$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-gbgXv-x8w9yMGNapsG0h5vG888.roa File: -gbgXv-x8w9yMGNapsG0h5vG888.roa (raw, json) Hash identifier: mgxPO38XjyE8Vc5U/LuLLdOIs/YyRT/nozF+U+FmqSc= Subject key identifier: FA:06:E0:5E:FF:B1:F3:0F:72:30:63:5A:A6:C1:B4:87:9B:C6:F3:CF Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 39F4 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-gbgXv-x8w9yMGNapsG0h5vG888.roa Signing time: Fri 22 Aug 2025 08:46:51 +0000 ROA not before: Fri 22 Aug 2025 08:46:51 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 180.177.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14836 (0x39f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:51 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=FA06E05EFFB1F30F7230635AA6C1B4879BC6F3CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d1:29:d6:4f:b4:79:ae:09:94:30:31:c3:ed: 2a:81:4e:ab:ee:83:ef:c9:25:9c:5e:4a:6e:5b:cd: d2:79:e2:76:c4:91:0b:bc:03:57:9a:bf:2c:b5:04: 02:f2:b6:7b:2a:c2:5e:f3:3b:12:01:91:01:c3:b6: 50:e9:83:5c:98:7d:4e:cc:e2:5a:d7:a1:43:32:06: e4:1b:59:4d:fb:9c:3d:5f:03:7b:c3:95:cf:c2:c5: 25:7a:ab:30:75:27:75:98:05:07:50:e0:30:b6:53: 3c:bd:7a:13:28:dd:ae:69:8e:26:6a:90:e9:b6:ec: 69:75:5b:c4:89:e1:00:00:92:dd:eb:bf:7e:c1:fb: 93:49:a4:6c:43:49:87:52:ba:5e:08:b3:1f:a3:79: 10:8c:de:aa:9b:55:1c:4a:4c:f0:64:21:e7:c9:69: a9:56:70:cd:6d:cc:c2:aa:e9:04:f7:0b:dc:7c:f8: c7:81:96:5d:f7:dd:ba:0e:42:c5:c7:5c:1b:4e:f1: 72:a6:10:1d:06:30:e3:f5:18:a1:b1:16:50:f7:f4: 4c:8a:37:24:1c:8b:36:ad:6b:16:39:63:35:f4:96: 97:a1:a2:4f:a2:d2:d1:9d:c6:ed:7d:76:b0:37:7c: 89:39:9f:e9:8c:7f:5e:5a:40:99:79:8f:c6:1e:68: 8a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:06:E0:5E:FF:B1:F3:0F:72:30:63:5A:A6:C1:B4:87:9B:C6:F3:CF X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-gbgXv-x8w9yMGNapsG0h5vG888.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.8.0/22 Signature Algorithm: sha256WithRSAEncryption 3c:bf:d6:42:dd:e9:7e:e7:6e:ea:15:11:d0:fc:09:88:95:04: 5a:5f:8c:81:00:08:2a:f7:84:ce:a0:ff:1f:c4:94:af:91:a9: 52:13:0e:b4:b7:5b:f5:0f:f0:ce:df:0e:24:c1:44:12:1a:57: 8e:58:cd:36:2f:1e:51:89:21:04:29:83:4a:0a:f1:98:c9:a5: 8e:e2:ea:3d:6b:af:46:3a:33:0a:a2:46:d8:49:c3:02:df:c1: 93:f7:4f:e5:dc:7a:64:21:99:78:d0:80:b6:2a:d0:d5:c2:d4: 81:a8:3b:7f:ae:cb:3c:25:b3:8e:91:de:b4:0f:68:7b:3f:00: 8e:83:5c:c8:38:f1:01:46:80:d2:25:94:93:11:2a:80:7d:b2: 7e:6a:6c:12:01:6b:b9:45:7a:59:0b:19:c9:cb:25:e2:21:f5: 17:c9:1b:13:5b:fc:1b:8b:7f:46:dd:9d:34:f5:5a:82:84:57: 9e:d4:5a:ae:3b:66:f3:2a:73:08:7d:9d:99:8d:ff:46:86:67: ac:55:16:3c:c4:c2:28:ab:1f:d8:7e:16:d2:e8:95:e9:27:11: 65:04:b5:8f:cb:65:1e:34:03:34:f0:4e:2c:40:4b:08:7b:bc: e9:9e:54:31:30:2d:08:2b:cd:03:11:0b:9a:09:5a:02:38:1c: 31:73:69:0a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOfQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2NTFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEZBMDZFMDVFRkZCMUYz MEY3MjMwNjM1QUE2QzFCNDg3OUJDNkYzQ0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDL0SnWT7R5rgmUMDHD7SqBTqvug+/JJZxeSm5bzdJ54nbEkQu8 A1eavyy1BALytnsqwl7zOxIBkQHDtlDpg1yYfU7M4lrXoUMyBuQbWU37nD1fA3vD lc/CxSV6qzB1J3WYBQdQ4DC2Uzy9ehMo3a5pjiZqkOm27Gl1W8SJ4QAAkt3rv37B +5NJpGxDSYdSul4Isx+jeRCM3qqbVRxKTPBkIefJaalWcM1tzMKq6QT3C9x8+MeB ll333boOQsXHXBtO8XKmEB0GMOP1GKGxFlD39EyKNyQcizataxY5YzX0lpehok+i 0tGdxu19drA3fIk5n+mMf15aQJl5j8YeaIrpAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU+gbgXv+x8w9yMGNapsG0h5vG888wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLy1nYmdYdi14OHc5eU1HTmFw c0cwaDV2Rzg4OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 sQgwDQYJKoZIhvcNAQELBQADggEBADy/1kLd6X7nbuoVEdD8CYiVBFpfjIEACCr3 hM6g/x/ElK+RqVITDrS3W/UP8M7fDiTBRBIaV45YzTYvHlGJIQQpg0oK8ZjJpY7i 6j1rr0Y6MwqiRthJwwLfwZP3T+XcemQhmXjQgLYq0NXC1IGoO3+uyzwls46R3rQP aHs/AI6DXMg48QFGgNIllJMRKoB9sn5qbBIBa7lFelkLGcnLJeIh9RfJGxNb/BuL f0bdnTT1WoKEV57UWq47ZvMqcwh9nZmN/0aGZ6xVFjzEwiirH9h+FtLoleknEWUE tY/LZR40AzTwTixASwh7vOmeVDEwLQgrzQMRC5oJWgI4HDFzaQo= -----END CERTIFICATE-----Generated at Fri Oct 24 19:24:25 2025 by rpki-client