$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/z0ShZhG91W2s4fs_lbgmYdMklv8.roa File: z0ShZhG91W2s4fs_lbgmYdMklv8.roa (raw, json) Hash identifier: offenCya0tCVA2O4dgnrjDi70J9xAhMOE8lCVaHQ+sg= Subject key identifier: CF:44:A1:66:11:BD:D5:6D:AC:E1:FB:3F:95:B8:26:61:D3:24:96:FF Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 39C5 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/z0ShZhG91W2s4fs_lbgmYdMklv8.roa Signing time: Fri 22 Aug 2025 08:46:38 +0000 ROA not before: Fri 22 Aug 2025 08:46:38 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 180.176.16.0/20 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14789 (0x39c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:38 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=CF44A16611BDD56DACE1FB3F95B82661D32496FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:0e:5a:da:6d:09:7c:ab:05:6a:33:08:ea:a7: 37:9b:ff:95:b9:23:f5:97:8c:10:88:37:92:f6:1b: 4f:c1:e4:c4:a8:1e:bf:bb:9f:51:ca:ff:57:a3:a4: 3a:fc:68:3f:a4:49:8f:67:a5:31:c0:16:a4:07:2e: e8:70:6e:16:d0:f1:d1:a6:8b:7e:b5:ee:9c:6f:e2: 6b:aa:fb:e2:0c:ba:ed:56:61:03:4d:fe:4e:b9:bd: 38:2c:54:a6:80:38:c2:5b:34:b9:6f:9b:e6:73:9b: 2e:a3:3a:52:09:0c:1c:99:b0:85:c7:06:15:90:c9: 12:de:28:5e:dc:93:ba:d2:df:5b:a6:9c:55:37:a1: eb:cf:ac:06:07:d4:74:1a:ea:79:4e:71:4d:82:dc: 1d:90:9b:a3:62:c6:8d:35:80:8f:70:1b:50:00:84: a1:93:f5:eb:05:23:a7:ab:8b:63:f1:ce:da:4d:4b: b0:cc:1b:10:7b:f9:dd:6f:13:d9:bf:6e:42:48:f5: 25:db:2f:de:8e:f8:af:44:c0:3b:fb:a0:6b:88:e8: 3d:a4:ab:9f:7b:03:fb:a4:f9:57:76:7d:97:12:30: 3a:7f:66:e7:7f:0c:fe:ed:28:72:27:f5:1d:63:3f: 0c:d1:54:ce:c5:f3:3a:3d:cd:d1:7b:3b:6e:1f:fd: 48:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:44:A1:66:11:BD:D5:6D:AC:E1:FB:3F:95:B8:26:61:D3:24:96:FF X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/z0ShZhG91W2s4fs_lbgmYdMklv8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.16.0/20 Signature Algorithm: sha256WithRSAEncryption b2:a4:23:96:c7:74:ca:6f:8c:d6:98:02:5c:ae:cc:bc:02:1b: 19:60:7b:9d:9d:df:44:87:b4:41:2b:96:a0:e4:4f:43:82:03: 8f:7e:aa:de:24:dd:4f:61:4b:60:32:a9:dd:33:28:f6:dc:f1: 70:91:9a:b8:60:33:b2:fe:da:10:2a:2f:24:37:60:19:99:12: a6:a9:52:15:8b:49:d4:52:42:05:cc:46:0a:47:3c:e4:34:d2: 4b:b7:90:fc:f3:bd:df:a6:30:eb:53:cb:cf:31:c0:ae:aa:a7: ed:21:87:75:90:17:a7:a8:98:32:03:85:6b:1c:44:80:38:2f: aa:e0:36:ea:b6:e5:7c:e4:95:12:67:29:81:fc:cd:64:0c:30: 97:a0:a8:5c:3a:2d:b1:f2:f2:de:d9:58:f5:6a:0f:bd:83:2c: 1f:1f:2b:ef:e4:99:c8:15:be:4b:a0:3a:c1:24:aa:49:9b:b8: 5a:e3:ee:7c:bf:6d:9a:22:bf:6c:7d:cd:ce:84:64:b0:87:86: cf:6e:87:c6:f5:c2:22:58:09:d8:a2:63:a9:2d:21:ef:58:d9: ff:6a:06:e8:7d:34:d7:d1:02:67:e5:22:23:d2:b8:e7:6b:c4: 73:61:fb:86:e5:87:31:a9:bf:42:53:50:45:c0:3d:03:43:83: c6:f1:8b:77 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOcUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2MzhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKENGNDRBMTY2MTFCREQ1 NkRBQ0UxRkIzRjk1QjgyNjYxRDMyNDk2RkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD7DlrabQl8qwVqMwjqpzeb/5W5I/WXjBCIN5L2G0/B5MSoHr+7 n1HK/1ejpDr8aD+kSY9npTHAFqQHLuhwbhbQ8dGmi3617pxv4muq++IMuu1WYQNN /k65vTgsVKaAOMJbNLlvm+Zzmy6jOlIJDByZsIXHBhWQyRLeKF7ck7rS31umnFU3 oevPrAYH1HQa6nlOcU2C3B2Qm6Nixo01gI9wG1AAhKGT9esFI6eri2PxztpNS7DM GxB7+d1vE9m/bkJI9SXbL96O+K9EwDv7oGuI6D2kq597A/uk+Vd2fZcSMDp/Zud/ DP7tKHIn9R1jPwzRVM7F8zo9zdF7O24f/UiHAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUz0ShZhG91W2s4fs/lbgmYdMklv8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3owU2haaEc5MVcyczRmc19s YmdtWWRNa2x2OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAS0 sBAwDQYJKoZIhvcNAQELBQADggEBALKkI5bHdMpvjNaYAlyuzLwCGxlge52d30SH tEErlqDkT0OCA49+qt4k3U9hS2Ayqd0zKPbc8XCRmrhgM7L+2hAqLyQ3YBmZEqap UhWLSdRSQgXMRgpHPOQ00ku3kPzzvd+mMOtTy88xwK6qp+0hh3WQF6eomDIDhWsc RIA4L6rgNuq25XzklRJnKYH8zWQMMJegqFw6LbHy8t7ZWPVqD72DLB8fK+/kmcgV vkugOsEkqkmbuFrj7ny/bZoiv2x9zc6EZLCHhs9uh8b1wiJYCdiiY6ktIe9Y2f9q Buh9NNfRAmflIiPSuOdrxHNh+4blhzGpv0JTUEXAPQNDg8bxi3c= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:54 2025 by rpki-client