$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dVAUeJjfepvyrYYPZ2hAkZ5pWpk.roa File: dVAUeJjfepvyrYYPZ2hAkZ5pWpk.roa (raw, json) Hash identifier: 12AjaVZ6JqbK/oHeXz7eb+Yl4zWz2WyiZUeYojcxHqg= Subject key identifier: 75:50:14:78:98:DF:7A:9B:F2:AD:86:0F:67:68:40:91:9E:69:5A:99 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 391B Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dVAUeJjfepvyrYYPZ2hAkZ5pWpk.roa Signing time: Fri 22 Aug 2025 08:45:58 +0000 ROA not before: Fri 22 Aug 2025 08:45:58 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 180.176.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14619 (0x391b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:58 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=7550147898DF7A9BF2AD860F676840919E695A99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:07:fa:61:b5:2e:15:83:59:e0:a0:47:b1:0e: 6d:89:06:f4:ba:cb:2b:8a:1e:03:f7:a9:8c:7b:13: 0b:96:7e:7a:86:f8:1c:ab:0d:56:7e:4c:1d:e2:5f: 30:0f:bc:73:af:db:35:fa:77:5d:e0:a2:01:d7:a0: 92:26:af:f8:68:1e:cf:15:cf:8c:52:04:bc:d6:56: 8f:e9:ab:b6:b2:39:14:0d:21:36:42:43:2b:60:69: be:8c:80:a2:2c:10:e5:24:08:af:5a:2c:5b:22:ad: 85:80:bf:53:0a:ed:b1:9e:91:77:bc:3b:1a:66:b3: ac:01:70:af:69:5e:31:0c:00:df:d2:54:b8:a7:5e: 5a:91:c1:91:db:6c:fe:d6:53:f3:a8:39:41:bf:a3: 0a:9a:24:b8:21:6f:c1:c2:1b:78:12:a6:b2:31:5a: e8:bc:ef:6d:4d:e4:79:8b:e3:29:97:b5:ef:dc:2f: ea:88:43:c1:2e:55:0a:54:a2:b7:67:e6:49:f8:7a: 11:f2:fe:77:25:a2:d4:65:51:e9:66:ef:9b:0a:12: 47:58:20:59:b7:17:2c:8b:a8:c0:6c:1b:69:31:f8: 54:ca:c4:07:5d:fd:43:5c:2f:24:99:6a:ab:91:b7: f7:b8:76:fc:a7:cf:d9:e1:be:35:da:a2:bb:cc:da: 29:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:50:14:78:98:DF:7A:9B:F2:AD:86:0F:67:68:40:91:9E:69:5A:99 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dVAUeJjfepvyrYYPZ2hAkZ5pWpk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.236.0/22 Signature Algorithm: sha256WithRSAEncryption 4b:fd:8a:35:2d:c6:01:bf:ed:7d:92:54:ff:00:c6:25:3f:ec: 8f:e7:ee:c8:bb:63:39:5d:eb:d0:24:e9:46:30:55:42:fd:9d: 81:e4:0e:91:ee:41:52:52:d0:c0:2a:d2:f2:a8:a7:76:51:f0: a3:fb:3c:cf:1e:f1:51:6a:66:68:c0:5f:74:66:65:26:4d:8a: 38:01:a7:4a:4d:2c:ab:dd:e4:5e:41:87:2a:ab:9a:76:f2:d5: 70:3b:f5:92:f6:82:8d:0f:1f:ef:7a:02:2a:32:ef:bf:bc:96: 0a:75:af:0b:3a:1b:34:e3:73:61:d8:4b:75:f8:cd:0e:b8:bd: b3:19:31:1b:89:3e:ee:44:fe:d6:80:49:84:ee:f4:d8:00:60: 43:44:24:9c:ed:eb:21:ba:76:33:72:12:f8:f3:a9:24:2d:39: d3:0b:36:b0:40:2e:09:a8:8b:2f:91:02:2d:85:14:33:ca:aa: c7:c6:95:04:ee:fa:3f:d7:fb:9f:ad:65:c1:05:82:54:01:74: c8:38:22:2f:91:b6:da:81:15:71:fc:7b:83:21:1e:16:ff:d1: b5:76:1e:ea:cb:bd:a6:fc:e8:45:44:b5:2b:c8:06:d6:20:a0: 8b:d5:93:8e:0a:61:5a:5a:f1:db:bf:04:2a:cd:90:f5:af:1c: d6:f0:59:f3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICORswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1NThaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDc1NTAxNDc4OThERjdB OUJGMkFEODYwRjY3Njg0MDkxOUU2OTVBOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCYB/phtS4Vg1ngoEexDm2JBvS6yyuKHgP3qYx7EwuWfnqG+Byr DVZ+TB3iXzAPvHOv2zX6d13gogHXoJImr/hoHs8Vz4xSBLzWVo/pq7ayORQNITZC Qytgab6MgKIsEOUkCK9aLFsirYWAv1MK7bGekXe8Oxpms6wBcK9pXjEMAN/SVLin XlqRwZHbbP7WU/OoOUG/owqaJLghb8HCG3gSprIxWui8721N5HmL4ymXte/cL+qI Q8EuVQpUordn5kn4ehHy/nclotRlUelm75sKEkdYIFm3FyyLqMBsG2kx+FTKxAdd /UNcLySZaquRt/e4dvynz9nhvjXaorvM2intAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUdVAUeJjfepvyrYYPZ2hAkZ5pWpkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2RWQVVlSmpmZXB2eXJZWVBa MmhBa1o1cFdway5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 sOwwDQYJKoZIhvcNAQELBQADggEBAEv9ijUtxgG/7X2SVP8AxiU/7I/n7si7Yzld 69Ak6UYwVUL9nYHkDpHuQVJS0MAq0vKop3ZR8KP7PM8e8VFqZmjAX3RmZSZNijgB p0pNLKvd5F5Bhyqrmnby1XA79ZL2go0PH+96Aioy77+8lgp1rws6GzTjc2HYS3X4 zQ64vbMZMRuJPu5E/taASYTu9NgAYENEJJzt6yG6djNyEvjzqSQtOdMLNrBALgmo iy+RAi2FFDPKqsfGlQTu+j/X+5+tZcEFglQBdMg4Ii+RttqBFXH8e4MhHhb/0bV2 HurLvab86EVEtSvIBtYgoIvVk44KYVpa8du/BCrNkPWvHNbwWfM= -----END CERTIFICATE-----Generated at Sun Aug 24 07:31:03 2025 by rpki-client