$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lIZ4Hr7UfaiKCvfklOdsxQDpnOk.roa File: lIZ4Hr7UfaiKCvfklOdsxQDpnOk.roa (raw, json) Hash identifier: /u2aIHU+H0shr9DslZ7JpJiy+6b6Xdp4KfVgXqJ56T4= Subject key identifier: 94:86:78:1E:BE:D4:7D:A8:8A:0A:F7:E4:94:E7:6C:C5:00:E9:9C:E9 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3A90 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lIZ4Hr7UfaiKCvfklOdsxQDpnOk.roa Signing time: Fri 22 Aug 2025 08:47:30 +0000 ROA not before: Fri 22 Aug 2025 08:47:30 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9924 IP address blocks: 180.176.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14992 (0x3a90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:30 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=9486781EBED47DA88A0AF7E494E76CC500E99CE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e3:4c:87:bd:9e:89:d6:08:e8:52:a7:2d:92: d7:a2:f6:60:5b:f6:c2:6c:11:c8:6f:93:6c:9e:10: f8:ff:cf:49:4e:17:96:63:25:81:41:81:e7:e8:ec: 50:a9:f0:79:c1:47:ef:f1:16:b9:33:4d:b3:25:6b: 0f:45:d7:91:3f:ef:50:e2:54:88:3f:2c:1f:14:39: ba:5e:80:aa:80:e9:b6:72:81:49:e6:6e:3c:94:54: 7f:d5:fe:49:5b:eb:79:4f:f3:99:af:d5:be:b5:54: 84:9b:54:3f:b1:d0:59:86:cc:92:df:86:79:a1:1c: 42:82:b7:f3:3b:08:43:54:c3:df:bc:35:67:36:1e: 0b:d1:ca:50:0b:f3:57:b0:87:58:15:ae:bf:cd:26: e7:58:dd:65:2d:11:ef:3d:78:41:5f:11:c2:b7:35: c8:53:0b:d0:5e:f2:52:f3:ff:f4:24:87:4f:48:63: 53:33:28:6b:35:c6:96:09:67:87:5f:b9:b0:41:be: 37:e1:f6:bc:f6:a1:e1:19:ea:9a:7e:33:51:74:01: 5f:69:73:d3:0f:b5:d8:d2:67:ef:28:65:94:ef:3b: 84:f0:17:59:0f:bb:63:59:ce:cd:4d:27:43:dd:25: 91:a6:98:19:e2:d5:fd:90:e7:94:b7:a3:a5:b1:87: 7f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:86:78:1E:BE:D4:7D:A8:8A:0A:F7:E4:94:E7:6C:C5:00:E9:9C:E9 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lIZ4Hr7UfaiKCvfklOdsxQDpnOk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.0.0/15 Signature Algorithm: sha256WithRSAEncryption 76:bb:df:a1:3c:79:8f:00:63:3d:cb:00:0d:e9:c6:c8:0f:93: 3f:31:80:88:d5:4d:23:39:4d:cb:90:c7:88:89:37:8b:f0:d9: b5:43:56:98:57:a7:6e:d0:25:99:c8:3d:fa:4f:a9:d7:5d:14: 62:52:a1:15:67:69:e5:a7:bf:a2:d8:06:91:ee:e5:10:d4:01: f2:23:87:c9:93:d8:92:32:72:c1:f3:35:a7:09:76:c4:e6:2e: 66:60:10:f5:c7:f0:0e:39:e4:02:76:f5:ec:c6:29:de:30:78: 13:25:74:89:9f:27:28:78:12:e2:76:71:df:a5:69:cf:98:27: 0f:b6:40:51:5a:5c:d4:f0:42:1f:51:6a:b8:cf:b9:5a:ae:88: a4:db:8a:a3:6e:f8:54:9a:a7:b2:09:d7:ea:2d:65:0c:32:ad: c4:d2:5b:ab:e8:d0:3d:28:22:4c:3f:06:38:93:73:5f:be:7d: fe:7c:3f:11:45:6e:ac:ba:97:c2:16:14:2f:a4:4f:90:4a:ea: 2f:6e:a9:83:2a:5a:f0:ff:23:9d:f6:3a:8e:9d:40:39:ff:f6: 74:1a:f0:03:3f:71:da:73:db:f8:fa:79:4b:bd:cc:19:4f:16: ff:82:f4:30:79:89:82:2e:b3:b1:43:cf:9d:5a:be:d3:76:6d: d7:cb:69:10 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICOpAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3MzBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDk0ODY3ODFFQkVENDdE QTg4QTBBRjdFNDk0RTc2Q0M1MDBFOTlDRTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDV40yHvZ6J1gjoUqctktei9mBb9sJsEchvk2yeEPj/z0lOF5Zj JYFBgefo7FCp8HnBR+/xFrkzTbMlaw9F15E/71DiVIg/LB8UObpegKqA6bZygUnm bjyUVH/V/klb63lP85mv1b61VISbVD+x0FmGzJLfhnmhHEKCt/M7CENUw9+8NWc2 HgvRylAL81ewh1gVrr/NJudY3WUtEe89eEFfEcK3NchTC9Be8lLz//Qkh09IY1Mz KGs1xpYJZ4dfubBBvjfh9rz2oeEZ6pp+M1F0AV9pc9MPtdjSZ+8oZZTvO4TwF1kP u2NZzs1NJ0PdJZGmmBni1f2Q55S3o6Wxh3+nAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUlIZ4Hr7UfaiKCvfklOdsxQDpnOkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2xJWjRIcjdVZmFpS0N2Zmts T2RzeFFEcG5Pay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwG0 sDANBgkqhkiG9w0BAQsFAAOCAQEAdrvfoTx5jwBjPcsADenGyA+TPzGAiNVNIzlN y5DHiIk3i/DZtUNWmFenbtAlmcg9+k+p110UYlKhFWdp5ae/otgGke7lENQB8iOH yZPYkjJywfM1pwl2xOYuZmAQ9cfwDjnkAnb17MYp3jB4EyV0iZ8nKHgS4nZx36Vp z5gnD7ZAUVpc1PBCH1FquM+5Wq6IpNuKo274VJqnsgnX6i1lDDKtxNJbq+jQPSgi TD8GOJNzX759/nw/EUVurLqXwhYUL6RPkErqL26pgypa8P8jnfY6jp1AOf/2dBrw Az9x2nPb+Pp5S73MGU8W/4L0MHmJgi6zsUPPnVq+03Zt18tpEA== -----END CERTIFICATE-----Generated at Sun Aug 24 07:31:01 2025 by rpki-client