$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ihor2uEzhr88GGv_vtq9WgiwVCA.roa File: Ihor2uEzhr88GGv_vtq9WgiwVCA.roa (raw, json) Hash identifier: WZf5zwAL1X5kidUgLGJWYkb8swhnIMbPJ4XcfKcpgi0= Subject key identifier: 22:1A:2B:DA:E1:33:86:BF:3C:18:6B:FF:BE:DA:BD:5A:08:B0:54:20 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 39A4 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ihor2uEzhr88GGv_vtq9WgiwVCA.roa Signing time: Fri 22 Aug 2025 08:46:30 +0000 ROA not before: Fri 22 Aug 2025 08:46:30 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 180.177.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14756 (0x39a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:30 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=221A2BDAE13386BF3C186BFFBEDABD5A08B05420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c4:3c:fa:2a:f1:2e:3c:01:b4:e0:ea:eb:8f: 08:08:10:fe:81:c1:d5:18:b9:9f:65:21:34:ef:86: 1d:1b:5e:45:1e:88:2a:a2:16:ab:cd:01:14:4c:51: 78:91:79:ac:6b:4d:e3:f0:2c:e0:18:d6:97:73:04: 89:0c:5e:80:80:25:fa:47:1a:1c:20:a4:28:00:2e: aa:2c:05:01:a4:93:c1:67:80:8d:be:0d:44:cd:27: c5:1e:3f:ee:03:d5:9d:79:81:98:e0:26:1b:00:4e: d8:6b:9e:a0:17:28:b1:42:25:84:e6:5b:db:43:40: 70:c4:0e:25:13:3b:48:10:6e:d6:53:fc:2b:52:d3: 76:ca:86:bf:31:9f:b4:e5:f6:c7:03:02:54:b7:97: 1f:9e:6b:29:ce:d1:80:1e:b5:77:3e:60:a6:c5:d6: 45:c1:00:bb:c7:25:55:09:0e:b1:64:c5:0b:a8:60: c3:6b:bc:f7:6c:ad:1c:33:ea:7c:e2:dc:9e:82:70: 49:4d:e6:86:8f:87:ed:22:23:92:91:e9:19:90:e9: 8a:72:ae:d4:ca:1f:bb:fa:5c:96:f4:99:08:e5:69: 55:f6:af:ba:1f:54:f3:3d:11:61:b9:63:b0:87:43: 9a:fb:68:ef:75:4d:e6:42:95:62:21:e5:de:68:73: c8:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:1A:2B:DA:E1:33:86:BF:3C:18:6B:FF:BE:DA:BD:5A:08:B0:54:20 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ihor2uEzhr88GGv_vtq9WgiwVCA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.216.0/24 Signature Algorithm: sha256WithRSAEncryption a4:50:76:98:c2:17:41:99:f2:a8:d7:2c:6a:2a:9c:c1:06:54: 04:27:96:53:ea:cf:57:d8:89:e3:7d:c8:5e:a6:65:f5:1f:e6: f3:0e:89:32:19:21:25:97:13:e8:ae:4d:cd:39:c9:0b:d4:12: e3:11:0c:1a:f8:01:10:ed:64:a5:60:7e:67:6e:79:20:c9:05: d4:d6:45:60:82:8d:7c:4e:56:62:6e:65:ba:cb:2f:6d:29:b0: cd:ce:ba:1f:9d:70:bd:d2:37:43:cc:76:34:d4:b1:40:3f:80: 33:9d:2e:b5:27:d1:41:ae:cb:f6:79:84:60:02:57:d0:4f:2b: af:cf:d0:88:56:4c:cf:41:74:d8:12:6f:9b:bf:75:63:8a:fd: 7a:b0:95:b3:d4:81:0f:d1:1c:34:5b:f5:a2:df:94:e5:0e:28: 01:d2:cc:50:6c:76:0b:72:d2:b7:98:ec:ff:39:a9:84:2b:b7: 9b:84:5e:b1:6d:f7:08:9b:df:1d:e4:77:8d:2c:62:e4:ac:6e: 78:be:93:07:46:a9:13:cf:3c:d7:ab:76:98:1c:01:f3:d1:67: dd:a8:38:7c:07:fe:59:b4:a7:af:70:67:a6:8a:27:90:98:70: b8:1c:2f:8e:2f:7b:71:a1:ef:4c:a1:a4:0f:9d:f5:a2:fc:58: af:d8:ec:23 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOaQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2MzBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDIyMUEyQkRBRTEzMzg2 QkYzQzE4NkJGRkJFREFCRDVBMDhCMDU0MjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtxDz6KvEuPAG04OrrjwgIEP6BwdUYuZ9lITTvhh0bXkUeiCqi FqvNARRMUXiReaxrTePwLOAY1pdzBIkMXoCAJfpHGhwgpCgALqosBQGkk8FngI2+ DUTNJ8UeP+4D1Z15gZjgJhsATthrnqAXKLFCJYTmW9tDQHDEDiUTO0gQbtZT/CtS 03bKhr8xn7Tl9scDAlS3lx+eaynO0YAetXc+YKbF1kXBALvHJVUJDrFkxQuoYMNr vPdsrRwz6nzi3J6CcElN5oaPh+0iI5KR6RmQ6YpyrtTKH7v6XJb0mQjlaVX2r7of VPM9EWG5Y7CHQ5r7aO91TeZClWIh5d5oc8gzAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUIhor2uEzhr88GGv/vtq9WgiwVCAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0lob3IydUV6aHI4OEdHdl92 dHE5V2dpd1ZDQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0 sdgwDQYJKoZIhvcNAQELBQADggEBAKRQdpjCF0GZ8qjXLGoqnMEGVAQnllPqz1fY ieN9yF6mZfUf5vMOiTIZISWXE+iuTc05yQvUEuMRDBr4ARDtZKVgfmdueSDJBdTW RWCCjXxOVmJuZbrLL20psM3Ouh+dcL3SN0PMdjTUsUA/gDOdLrUn0UGuy/Z5hGAC V9BPK6/P0IhWTM9BdNgSb5u/dWOK/XqwlbPUgQ/RHDRb9aLflOUOKAHSzFBsdgty 0reY7P85qYQrt5uEXrFt9wib3x3kd40sYuSsbni+kwdGqRPPPNerdpgcAfPRZ92o OHwH/lm0p69wZ6aKJ5CYcLgcL44ve3Gh70yhpA+d9aL8WK/Y7CM= -----END CERTIFICATE-----Generated at Fri Oct 24 19:21:44 2025 by rpki-client