$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fB2tsnTeu5ZyGz9JIX-kRY_A3Q8.roa File: fB2tsnTeu5ZyGz9JIX-kRY_A3Q8.roa (raw, json) Hash identifier: n5eIwpErvqHz0YM1ZMAjwK9muAAjXAuXEenrzy1dV7o= Subject key identifier: 7C:1D:AD:B2:74:DE:BB:96:72:1B:3F:49:21:7F:A4:45:8F:C0:DD:0F Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3886 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fB2tsnTeu5ZyGz9JIX-kRY_A3Q8.roa Signing time: Fri 22 Aug 2025 08:45:22 +0000 ROA not before: Fri 22 Aug 2025 08:45:22 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 180.176.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14470 (0x3886) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:22 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=7C1DADB274DEBB96721B3F49217FA4458FC0DD0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:8d:47:31:2e:18:68:07:1e:2c:8a:50:ec:7d: 0e:54:12:0f:f7:65:21:e4:c9:1f:c0:56:34:f4:14: e5:4e:eb:7d:86:a8:36:13:db:89:64:95:be:ae:57: 4a:28:f1:40:4e:21:e0:79:12:80:c5:5b:be:0b:31: 81:41:02:90:a5:c2:90:a8:ed:27:17:9c:ee:48:65: b9:1e:03:30:7c:1f:be:1f:15:bd:09:43:9d:4a:89: 4c:e6:3d:c8:28:b8:55:48:ef:d5:09:69:4b:b9:1f: cb:34:af:39:89:4c:56:41:77:c3:bf:cd:10:87:a6: 3a:b4:2e:4b:d8:de:83:13:0c:7d:de:01:98:c3:c1: d5:5f:b2:24:26:89:98:14:9b:b3:77:16:eb:d2:be: df:44:86:59:3b:4d:5b:71:93:47:63:46:25:a6:0a: ba:95:4c:4c:54:31:54:04:fe:cf:26:3c:39:35:55: 3e:11:da:ad:52:78:46:49:15:bd:ef:b9:92:16:82: 0a:ad:36:90:6a:9c:35:b1:0e:16:8e:30:45:fb:63: 8e:a2:31:41:f8:69:8e:dc:41:09:35:f9:7e:2c:26: 70:dd:d1:ca:25:76:a9:36:f5:0a:ac:4d:07:24:d5: 5f:16:14:eb:ca:81:3b:01:76:f5:72:51:d1:0c:e8: fc:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:1D:AD:B2:74:DE:BB:96:72:1B:3F:49:21:7F:A4:45:8F:C0:DD:0F X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fB2tsnTeu5ZyGz9JIX-kRY_A3Q8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.156.0/24 Signature Algorithm: sha256WithRSAEncryption 47:27:54:c9:29:c3:fb:9c:18:bd:40:a9:7d:31:3a:95:fb:d2: 5d:74:af:0c:b8:b6:a2:ac:5a:8a:08:58:f0:d8:db:b1:d2:ba: 0c:e2:d3:1b:33:c0:eb:fb:2f:92:5a:2c:7a:58:8c:90:44:98: 1e:66:d9:c9:33:76:fd:dc:9a:d9:83:46:6e:75:2b:31:15:50: 92:d1:a8:84:8b:da:d4:da:22:39:1b:18:83:8f:93:4a:c2:d1: a7:fd:1f:af:71:be:3e:63:e2:ba:79:99:06:57:c8:e6:cd:34: 3f:b4:4b:4a:bd:5e:d6:9c:7f:94:1d:e6:09:d1:11:f6:cb:0b: 76:12:9b:6b:ea:7f:30:77:a1:63:ac:9e:ef:56:76:eb:21:39: 8e:cc:f4:21:3e:ba:41:a3:8e:5f:a5:63:9a:0c:8c:2e:c2:13: 30:ef:e4:a5:97:ca:06:b2:d3:57:f4:79:df:20:36:99:8e:85: 3a:a3:f2:0c:f5:0b:0e:7b:52:56:9a:7f:97:9f:28:45:1e:a8: 3c:e8:13:71:94:08:d6:f8:0f:6b:d3:48:81:f0:49:07:2c:30: 8a:0f:38:31:09:42:8c:a4:c6:ca:17:95:f8:61:aa:32:ac:e7: 5a:b3:76:ae:02:b3:a6:ae:c0:fa:86:c9:52:7b:9d:dd:1f:0d: 35:ec:ac:62 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOIYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1MjJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDdDMURBREIyNzRERUJC OTY3MjFCM0Y0OTIxN0ZBNDQ1OEZDMEREMEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD0jUcxLhhoBx4silDsfQ5UEg/3ZSHkyR/AVjT0FOVO632GqDYT 24lklb6uV0oo8UBOIeB5EoDFW74LMYFBApClwpCo7ScXnO5IZbkeAzB8H74fFb0J Q51KiUzmPcgouFVI79UJaUu5H8s0rzmJTFZBd8O/zRCHpjq0LkvY3oMTDH3eAZjD wdVfsiQmiZgUm7N3FuvSvt9Ehlk7TVtxk0djRiWmCrqVTExUMVQE/s8mPDk1VT4R 2q1SeEZJFb3vuZIWggqtNpBqnDWxDhaOMEX7Y46iMUH4aY7cQQk1+X4sJnDd0col dqk29QqsTQck1V8WFOvKgTsBdvVyUdEM6PxvAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUfB2tsnTeu5ZyGz9JIX+kRY/A3Q8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2ZCMnRzblRldTVaeUd6OUpJ WC1rUllfQTNROC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0 sJwwDQYJKoZIhvcNAQELBQADggEBAEcnVMkpw/ucGL1AqX0xOpX70l10rwy4tqKs WooIWPDY27HSugzi0xszwOv7L5JaLHpYjJBEmB5m2ckzdv3cmtmDRm51KzEVUJLR qISL2tTaIjkbGIOPk0rC0af9H69xvj5j4rp5mQZXyObNND+0S0q9Xtacf5Qd5gnR EfbLC3YSm2vqfzB3oWOsnu9WdushOY7M9CE+ukGjjl+lY5oMjC7CEzDv5KWXygay 01f0ed8gNpmOhTqj8gz1Cw57Ulaaf5efKEUeqDzoE3GUCNb4D2vTSIHwSQcsMIoP ODEJQoykxsoXlfhhqjKs51qzdq4Cs6auwPqGyVJ7nd0fDTXsrGI= -----END CERTIFICATE-----Generated at Sun Aug 24 07:31:56 2025 by rpki-client