$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rc_WvcZIRa5QJg4PKLkLFbtAzdw.roa File: rc_WvcZIRa5QJg4PKLkLFbtAzdw.roa (raw, json) Hash identifier: Pbwtycs1UYvby0Rj+ijaAN9EyvhgMVFQtk5ZYuin69A= Subject key identifier: AD:CF:D6:BD:C6:48:45:AE:50:26:0E:0F:28:B9:0B:15:BB:40:CD:DC Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 38D8 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rc_WvcZIRa5QJg4PKLkLFbtAzdw.roa Signing time: Fri 22 Aug 2025 08:45:41 +0000 ROA not before: Fri 22 Aug 2025 08:45:41 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 180.177.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14552 (0x38d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:41 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=ADCFD6BDC64845AE50260E0F28B90B15BB40CDDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d6:f1:e1:f5:6c:e0:9c:d5:22:d4:c9:04:9e: f3:25:e0:9f:4e:0a:71:37:50:05:ee:f2:b5:9d:47: 4f:75:e8:ca:f1:75:a6:17:7f:1b:eb:2c:4e:e9:d0: 4d:74:b8:d2:38:04:26:7f:e0:55:6d:46:c3:08:95: d9:ff:47:28:18:18:92:46:c7:72:27:31:18:29:b8: f7:ec:9d:a0:43:76:b0:4e:1a:aa:ef:11:dd:2f:c5: 84:26:09:aa:e4:89:c9:ef:f0:69:42:c3:dc:35:44: 41:3d:3a:f0:fd:69:11:4c:0c:8d:e8:b9:60:1b:8c: 78:d3:9e:46:c2:d9:a7:3a:ce:21:3a:73:4c:0c:58: ad:e3:b5:c5:66:69:c5:24:dc:1d:2f:80:44:bb:fd: 14:09:0d:c7:49:f9:f5:a2:19:7b:31:95:f8:b7:7e: 71:28:d2:c6:4c:39:9e:68:84:77:61:fb:19:b5:f8: fd:53:1e:f0:cd:f6:be:59:85:14:49:a2:38:48:51: 8d:7b:dc:c9:d0:6e:96:c2:ad:de:5c:16:a4:a8:d3: 33:ce:3c:e2:70:ec:3b:e6:05:ab:e0:71:5d:96:01: bd:f8:1f:5c:85:66:0d:1b:1f:3a:64:c0:c8:10:71: 8c:97:a0:97:fc:ae:b7:5b:b6:eb:80:13:16:d4:2d: b5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:CF:D6:BD:C6:48:45:AE:50:26:0E:0F:28:B9:0B:15:BB:40:CD:DC X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rc_WvcZIRa5QJg4PKLkLFbtAzdw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.0.0/22 Signature Algorithm: sha256WithRSAEncryption b6:c6:1f:f7:80:e2:b3:26:39:93:3b:b2:28:84:e0:d6:ff:81: e4:99:8b:58:8b:ae:8d:b7:84:ce:3b:03:c5:fd:d6:0e:46:3c: 2e:21:d1:b7:6c:c6:87:ce:25:ac:64:a1:f1:0d:15:39:cf:33: 5d:d0:43:ee:b3:e7:8e:55:c3:cb:43:fc:16:2c:4b:47:e8:d0: a3:69:ed:31:9d:c4:e9:35:40:53:e2:9c:cb:74:0f:7b:05:89: 2c:b9:87:a9:0a:a9:d0:9d:35:fb:61:9d:dd:09:06:4d:35:72: 64:3a:1f:eb:10:d6:b0:ec:08:58:5b:d7:3a:8b:7b:89:98:da: cf:0f:47:5a:4a:36:cc:f0:5d:b2:5b:0f:a4:5b:0d:58:95:97: 2d:d7:14:7b:11:0c:18:c9:f9:ec:e9:c7:b2:d0:f8:5a:48:50: bd:56:69:c0:22:83:66:a2:d8:03:01:e2:2c:af:d5:b2:70:84: 30:38:a3:92:4a:ee:39:ab:ee:d9:da:54:8f:f1:e2:47:94:06: c2:0e:c8:59:26:b8:6a:fb:95:0e:d5:56:92:3a:9e:96:44:75: d6:c3:17:70:2f:35:96:b8:c7:66:f6:1c:8d:97:33:fc:a5:ec: 5c:6c:fa:62:00:20:3d:62:30:46:2d:8f:26:02:40:69:c8:a4: 6f:f4:54:09 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICONgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1NDFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEFEQ0ZENkJEQzY0ODQ1 QUU1MDI2MEUwRjI4QjkwQjE1QkI0MENEREMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZ1vHh9WzgnNUi1MkEnvMl4J9OCnE3UAXu8rWdR0916MrxdaYX fxvrLE7p0E10uNI4BCZ/4FVtRsMIldn/RygYGJJGx3InMRgpuPfsnaBDdrBOGqrv Ed0vxYQmCarkicnv8GlCw9w1REE9OvD9aRFMDI3ouWAbjHjTnkbC2ac6ziE6c0wM WK3jtcVmacUk3B0vgES7/RQJDcdJ+fWiGXsxlfi3fnEo0sZMOZ5ohHdh+xm1+P1T HvDN9r5ZhRRJojhIUY173MnQbpbCrd5cFqSo0zPOPOJw7DvmBavgcV2WAb34H1yF Zg0bHzpkwMgQcYyXoJf8rrdbtuuAExbULbUBAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUrc/WvcZIRa5QJg4PKLkLFbtAzdwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3JjX1d2Y1pJUmE1UUpnNFBL TGtMRmJ0QXpkdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 sQAwDQYJKoZIhvcNAQELBQADggEBALbGH/eA4rMmOZM7siiE4Nb/geSZi1iLro23 hM47A8X91g5GPC4h0bdsxofOJaxkofENFTnPM13QQ+6z545Vw8tD/BYsS0fo0KNp 7TGdxOk1QFPinMt0D3sFiSy5h6kKqdCdNfthnd0JBk01cmQ6H+sQ1rDsCFhb1zqL e4mY2s8PR1pKNszwXbJbD6RbDViVly3XFHsRDBjJ+ezpx7LQ+FpIUL1WacAig2ai 2AMB4iyv1bJwhDA4o5JK7jmr7tnaVI/x4keUBsIOyFkmuGr7lQ7VVpI6npZEddbD F3AvNZa4x2b2HI2XM/yl7Fxs+mIAID1iMEYtjyYCQGnIpG/0VAk= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:56 2025 by rpki-client