$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vlfm6QPpG7QbRqu1WzXShDB7-TM.roa File: vlfm6QPpG7QbRqu1WzXShDB7-TM.roa (raw, json) Hash identifier: vo6b1R6sfqHFF4/4Av49BFXsTVETwwTngtpsGxAST2U= Subject key identifier: BE:57:E6:E9:03:E9:1B:B4:1B:46:AB:B5:5B:35:D2:84:30:7B:F9:33 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3A0F Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vlfm6QPpG7QbRqu1WzXShDB7-TM.roa Signing time: Fri 22 Aug 2025 08:46:58 +0000 ROA not before: Fri 22 Aug 2025 08:46:58 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 180.177.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14863 (0x3a0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:58 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=BE57E6E903E91BB41B46ABB55B35D284307BF933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:6c:6f:d4:fc:1c:de:12:87:96:30:9d:94:41: 43:9b:df:a9:42:0d:3d:de:a2:6b:c6:b7:c5:2b:a7: 09:df:71:8a:30:fb:43:0c:49:e1:db:de:9b:44:8f: c0:e6:26:d0:a0:0c:c0:ca:c9:6c:51:f5:c9:3f:83: 5c:d2:c2:a9:02:fe:04:3d:de:26:ea:79:1f:6c:9e: 1a:ee:b1:19:5b:4f:6e:35:8f:18:a8:fc:6a:0a:91: 63:05:c1:a6:9f:80:15:31:23:cb:c2:21:b0:26:30: 3d:ba:3b:de:df:f6:95:e7:45:26:e2:4e:62:a8:46: c1:0f:f8:73:9e:9d:b6:c1:c7:1e:9e:22:3d:ae:e7: 48:bd:5b:4c:5a:74:75:fe:82:6f:c2:f1:c0:90:b4: dd:27:4e:96:9a:9b:be:b8:f8:f7:87:3d:bf:b8:88: 7d:06:f3:1c:30:f4:e4:57:0e:8f:59:84:d2:78:b5: d4:85:50:7b:72:20:09:e4:9c:d6:ad:71:46:2b:f1: 75:77:4d:4f:17:4d:c4:0c:c5:0e:0d:4a:31:76:dc: 57:82:27:db:8c:1d:0f:b0:88:ce:6b:35:ed:f7:94: 5b:45:18:3b:07:8e:99:1b:d6:36:18:13:77:5a:3f: 54:22:4c:0b:5e:86:9f:63:0c:09:57:4b:e4:be:9d: 34:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:57:E6:E9:03:E9:1B:B4:1B:46:AB:B5:5B:35:D2:84:30:7B:F9:33 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vlfm6QPpG7QbRqu1WzXShDB7-TM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.132.0/22 Signature Algorithm: sha256WithRSAEncryption a2:f5:c8:6e:89:f5:1a:3b:4e:c5:af:af:14:7f:e9:bf:ae:a2: 27:52:f7:78:98:d9:71:52:4a:b1:ac:cd:fb:da:41:53:71:36: 15:54:8f:78:cf:c8:67:cd:95:dd:c6:63:68:16:cd:52:40:8f: 59:65:3b:f3:7e:ef:38:68:b3:f7:57:50:91:b9:bd:23:83:66: d2:40:ee:96:7d:e4:2a:57:db:c3:62:52:7e:8f:05:3e:ba:9c: 40:5a:66:13:f6:26:09:e0:4c:f9:cc:6d:20:84:54:79:11:ef: 5b:bc:4d:e2:ec:89:64:a9:62:a1:93:87:84:f7:a4:d7:43:4e: 27:89:e7:89:73:1b:8f:6c:85:b5:84:b1:86:7e:f7:42:0a:d6: af:be:99:cb:45:e8:17:66:54:6f:e1:d0:9d:a5:ce:77:5a:d3: 13:af:2a:b8:36:0d:c7:09:9c:3b:7e:80:20:9e:f1:8b:48:59: 9d:05:63:9f:41:0c:07:64:e6:70:54:08:d4:d8:69:95:e0:ed: b6:68:03:12:a8:c4:b3:34:7b:c3:3a:73:51:26:db:c8:59:4c: 84:a1:9c:09:52:2b:cf:2a:88:a3:b7:68:de:e2:50:f6:ae:2d: a0:a7:9d:30:77:61:02:78:48:c9:1e:c5:72:4e:d4:51:01:09: 6a:fc:cd:95 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOg8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2NThaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEJFNTdFNkU5MDNFOTFC QjQxQjQ2QUJCNTVCMzVEMjg0MzA3QkY5MzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD3bG/U/BzeEoeWMJ2UQUOb36lCDT3eomvGt8UrpwnfcYow+0MM SeHb3ptEj8DmJtCgDMDKyWxR9ck/g1zSwqkC/gQ93ibqeR9snhrusRlbT241jxio /GoKkWMFwaafgBUxI8vCIbAmMD26O97f9pXnRSbiTmKoRsEP+HOenbbBxx6eIj2u 50i9W0xadHX+gm/C8cCQtN0nTpaam764+PeHPb+4iH0G8xww9ORXDo9ZhNJ4tdSF UHtyIAnknNatcUYr8XV3TU8XTcQMxQ4NSjF23FeCJ9uMHQ+wiM5rNe33lFtFGDsH jpkb1jYYE3daP1QiTAtehp9jDAlXS+S+nTTHAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUvlfm6QPpG7QbRqu1WzXShDB7+TMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3ZsZm02UVBwRzdRYlJxdTFX elhTaERCNy1UTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 sYQwDQYJKoZIhvcNAQELBQADggEBAKL1yG6J9Ro7TsWvrxR/6b+uoidS93iY2XFS SrGszfvaQVNxNhVUj3jPyGfNld3GY2gWzVJAj1llO/N+7zhos/dXUJG5vSODZtJA 7pZ95CpX28NiUn6PBT66nEBaZhP2JgngTPnMbSCEVHkR71u8TeLsiWSpYqGTh4T3 pNdDTieJ54lzG49shbWEsYZ+90IK1q++mctF6BdmVG/h0J2lznda0xOvKrg2DccJ nDt+gCCe8YtIWZ0FY59BDAdk5nBUCNTYaZXg7bZoAxKoxLM0e8M6c1Em28hZTISh nAlSK88qiKO3aN7iUPauLaCnnTB3YQJ4SMkexXJO1FEBCWr8zZU= -----END CERTIFICATE-----Generated at Sun Aug 24 05:32:07 2025 by rpki-client