$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xsSQI7FpXRNj5Ws_xWAG0li4amw.roa File: xsSQI7FpXRNj5Ws_xWAG0li4amw.roa (raw, json) Hash identifier: kClAJBlTti75VsvXVj/Vy82l4Dib3+JJSFLKqyKdjqA= Subject key identifier: C6:C4:90:23:B1:69:5D:13:63:E5:6B:3F:C5:60:06:D2:58:B8:6A:6C Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 383E Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xsSQI7FpXRNj5Ws_xWAG0li4amw.roa Signing time: Fri 22 Aug 2025 08:45:06 +0000 ROA not before: Fri 22 Aug 2025 08:45:06 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 180.177.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14398 (0x383e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:06 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=C6C49023B1695D1363E56B3FC56006D258B86A6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ad:5a:58:8b:fa:4d:b5:e1:cd:fc:97:27:8e: 81:6c:b3:46:40:0b:18:8f:4c:be:47:43:a8:5d:70: db:ce:6e:71:73:aa:cf:66:62:98:33:30:87:f7:dd: 61:ba:d9:a7:4a:6b:1b:21:32:c4:47:1e:50:bc:43: 8b:3e:80:4f:a4:d7:7e:3e:8f:b7:6b:3e:f9:4a:03: 4b:cd:3a:52:2b:24:cd:fc:b3:6b:3d:0e:57:01:45: 52:67:90:a0:9b:53:5a:af:5d:0a:c1:21:4c:ed:ee: 31:1c:bb:c1:e4:6f:32:11:14:09:1b:25:16:d0:db: 29:28:04:19:0c:7c:48:41:d3:8c:dc:44:b7:8a:2c: 8b:3b:97:1c:0b:3c:32:75:66:be:78:56:29:86:a5: d9:33:10:d0:9c:5e:37:40:5b:02:cd:ba:be:b2:c7: 9f:2f:20:16:d0:3b:a3:b3:21:5d:24:87:24:cd:dc: a5:19:52:50:3c:c5:cd:f1:8f:72:ec:93:cf:f8:c3: 7b:50:e3:37:8f:1d:a7:fe:a3:ba:a3:13:55:be:a1: 84:f5:15:9c:75:e4:19:f7:06:83:65:10:41:1e:08: 1d:4d:6d:2f:b9:c7:86:d9:ee:18:3b:78:01:4b:b1: 99:98:68:f6:02:bf:e9:e0:80:a3:77:bc:87:b0:1f: 31:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:C4:90:23:B1:69:5D:13:63:E5:6B:3F:C5:60:06:D2:58:B8:6A:6C X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xsSQI7FpXRNj5Ws_xWAG0li4amw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.172.0/22 Signature Algorithm: sha256WithRSAEncryption 94:74:ef:8f:f9:cc:8c:24:eb:20:69:96:41:87:58:61:4b:6f: 0d:7b:f2:da:af:03:f2:8b:e7:f2:24:27:91:f5:d7:58:0c:f3: d6:f7:ee:8d:ba:ec:09:be:5f:25:c5:fb:d2:56:87:9e:07:72: 8b:fc:0b:15:ca:19:d5:71:19:b3:88:2f:42:1a:25:92:8f:d4: bf:d6:6c:fa:a3:94:80:df:49:76:2b:f2:0c:48:70:67:c6:d5: 11:d5:3a:a7:86:d8:3b:b3:d1:4a:90:17:3d:3f:5b:4c:89:28: 4f:5e:a8:32:6c:ce:cc:84:14:39:04:9b:6b:8d:d0:db:fa:5f: df:67:e6:f8:1a:3d:8d:10:3b:98:6f:39:6a:6b:1c:d9:be:6d: 12:5f:37:7b:3c:4a:35:de:e5:66:9c:fe:4d:77:f0:71:9b:fe: 22:7b:03:2c:a9:af:25:4f:2b:b5:f3:0f:d2:be:55:d0:cf:18: c9:00:18:96:f3:ec:dd:1c:b7:2f:22:8d:9b:2b:9f:3a:de:97: 48:fb:6d:01:54:93:cd:06:c0:3e:83:95:d0:42:4a:47:68:ee: 2e:74:e8:9a:18:dd:3a:11:50:79:52:5c:6e:d6:83:12:22:dc: 76:45:94:7d:b4:c5:54:88:a0:bb:70:f1:c3:0f:cf:a2:0d:5b: cb:15:1d:8f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOD4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1MDZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEM2QzQ5MDIzQjE2OTVE MTM2M0U1NkIzRkM1NjAwNkQyNThCODZBNkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDErVpYi/pNteHN/JcnjoFss0ZACxiPTL5HQ6hdcNvObnFzqs9m YpgzMIf33WG62adKaxshMsRHHlC8Q4s+gE+k134+j7drPvlKA0vNOlIrJM38s2s9 DlcBRVJnkKCbU1qvXQrBIUzt7jEcu8HkbzIRFAkbJRbQ2ykoBBkMfEhB04zcRLeK LIs7lxwLPDJ1Zr54VimGpdkzENCcXjdAWwLNur6yx58vIBbQO6OzIV0khyTN3KUZ UlA8xc3xj3Lsk8/4w3tQ4zePHaf+o7qjE1W+oYT1FZx15Bn3BoNlEEEeCB1NbS+5 x4bZ7hg7eAFLsZmYaPYCv+nggKN3vIewHzGDAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUxsSQI7FpXRNj5Ws/xWAG0li4amwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3hzU1FJN0ZwWFJOajVXc194 V0FHMGxpNGFtdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 sawwDQYJKoZIhvcNAQELBQADggEBAJR074/5zIwk6yBplkGHWGFLbw178tqvA/KL 5/IkJ5H111gM89b37o267Am+XyXF+9JWh54Hcov8CxXKGdVxGbOIL0IaJZKP1L/W bPqjlIDfSXYr8gxIcGfG1RHVOqeG2Duz0UqQFz0/W0yJKE9eqDJszsyEFDkEm2uN 0Nv6X99n5vgaPY0QO5hvOWprHNm+bRJfN3s8SjXe5Wac/k138HGb/iJ7AyypryVP K7XzD9K+VdDPGMkAGJbz7N0cty8ijZsrnzrel0j7bQFUk80GwD6DldBCSkdo7i50 6JoY3ToRUHlSXG7WgxIi3HZFlH20xVSIoLtw8cMPz6INW8sVHY8= -----END CERTIFICATE-----Generated at Sun Aug 24 07:25:26 2025 by rpki-client