$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bGkGxGWhpkvMsWcX8LFfUQbsEIo.roa File: bGkGxGWhpkvMsWcX8LFfUQbsEIo.roa (raw, json) Hash identifier: JoQewkC8bnyFTk0vpY5dT/Ld3B7qUKJ6y/T1dbCarBc= Subject key identifier: 6C:69:06:C4:65:A1:A6:4B:CC:B1:67:17:F0:B1:5F:51:06:EC:10:8A Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 385A Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bGkGxGWhpkvMsWcX8LFfUQbsEIo.roa Signing time: Fri 22 Aug 2025 08:45:12 +0000 ROA not before: Fri 22 Aug 2025 08:45:12 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 180.176.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14426 (0x385a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:12 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=6C6906C465A1A64BCCB16717F0B15F5106EC108A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8a:46:82:b2:c7:d1:21:bc:3b:e8:ea:21:ca: 34:fe:1e:ce:c8:98:a0:4f:cd:70:8e:80:94:18:5d: e1:a1:fb:69:06:57:97:48:03:1f:fc:f8:c5:5e:11: e5:76:22:0f:48:a6:0f:d7:a9:73:fe:6b:44:f7:37: f8:13:54:be:5e:76:43:19:de:f8:ce:48:84:14:cc: ad:b4:59:11:32:41:e1:4b:7a:92:c0:35:fe:68:05: 91:79:35:fd:6d:60:0f:f4:86:97:5a:c0:e1:91:32: 3a:f5:3c:bf:36:e8:90:95:a5:9c:61:4f:15:4e:67: a3:a5:88:60:4a:d4:1a:45:b7:c6:59:9f:0d:ff:7e: 95:d8:7b:30:5d:23:2b:0c:fd:a3:d1:7f:cc:cd:58: 2b:94:38:d3:0f:3d:f5:14:62:e2:b2:52:d7:53:f4: a2:a4:bf:e4:e0:6b:76:b0:13:5b:19:cd:69:8f:e6: 65:bb:12:c8:9e:fe:d0:a6:95:97:ba:9b:5b:4b:50: 6d:89:5c:08:81:ee:a6:8d:70:43:6f:6b:24:7f:6d: 5f:92:09:85:e3:7b:4c:35:c7:81:71:4d:fa:6c:4d: 9f:d7:29:1d:15:45:b1:0e:c9:45:37:93:2f:fb:9e: f4:e7:84:8a:5b:01:27:e3:ca:04:43:f6:db:f9:5a: 25:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:69:06:C4:65:A1:A6:4B:CC:B1:67:17:F0:B1:5F:51:06:EC:10:8A X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bGkGxGWhpkvMsWcX8LFfUQbsEIo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.108.0/22 Signature Algorithm: sha256WithRSAEncryption 6f:08:3d:72:2e:8f:24:58:68:47:a7:37:84:50:da:89:fe:49: 8e:fe:62:a3:76:1a:b4:83:48:9b:eb:b2:c9:00:8f:9b:53:04: 26:6c:33:0e:67:3a:55:14:06:65:14:84:48:f8:a4:81:93:48: c9:73:c4:c5:4b:82:fd:97:4f:c4:eb:85:e1:2f:ec:d0:61:49: 81:49:36:e7:30:92:7c:da:9f:f5:8c:86:5b:96:7b:ca:33:87: 5f:15:c0:17:c7:e3:12:cf:bb:e4:df:e0:75:dc:38:27:6f:82: a5:0d:ab:bd:15:33:a2:4a:b4:ff:bc:af:ab:31:f1:d1:31:8b: 58:9d:bb:4e:1f:8b:4e:6f:2d:f5:8a:a1:4a:19:97:48:03:95: 52:17:35:9c:5c:03:92:a7:58:b5:d6:a3:b3:9e:27:2c:46:ba: ec:59:0c:7d:dd:14:d7:33:41:46:96:09:13:05:13:68:37:bc: 54:fa:00:bd:c9:12:a5:72:28:8d:af:91:f4:8c:3e:09:da:64: da:94:2f:f0:fb:51:86:e2:1d:67:dd:8e:e8:55:49:82:0c:25: ab:ee:4f:0a:5a:51:e5:44:64:4f:77:46:f9:48:07:7e:4e:c2: 7b:5c:d5:f0:1d:39:4f:b9:f6:1c:cb:40:cb:02:c5:5e:eb:6c: 9f:b4:35:8b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOFowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1MTJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDZDNjkwNkM0NjVBMUE2 NEJDQ0IxNjcxN0YwQjE1RjUxMDZFQzEwOEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9ikaCssfRIbw76OohyjT+Hs7ImKBPzXCOgJQYXeGh+2kGV5dI Ax/8+MVeEeV2Ig9Ipg/XqXP+a0T3N/gTVL5edkMZ3vjOSIQUzK20WREyQeFLepLA Nf5oBZF5Nf1tYA/0hpdawOGRMjr1PL826JCVpZxhTxVOZ6OliGBK1BpFt8ZZnw3/ fpXYezBdIysM/aPRf8zNWCuUONMPPfUUYuKyUtdT9KKkv+Tga3awE1sZzWmP5mW7 Esie/tCmlZe6m1tLUG2JXAiB7qaNcENvayR/bV+SCYXje0w1x4FxTfpsTZ/XKR0V RbEOyUU3ky/7nvTnhIpbASfjygRD9tv5WiUhAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUbGkGxGWhpkvMsWcX8LFfUQbsEIowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2JHa0d4R1docGt2TXNXY1g4 TEZmVVFic0VJby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 sGwwDQYJKoZIhvcNAQELBQADggEBAG8IPXIujyRYaEenN4RQ2on+SY7+YqN2GrSD SJvrsskAj5tTBCZsMw5nOlUUBmUUhEj4pIGTSMlzxMVLgv2XT8TrheEv7NBhSYFJ Nucwknzan/WMhluWe8ozh18VwBfH4xLPu+Tf4HXcOCdvgqUNq70VM6JKtP+8r6sx 8dExi1idu04fi05vLfWKoUoZl0gDlVIXNZxcA5KnWLXWo7OeJyxGuuxZDH3dFNcz QUaWCRMFE2g3vFT6AL3JEqVyKI2vkfSMPgnaZNqUL/D7UYbiHWfdjuhVSYIMJavu TwpaUeVEZE93RvlIB35Owntc1fAdOU+59hzLQMsCxV7rbJ+0NYs= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:55 2025 by rpki-client