$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/h8PQy1LmXKHD4V3skNuaqghQPuc.roa File: h8PQy1LmXKHD4V3skNuaqghQPuc.roa (raw, json) Hash identifier: 1jKx2vMU27oGU4yusuEG7nHkwzTGSD7AzMvBcAP6ht0= Subject key identifier: 87:C3:D0:CB:52:E6:5C:A1:C3:E1:5D:EC:90:DB:9A:AA:08:50:3E:E7 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3922 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/h8PQy1LmXKHD4V3skNuaqghQPuc.roa Signing time: Fri 22 Aug 2025 08:46:00 +0000 ROA not before: Fri 22 Aug 2025 08:46:00 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 180.176.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14626 (0x3922) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:00 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=87C3D0CB52E65CA1C3E15DEC90DB9AAA08503EE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c8:e7:4c:2d:a4:79:4f:f7:21:36:f7:06:b1: 20:27:49:cb:10:96:cf:fe:e5:a4:0a:90:a1:9e:50: 96:74:38:c8:18:1c:33:fc:a7:41:19:9e:32:d6:a0: 94:88:b5:5d:7c:9e:63:ac:27:07:c3:07:2e:45:0e: 24:bd:47:a1:5f:fd:2a:9b:d3:27:f9:3f:e1:ee:8d: ff:9c:8e:dc:86:89:a3:10:27:98:19:dc:2a:42:d1: 7f:ab:82:0b:37:71:09:ab:28:87:ba:23:49:28:6a: 5c:79:2f:9d:60:c6:57:58:78:9c:58:e2:44:00:f4: 9a:40:7a:15:4d:3e:26:2e:fa:21:43:52:6d:24:96: 91:0c:4c:89:c0:b0:0b:3e:8b:c1:5c:1f:34:6d:1a: 45:29:92:56:3a:0c:b1:ff:14:5c:d3:28:b4:6e:03: 07:ff:e7:ac:15:81:7b:2b:3a:43:de:6b:c1:32:06: fb:6c:d5:7f:b1:37:c4:10:cf:49:3a:04:27:28:b2: bb:ec:e8:5d:38:2f:40:5d:99:4c:28:e3:e5:27:ac: 9e:6a:ea:16:8e:cb:7e:ac:d7:7c:bd:34:ed:9b:fa: a9:49:24:f6:80:cc:49:12:af:62:53:44:8c:1a:db: d7:70:9f:a7:68:b2:b5:4c:75:84:61:05:9d:83:fb: e9:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:C3:D0:CB:52:E6:5C:A1:C3:E1:5D:EC:90:DB:9A:AA:08:50:3E:E7 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/h8PQy1LmXKHD4V3skNuaqghQPuc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.88.0/22 Signature Algorithm: sha256WithRSAEncryption 68:d0:23:50:f3:20:22:d8:d4:73:81:f8:a3:43:7d:09:26:62: a5:9c:ae:d9:63:71:7e:09:42:d3:dd:f0:fe:cd:d8:08:f6:b3: 3d:5c:a6:4a:0b:61:a3:29:f4:75:97:21:a4:0a:5a:27:19:aa: 55:f9:31:a8:c8:88:d2:4c:17:07:76:df:9d:49:32:84:87:56: ab:5c:88:a1:25:99:c9:12:01:bf:ff:f4:67:0a:c7:ae:a6:bf: 53:34:3f:b8:0b:61:fa:a1:af:4a:48:d9:83:aa:49:a0:d2:35: 1c:86:4b:18:4e:af:b2:53:9d:77:b2:81:61:7f:e8:4e:86:bf: 23:82:98:8a:68:8b:21:a4:92:52:d0:9f:13:99:e0:f3:28:9a: 45:81:16:b8:80:d6:cb:0b:db:26:cf:5e:5a:b6:b6:00:f1:bd: 05:04:08:e7:ee:7c:0f:f5:94:b7:a9:15:cc:55:9a:c1:50:70: c6:8c:86:c3:5c:39:40:65:0c:5d:99:85:f0:e1:ca:b5:0e:42: ae:5d:f8:ba:7c:24:b9:b6:00:f7:60:40:6d:f5:43:52:a6:a5: e1:09:f8:94:d5:8a:05:17:60:7d:7b:93:cd:7c:9a:ea:8b:25: 1b:0a:90:55:02:6e:5b:d6:ed:00:ac:7e:41:42:96:36:59:25: 29:79:98:5e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOSIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2MDBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDg3QzNEMENCNTJFNjVD QTFDM0UxNURFQzkwREI5QUFBMDg1MDNFRTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSyOdMLaR5T/chNvcGsSAnScsQls/+5aQKkKGeUJZ0OMgYHDP8 p0EZnjLWoJSItV18nmOsJwfDBy5FDiS9R6Ff/Sqb0yf5P+Hujf+cjtyGiaMQJ5gZ 3CpC0X+rggs3cQmrKIe6I0koalx5L51gxldYeJxY4kQA9JpAehVNPiYu+iFDUm0k lpEMTInAsAs+i8FcHzRtGkUpklY6DLH/FFzTKLRuAwf/56wVgXsrOkPea8EyBvts 1X+xN8QQz0k6BCcosrvs6F04L0BdmUwo4+UnrJ5q6haOy36s13y9NO2b+qlJJPaA zEkSr2JTRIwa29dwn6dosrVMdYRhBZ2D++k3AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUh8PQy1LmXKHD4V3skNuaqghQPucwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2g4UFF5MUxtWEtIRDRWM3Nr TnVhcWdoUVB1Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 sFgwDQYJKoZIhvcNAQELBQADggEBAGjQI1DzICLY1HOB+KNDfQkmYqWcrtljcX4J QtPd8P7N2Aj2sz1cpkoLYaMp9HWXIaQKWicZqlX5MajIiNJMFwd2351JMoSHVqtc iKElmckSAb//9GcKx66mv1M0P7gLYfqhr0pI2YOqSaDSNRyGSxhOr7JTnXeygWF/ 6E6GvyOCmIpoiyGkklLQnxOZ4PMomkWBFriA1ssL2ybPXlq2tgDxvQUECOfufA/1 lLepFcxVmsFQcMaMhsNcOUBlDF2ZhfDhyrUOQq5d+Lp8JLm2APdgQG31Q1KmpeEJ +JTVigUXYH17k818muqLJRsKkFUCblvW7QCsfkFCljZZJSl5mF4= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:39 2025 by rpki-client