$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uN4rXgShNp9DX8yHEQNolGDSThU.roa File: uN4rXgShNp9DX8yHEQNolGDSThU.roa (raw, json) Hash identifier: 21wuHtU54RqcXfPTBFHmCptBaVvxFzPatxVDdGCRKBw= Subject key identifier: B8:DE:2B:5E:04:A1:36:9F:43:5F:CC:87:11:03:68:94:60:D2:4E:15 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3AD7 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uN4rXgShNp9DX8yHEQNolGDSThU.roa Signing time: Fri 22 Aug 2025 08:47:49 +0000 ROA not before: Fri 22 Aug 2025 08:47:49 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 180.177.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15063 (0x3ad7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:49 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=B8DE2B5E04A1369F435FCC871103689460D24E15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:45:00:1c:f8:14:3c:f7:77:05:25:81:87:47: f3:52:dd:f1:25:ec:52:f0:07:87:bd:78:53:27:1d: 5e:07:a5:f1:95:bf:10:47:31:03:f9:61:d7:df:27: 24:4f:78:74:49:21:6b:97:43:f6:e9:88:17:03:c5: 92:63:b6:25:53:46:c2:20:b4:49:35:25:64:29:ed: 60:c9:bd:a0:37:b9:9e:ae:15:58:ce:10:ff:fd:a1: 44:b4:30:7a:56:db:ad:3d:75:d4:4a:9e:ba:b7:62: b4:8a:72:21:79:ed:70:6c:bd:cd:d2:49:31:a4:6c: 4f:51:51:44:4f:3c:43:af:59:87:22:9c:fc:d6:b4: 02:6f:18:73:20:82:6f:6d:09:d2:47:d3:46:d8:9b: 1b:31:df:8a:19:99:28:43:ce:83:56:fe:0d:65:f5: e5:03:d5:f2:02:e5:ab:c6:b0:eb:67:58:8a:36:a0: 52:dd:72:05:b5:1e:f2:57:b3:c3:27:9b:01:a2:4a: 8f:6a:7b:56:86:ec:d4:27:90:8f:35:49:18:8e:e7: 8a:4a:82:13:23:47:e6:56:50:ef:ac:46:c6:89:bd: a8:37:01:15:e2:ac:64:a8:cf:b3:e2:ec:77:d1:9d: e6:fb:5b:f2:99:81:b6:a6:69:b3:f7:96:31:b1:cb: 1d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:DE:2B:5E:04:A1:36:9F:43:5F:CC:87:11:03:68:94:60:D2:4E:15 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uN4rXgShNp9DX8yHEQNolGDSThU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.152.0/21 Signature Algorithm: sha256WithRSAEncryption 15:20:8a:06:75:5e:97:8b:ca:4f:63:3e:89:47:6b:cc:a2:58: 72:e4:1f:54:33:40:2d:98:1c:47:44:e2:8b:79:9a:35:9f:b3: 97:4a:c8:70:09:e8:d7:39:b3:12:ac:d1:bc:a5:a0:99:6f:68: 6c:71:2d:22:28:87:fa:8d:8f:91:eb:e7:a9:a3:8f:24:c9:ce: c4:99:fd:77:ba:2b:5d:26:b5:72:f0:d9:de:2a:3b:d7:cc:71: ba:1c:08:91:b5:42:91:9d:c7:eb:c8:f1:89:36:94:5b:5f:39: 4a:62:59:e4:52:4d:07:66:c6:62:b6:09:03:dc:ca:1c:22:61: 06:aa:55:95:4e:7c:d5:37:ee:a2:42:f2:f9:6e:60:fb:dd:43: 6e:dc:da:ec:a6:6a:95:06:89:62:0e:c2:7a:28:6d:4f:ee:f0: e5:9b:93:91:64:fe:4f:36:76:22:35:33:13:b8:ba:0b:be:31: 04:7a:0f:ef:f5:70:d2:d4:3f:69:96:bf:ae:cc:b6:79:48:19: ae:11:bd:82:73:55:e8:14:af:0e:ce:06:f0:0e:71:99:ea:03: 7b:e2:fb:dc:fb:3e:b3:af:35:17:21:98:3c:8a:53:d3:5c:27: bf:ab:c2:2c:0a:68:0d:67:eb:06:92:b1:9a:3c:52:22:9c:fb: d7:e3:53:b0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOtcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3NDlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEI4REUyQjVFMDRBMTM2 OUY0MzVGQ0M4NzExMDM2ODk0NjBEMjRFMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZRQAc+BQ893cFJYGHR/NS3fEl7FLwB4e9eFMnHV4HpfGVvxBH MQP5YdffJyRPeHRJIWuXQ/bpiBcDxZJjtiVTRsIgtEk1JWQp7WDJvaA3uZ6uFVjO EP/9oUS0MHpW2609ddRKnrq3YrSKciF57XBsvc3SSTGkbE9RUURPPEOvWYcinPzW tAJvGHMggm9tCdJH00bYmxsx34oZmShDzoNW/g1l9eUD1fIC5avGsOtnWIo2oFLd cgW1HvJXs8MnmwGiSo9qe1aG7NQnkI81SRiO54pKghMjR+ZWUO+sRsaJvag3ARXi rGSoz7Pi7HfRneb7W/KZgbamabP3ljGxyx25AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUuN4rXgShNp9DX8yHEQNolGDSThUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3VONHJYZ1NoTnA5RFg4eUhF UU5vbEdEU1RoVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 sZgwDQYJKoZIhvcNAQELBQADggEBABUgigZ1XpeLyk9jPolHa8yiWHLkH1QzQC2Y HEdE4ot5mjWfs5dKyHAJ6Nc5sxKs0byloJlvaGxxLSIoh/qNj5Hr56mjjyTJzsSZ /Xe6K10mtXLw2d4qO9fMcbocCJG1QpGdx+vI8Yk2lFtfOUpiWeRSTQdmxmK2CQPc yhwiYQaqVZVOfNU37qJC8vluYPvdQ27c2uymapUGiWIOwnoobU/u8OWbk5Fk/k82 diI1MxO4ugu+MQR6D+/1cNLUP2mWv67MtnlIGa4RvYJzVegUrw7OBvAOcZnqA3vi +9z7PrOvNRchmDyKU9NcJ7+rwiwKaA1n6waSsZo8UiKc+9fjU7A= -----END CERTIFICATE-----Generated at Sun Aug 24 07:25:24 2025 by rpki-client