$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/v0gn4bTB_LQJClZ5SC1jlQoopOI.roa File: v0gn4bTB_LQJClZ5SC1jlQoopOI.roa (raw, json) Hash identifier: MNP0gnBL6uvmLA7ioavb4T50B9sOZ7b4XqUS6fPyR3w= Subject key identifier: BF:48:27:E1:B4:C1:FC:B4:09:0A:56:79:48:2D:63:95:0A:28:A4:E2 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3AFA Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/v0gn4bTB_LQJClZ5SC1jlQoopOI.roa Signing time: Fri 22 Aug 2025 08:47:57 +0000 ROA not before: Fri 22 Aug 2025 08:47:57 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 180.177.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15098 (0x3afa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:57 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=BF4827E1B4C1FCB4090A5679482D63950A28A4E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fc:88:2b:a9:6e:6b:ba:7b:0d:18:63:49:57: 66:a8:bb:ef:da:5d:fd:f2:2a:dd:0a:0e:50:69:69: 37:2c:90:0e:52:05:19:e1:2e:02:cc:4c:14:8b:16: 72:3a:9e:67:b6:58:73:fa:e3:30:46:8e:50:5d:37: 3f:ba:ff:b8:ff:cb:9c:16:20:79:ff:75:e4:85:f5: 00:e7:65:b7:a4:27:21:06:e5:97:b0:e5:4e:3b:8f: 6c:3c:f1:5e:53:a6:5c:8c:4b:9a:2d:97:2e:43:a7: e9:ab:02:40:47:77:d7:52:b9:8b:8c:a7:99:cc:8b: db:c9:64:46:f9:c2:7b:de:14:63:e9:01:ec:ab:05: 83:e0:8c:69:cf:48:56:1b:fd:48:41:94:f9:25:2d: b0:21:88:4d:7d:9e:5b:02:95:98:88:b5:5d:a8:2b: ca:c3:ad:fc:2f:d0:72:9a:bd:2d:ba:a2:5a:2f:fd: 3b:a4:ca:cd:7a:5a:f7:1a:63:1e:b1:63:08:55:e3: d9:bd:4f:4a:2b:83:2e:34:47:5b:c1:61:df:81:9f: ec:f6:a2:b1:2a:4d:a2:27:56:a2:7b:82:ac:a4:65: 3d:2c:0e:63:b3:20:36:d4:ad:6a:f5:31:d7:c3:5b: 5e:e7:d5:17:88:35:49:dd:bf:bf:62:ab:26:9b:37: ef:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:48:27:E1:B4:C1:FC:B4:09:0A:56:79:48:2D:63:95:0A:28:A4:E2 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/v0gn4bTB_LQJClZ5SC1jlQoopOI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.231.0/24 Signature Algorithm: sha256WithRSAEncryption 98:c6:22:06:13:1c:e6:bb:17:3d:80:c9:c3:9c:cc:05:a6:c8: c8:9e:3b:c4:a9:97:e9:d4:1a:61:2d:69:79:06:26:db:36:72: 6f:45:f5:36:38:18:8d:81:e3:58:f2:9f:fc:9f:3c:e5:a5:e9: 57:18:4c:91:b4:28:ec:0a:6d:ef:12:f0:ce:a8:c9:a1:6f:c3: 94:30:f6:a2:b7:a4:d4:e1:b7:fe:c1:21:98:ac:5a:b9:37:6c: d9:bd:2a:6e:7d:04:12:d8:de:c5:c0:fe:8a:06:c7:a0:5c:62: 04:5b:1e:fe:9a:03:55:26:42:ec:3c:d8:14:08:15:a7:a1:90: ed:f6:66:0b:97:9b:b0:ba:0b:a5:bc:ed:d8:21:77:51:e3:e7: a7:50:d6:60:e6:49:f1:5d:17:d0:10:61:ec:3b:d2:ac:50:64: bf:4c:43:cf:c0:2b:cb:19:6b:56:47:00:9e:f2:51:ab:b1:77: bb:af:6b:04:3d:30:48:59:27:77:ad:07:a3:d7:51:74:d0:e3: 8f:a9:a0:38:14:7e:70:b3:78:c0:7a:96:60:8a:72:f2:37:c3: 47:20:80:21:9f:ce:ad:5d:72:38:55:5e:79:60:c5:e4:cd:c7: b5:d1:19:31:b4:7d:c5:ea:48:82:7d:dc:57:c8:f8:ef:16:a1: 79:87:c5:86 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOvowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3NTdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEJGNDgyN0UxQjRDMUZD QjQwOTBBNTY3OTQ4MkQ2Mzk1MEEyOEE0RTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8/IgrqW5runsNGGNJV2aou+/aXf3yKt0KDlBpaTcskA5SBRnh LgLMTBSLFnI6nme2WHP64zBGjlBdNz+6/7j/y5wWIHn/deSF9QDnZbekJyEG5Zew 5U47j2w88V5TplyMS5otly5Dp+mrAkBHd9dSuYuMp5nMi9vJZEb5wnveFGPpAeyr BYPgjGnPSFYb/UhBlPklLbAhiE19nlsClZiItV2oK8rDrfwv0HKavS26olov/Tuk ys16WvcaYx6xYwhV49m9T0orgy40R1vBYd+Bn+z2orEqTaInVqJ7gqykZT0sDmOz IDbUrWr1MdfDW17n1ReINUndv79iqyabN++DAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUv0gn4bTB/LQJClZ5SC1jlQoopOIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3YwZ240YlRCX0xRSkNsWjVT QzFqbFFvb3BPSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0 secwDQYJKoZIhvcNAQELBQADggEBAJjGIgYTHOa7Fz2AycOczAWmyMieO8Spl+nU GmEtaXkGJts2cm9F9TY4GI2B41jyn/yfPOWl6VcYTJG0KOwKbe8S8M6oyaFvw5Qw 9qK3pNTht/7BIZisWrk3bNm9Km59BBLY3sXA/ooGx6BcYgRbHv6aA1UmQuw82BQI FaehkO32ZguXm7C6C6W87dghd1Hj56dQ1mDmSfFdF9AQYew70qxQZL9MQ8/AK8sZ a1ZHAJ7yUauxd7uvawQ9MEhZJ3etB6PXUXTQ44+poDgUfnCzeMB6lmCKcvI3w0cg gCGfzq1dcjhVXnlgxeTNx7XRGTG0fcXqSIJ93FfI+O8WoXmHxYY= -----END CERTIFICATE-----Generated at Sun Aug 24 05:34:05 2025 by rpki-client