$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DtzY07BhdNAzT07cdf4Ge-Mf6OI.roa File: DtzY07BhdNAzT07cdf4Ge-Mf6OI.roa (raw, json) Hash identifier: c1icehRM5kfOQpmtnTQkljYzbW8J6C+6aDYowvCurx8= Subject key identifier: 0E:DC:D8:D3:B0:61:74:D0:33:4F:4E:DC:75:FE:06:7B:E3:1F:E8:E2 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3944 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DtzY07BhdNAzT07cdf4Ge-Mf6OI.roa Signing time: Fri 22 Aug 2025 08:46:07 +0000 ROA not before: Fri 22 Aug 2025 08:46:07 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 180.177.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14660 (0x3944) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:07 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=0EDCD8D3B06174D0334F4EDC75FE067BE31FE8E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:76:c4:d5:ac:3f:2f:20:c2:7a:81:0f:2e:44: c9:dc:2c:a7:2b:ef:38:d0:20:97:d2:fc:68:6e:94: 38:69:51:e8:57:e1:88:64:89:01:07:24:41:99:eb: c6:47:d3:21:04:a3:c0:f8:34:19:a1:f1:dc:7c:45: 24:66:fc:31:15:97:ac:9f:c3:04:e6:2c:75:a5:ba: 13:23:fe:14:69:55:8b:bc:01:00:08:a9:2c:41:d5: 43:18:78:ec:36:f2:80:ca:c3:1b:b9:16:e1:50:ba: dd:67:20:59:9e:17:94:85:53:d5:6d:a8:88:ae:ac: 76:ac:da:ff:15:49:e6:89:df:27:b5:4b:75:1c:90: b5:d9:86:53:e7:2e:fc:45:0f:f2:14:ec:56:dd:54: c7:70:16:86:93:d9:58:77:2d:03:40:53:01:27:d4: 58:f5:e8:72:77:12:19:9f:c3:8a:eb:c6:db:6f:1c: fc:ee:1d:52:68:00:d0:d6:58:50:1e:40:8b:e6:3a: 95:60:b5:39:cd:e5:19:2a:ad:2a:ea:cc:3a:6a:3f: 3c:4c:a6:bc:d6:fa:b4:1c:e9:19:67:ab:ae:4c:d0: de:f1:1d:51:7e:8c:97:d8:b0:19:a7:b0:1d:be:db: 0c:ab:90:4e:eb:32:ee:a8:fd:d0:c8:84:de:ee:5f: 3f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:DC:D8:D3:B0:61:74:D0:33:4F:4E:DC:75:FE:06:7B:E3:1F:E8:E2 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DtzY07BhdNAzT07cdf4Ge-Mf6OI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.212.0/22 Signature Algorithm: sha256WithRSAEncryption 3f:5c:d6:58:c5:d1:af:1d:fb:62:ca:87:b5:b4:2d:8e:8e:f4: 60:3a:8a:98:21:44:8d:e4:b7:52:92:bb:46:cc:a3:06:11:96: b9:ac:3d:e3:f9:c9:ce:c4:59:b0:7b:65:39:ea:cf:49:59:b2: d6:42:5a:1f:c7:95:5e:86:4f:fa:e1:47:57:e6:ca:7e:d3:eb: 63:cb:8b:08:42:e6:fc:d0:be:0e:8c:08:ec:f6:49:b9:90:f0: 4e:4f:5f:6f:19:70:74:4a:dc:66:a4:a8:7c:b1:49:37:75:2f: 25:6a:59:ae:44:3b:c6:56:3b:39:d7:a2:e7:ba:81:f3:26:71: 56:e0:f4:81:7f:6d:5f:6a:bd:51:19:2a:1f:b2:f7:f9:6f:39: b6:02:20:c4:a9:88:aa:e5:d7:a3:1e:da:6b:5b:80:25:35:78: ed:23:5c:11:29:dd:c7:49:90:cf:19:50:ac:5b:5b:93:c3:0d: 16:c5:92:e6:cf:45:8b:33:3c:bb:42:65:14:3e:29:a4:d1:6f: d2:17:38:5a:d9:7e:d1:8e:6e:be:80:59:d1:3b:a4:c2:57:49: dd:90:29:69:11:2d:97:96:6b:98:f9:67:e4:67:1b:d5:42:84: 0d:48:9f:68:91:90:14:b5:1e:8a:71:5a:bc:9d:ad:3c:67:58: 7b:7f:73:9b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOUQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2MDdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDBFRENEOEQzQjA2MTc0 RDAzMzRGNEVEQzc1RkUwNjdCRTMxRkU4RTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVdsTVrD8vIMJ6gQ8uRMncLKcr7zjQIJfS/GhulDhpUehX4Yhk iQEHJEGZ68ZH0yEEo8D4NBmh8dx8RSRm/DEVl6yfwwTmLHWluhMj/hRpVYu8AQAI qSxB1UMYeOw28oDKwxu5FuFQut1nIFmeF5SFU9VtqIiurHas2v8VSeaJ3ye1S3Uc kLXZhlPnLvxFD/IU7FbdVMdwFoaT2Vh3LQNAUwEn1Fj16HJ3Ehmfw4rrxttvHPzu HVJoANDWWFAeQIvmOpVgtTnN5RkqrSrqzDpqPzxMprzW+rQc6Rlnq65M0N7xHVF+ jJfYsBmnsB2+2wyrkE7rMu6o/dDIhN7uXz/pAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUDtzY07BhdNAzT07cdf4Ge+Mf6OIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0R0elkwN0JoZE5BelQwN2Nk ZjRHZS1NZjZPSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 sdQwDQYJKoZIhvcNAQELBQADggEBAD9c1ljF0a8d+2LKh7W0LY6O9GA6ipghRI3k t1KSu0bMowYRlrmsPeP5yc7EWbB7ZTnqz0lZstZCWh/HlV6GT/rhR1fmyn7T62PL iwhC5vzQvg6MCOz2SbmQ8E5PX28ZcHRK3GakqHyxSTd1LyVqWa5EO8ZWOznXoue6 gfMmcVbg9IF/bV9qvVEZKh+y9/lvObYCIMSpiKrl16Me2mtbgCU1eO0jXBEp3cdJ kM8ZUKxbW5PDDRbFkubPRYszPLtCZRQ+KaTRb9IXOFrZftGObr6AWdE7pMJXSd2Q KWkRLZeWa5j5Z+RnG9VChA1In2iRkBS1HopxWrydrTxnWHt/c5s= -----END CERTIFICATE-----Generated at Fri Oct 24 19:21:28 2025 by rpki-client