$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/L1DlOKuG0PAURIwmnZCQ9E-ydIw.roa File: L1DlOKuG0PAURIwmnZCQ9E-ydIw.roa (raw, json) Hash identifier: 2d6eD1ti99yp2CUnB6AN+jgcSAMZgEfDY5FUtdj/z4s= Subject key identifier: 2F:50:E5:38:AB:86:D0:F0:14:44:8C:26:9D:90:90:F4:4F:B2:74:8C Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 395A Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/L1DlOKuG0PAURIwmnZCQ9E-ydIw.roa Signing time: Fri 22 Aug 2025 08:46:13 +0000 ROA not before: Fri 22 Aug 2025 08:46:13 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 180.176.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14682 (0x395a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:13 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=2F50E538AB86D0F014448C269D9090F44FB2748C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:52:44:d0:36:e9:76:51:42:6d:52:a0:3e:5c: f8:25:9d:1c:c1:aa:48:a4:6f:07:f6:c2:b6:2b:c4: 46:d3:7d:5c:23:95:c8:4c:8d:7a:76:bc:e7:85:dc: bc:8c:fd:04:08:18:60:a7:29:d6:f3:8d:7d:f5:01: 5a:68:a4:c7:af:97:14:e6:96:70:30:2d:7b:4f:a7: 73:b1:01:f9:e7:74:71:78:c6:09:cd:28:78:38:c0: 2e:be:33:10:5d:1d:12:40:e3:f8:cf:91:e0:77:51: 66:31:73:fc:65:40:68:55:72:c8:66:a6:e0:bc:96: a1:65:37:8b:b7:6c:23:6e:aa:48:5e:f9:38:03:ba: 79:a6:ee:eb:18:be:bf:0d:f2:63:56:16:19:22:02: dd:d5:2b:e4:9b:c0:b1:d2:4d:fa:d7:4f:80:9d:65: 39:8f:a8:6a:a0:95:75:86:39:1f:67:99:bd:69:52: 28:cc:4b:60:75:62:c9:4f:3c:9f:82:51:7f:b7:16: ec:a5:39:96:42:b6:a9:93:e2:20:7f:7d:b2:10:bb: 80:c9:28:80:59:79:06:e3:82:07:e0:b4:87:4e:14: 27:57:e8:0a:71:5b:42:95:50:24:ee:aa:fe:26:0e: c6:6d:db:db:d2:2d:7d:bf:fb:7f:93:ab:aa:cb:31: 2c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:50:E5:38:AB:86:D0:F0:14:44:8C:26:9D:90:90:F4:4F:B2:74:8C X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/L1DlOKuG0PAURIwmnZCQ9E-ydIw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.0.0/22 Signature Algorithm: sha256WithRSAEncryption 28:bf:9b:42:32:23:47:7c:a4:41:b6:aa:62:6e:17:c0:36:a3: a3:d6:40:a0:3c:66:82:57:6d:52:dc:87:f6:4b:ee:f3:61:d8: 56:a0:81:9c:cf:85:3a:14:21:16:8e:c4:72:77:57:97:95:e4: 2b:b1:31:31:d4:53:e2:a0:fa:d7:af:2b:da:c7:63:72:3d:4f: af:25:84:ea:66:4b:cf:81:53:d0:36:7a:8b:68:9c:aa:2c:27: 8e:de:76:0b:1d:ba:4b:d6:ce:8a:21:2a:26:d2:ed:e3:d4:bc: aa:95:97:8d:37:dd:71:34:09:dd:80:24:b0:02:63:21:a4:5c: 09:4f:57:5c:a1:d4:21:41:41:85:c2:73:b9:26:6c:ba:a6:83: 81:9c:60:e4:6d:70:93:80:05:e1:41:a7:9b:5b:34:14:61:e2: 22:9a:b2:34:ac:40:ea:6a:11:db:23:59:8f:b8:ff:50:f7:91: 17:83:9b:5f:91:dd:17:d1:b5:83:40:60:83:93:f7:6e:a9:e1: 0b:bd:0c:d6:b1:ae:84:47:30:a0:ed:1b:ba:79:82:bf:e9:52: c1:e4:a9:d2:c6:d5:fe:e5:9e:e0:a3:74:d2:ab:3b:05:92:cb: 87:1e:c6:e2:1f:bc:93:e3:e6:74:fd:1e:3f:c4:a5:65:10:a9: a8:2f:31:0d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOVowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2MTNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDJGNTBFNTM4QUI4NkQw RjAxNDQ0OEMyNjlEOTA5MEY0NEZCMjc0OEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD3UkTQNul2UUJtUqA+XPglnRzBqkikbwf2wrYrxEbTfVwjlchM jXp2vOeF3LyM/QQIGGCnKdbzjX31AVpopMevlxTmlnAwLXtPp3OxAfnndHF4xgnN KHg4wC6+MxBdHRJA4/jPkeB3UWYxc/xlQGhVcshmpuC8lqFlN4u3bCNuqkhe+TgD unmm7usYvr8N8mNWFhkiAt3VK+SbwLHSTfrXT4CdZTmPqGqglXWGOR9nmb1pUijM S2B1YslPPJ+CUX+3FuylOZZCtqmT4iB/fbIQu4DJKIBZeQbjggfgtIdOFCdX6Apx W0KVUCTuqv4mDsZt29vSLX2/+3+Tq6rLMSz7AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUL1DlOKuG0PAURIwmnZCQ9E+ydIwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0wxRGxPS3VHMFBBVVJJd21u WkNROUUteWRJdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 sAAwDQYJKoZIhvcNAQELBQADggEBACi/m0IyI0d8pEG2qmJuF8A2o6PWQKA8ZoJX bVLch/ZL7vNh2FaggZzPhToUIRaOxHJ3V5eV5CuxMTHUU+Kg+tevK9rHY3I9T68l hOpmS8+BU9A2eotonKosJ47edgsdukvWzoohKibS7ePUvKqVl4033XE0Cd2AJLAC YyGkXAlPV1yh1CFBQYXCc7kmbLqmg4GcYORtcJOABeFBp5tbNBRh4iKasjSsQOpq EdsjWY+4/1D3kReDm1+R3RfRtYNAYIOT926p4Qu9DNaxroRHMKDtG7p5gr/pUsHk qdLG1f7lnuCjdNKrOwWSy4cexuIfvJPj5nT9Hj/EpWUQqagvMQ0= -----END CERTIFICATE-----Generated at Fri Oct 24 19:27:20 2025 by rpki-client