$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ASfHrqUkjhe9WfTvlzOeCb1-WYs.roa File: ASfHrqUkjhe9WfTvlzOeCb1-WYs.roa (raw, json) Hash identifier: Qt1ON9O7ae4dN6ubf4Yuy9Ak5pifi7EtPaftbzVjmn8= Subject key identifier: 01:27:C7:AE:A5:24:8E:17:BD:59:F4:EF:97:33:9E:09:BD:7E:59:8B Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3973 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ASfHrqUkjhe9WfTvlzOeCb1-WYs.roa Signing time: Fri 22 Aug 2025 08:46:18 +0000 ROA not before: Fri 22 Aug 2025 08:46:18 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 180.177.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14707 (0x3973) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:18 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=0127C7AEA5248E17BD59F4EF97339E09BD7E598B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b4:51:32:68:8f:0d:ef:1c:43:cf:0b:9b:b9: a8:ff:b0:d1:ff:e6:0c:07:f2:9c:6a:67:b0:a3:96: 62:b1:fc:40:11:a6:e3:ae:23:e9:a4:c7:e2:ea:0b: 4a:06:25:8b:10:1b:89:13:e8:71:1a:b2:e3:53:b1: 46:86:2a:b3:35:cf:a2:c2:7d:ee:5a:e7:81:f1:0c: 79:e6:f1:f3:14:bb:37:cf:d1:b4:72:ba:57:c9:cc: 5e:b6:a1:50:51:7c:14:33:f7:ce:fe:cf:82:24:11: 30:fe:bf:6a:8e:05:74:96:dd:c9:ba:27:0e:2d:4f: 88:1b:e1:37:1b:10:62:17:0b:49:42:a2:33:a7:f9: b3:69:99:03:d9:5c:8e:64:13:e3:51:40:80:2a:33: 04:92:de:2e:5b:cd:fc:38:1a:3d:44:2a:0b:e4:50: 15:4f:c3:4d:82:54:58:e3:7d:0a:ef:0b:7b:0f:e3: a6:81:27:3b:22:a0:73:a9:b9:ad:7c:be:d0:94:02: 00:42:c5:5f:48:c9:41:49:42:6b:79:76:b5:3d:4b: eb:df:df:04:46:d2:fd:b0:79:d4:c8:42:1e:93:a1: 14:92:af:26:90:4f:e0:9e:79:72:d1:0e:11:d8:29: 1b:d3:a6:20:02:1b:b4:8c:15:21:b6:f8:52:00:a0: f7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:27:C7:AE:A5:24:8E:17:BD:59:F4:EF:97:33:9E:09:BD:7E:59:8B X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ASfHrqUkjhe9WfTvlzOeCb1-WYs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.108.0/22 Signature Algorithm: sha256WithRSAEncryption 0f:b4:7f:3c:67:83:51:9f:18:ad:be:01:45:72:b7:20:04:42: ce:b7:5f:03:1f:7b:0a:52:10:6a:62:52:67:ef:3b:a1:32:c7: 0d:e3:a9:94:e9:c4:d5:e9:6e:a7:65:79:61:3b:7a:5d:e5:d3: 22:2a:25:c0:dd:78:a5:c8:f2:e5:92:84:39:0f:65:2a:39:09: 99:2d:7b:91:86:92:9d:04:0a:1d:b9:7e:64:2f:67:29:25:f8: 51:bc:77:e3:cc:18:62:79:f7:13:43:fc:d6:65:ad:36:c1:ad: 22:46:db:9e:20:81:e4:81:cc:a3:21:87:42:28:0d:3e:db:33: cc:68:b7:0f:7b:d8:32:2d:11:f1:80:c9:70:18:2c:be:f5:54: 97:54:82:44:43:32:f9:9f:57:cc:04:97:a3:37:ab:96:c4:24: 86:d6:de:7d:46:18:44:eb:4a:14:3a:2e:a0:b9:48:31:af:bd: 1c:b5:a6:8d:8f:f3:9c:65:d0:d4:45:d9:5a:01:f8:52:21:21: c4:39:ec:b5:12:67:21:79:2b:4a:c8:20:db:d9:b9:5d:0d:50: 77:2a:77:24:12:5f:98:81:e7:83:d7:03:7c:20:b0:66:5b:c8: fb:04:27:75:f5:c7:62:98:a4:4e:58:ce:7e:de:ad:f9:fd:74: 9a:5d:16:ec -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOXMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2MThaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDAxMjdDN0FFQTUyNDhF MTdCRDU5RjRFRjk3MzM5RTA5QkQ3RTU5OEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCptFEyaI8N7xxDzwubuaj/sNH/5gwH8pxqZ7CjlmKx/EARpuOu I+mkx+LqC0oGJYsQG4kT6HEasuNTsUaGKrM1z6LCfe5a54HxDHnm8fMUuzfP0bRy ulfJzF62oVBRfBQz987+z4IkETD+v2qOBXSW3cm6Jw4tT4gb4TcbEGIXC0lCojOn +bNpmQPZXI5kE+NRQIAqMwSS3i5bzfw4Gj1EKgvkUBVPw02CVFjjfQrvC3sP46aB JzsioHOpua18vtCUAgBCxV9IyUFJQmt5drU9S+vf3wRG0v2wedTIQh6ToRSSryaQ T+CeeXLRDhHYKRvTpiACG7SMFSG2+FIAoPfFAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUASfHrqUkjhe9WfTvlzOeCb1+WYswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0FTZkhycVVramhlOVdmVHZs ek9lQ2IxLVdZcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 sWwwDQYJKoZIhvcNAQELBQADggEBAA+0fzxng1GfGK2+AUVytyAEQs63XwMfewpS EGpiUmfvO6Eyxw3jqZTpxNXpbqdleWE7el3l0yIqJcDdeKXI8uWShDkPZSo5CZkt e5GGkp0ECh25fmQvZykl+FG8d+PMGGJ59xND/NZlrTbBrSJG254ggeSBzKMhh0Io DT7bM8xotw972DItEfGAyXAYLL71VJdUgkRDMvmfV8wEl6M3q5bEJIbW3n1GGETr ShQ6LqC5SDGvvRy1po2P85xl0NRF2VoB+FIhIcQ57LUSZyF5K0rIINvZuV0NUHcq dyQSX5iB54PXA3wgsGZbyPsEJ3X1x2KYpE5Yzn7erfn9dJpdFuw= -----END CERTIFICATE-----Generated at Fri Oct 24 19:27:22 2025 by rpki-client