$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JKZEc-g7ENjvP1O3iEzCthY4-30.roa File: JKZEc-g7ENjvP1O3iEzCthY4-30.roa (raw, json) Hash identifier: P7gfC4Pd9Rk8+zhSE2QB9OtillU4KAukr/Fi8S+JSG8= Subject key identifier: 24:A6:44:73:E8:3B:10:D8:EF:3F:53:B7:88:4C:C2:B6:16:38:FB:7D Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3815 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JKZEc-g7ENjvP1O3iEzCthY4-30.roa Signing time: Fri 22 Aug 2025 08:44:56 +0000 ROA not before: Fri 22 Aug 2025 08:44:56 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 180.177.126.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14357 (0x3815) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:44:56 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=24A64473E83B10D8EF3F53B7884CC2B61638FB7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:70:75:ee:28:79:d5:b5:46:e0:ad:fd:3c:5a: e5:60:91:40:c3:33:4a:7f:67:a5:ce:fe:18:7a:58: 84:a8:ff:55:f8:0c:03:6c:16:2a:2c:e6:e5:b8:25: f4:aa:da:47:9e:a2:1b:c3:a2:06:f8:8e:fe:e7:94: 63:36:33:de:ad:e8:44:c9:ab:fb:0c:31:98:04:f5: c8:48:30:3c:66:fe:bd:7a:78:90:57:35:ec:09:ed: 6f:07:c0:f9:8f:e6:43:3e:86:c0:55:b8:80:7a:9a: 11:f2:db:57:4b:77:69:e6:dd:a5:94:18:cc:df:08: ff:46:1b:d0:dc:08:fa:1b:5f:36:c4:3f:12:05:c4: 42:07:67:f9:be:3f:93:51:26:0d:b7:43:7e:d4:f1: d9:39:34:9b:93:e1:1d:3f:ab:07:ec:8f:ac:44:1b: bc:ce:3b:3c:3f:90:5f:4e:86:f4:8e:85:89:49:85: 70:1c:db:d4:2a:1e:e9:05:70:7d:c1:99:ee:f6:65: f0:dd:15:c1:54:96:98:b6:40:eb:a6:cf:ea:5c:c8: 0b:f8:38:20:f4:dc:da:c1:77:e0:95:00:63:82:3a: bf:38:a3:0d:7c:e6:66:fc:a6:c5:5e:a2:c1:f7:9d: 47:f8:4a:14:08:40:49:43:ca:9b:3c:08:67:3b:8e: 51:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:A6:44:73:E8:3B:10:D8:EF:3F:53:B7:88:4C:C2:B6:16:38:FB:7D X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JKZEc-g7ENjvP1O3iEzCthY4-30.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.126.0/23 Signature Algorithm: sha256WithRSAEncryption 95:c9:78:c1:86:32:df:0c:21:00:ac:54:66:ed:08:3b:0d:6b: 30:e7:af:e0:04:48:6c:0a:f9:d4:40:6f:34:10:40:22:8f:3b: 97:35:65:08:42:e3:2c:d4:0a:03:88:8a:ef:90:81:5c:7a:0d: 84:c0:cc:74:3c:dd:60:26:fa:eb:97:3b:71:0d:66:02:38:af: 6c:d0:ef:cd:c6:fb:06:e8:7f:b0:8d:45:b2:89:5f:86:29:7d: 03:18:d0:3a:e0:1f:f7:f5:fb:44:7a:ac:f1:af:e4:33:3c:e9: 98:cf:08:12:14:dd:03:2a:d7:4f:b9:08:2a:c8:98:5a:e5:40: ba:16:42:7a:3a:1a:1c:10:a3:67:b7:0f:21:c9:ee:f0:66:f2: 8c:9e:43:64:49:7b:50:2d:41:d9:85:af:29:47:db:e3:5c:c8: 0a:c0:48:c4:21:a0:56:40:d6:fa:dd:40:16:7c:52:ba:83:1d: e5:19:7a:da:c0:b0:98:5f:95:88:80:46:5a:08:82:9e:c2:d9: 16:4a:f5:e1:94:45:ce:7e:80:17:89:da:e3:60:2d:e4:60:aa: 38:a5:8c:e6:59:32:9c:5c:6a:78:c6:d6:1b:09:02:4b:cb:64: e9:45:da:27:a5:63:6e:21:14:20:e7:6c:cf:d4:4c:c9:7e:e2: 82:0b:cf:54 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOBUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ0NTZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDI0QTY0NDczRTgzQjEw RDhFRjNGNTNCNzg4NENDMkI2MTYzOEZCN0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCcHXuKHnVtUbgrf08WuVgkUDDM0p/Z6XO/hh6WISo/1X4DANs Fios5uW4JfSq2keeohvDogb4jv7nlGM2M96t6ETJq/sMMZgE9chIMDxm/r16eJBX NewJ7W8HwPmP5kM+hsBVuIB6mhHy21dLd2nm3aWUGMzfCP9GG9DcCPobXzbEPxIF xEIHZ/m+P5NRJg23Q37U8dk5NJuT4R0/qwfsj6xEG7zOOzw/kF9OhvSOhYlJhXAc 29QqHukFcH3Bme72ZfDdFcFUlpi2QOumz+pcyAv4OCD03NrBd+CVAGOCOr84ow18 5mb8psVeosH3nUf4ShQIQElDyps8CGc7jlHdAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUJKZEc+g7ENjvP1O3iEzCthY4+30wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0pLWkVjLWc3RU5qdlAxTzNp RXpDdGhZNC0zMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG0 sX4wDQYJKoZIhvcNAQELBQADggEBAJXJeMGGMt8MIQCsVGbtCDsNazDnr+AESGwK +dRAbzQQQCKPO5c1ZQhC4yzUCgOIiu+QgVx6DYTAzHQ83WAm+uuXO3ENZgI4r2zQ 783G+wbof7CNRbKJX4YpfQMY0DrgH/f1+0R6rPGv5DM86ZjPCBIU3QMq10+5CCrI mFrlQLoWQno6GhwQo2e3DyHJ7vBm8oyeQ2RJe1AtQdmFrylH2+NcyArASMQhoFZA 1vrdQBZ8UrqDHeUZetrAsJhflYiARloIgp7C2RZK9eGURc5+gBeJ2uNgLeRgqjil jOZZMpxcanjG1hsJAkvLZOlF2ielY24hFCDnbM/UTMl+4oILz1Q= -----END CERTIFICATE-----Generated at Sun Aug 24 07:31:05 2025 by rpki-client