$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xfwB00L0HFOgnYDUheR34G22VVM.roa File: xfwB00L0HFOgnYDUheR34G22VVM.roa (raw, json) Hash identifier: b/7CNEDXxmPQWF+FmNM2NyedqsIOZ1DZ5HtEGt+PbuE= Subject key identifier: C5:FC:01:D3:42:F4:1C:53:A0:9D:80:D4:85:E4:77:E0:6D:B6:55:53 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 386C Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xfwB00L0HFOgnYDUheR34G22VVM.roa Signing time: Fri 22 Aug 2025 08:45:16 +0000 ROA not before: Fri 22 Aug 2025 08:45:16 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 118.233.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14444 (0x386c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:16 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=C5FC01D342F41C53A09D80D485E477E06DB65553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e2:58:76:9e:5d:b2:fa:c8:cb:65:62:88:ee: dd:b8:9a:93:62:a1:d7:f1:41:1b:97:90:03:00:aa: 91:3f:1b:a1:88:bf:0b:93:bf:6c:1b:78:93:13:65: 70:59:d8:49:f2:07:c5:6a:64:dc:47:73:b4:09:c5: a1:b8:c6:2f:b9:6d:2b:b0:96:c4:44:3e:1a:d2:8e: c9:c8:60:88:f0:26:da:90:94:07:ea:54:22:08:0e: 75:9d:9b:c5:62:75:e6:8f:7f:07:5c:87:58:0c:b1: bc:7f:cf:22:ea:02:29:f9:fc:95:f4:2c:2e:0e:cd: 47:8a:2a:3a:73:0c:fc:50:ff:cf:32:5b:49:1b:52: 0f:97:1f:67:9b:23:b6:a3:f3:e5:89:27:be:eb:c4: 63:71:7c:84:1d:66:07:80:64:5a:a9:3a:6f:0a:b6: e3:13:fe:a2:98:ea:6f:9c:74:fa:4a:c0:66:7b:28: e3:0f:62:91:eb:35:09:5a:af:a2:55:ae:33:ea:e0: 6d:f1:78:ee:28:f3:74:2e:23:b4:75:2d:93:0a:f2: 85:69:cd:f2:9b:2b:5e:3e:05:6c:ae:ee:16:2c:bf: fd:ce:a3:c4:e3:0c:1f:94:f9:59:04:43:6a:80:cb: fc:36:1c:b0:d9:dd:4f:b0:09:67:21:09:5b:5b:b5: 4a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:FC:01:D3:42:F4:1C:53:A0:9D:80:D4:85:E4:77:E0:6D:B6:55:53 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xfwB00L0HFOgnYDUheR34G22VVM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.180.0/22 Signature Algorithm: sha256WithRSAEncryption 6d:f6:86:83:28:2f:6b:1f:43:ac:40:58:f1:91:3c:d6:88:b2: 00:13:20:4d:e2:d2:d9:bc:b1:1c:22:9b:8b:72:d8:d2:8c:fd: 3b:3b:62:5e:30:5e:03:b4:8a:ba:d1:1a:a9:28:70:c1:ac:db: 47:27:45:67:6a:e4:4c:a1:bf:f0:4a:b8:13:60:5f:86:32:d8: 8b:d9:42:92:fe:a7:2e:f6:86:14:65:e9:7e:4c:a9:cc:6d:d6: 64:7d:5a:e8:9f:94:79:f0:24:b2:61:25:e9:ff:8d:38:fb:d7: 4f:02:65:89:fc:87:ad:3b:f7:30:7e:60:05:6f:1c:b7:a4:66: 96:8f:a0:e3:0b:80:fb:25:2f:e5:ce:eb:b3:fa:df:6f:9a:1b: ad:b9:e0:f9:1e:83:2d:01:f7:86:b4:40:26:79:8e:32:15:58: 51:1d:20:47:99:b3:2d:3d:c7:6a:c1:68:fe:7b:27:c4:b4:ea: 5c:40:65:fe:71:06:17:1d:ef:e7:a5:a2:65:55:08:dd:3f:3c: b9:eb:4f:19:75:34:0e:e9:14:44:21:b9:87:f5:f9:8f:b1:51: 63:88:06:dd:14:3c:86:45:a4:9c:68:02:32:05:98:16:65:f4: b5:a5:d6:e6:48:69:e1:fa:3d:41:ea:3d:1d:46:2c:60:79:11: 9a:a4:d0:59 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOGwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1MTZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEM1RkMwMUQzNDJGNDFD NTNBMDlEODBENDg1RTQ3N0UwNkRCNjU1NTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDH4lh2nl2y+sjLZWKI7t24mpNiodfxQRuXkAMAqpE/G6GIvwuT v2wbeJMTZXBZ2EnyB8VqZNxHc7QJxaG4xi+5bSuwlsREPhrSjsnIYIjwJtqQlAfq VCIIDnWdm8VideaPfwdch1gMsbx/zyLqAin5/JX0LC4OzUeKKjpzDPxQ/88yW0kb Ug+XH2ebI7aj8+WJJ77rxGNxfIQdZgeAZFqpOm8KtuMT/qKY6m+cdPpKwGZ7KOMP YpHrNQlar6JVrjPq4G3xeO4o83QuI7R1LZMK8oVpzfKbK14+BWyu7hYsv/3Oo8Tj DB+U+VkEQ2qAy/w2HLDZ3U+wCWchCVtbtUp7AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUxfwB00L0HFOgnYDUheR34G22VVMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3hmd0IwMEwwSEZPZ25ZRFVo ZVIzNEcyMlZWTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6bQwDQYJKoZIhvcNAQELBQADggEBAG32hoMoL2sfQ6xAWPGRPNaIsgATIE3i0tm8 sRwim4ty2NKM/Ts7Yl4wXgO0irrRGqkocMGs20cnRWdq5Eyhv/BKuBNgX4Yy2IvZ QpL+py72hhRl6X5Mqcxt1mR9WuiflHnwJLJhJen/jTj7108CZYn8h6079zB+YAVv HLekZpaPoOMLgPslL+XO67P632+aG6254Pkegy0B94a0QCZ5jjIVWFEdIEeZsy09 x2rBaP57J8S06lxAZf5xBhcd7+elomVVCN0/PLnrTxl1NA7pFEQhuYf1+Y+xUWOI Bt0UPIZFpJxoAjIFmBZl9LWl1uZIaeH6PUHqPR1GLGB5EZqk0Fk= -----END CERTIFICATE-----Generated at Sun Aug 24 07:25:23 2025 by rpki-client