$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yorZBU0OO8ty8-dVthDcHFIihkY.roa File: yorZBU0OO8ty8-dVthDcHFIihkY.roa (raw, json) Hash identifier: /3p5/Q3CwHYokbUt+s8m+8lSZrigMvMa4RzevDRLuBg= Subject key identifier: CA:8A:D9:05:4D:0E:3B:CB:72:F3:E7:55:B6:10:DC:1C:52:22:86:46 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3B22 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yorZBU0OO8ty8-dVthDcHFIihkY.roa Signing time: Fri 22 Aug 2025 08:48:06 +0000 ROA not before: Fri 22 Aug 2025 08:48:06 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 180.177.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15138 (0x3b22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:48:06 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=CA8AD9054D0E3BCB72F3E755B610DC1C52228646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:33:e5:61:78:9c:38:0f:28:1c:2e:c2:51:b9: bb:e1:58:7e:b5:30:99:c1:89:5a:5a:35:26:e2:ae: 6e:5c:c4:ec:c2:a5:85:8d:c4:3c:57:d9:3c:ac:d6: db:1b:68:05:b1:59:65:1b:91:96:c9:68:cd:f9:4d: e6:40:3b:f1:7f:c0:4a:df:f2:0d:26:ab:3e:be:63: f5:8b:3e:b6:d5:67:7c:75:d1:f6:5d:f6:83:d5:48: 8f:73:32:97:07:87:61:cd:97:5a:e6:a8:d6:46:3b: bd:d6:11:d7:93:5b:e0:d2:df:42:12:01:12:ce:a1: 7c:a8:6e:a6:1f:94:ad:ad:dd:e8:1b:64:5a:42:6a: 9f:c0:62:ad:99:c4:9a:79:a1:f7:9d:7f:17:a2:4f: 3e:75:7c:52:65:a7:a5:21:2e:af:ad:cc:f7:3c:0f: 05:c8:e2:21:bc:71:71:86:30:5a:8b:6e:91:9a:95: 3c:ac:95:22:52:63:ab:09:a1:36:37:76:40:59:ee: 08:7a:8c:4f:37:a9:84:3f:42:3d:4e:a1:57:f1:6d: 5f:f6:28:51:06:66:f7:81:a5:b3:f0:fc:c9:c2:7e: e9:ac:69:a9:1b:c3:db:52:fe:74:4b:fe:11:f2:64: 0f:bb:8c:bc:c4:4b:97:7e:c5:a6:fc:02:84:91:95: aa:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:8A:D9:05:4D:0E:3B:CB:72:F3:E7:55:B6:10:DC:1C:52:22:86:46 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yorZBU0OO8ty8-dVthDcHFIihkY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.244.0/22 Signature Algorithm: sha256WithRSAEncryption 84:f6:fb:e0:69:10:21:3b:c6:71:f9:b6:76:e1:23:ce:af:61: 30:d2:af:b4:bc:96:2d:b9:1d:93:78:a8:77:2d:cc:98:e8:93: bc:3c:b8:ad:d2:73:01:1a:74:ba:dd:b2:c8:f4:66:c5:10:17: 84:ce:c0:0e:b7:eb:18:45:be:58:ca:06:51:5a:82:e5:13:08: 79:44:3a:dc:31:b3:a9:4c:4c:f7:58:ad:b8:2e:30:b0:bb:f3: 2f:71:7e:c9:d5:47:79:cb:18:09:f2:d6:0d:53:a1:2c:68:dc: 3b:a8:3b:3d:73:9c:57:18:4f:45:1a:94:96:a5:4b:21:61:b7: 92:ae:59:dd:73:56:ed:af:42:03:d8:c5:79:e8:23:dd:18:93: 57:22:de:bd:cf:7b:2d:8f:af:4b:c2:e4:24:cb:ae:7b:a0:41: ac:97:bb:48:43:9c:fa:18:3a:eb:07:9a:40:22:0a:4c:32:ff: 1b:7f:2f:70:ae:a6:0a:11:2d:20:9b:5d:e8:55:6f:ce:6e:fd: 8f:8b:a5:30:01:89:96:08:05:8a:b3:ab:af:13:cc:d7:fa:be: 22:e0:4c:73:32:65:85:06:30:f3:8b:4e:7b:83:58:ce:f9:93: 5e:44:70:dc:d7:6e:89:45:84:6d:a6:b5:af:c3:4c:3c:25:bf: 21:e0:f3:fc -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOyIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ4MDZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKENBOEFEOTA1NEQwRTNC Q0I3MkYzRTc1NUI2MTBEQzFDNTIyMjg2NDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQM+VheJw4DygcLsJRubvhWH61MJnBiVpaNSbirm5cxOzCpYWN xDxX2Tys1tsbaAWxWWUbkZbJaM35TeZAO/F/wErf8g0mqz6+Y/WLPrbVZ3x10fZd 9oPVSI9zMpcHh2HNl1rmqNZGO73WEdeTW+DS30ISARLOoXyobqYflK2t3egbZFpC ap/AYq2ZxJp5ofedfxeiTz51fFJlp6UhLq+tzPc8DwXI4iG8cXGGMFqLbpGalTys lSJSY6sJoTY3dkBZ7gh6jE83qYQ/Qj1OoVfxbV/2KFEGZveBpbPw/MnCfumsaakb w9tS/nRL/hHyZA+7jLzES5d+xab8AoSRlaqFAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUyorZBU0OO8ty8+dVthDcHFIihkYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3lvclpCVTBPTzh0eTgtZFZ0 aERjSEZJaWhrWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 sfQwDQYJKoZIhvcNAQELBQADggEBAIT2++BpECE7xnH5tnbhI86vYTDSr7S8li25 HZN4qHctzJjok7w8uK3ScwEadLrdssj0ZsUQF4TOwA636xhFvljKBlFaguUTCHlE Otwxs6lMTPdYrbguMLC78y9xfsnVR3nLGAny1g1ToSxo3DuoOz1znFcYT0UalJal SyFht5KuWd1zVu2vQgPYxXnoI90Yk1ci3r3Pey2Pr0vC5CTLrnugQayXu0hDnPoY OusHmkAiCkwy/xt/L3CupgoRLSCbXehVb85u/Y+LpTABiZYIBYqzq68TzNf6viLg THMyZYUGMPOLTnuDWM75k15EcNzXbolFhG2mta/DTDwlvyHg8/w= -----END CERTIFICATE-----Generated at Sun Aug 24 07:26:35 2025 by rpki-client