$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LxtUNUceGT2fdDIU1xYr9UhYA3g.roa File: LxtUNUceGT2fdDIU1xYr9UhYA3g.roa (raw, json) Hash identifier: EEP5WBQkHmMm1WA7xVkQP313396LueS6BJF/JY58Z6c= Subject key identifier: 2F:1B:54:35:47:1E:19:3D:9F:74:32:14:D7:16:2B:F5:48:58:03:78 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3A91 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LxtUNUceGT2fdDIU1xYr9UhYA3g.roa Signing time: Fri 22 Aug 2025 08:47:30 +0000 ROA not before: Fri 22 Aug 2025 08:47:30 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 180.177.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14993 (0x3a91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:30 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=2F1B5435471E193D9F743214D7162BF548580378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:af:65:91:dd:a5:36:42:cc:6c:8c:65:c4:3b: d3:02:19:20:18:08:68:a5:98:64:7b:7b:21:b8:04: 80:55:29:26:79:de:69:60:2e:96:b2:6c:3e:a8:ce: 81:db:5d:c7:e0:ca:8e:3e:64:fa:5d:0a:3a:87:51: d4:5f:e5:c6:68:d5:23:84:f5:0c:cd:22:46:9b:30: 1a:ed:18:f0:f9:20:94:0d:82:b2:17:1c:7e:09:2c: b2:c5:ed:46:a6:7b:bf:4a:26:d1:9a:4e:9a:1d:74: f2:3f:50:15:fd:72:e3:0d:12:ba:cf:6a:2f:c2:94: 21:ff:c4:4a:54:91:39:95:11:b6:6d:e7:bb:17:f5: 4a:67:b0:71:25:ee:78:cc:bb:bd:cf:05:5a:67:fe: 72:74:eb:7b:0a:d9:a2:fc:0f:77:38:2b:ed:66:3e: bb:81:c1:05:d3:bc:47:a4:25:e8:dd:7c:94:4e:87: b4:56:63:6f:34:55:cc:74:bc:21:26:63:01:89:33: 3f:b1:35:1e:08:93:33:15:57:d2:d0:a9:a4:01:31: f3:e4:fa:ca:b7:b2:4b:79:88:1b:16:a1:7d:8b:5c: bf:ef:29:a6:85:15:35:cf:44:3c:3f:c4:2a:62:b5: e1:d4:4e:7f:b1:dd:a5:e5:2b:18:07:46:34:2b:45: 73:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:1B:54:35:47:1E:19:3D:9F:74:32:14:D7:16:2B:F5:48:58:03:78 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LxtUNUceGT2fdDIU1xYr9UhYA3g.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.120.0/21 Signature Algorithm: sha256WithRSAEncryption 77:e4:a5:02:08:ee:de:c0:b5:b0:15:9a:c6:02:e1:94:2f:65: 26:6a:45:b5:93:dc:f9:9b:66:df:7a:02:eb:83:8e:d8:dc:ba: d8:95:89:70:4f:76:21:b4:e2:00:7f:b9:dd:d4:98:b6:9b:4d: 4d:b7:1b:13:23:c9:4c:7d:96:c1:31:6f:c8:d3:3f:a5:7c:5d: f4:6a:93:1f:65:cc:57:22:5d:ac:86:84:a4:44:73:57:72:56: 0d:a4:82:b4:6f:74:fb:0c:f5:c1:03:cd:44:6a:80:70:1e:09: ed:ea:90:08:49:28:eb:ce:4d:10:22:c4:81:8c:b3:f1:4e:20: b6:d9:b8:92:78:3f:ec:b7:1b:1e:21:02:ba:09:c9:d3:08:39: 53:87:cc:61:dc:bc:5e:b7:36:2a:8f:3f:5e:92:92:0d:cf:4e: 1b:eb:7c:d9:6a:ed:de:57:12:5d:4e:4c:c1:49:00:f8:41:22: c8:7b:55:c2:aa:de:07:50:7d:5f:cf:ef:c4:b1:8a:3f:d4:10: 3b:72:97:f5:7f:db:5d:e3:33:cb:1a:7c:33:68:3c:29:32:71: 32:4f:81:b9:ab:6b:e2:ca:bb:db:a2:e2:44:b1:f6:10:f0:5f: 2f:3f:c8:6d:41:aa:dd:f5:e6:af:31:e2:b1:26:a2:96:0f:f4: c8:c2:12:87 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOpEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3MzBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDJGMUI1NDM1NDcxRTE5 M0Q5Rjc0MzIxNEQ3MTYyQkY1NDg1ODAzNzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3r2WR3aU2QsxsjGXEO9MCGSAYCGilmGR7eyG4BIBVKSZ53mlg LpaybD6ozoHbXcfgyo4+ZPpdCjqHUdRf5cZo1SOE9QzNIkabMBrtGPD5IJQNgrIX HH4JLLLF7Uame79KJtGaTpoddPI/UBX9cuMNErrPai/ClCH/xEpUkTmVEbZt57sX 9UpnsHEl7njMu73PBVpn/nJ063sK2aL8D3c4K+1mPruBwQXTvEekJejdfJROh7RW Y280Vcx0vCEmYwGJMz+xNR4IkzMVV9LQqaQBMfPk+sq3skt5iBsWoX2LXL/vKaaF FTXPRDw/xCpiteHUTn+x3aXlKxgHRjQrRXMdAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQULxtUNUceGT2fdDIU1xYr9UhYA3gwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0x4dFVOVWNlR1QyZmRESVUx eFlyOVVoWUEzZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 sXgwDQYJKoZIhvcNAQELBQADggEBAHfkpQII7t7AtbAVmsYC4ZQvZSZqRbWT3Pmb Zt96AuuDjtjcutiViXBPdiG04gB/ud3UmLabTU23GxMjyUx9lsExb8jTP6V8XfRq kx9lzFciXayGhKREc1dyVg2kgrRvdPsM9cEDzURqgHAeCe3qkAhJKOvOTRAixIGM s/FOILbZuJJ4P+y3Gx4hAroJydMIOVOHzGHcvF63NiqPP16Skg3PThvrfNlq7d5X El1OTMFJAPhBIsh7VcKq3gdQfV/P78Sxij/UEDtyl/V/213jM8safDNoPCkycTJP gbmra+LKu9ui4kSx9hDwXy8/yG1Bqt315q8x4rEmopYP9MjCEoc= -----END CERTIFICATE-----Generated at Sun Aug 24 07:24:12 2025 by rpki-client