$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LOP8unb7O3goI5SZn5y05NKwXDs.roa File: LOP8unb7O3goI5SZn5y05NKwXDs.roa (raw, json) Hash identifier: cTbLpSIoqI6D9Bk7e4P/I5hKpMlIRYEfTdyVtW3xE/Q= Subject key identifier: 2C:E3:FC:BA:76:FB:3B:78:28:23:94:99:9F:9C:B4:E4:D2:B0:5C:3B Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3AC4 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LOP8unb7O3goI5SZn5y05NKwXDs.roa Signing time: Fri 22 Aug 2025 08:47:44 +0000 ROA not before: Fri 22 Aug 2025 08:47:44 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 180.177.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15044 (0x3ac4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:44 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=2CE3FCBA76FB3B78282394999F9CB4E4D2B05C3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:83:c3:80:ea:be:70:15:0b:2e:e9:52:f4:ff: 99:d0:96:15:df:99:b3:8b:c5:29:45:dd:e6:98:c9: b0:2c:bd:63:58:21:54:8a:b9:91:dd:7a:b9:dc:0b: 01:19:05:05:71:2c:b5:34:7c:42:32:78:4d:f2:a5: 9f:02:a0:a5:c3:c3:3d:e4:c5:57:43:dd:6d:5e:78: 47:32:aa:ae:ef:6d:0f:f2:22:8e:f5:de:61:85:8b: 12:08:7d:d1:e5:63:ad:28:ab:91:aa:be:bc:c9:7e: 52:1a:27:33:c0:03:12:55:56:9f:80:c2:54:72:13: e4:ea:64:99:4d:f3:a9:d6:71:0a:dc:52:16:f7:bc: 2c:9a:74:1e:b6:fc:09:d4:4e:da:70:d2:10:9d:3f: c8:d0:69:24:4e:94:08:36:8b:b2:1b:cd:6d:e0:0e: 58:ce:13:d1:a3:03:5d:95:48:68:0e:48:97:52:0d: 16:79:63:77:58:e4:f0:42:8b:01:9f:b3:34:d6:b4: ac:2c:f5:cf:4e:02:29:d2:f3:02:90:ac:45:41:20: 52:3f:51:42:a7:70:3c:cb:07:55:16:e5:a8:26:7b: 3d:38:d1:15:5d:5e:a9:dc:ba:0a:b8:19:44:01:0b: 5c:c8:a0:c7:70:54:b5:f1:30:ad:13:62:b1:58:5b: f3:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:E3:FC:BA:76:FB:3B:78:28:23:94:99:9F:9C:B4:E4:D2:B0:5C:3B X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LOP8unb7O3goI5SZn5y05NKwXDs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.234.0/23 Signature Algorithm: sha256WithRSAEncryption 81:63:95:6b:14:51:e0:dc:26:fe:39:92:e9:03:68:40:24:8b: d4:e4:07:f8:b5:40:70:f5:03:af:97:29:97:88:92:3a:f0:01: 20:08:ee:c6:17:12:05:65:bc:69:51:e1:5e:00:61:78:90:7a: 00:c6:fd:ba:24:e0:e6:ef:fa:51:55:8b:88:bc:00:28:28:69: b4:a0:34:80:81:7c:90:19:81:b6:36:91:03:c2:8a:dc:b9:86: 17:80:2a:77:3b:91:23:52:8a:ce:24:e6:84:a7:0f:c5:b1:e2: 94:6f:3d:d2:f1:21:96:59:d2:f4:e1:68:ef:fd:3e:f7:40:b9: 92:78:f2:6d:08:4a:4e:8b:14:77:7d:ba:34:06:b6:f2:b6:94: 8b:e7:14:4b:81:1e:36:cf:9a:e3:ee:fe:5b:ab:4d:ee:ba:d8: 58:a4:6d:75:d9:72:36:8c:b9:09:a3:40:4d:ec:6c:22:73:d3: 23:23:0f:dd:b0:54:46:a5:ed:5d:79:07:2a:dd:02:9b:3a:66: 48:d6:fd:8e:f1:87:ba:36:ce:74:10:3f:b9:96:96:2b:e9:f4: 11:4c:e0:f5:99:96:9b:c5:78:68:3b:4b:4f:6c:97:f7:c6:df: 83:d2:66:4e:e6:94:af:4d:3c:a1:7a:4d:3c:5a:82:0b:6d:7e: 22:a6:75:25 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOsQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3NDRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDJDRTNGQ0JBNzZGQjNC NzgyODIzOTQ5OTlGOUNCNEU0RDJCMDVDM0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDag8OA6r5wFQsu6VL0/5nQlhXfmbOLxSlF3eaYybAsvWNYIVSK uZHderncCwEZBQVxLLU0fEIyeE3ypZ8CoKXDwz3kxVdD3W1eeEcyqq7vbQ/yIo71 3mGFixIIfdHlY60oq5GqvrzJflIaJzPAAxJVVp+AwlRyE+TqZJlN86nWcQrcUhb3 vCyadB62/AnUTtpw0hCdP8jQaSROlAg2i7IbzW3gDljOE9GjA12VSGgOSJdSDRZ5 Y3dY5PBCiwGfszTWtKws9c9OAinS8wKQrEVBIFI/UUKncDzLB1UW5agmez040RVd Xqncugq4GUQBC1zIoMdwVLXxMK0TYrFYW/PvAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQULOP8unb7O3goI5SZn5y05NKwXDswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0xPUDh1bmI3TzNnb0k1U1pu NXkwNU5Ld1hEcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG0 seowDQYJKoZIhvcNAQELBQADggEBAIFjlWsUUeDcJv45kukDaEAki9TkB/i1QHD1 A6+XKZeIkjrwASAI7sYXEgVlvGlR4V4AYXiQegDG/bok4Obv+lFVi4i8ACgoabSg NICBfJAZgbY2kQPCity5hheAKnc7kSNSis4k5oSnD8Wx4pRvPdLxIZZZ0vThaO/9 PvdAuZJ48m0ISk6LFHd9ujQGtvK2lIvnFEuBHjbPmuPu/lurTe662FikbXXZcjaM uQmjQE3sbCJz0yMjD92wVEal7V15ByrdAps6ZkjW/Y7xh7o2znQQP7mWlivp9BFM 4PWZlpvFeGg7S09sl/fG34PSZk7mlK9NPKF6TTxaggttfiKmdSU= -----END CERTIFICATE-----Generated at Sun Aug 24 07:24:09 2025 by rpki-client