$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Cs4zixx2vL2Wsh9r1hHBJHNrMEE.roa File: Cs4zixx2vL2Wsh9r1hHBJHNrMEE.roa (raw, json) Hash identifier: PUau45P5SiKPMHHytnJz9Y8deXgFnQfoWDMgdGYRekA= Subject key identifier: 0A:CE:33:8B:1C:76:BC:BD:96:B2:1F:6B:D6:11:C1:24:73:6B:30:41 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 37F4 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Cs4zixx2vL2Wsh9r1hHBJHNrMEE.roa Signing time: Fri 22 Aug 2025 08:44:50 +0000 ROA not before: Fri 22 Aug 2025 08:44:50 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 180.177.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14324 (0x37f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:44:50 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=0ACE338B1C76BCBD96B21F6BD611C124736B3041 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:a5:2a:f8:e0:90:09:52:01:03:77:58:99:79: 97:b5:ed:70:20:ce:23:37:4d:46:fa:3c:9a:a4:ec: 5d:c4:9d:b4:4b:ed:67:53:5f:52:82:dc:e2:88:89: 7a:19:65:c4:a3:24:df:a6:c2:08:c3:d3:c7:2a:6f: b6:08:33:0d:80:87:7c:8a:a4:65:e2:28:5e:b6:06: 04:d4:30:52:8c:7f:37:10:64:48:ab:84:d9:d4:9a: 4c:ec:06:66:2a:3f:69:46:92:34:8d:3e:ae:a0:d1: 77:b1:be:f1:21:a7:a6:6e:04:2e:a7:95:ae:20:1a: c5:78:42:ce:2b:60:86:83:dd:a0:a4:00:91:fe:39: 49:f3:f0:f0:d7:02:56:7c:15:c5:d7:60:ce:ba:8f: cc:29:8d:e2:79:ad:c0:51:02:84:ff:2c:37:78:13: 40:5d:f2:85:57:7f:68:b3:d4:5a:d6:40:c5:15:12: ab:bf:5b:4c:3a:60:1b:95:b1:37:e0:f0:8f:a0:e7: e4:1f:3e:46:34:fe:43:42:e2:7a:95:77:5c:a1:fb: 83:90:e4:0b:98:65:47:d9:12:cf:43:d5:fc:d4:49: 9d:33:4c:7f:6c:eb:f3:8e:4f:8b:f7:a3:ab:17:ff: c3:4d:13:83:c9:d1:94:59:71:83:df:d2:2b:f7:ba: 04:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:CE:33:8B:1C:76:BC:BD:96:B2:1F:6B:D6:11:C1:24:73:6B:30:41 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Cs4zixx2vL2Wsh9r1hHBJHNrMEE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.56.0/21 Signature Algorithm: sha256WithRSAEncryption 6f:eb:6a:74:8b:ac:79:d4:fc:fa:79:7a:e5:43:a5:3f:c4:e4: 93:22:f0:82:79:2c:ab:67:0d:10:1b:83:08:79:59:5a:f8:ff: fc:90:27:c3:82:c0:37:c6:31:9d:e6:a6:31:d6:54:7a:e0:4c: 01:31:80:4e:a7:7e:61:67:7a:fd:ea:cf:25:ec:27:1e:02:96: 95:03:9d:d3:64:b2:c0:a6:d5:7e:52:a1:61:4e:4c:90:2a:27: 42:db:86:a5:f1:fa:71:60:53:51:ad:8c:3a:32:c7:e3:dd:15: d7:c1:99:ba:19:90:03:49:e6:9a:31:3f:06:e3:d2:45:4a:30: 4d:87:48:bf:9b:88:c9:af:04:75:ce:11:e9:27:ff:3a:88:a3: e4:33:de:9e:58:f9:2e:24:3d:81:ca:63:db:d5:8c:78:cc:12: 19:e3:3b:a7:1c:58:ec:b2:81:bd:4d:1a:f7:75:e7:38:ee:7e: f4:41:e4:82:fa:32:d1:5d:35:fa:c8:82:ab:e4:1b:28:f7:2a: 8a:59:06:b6:f9:72:10:9c:08:fb:19:2b:ec:ae:d9:c6:bc:64: c0:6d:28:5e:3e:c8:ab:fc:a2:76:fe:15:e3:48:d1:56:34:4b: a8:6a:f8:be:38:b8:be:a5:ab:fe:0d:19:18:fd:24:e1:62:af: 04:b1:35:07 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICN/QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ0NTBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDBBQ0UzMzhCMUM3NkJD QkQ5NkIyMUY2QkQ2MTFDMTI0NzM2QjMwNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDhpSr44JAJUgEDd1iZeZe17XAgziM3TUb6PJqk7F3EnbRL7WdT X1KC3OKIiXoZZcSjJN+mwgjD08cqb7YIMw2Ah3yKpGXiKF62BgTUMFKMfzcQZEir hNnUmkzsBmYqP2lGkjSNPq6g0XexvvEhp6ZuBC6nla4gGsV4Qs4rYIaD3aCkAJH+ OUnz8PDXAlZ8FcXXYM66j8wpjeJ5rcBRAoT/LDd4E0Bd8oVXf2iz1FrWQMUVEqu/ W0w6YBuVsTfg8I+g5+QfPkY0/kNC4nqVd1yh+4OQ5AuYZUfZEs9D1fzUSZ0zTH9s 6/OOT4v3o6sX/8NNE4PJ0ZRZcYPf0iv3ugTHAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUCs4zixx2vL2Wsh9r1hHBJHNrMEEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0NzNHppeHgydkwyV3NoOXIx aEhCSkhOck1FRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 sTgwDQYJKoZIhvcNAQELBQADggEBAG/ranSLrHnU/Pp5euVDpT/E5JMi8IJ5LKtn DRAbgwh5WVr4//yQJ8OCwDfGMZ3mpjHWVHrgTAExgE6nfmFnev3qzyXsJx4ClpUD ndNkssCm1X5SoWFOTJAqJ0LbhqXx+nFgU1GtjDoyx+PdFdfBmboZkANJ5poxPwbj 0kVKME2HSL+biMmvBHXOEekn/zqIo+Qz3p5Y+S4kPYHKY9vVjHjMEhnjO6ccWOyy gb1NGvd15zjufvRB5IL6MtFdNfrIgqvkGyj3KopZBrb5chCcCPsZK+yu2ca8ZMBt KF4+yKv8onb+FeNI0VY0S6hq+L44uL6lq/4NGRj9JOFirwSxNQc= -----END CERTIFICATE-----Generated at Fri Oct 24 19:18:39 2025 by rpki-client