$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fyk6is7h5BHjsphrvW_uLMhN7QU.roa File: fyk6is7h5BHjsphrvW_uLMhN7QU.roa (raw, json) Hash identifier: ZleoVg/OpwYPqVW3jUZ80rr0rhLwm9cnnvnUQ+te28o= Subject key identifier: 7F:29:3A:8A:CE:E1:E4:11:E3:B2:98:6B:BD:6F:EE:2C:C8:4D:ED:05 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 38AA Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fyk6is7h5BHjsphrvW_uLMhN7QU.roa Signing time: Fri 22 Aug 2025 08:45:31 +0000 ROA not before: Fri 22 Aug 2025 08:45:31 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 180.177.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14506 (0x38aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:31 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=7F293A8ACEE1E411E3B2986BBD6FEE2CC84DED05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ec:52:49:bd:a3:12:d5:4e:f1:25:43:17:72: ca:87:d8:7b:89:0c:6b:82:b1:74:cb:fc:f9:7e:07: 54:4e:f4:68:35:c9:23:c8:4c:f1:e6:b4:bc:93:ad: 67:66:9e:6f:0d:c2:e1:10:56:6e:6d:06:c3:17:64: da:d3:08:82:84:2b:41:5a:85:e5:80:3f:3a:a4:53: 94:a2:6e:eb:9c:6a:b7:93:d6:12:28:ec:59:18:30: d0:11:b1:04:34:0c:41:7a:09:1e:6d:88:6a:34:b4: dc:8d:9c:5e:96:07:28:62:a0:66:b7:f9:5f:93:bf: b9:3a:31:31:fa:0a:a5:8e:b1:f0:fe:24:48:21:28: e0:57:81:95:1d:8b:15:db:06:a3:8b:30:d2:a3:b3: 73:25:85:f5:ac:01:fb:c8:2d:ca:b7:38:2c:55:3d: 19:b9:8f:27:28:b4:6b:9f:24:22:cb:90:07:49:34: f1:27:f8:30:73:85:98:2a:fc:f0:56:13:86:a5:b5: 1b:67:40:83:06:59:90:f6:77:e7:e2:2b:b4:f8:4e: 33:f6:62:10:b0:88:a7:42:44:88:6b:a1:9d:1c:4c: 91:78:f5:ce:45:69:b7:95:a9:ed:b1:87:96:0b:af: 29:53:88:36:83:2e:97:7c:92:5f:87:be:40:89:1e: f2:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:29:3A:8A:CE:E1:E4:11:E3:B2:98:6B:BD:6F:EE:2C:C8:4D:ED:05 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fyk6is7h5BHjsphrvW_uLMhN7QU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.118.0/23 Signature Algorithm: sha256WithRSAEncryption 03:e9:68:18:14:64:5a:6a:78:64:1c:d5:b1:c3:89:fd:66:0c: 63:00:9d:1a:99:15:2f:56:54:34:f3:36:46:a5:b5:05:75:8d: 0a:60:4f:c3:bb:b7:6d:23:ab:f4:86:ad:64:d2:28:fd:e9:ab: 8f:7a:89:32:ab:6d:22:19:cf:6b:9a:ad:63:f9:88:0c:ea:3e: de:07:97:ee:4e:cb:5f:f4:84:7e:45:26:af:81:1c:0e:32:88: 01:e0:19:fd:83:f1:42:76:0e:c6:8a:61:ef:99:04:ac:fe:c9: ea:87:39:16:5d:32:29:33:7f:ba:6e:9d:e0:82:8b:f9:5b:ef: ed:c2:6c:9a:45:02:30:82:5a:86:74:f7:d6:26:e2:04:1a:02: 37:d5:9e:91:a5:b5:ff:39:28:29:19:5e:54:f6:d0:66:a1:ee: 32:b0:7e:58:1b:25:ef:8a:20:2d:62:26:99:7c:14:b6:b3:08: 93:b6:b3:b0:7c:3a:f6:3a:f7:44:60:40:b0:f8:72:9d:be:e6: c0:dd:6d:ea:f6:11:53:f6:64:ce:47:9d:a2:1b:0e:2c:8e:64: 47:64:e1:18:b5:b8:93:52:31:f4:14:bf:c1:e4:e6:9c:9e:6e: cd:e0:12:6c:e0:91:2c:02:83:e5:48:c7:b7:53:79:01:27:da: 14:54:d9:24 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOKowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1MzFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDdGMjkzQThBQ0VFMUU0 MTFFM0IyOTg2QkJENkZFRTJDQzg0REVEMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC87FJJvaMS1U7xJUMXcsqH2HuJDGuCsXTL/Pl+B1RO9Gg1ySPI TPHmtLyTrWdmnm8NwuEQVm5tBsMXZNrTCIKEK0FaheWAPzqkU5SibuucareT1hIo 7FkYMNARsQQ0DEF6CR5tiGo0tNyNnF6WByhioGa3+V+Tv7k6MTH6CqWOsfD+JEgh KOBXgZUdixXbBqOLMNKjs3MlhfWsAfvILcq3OCxVPRm5jycotGufJCLLkAdJNPEn +DBzhZgq/PBWE4altRtnQIMGWZD2d+fiK7T4TjP2YhCwiKdCRIhroZ0cTJF49c5F abeVqe2xh5YLrylTiDaDLpd8kl+HvkCJHvITAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUfyk6is7h5BHjsphrvW/uLMhN7QUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2Z5azZpczdoNUJIanNwaHJ2 V191TE1oTjdRVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG0 sXYwDQYJKoZIhvcNAQELBQADggEBAAPpaBgUZFpqeGQc1bHDif1mDGMAnRqZFS9W VDTzNkaltQV1jQpgT8O7t20jq/SGrWTSKP3pq496iTKrbSIZz2uarWP5iAzqPt4H l+5Oy1/0hH5FJq+BHA4yiAHgGf2D8UJ2DsaKYe+ZBKz+yeqHORZdMikzf7puneCC i/lb7+3CbJpFAjCCWoZ099Ym4gQaAjfVnpGltf85KCkZXlT20Gah7jKwflgbJe+K IC1iJpl8FLazCJO2s7B8OvY690RgQLD4cp2+5sDdber2EVP2ZM5HnaIbDiyOZEdk 4Ri1uJNSMfQUv8Hk5pyebs3gEmzgkSwCg+VIx7dTeQEn2hRU2SQ= -----END CERTIFICATE-----Generated at Sun Aug 24 05:32:08 2025 by rpki-client