16:73:a6:ae:c2:89:85:9b:bd:31:cd:b7:cd: 2f:82:41:29:71:37:da:06:48:42:34:f3:d2:92:95:1f:6e:70: 58:d2:5e:f2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICObIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2MzRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDE4Qzk2NDNFNzk2NUQw ODgwRUI1ODczOTNGMjEzNDcxMTIzNTA0MDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCziQfIq/S/42UZRxY2MhNmdsQZBYvfoQQjj9s1HqB50Cak8RbQ 08DZ3iAn1anhE6S6aYaPyeCL4gncDTb/ckurx0xX2FKtxK+sMQQ2UjkQ4daVdDDd E3zYkDohAd6IOEW1/gLSY3Q+IpoRsyVnLZMY89CzQHmLON3l6QMRYBrwIhLjrHsi 2fgGS7mQnv14+3X9kk0tdWweWy7L4cEhqR5C7eZwg5POSAwrlSGvAP4J32BGdvqJ wuk/f972lMgrTcLcTVMVhAyDH4ENzziMcCIzrE8ISXD4Fl6Bgz3TV8YHvwdev2aK VClK2MVXdGBAgutpk1PXjp+XNWPbuMYyHhv/AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUGMlkPnll0IgOtYc5PyE0cRI1BAgwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0dNbGtQbmxsMElnT3RZYzVQ eUUwY1JJMUJBZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 sEAwDQYJKoZIhvcNAQELBQADggEBAK/zI6M3Z6jzxLp1+HQ9moHKmVXGFCFYAF8c tZL9CDvt5u4wSwSF+9HvFeA/WPep9xzJ22bloNUAhtK4S/yXp7uOIl+SETr4xzEC 6bAuXtp46TS5pIi+qe5xCWgYzLVmw04OriHZkcC+XHstlQnYIo9AkMOoQ97SQlam R8YqPY1P4W+PhxqZlJzSnS4BXmFLTfnVoD6vf+MGTujvttUCeAfJxyxg+gLSa3GW QwOATmG71rPAobg88q2nrFdUEidrErfSd1TNkVtLcqSo4lcsHUkNPqlrYTEBrCk+ nFJNFnOmrsKJhZu9Mc23zS+CQSlxN9oGSEI089KSlR9ucFjSXvI= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:51 2025 by rpki-client