$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_IRDlGqhh8IzG5SxYTS6hMwnQ8M.roa File: _IRDlGqhh8IzG5SxYTS6hMwnQ8M.roa (raw, json) Hash identifier: ukOExEZXL/w92Z07Uyo6ZTFf68piUoQXQuUwzEtaN7w= Subject key identifier: FC:84:43:94:6A:A1:87:C2:33:1B:94:B1:61:34:BA:84:CC:27:43:C3 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3A2F Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_IRDlGqhh8IzG5SxYTS6hMwnQ8M.roa Signing time: Fri 22 Aug 2025 08:47:06 +0000 ROA not before: Fri 22 Aug 2025 08:47:06 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 180.177.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14895 (0x3a2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:06 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=FC8443946AA187C2331B94B16134BA84CC2743C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:45:10:b6:30:0a:64:1b:be:15:76:2d:e5:73: 6c:68:45:9a:b1:27:ad:ee:18:7b:95:79:27:34:ad: f2:bb:6a:2c:5c:87:a1:69:e0:7d:9d:e7:e4:52:24: e4:af:29:f1:1a:f8:0b:10:42:1a:c0:ff:da:32:f5: a4:1a:a4:83:27:b7:2b:0c:34:24:af:08:c3:7b:b0: c1:ec:28:ec:02:ed:3f:0b:1c:18:b2:6a:b3:6f:39: 8e:32:c8:84:70:23:d7:54:5d:19:8c:67:e9:3e:f4: 42:1b:85:3e:df:cf:08:05:ae:69:b9:0b:3f:1b:dd: 58:3b:77:d5:56:54:08:58:7e:0d:9c:a5:6e:ed:c4: cb:58:f6:7f:a3:89:fa:b1:a7:20:d4:66:5e:4d:f6: b4:ce:f8:4f:cd:4f:d5:f9:c7:3f:20:65:7f:4c:11: fd:a5:d5:99:1f:ad:ab:b7:0d:fa:81:48:23:e1:f2: d6:a9:38:ab:89:d8:8d:58:ef:3a:76:a6:93:4f:64: ec:82:89:ee:a7:98:b4:7c:08:e5:ad:b1:36:2b:59: 6c:a4:b3:dc:b5:2b:c0:e9:67:a2:7f:a9:bc:2a:14: 25:17:54:5c:d1:79:e5:b8:10:e9:73:4e:f9:5e:41: 02:b2:fb:26:8e:ae:3b:fa:df:69:fc:c2:33:c8:e1: 33:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:84:43:94:6A:A1:87:C2:33:1B:94:B1:61:34:BA:84:CC:27:43:C3 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_IRDlGqhh8IzG5SxYTS6hMwnQ8M.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.4.0/23 Signature Algorithm: sha256WithRSAEncryption 08:22:92:db:6e:7b:7f:b8:20:c9:a7:a7:ea:cf:42:65:32:11: 73:76:d9:3d:a6:6a:59:6e:03:19:1e:05:cc:f4:0f:3f:e0:51: f5:8d:dd:88:d1:d3:39:5e:d0:17:3b:fc:7d:fb:ee:73:c1:7e: d7:27:6e:97:f1:f3:d8:8d:47:8f:92:b5:92:6d:6e:36:7c:78: 0a:ec:9f:19:6c:cd:c6:32:58:52:cb:55:ad:8c:fa:78:3d:f6: b0:85:21:b0:de:fa:49:1f:65:30:7c:53:1d:7f:dc:39:b9:ab: 5c:b6:47:78:38:8a:ed:ca:2b:69:fd:36:84:71:c1:a6:9e:73: bb:4c:40:6e:31:bc:d1:f3:e4:5a:c3:00:9f:97:8d:3e:ef:e4: d3:81:89:da:bd:a6:c8:b7:7f:dc:7c:c5:e5:fc:d8:d0:76:25: 94:54:6f:f2:06:dc:21:a2:7b:0c:ad:9a:51:8a:0f:db:c5:1a: d4:70:6e:32:bb:23:4e:a0:30:cd:db:52:fd:0f:e0:44:ae:5b: b5:ff:f8:6b:41:be:5c:6e:e0:fc:3b:9d:da:9a:45:ff:4b:3e: 6e:4f:56:3d:a6:4a:e3:44:9e:5c:e4:64:58:ec:fa:c8:89:d3: 0a:09:ba:39:74:4c:64:3f:fb:8e:53:25:89:f0:2b:ec:54:b9: b1:90:8a:a9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOi8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3MDZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEZDODQ0Mzk0NkFBMTg3 QzIzMzFCOTRCMTYxMzRCQTg0Q0MyNzQzQzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCfRRC2MApkG74Vdi3lc2xoRZqxJ63uGHuVeSc0rfK7aixch6Fp 4H2d5+RSJOSvKfEa+AsQQhrA/9oy9aQapIMntysMNCSvCMN7sMHsKOwC7T8LHBiy arNvOY4yyIRwI9dUXRmMZ+k+9EIbhT7fzwgFrmm5Cz8b3Vg7d9VWVAhYfg2cpW7t xMtY9n+jifqxpyDUZl5N9rTO+E/NT9X5xz8gZX9MEf2l1Zkfrau3DfqBSCPh8tap OKuJ2I1Y7zp2ppNPZOyCie6nmLR8COWtsTYrWWyks9y1K8DpZ6J/qbwqFCUXVFzR eeW4EOlzTvleQQKy+yaOrjv632n8wjPI4TP3AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU/IRDlGqhh8IzG5SxYTS6hMwnQ8MwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL19JUkRsR3FoaDhJekc1U3hZ VFM2aE13blE4TS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG0 sQQwDQYJKoZIhvcNAQELBQADggEBAAgikttue3+4IMmnp+rPQmUyEXN22T2mallu AxkeBcz0Dz/gUfWN3YjR0zle0Bc7/H377nPBftcnbpfx89iNR4+StZJtbjZ8eArs nxlszcYyWFLLVa2M+ng99rCFIbDe+kkfZTB8Ux1/3Dm5q1y2R3g4iu3KK2n9NoRx waaec7tMQG4xvNHz5FrDAJ+XjT7v5NOBidq9psi3f9x8xeX82NB2JZRUb/IG3CGi ewytmlGKD9vFGtRwbjK7I06gMM3bUv0P4ESuW7X/+GtBvlxu4Pw7ndqaRf9LPm5P Vj2mSuNEnlzkZFjs+siJ0woJujl0TGQ/+45TJYnwK+xUubGQiqk= -----END CERTIFICATE-----Generated at Sun Aug 24 07:28:24 2025 by rpki-client