$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xTtmZw5mYqpRfcB4ICdUAKVVweo.roa File: xTtmZw5mYqpRfcB4ICdUAKVVweo.roa (raw, json) Hash identifier: heuPt1FBTb5sBpO8W3jcV93ptoPs29pNfz78k5O/xXs= Subject key identifier: C5:3B:66:67:0E:66:62:AA:51:7D:C0:78:20:27:54:00:A5:55:C1:EA Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3887 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xTtmZw5mYqpRfcB4ICdUAKVVweo.roa Signing time: Fri 22 Aug 2025 08:45:23 +0000 ROA not before: Fri 22 Aug 2025 08:45:23 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 180.176.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14471 (0x3887) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:23 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=C53B66670E6662AA517DC07820275400A555C1EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0a:7c:a0:85:04:7a:78:24:16:2f:5f:ad:51: ae:3c:55:5d:85:ca:68:76:3c:67:86:52:ef:68:48: a6:b7:ce:58:ee:b1:8a:b8:94:5a:67:55:fd:da:cc: af:33:17:76:dd:91:17:0b:57:e8:bf:43:c6:64:01: 96:7d:23:5c:36:fd:2c:df:f1:b7:6a:cc:00:f4:7e: 04:b8:90:0d:59:57:dd:b4:ec:38:79:96:f9:8e:72: 6f:3f:21:ba:31:b0:f0:97:d3:22:50:4e:60:90:c1: da:04:2f:d2:18:7d:4f:1e:bd:6d:d4:92:f8:f5:d7: 70:03:58:40:fd:16:33:67:19:e2:8b:7d:3a:04:d6: 64:49:c1:85:26:34:a9:9e:b8:08:c8:3f:fb:66:4f: de:c2:c0:84:49:84:21:eb:52:ae:48:da:e8:5a:fd: 8c:0c:0d:2b:32:e9:e0:1b:79:51:d0:da:6e:26:0b: 88:a1:37:f4:91:31:a1:47:72:47:85:b5:d2:9e:c8: 6e:20:51:c4:1a:81:a1:13:78:45:94:19:b3:17:ae: e2:f1:2a:4b:88:52:21:7c:b9:e4:20:09:c4:57:6e: 70:f8:32:5b:b1:9f:fe:a2:ad:9f:3e:ce:8f:ad:88: 45:07:f4:e0:6b:83:3c:07:38:4f:ac:88:95:c8:fd: c4:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:3B:66:67:0E:66:62:AA:51:7D:C0:78:20:27:54:00:A5:55:C1:EA X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xTtmZw5mYqpRfcB4ICdUAKVVweo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.232.0/22 Signature Algorithm: sha256WithRSAEncryption 20:6f:ad:40:b9:90:84:ef:8f:15:d8:0f:5f:72:ee:73:a3:5f: b1:2a:ac:ca:70:2c:e5:23:77:d8:d7:bc:30:96:12:d2:6e:14: 29:51:b3:33:46:48:27:65:d4:6c:1d:cc:4c:63:dd:31:2c:b6: 77:f6:32:87:05:c1:78:1b:32:b9:d9:3a:5e:f1:fa:1e:fa:ad: 27:1c:b9:be:f6:e7:df:59:a7:ac:b7:90:7d:e4:d2:6b:59:e4: 3f:28:18:7d:2a:10:d4:4c:c2:da:f8:16:fe:0b:cf:1b:3a:fd: 9d:18:2d:e4:3a:61:c6:63:ef:eb:5b:c0:8e:64:02:ed:96:ca: ef:42:45:84:f2:44:75:85:c4:d6:e4:92:55:2f:c1:05:13:ea: a1:3c:e1:cf:af:5d:81:be:79:82:c2:a4:61:05:61:89:ba:30: 52:5e:31:45:85:7a:5f:6d:65:e7:dd:03:ec:3e:93:5b:47:52: 5e:19:ca:4f:fe:87:1d:fa:c8:fc:1d:4e:a3:5e:79:aa:b4:9c: ff:d7:9f:54:54:cf:ae:32:c5:b2:e1:c7:ac:01:1d:6b:72:98: 64:91:1e:4e:bf:c1:71:82:90:15:89:47:54:06:07:32:66:64: 08:b9:27:b3:58:d6:2e:68:39:68:48:1c:a1:04:19:af:69:9a: 1c:ff:cc:7f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOIcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1MjNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEM1M0I2NjY3MEU2NjYy QUE1MTdEQzA3ODIwMjc1NDAwQTU1NUMxRUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCsCnyghQR6eCQWL1+tUa48VV2Fymh2PGeGUu9oSKa3zljusYq4 lFpnVf3azK8zF3bdkRcLV+i/Q8ZkAZZ9I1w2/Szf8bdqzAD0fgS4kA1ZV9207Dh5 lvmOcm8/IboxsPCX0yJQTmCQwdoEL9IYfU8evW3Ukvj113ADWED9FjNnGeKLfToE 1mRJwYUmNKmeuAjIP/tmT97CwIRJhCHrUq5I2uha/YwMDSsy6eAbeVHQ2m4mC4ih N/SRMaFHckeFtdKeyG4gUcQagaETeEWUGbMXruLxKkuIUiF8ueQgCcRXbnD4Mlux n/6irZ8+zo+tiEUH9OBrgzwHOE+siJXI/cQtAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUxTtmZw5mYqpRfcB4ICdUAKVVweowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3hUdG1adzVtWXFwUmZjQjRJ Q2RVQUtWVndlby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 sOgwDQYJKoZIhvcNAQELBQADggEBACBvrUC5kITvjxXYD19y7nOjX7EqrMpwLOUj d9jXvDCWEtJuFClRszNGSCdl1GwdzExj3TEstnf2MocFwXgbMrnZOl7x+h76rScc ub72599Zp6y3kH3k0mtZ5D8oGH0qENRMwtr4Fv4Lzxs6/Z0YLeQ6YcZj7+tbwI5k Au2Wyu9CRYTyRHWFxNbkklUvwQUT6qE84c+vXYG+eYLCpGEFYYm6MFJeMUWFel9t ZefdA+w+k1tHUl4Zyk/+hx36yPwdTqNeeaq0nP/Xn1RUz64yxbLhx6wBHWtymGSR Hk6/wXGCkBWJR1QGBzJmZAi5J7NY1i5oOWhIHKEEGa9pmhz/zH8= -----END CERTIFICATE-----Generated at Sun Aug 24 07:26:34 2025 by rpki-client