$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9j7IqYmLDdTXHXkTTf_WV_wmQjs.roa File: 9j7IqYmLDdTXHXkTTf_WV_wmQjs.roa (raw, json) Hash identifier: JPow+TFJsNWfT0uA8ZMVmiw0RQdoQE7LMnutryjnk9E= Subject key identifier: F6:3E:C8:A9:89:8B:0D:D4:D7:1D:79:13:4D:FF:D6:57:FC:26:42:3B Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3A6F Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9j7IqYmLDdTXHXkTTf_WV_wmQjs.roa Signing time: Fri 22 Aug 2025 08:47:21 +0000 ROA not before: Fri 22 Aug 2025 08:47:21 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 180.177.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14959 (0x3a6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:21 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=F63EC8A9898B0DD4D71D79134DFFD657FC26423B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:01:10:51:b3:2a:dd:3f:26:67:70:d9:91:b9: d8:0d:85:1c:17:7f:ab:f0:b0:62:1b:0f:2a:82:7d: 93:43:6d:1d:b1:8c:30:f3:21:18:6d:cd:c4:7d:a4: e7:4b:c0:a5:f4:05:e9:50:ec:36:94:8c:f4:f3:37: 75:9e:f1:e5:0b:53:e9:9b:8d:41:86:00:4f:24:d2: b7:fd:4b:1f:03:b4:ab:39:7b:21:3c:41:66:15:98: 16:dd:e7:2a:f6:5b:5a:92:94:e8:d8:b6:b5:ea:e1: 4c:ac:c9:76:4e:4b:78:32:6e:ce:1f:ac:0b:81:01: 0c:04:9d:ae:7a:93:ab:9b:89:ed:69:cd:bc:90:59: 3c:c6:cb:50:ba:b9:67:d1:44:5d:5f:7b:a1:26:a1: 39:02:77:b5:05:70:34:62:1d:74:be:bf:d6:f8:9a: e7:49:97:65:06:1e:0a:71:40:0a:a5:45:86:0e:25: 55:7d:c4:cf:0c:39:05:b2:2a:e2:9b:a8:fb:d6:46: 96:a9:0e:47:18:86:c8:9b:ef:63:7f:aa:b6:c8:f0: b2:9f:7c:4e:02:6d:1d:88:48:68:10:6d:7c:ad:a6: b0:8e:93:14:2e:91:d3:10:b5:62:69:d1:38:f3:6b: c8:88:2a:02:a4:67:ea:b8:2e:60:e1:5b:a1:ca:da: 19:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:3E:C8:A9:89:8B:0D:D4:D7:1D:79:13:4D:FF:D6:57:FC:26:42:3B X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9j7IqYmLDdTXHXkTTf_WV_wmQjs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.220.0/23 Signature Algorithm: sha256WithRSAEncryption 7e:11:fe:2a:db:c0:b1:9d:47:bb:78:79:25:1e:2f:58:14:d6: 75:ae:70:e1:f7:16:b6:f2:76:f5:62:91:15:ec:b2:4d:28:7f: 23:4c:3f:af:9d:da:07:21:c2:b4:5e:98:2f:14:d4:af:a9:30: 96:d6:e5:d6:05:2e:fd:9f:92:e2:0d:94:73:d4:07:d0:0d:fb: 7f:01:a8:2f:07:fe:46:b4:19:75:d7:a3:6b:f1:67:63:b9:9c: 90:fb:71:93:e1:44:b6:01:cb:40:53:19:2d:72:4f:cd:1b:4d: dd:a3:42:fe:1a:ba:06:cf:95:2c:aa:30:22:f3:66:32:47:57: bc:94:c0:bc:ad:f7:07:45:90:d7:63:b6:02:46:fe:a9:02:9c: 6d:5c:66:1a:f2:c0:2d:e9:ea:e6:25:d8:f2:44:f4:9d:aa:6f: e0:0c:b8:45:00:ee:73:9e:2a:97:d4:8b:c4:5b:d3:ce:c4:e6: c5:f8:44:d1:ff:0c:78:f1:c9:d6:e6:6f:90:ba:d0:0a:fa:c8: f7:b3:d7:90:d3:d4:ec:b0:4d:90:5e:3c:22:38:21:8a:68:a3: 9a:c7:75:42:62:ff:b1:ef:7f:0f:40:8a:95:f1:35:e1:91:dc: f3:0e:7c:88:f4:8b:c7:39:64:57:78:de:9f:9b:8b:74:45:36: 66:c2:45:b9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOm8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3MjFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEY2M0VDOEE5ODk4QjBE RDRENzFENzkxMzRERkZENjU3RkMyNjQyM0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4ARBRsyrdPyZncNmRudgNhRwXf6vwsGIbDyqCfZNDbR2xjDDz IRhtzcR9pOdLwKX0BelQ7DaUjPTzN3We8eULU+mbjUGGAE8k0rf9Sx8DtKs5eyE8 QWYVmBbd5yr2W1qSlOjYtrXq4UysyXZOS3gybs4frAuBAQwEna56k6ubie1pzbyQ WTzGy1C6uWfRRF1fe6EmoTkCd7UFcDRiHXS+v9b4mudJl2UGHgpxQAqlRYYOJVV9 xM8MOQWyKuKbqPvWRpapDkcYhsib72N/qrbI8LKffE4CbR2ISGgQbXytprCOkxQu kdMQtWJp0Tjza8iIKgKkZ+q4LmDhW6HK2hnzAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU9j7IqYmLDdTXHXkTTf/WV/wmQjswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzlqN0lxWW1MRGRUWEhYa1RU Zl9XVl93bVFqcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG0 sdwwDQYJKoZIhvcNAQELBQADggEBAH4R/irbwLGdR7t4eSUeL1gU1nWucOH3Frby dvVikRXssk0ofyNMP6+d2gchwrRemC8U1K+pMJbW5dYFLv2fkuINlHPUB9AN+38B qC8H/ka0GXXXo2vxZ2O5nJD7cZPhRLYBy0BTGS1yT80bTd2jQv4augbPlSyqMCLz ZjJHV7yUwLyt9wdFkNdjtgJG/qkCnG1cZhrywC3p6uYl2PJE9J2qb+AMuEUA7nOe KpfUi8Rb087E5sX4RNH/DHjxydbmb5C60Ar6yPez15DT1OywTZBePCI4IYpoo5rH dUJi/7Hvfw9AipXxNeGR3PMOfIj0i8c5ZFd43p+bi3RFNmbCRbk= -----END CERTIFICATE-----Generated at Fri Oct 24 19:27:48 2025 by rpki-client