$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0NsZHv3lDn6dAL8u5Cu_At9xxHU.roa File: 0NsZHv3lDn6dAL8u5Cu_At9xxHU.roa (raw, json) Hash identifier: 3hLmSVNKVxZJ1qmqihIr+7ha+xbNGuJNiZjvOrtUAmQ= Subject key identifier: D0:DB:19:1E:FD:E5:0E:7E:9D:00:BF:2E:E4:2B:BF:02:DF:71:C4:75 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3A3D Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0NsZHv3lDn6dAL8u5Cu_At9xxHU.roa Signing time: Fri 22 Aug 2025 08:47:09 +0000 ROA not before: Fri 22 Aug 2025 08:47:09 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 180.177.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14909 (0x3a3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:09 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=D0DB191EFDE50E7E9D00BF2EE42BBF02DF71C475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:dc:e8:aa:93:7c:73:5b:96:1e:98:11:cc:2f: 4d:8d:8b:1f:75:5f:06:21:95:00:26:22:31:5c:3c: 1c:e6:2c:bb:e8:08:f1:fd:23:e0:5c:5b:86:ca:cb: b6:1a:87:3a:4a:bf:29:93:39:56:87:85:07:40:8e: 70:e0:54:d5:8a:e7:b6:db:32:0e:0a:53:fa:8d:4d: 9c:0f:e3:27:be:5b:b0:b3:49:5d:c9:8b:99:d8:fe: 16:8f:8a:52:3a:fa:9e:ec:97:eb:1d:de:66:4e:c2: 7c:b2:cb:22:1b:f5:15:7f:05:54:58:f8:79:fb:2c: a8:22:70:01:2c:40:35:28:9c:71:c4:49:c6:e0:93: 72:9d:5e:f0:3b:4d:eb:7e:5e:52:1c:81:a4:80:59: 96:db:7d:04:ad:15:63:40:63:90:24:b3:3f:26:a0: ab:bf:5b:f2:27:88:8a:26:6f:80:cd:fc:9c:c7:e4: fb:a2:2b:0d:f8:72:9b:4b:4d:6a:ba:bd:04:6b:31: 3c:29:8b:1e:0f:0d:d9:1c:95:0f:85:bd:65:a8:e2: d4:67:7c:2f:9c:21:cf:b4:f9:6b:6a:1b:9b:c8:dd: b1:89:55:b2:41:2d:2f:3e:15:fe:b8:6b:3d:7e:5a: ec:79:9c:4b:3c:6b:a9:e4:b8:c2:0c:9a:dc:52:28: ab:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:DB:19:1E:FD:E5:0E:7E:9D:00:BF:2E:E4:2B:BF:02:DF:71:C4:75 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0NsZHv3lDn6dAL8u5Cu_At9xxHU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.44.0/22 Signature Algorithm: sha256WithRSAEncryption 68:36:1b:8e:ac:01:38:c3:67:25:0b:22:a2:af:d0:33:54:35: e9:b9:8e:5f:8f:8d:8d:b6:ca:df:31:20:d0:9b:c1:07:58:3a: 7f:5d:6c:3c:88:76:a6:b3:f0:92:d6:bf:2a:c7:fa:aa:46:5d: d1:f5:74:2b:43:77:c0:f9:6c:93:50:1d:88:8a:f5:27:4a:c2: c8:75:2a:f9:78:2a:93:c7:1b:d4:e4:00:26:43:c1:6e:dd:52: 97:7a:b1:58:f8:2f:fd:f1:e7:a9:4b:1a:1d:05:4a:c5:2d:83: 79:08:3e:02:2a:cf:3f:8a:75:eb:94:6d:1a:89:c4:63:fd:73: b1:3c:37:ca:9a:2c:2a:88:ce:67:a9:98:fc:f6:2e:53:ba:79: c5:88:12:51:53:58:c4:1e:67:e9:18:fd:bf:49:4e:92:74:ea: 11:fa:bd:d4:4a:b0:c7:ac:db:70:a5:18:44:88:02:12:96:41: 30:bd:c5:9e:1e:4a:a6:bb:98:fe:3a:35:ed:ac:1c:f2:45:2e: 91:71:47:fc:1b:85:ad:54:a5:8e:0c:4c:2e:92:32:32:4f:ba: be:18:55:61:7f:ef:04:63:60:26:dd:26:fb:3c:e6:51:fa:76: 36:25:34:90:7a:4e:9d:c4:6d:ee:b8:b5:6b:31:78:f5:42:56: 1a:f0:62:da -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOj0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3MDlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEQwREIxOTFFRkRFNTBF N0U5RDAwQkYyRUU0MkJCRjAyREY3MUM0NzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCn3Oiqk3xzW5YemBHML02Nix91XwYhlQAmIjFcPBzmLLvoCPH9 I+BcW4bKy7YahzpKvymTOVaHhQdAjnDgVNWK57bbMg4KU/qNTZwP4ye+W7CzSV3J i5nY/haPilI6+p7sl+sd3mZOwnyyyyIb9RV/BVRY+Hn7LKgicAEsQDUonHHEScbg k3KdXvA7Tet+XlIcgaSAWZbbfQStFWNAY5Aksz8moKu/W/IniIomb4DN/JzH5Pui Kw34cptLTWq6vQRrMTwpix4PDdkclQ+FvWWo4tRnfC+cIc+0+WtqG5vI3bGJVbJB LS8+Ff64az1+Wux5nEs8a6nkuMIMmtxSKKsxAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU0NsZHv3lDn6dAL8u5Cu/At9xxHUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzBOc1pIdjNsRG42ZEFMOHU1 Q3VfQXQ5eHhIVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 sSwwDQYJKoZIhvcNAQELBQADggEBAGg2G46sATjDZyULIqKv0DNUNem5jl+PjY22 yt8xINCbwQdYOn9dbDyIdqaz8JLWvyrH+qpGXdH1dCtDd8D5bJNQHYiK9SdKwsh1 Kvl4KpPHG9TkACZDwW7dUpd6sVj4L/3x56lLGh0FSsUtg3kIPgIqzz+KdeuUbRqJ xGP9c7E8N8qaLCqIzmepmPz2LlO6ecWIElFTWMQeZ+kY/b9JTpJ06hH6vdRKsMes 23ClGESIAhKWQTC9xZ4eSqa7mP46Ne2sHPJFLpFxR/wbha1UpY4MTC6SMjJPur4Y VWF/7wRjYCbdJvs85lH6djYlNJB6Tp3Ebe64tWsxePVCVhrwYto= -----END CERTIFICATE-----Generated at Fri Oct 24 19:27:22 2025 by rpki-client