$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KcoxRRKoce2980Hbe7IjaSoilac.roa File: KcoxRRKoce2980Hbe7IjaSoilac.roa (raw, json) Hash identifier: oNQDS7vci7c3/06JDtHNK002OC738Twy1lvskps2okQ= Subject key identifier: 29:CA:31:45:12:A8:71:ED:BD:F3:41:DB:7B:B2:23:69:2A:22:95:A7 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3ACF Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KcoxRRKoce2980Hbe7IjaSoilac.roa Signing time: Fri 22 Aug 2025 08:47:48 +0000 ROA not before: Fri 22 Aug 2025 08:47:48 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 180.177.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15055 (0x3acf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:48 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=29CA314512A871EDBDF341DB7BB223692A2295A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ac:3e:30:08:ca:1a:60:df:db:e7:e2:51:db: ba:02:a7:5d:21:ee:7e:b9:a1:0b:30:a8:92:db:5d: a2:33:60:cb:49:fa:e3:e4:8a:3a:a4:83:12:6d:82: 28:69:fc:97:bc:8a:2c:fd:54:2e:37:c6:a3:16:fe: 69:cd:2c:36:c8:48:b7:33:ef:dd:74:0c:ca:a1:95: f4:81:ab:0e:df:fb:3c:4e:ad:1b:41:34:6b:c0:36: 95:1c:43:14:be:e9:54:05:3d:db:a3:d4:aa:d2:4d: dd:15:32:a5:96:cb:1d:17:56:40:13:2b:be:e5:a4: b1:22:f1:c3:26:4d:6d:33:ef:57:24:f0:4d:52:d8: b6:27:a3:6c:d7:29:48:57:62:53:0b:90:22:ea:3e: 0b:d7:3c:17:02:de:dd:2d:38:90:96:c5:31:bb:4d: 34:05:bc:a8:b6:50:ba:b1:41:a5:3a:b8:63:b0:bd: 56:5c:79:ed:c0:a2:7a:d0:96:c1:2d:4f:5c:c0:71: 7e:90:cc:84:ce:92:81:b1:05:c3:c0:3d:27:7b:c7: 35:f0:0b:ef:19:97:5c:bc:20:01:c0:be:db:c3:02: 34:fb:b0:1e:fe:ce:58:fc:89:01:bb:17:9b:b8:ce: 59:b9:e8:e1:a4:d7:3c:3f:b8:3a:15:77:16:49:7a: 71:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:CA:31:45:12:A8:71:ED:BD:F3:41:DB:7B:B2:23:69:2A:22:95:A7 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KcoxRRKoce2980Hbe7IjaSoilac.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.232.0/21 Signature Algorithm: sha256WithRSAEncryption 2e:be:af:27:c1:a5:8b:f9:bc:f6:24:d0:c0:e9:51:7c:25:47: 56:ed:d8:c6:03:9e:4e:5a:b9:87:98:0e:9d:33:69:6d:e2:1b: 5c:55:73:ee:8d:67:45:be:8a:b0:a3:52:1d:dc:d8:e5:e0:0e: ce:00:db:11:8b:f5:1e:68:e0:22:af:b5:a4:06:85:83:eb:26: bb:80:d6:8e:c4:94:30:48:b4:0b:27:9a:14:97:b4:18:1b:56: 37:bc:f2:2e:da:5f:80:ec:9b:b3:1e:d9:21:cb:5a:0b:79:24: 34:09:4c:b1:cb:65:69:45:4d:cd:e0:94:54:f9:93:cd:04:8a: c4:3c:fd:39:1c:85:40:55:b9:5a:35:8c:92:e4:e5:f1:72:62: 92:03:74:68:b2:da:03:4e:86:98:12:ef:a2:4b:af:28:3e:a6: 4c:65:0d:6e:ec:16:e7:1f:c5:fe:65:44:04:97:06:94:22:c2: fa:10:bd:c8:2b:99:3a:ab:53:bf:66:0e:82:61:e9:9c:76:eb: f5:f5:b3:36:7c:b2:71:ea:03:62:14:56:b9:32:02:7b:38:30: f7:e2:76:3b:f7:b6:3a:fb:b5:86:3e:d9:5b:c0:40:c2:e4:95: a7:c1:22:74:5c:92:03:07:d5:55:0d:78:02:c1:10:84:4e:de: 15:b9:4d:8d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOs8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3NDhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDI5Q0EzMTQ1MTJBODcx RURCREYzNDFEQjdCQjIyMzY5MkEyMjk1QTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMrD4wCMoaYN/b5+JR27oCp10h7n65oQswqJLbXaIzYMtJ+uPk ijqkgxJtgihp/Je8iiz9VC43xqMW/mnNLDbISLcz7910DMqhlfSBqw7f+zxOrRtB NGvANpUcQxS+6VQFPduj1KrSTd0VMqWWyx0XVkATK77lpLEi8cMmTW0z71ck8E1S 2LYno2zXKUhXYlMLkCLqPgvXPBcC3t0tOJCWxTG7TTQFvKi2ULqxQaU6uGOwvVZc ee3AonrQlsEtT1zAcX6QzITOkoGxBcPAPSd7xzXwC+8Zl1y8IAHAvtvDAjT7sB7+ zlj8iQG7F5u4zlm56OGk1zw/uDoVdxZJenG/AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUKcoxRRKoce2980Hbe7IjaSoilacwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0tjb3hSUktvY2UyOTgwSGJl N0lqYVNvaWxhYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 segwDQYJKoZIhvcNAQELBQADggEBAC6+ryfBpYv5vPYk0MDpUXwlR1bt2MYDnk5a uYeYDp0zaW3iG1xVc+6NZ0W+irCjUh3c2OXgDs4A2xGL9R5o4CKvtaQGhYPrJruA 1o7ElDBItAsnmhSXtBgbVje88i7aX4Dsm7Me2SHLWgt5JDQJTLHLZWlFTc3glFT5 k80EisQ8/TkchUBVuVo1jJLk5fFyYpIDdGiy2gNOhpgS76JLryg+pkxlDW7sFucf xf5lRASXBpQiwvoQvcgrmTqrU79mDoJh6Zx26/X1szZ8snHqA2IUVrkyAns4MPfi djv3tjr7tYY+2VvAQMLklafBInRckgMH1VUNeALBEIRO3hW5TY0= -----END CERTIFICATE-----Generated at Sun Aug 24 07:24:09 2025 by rpki-client