$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MPcgvrkRC3f4NYSw5dfO8wa8JTQ.roa File: MPcgvrkRC3f4NYSw5dfO8wa8JTQ.roa (raw, json) Hash identifier: FlA81RgXX/mwM+HB6qLgL37KGSQlwdZi2G5bJfhYG1Q= Subject key identifier: 30:F7:20:BE:B9:11:0B:77:F8:35:84:B0:E5:D7:CE:F3:06:BC:25:34 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 394C Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MPcgvrkRC3f4NYSw5dfO8wa8JTQ.roa Signing time: Fri 22 Aug 2025 08:46:09 +0000 ROA not before: Fri 22 Aug 2025 08:46:09 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 180.176.192.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14668 (0x394c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:09 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=30F720BEB9110B77F83584B0E5D7CEF306BC2534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:69:70:43:0e:79:b8:fb:aa:e8:77:98:aa:74: ed:93:68:ce:73:ad:ed:31:79:c3:46:d3:5e:e9:d6: 45:9f:27:c4:7c:b6:07:c2:14:e6:12:b0:01:84:f6: b7:31:d2:26:9a:2f:42:11:69:50:68:88:4c:0b:6f: 34:a7:c4:02:ee:d9:78:52:b0:9a:a2:ef:0d:18:a0: 1c:d2:e3:9b:a1:14:30:96:77:5b:25:b8:30:e9:c0: fa:39:09:57:55:28:e1:92:19:54:87:0c:e5:1b:2c: 4f:80:63:c4:fa:ae:b0:1f:4c:54:4e:17:f5:b0:6c: d1:aa:0d:52:45:a8:ba:4e:00:b6:5c:3a:d8:a6:00: fe:47:3e:5d:dc:ca:67:f5:40:24:38:4b:30:6b:41: f9:93:5f:0b:32:6b:f0:31:ce:c6:55:96:4f:c6:38: e1:c3:16:1c:a2:76:00:17:ed:7c:11:56:d9:f5:46: 13:2b:a6:7a:13:34:d2:a4:12:13:f9:b8:3b:d4:f7: ef:9c:33:2e:41:9d:a5:41:4d:b9:45:ef:4a:fb:f0: 76:40:1c:78:00:59:7c:6f:f1:a6:ca:91:ff:0b:f9: 90:99:c5:fe:20:7d:cf:8f:58:89:9b:82:c6:44:31: db:2b:49:8f:cc:1a:5e:cd:41:19:d5:88:de:2c:9b: c6:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:F7:20:BE:B9:11:0B:77:F8:35:84:B0:E5:D7:CE:F3:06:BC:25:34 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MPcgvrkRC3f4NYSw5dfO8wa8JTQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.192.0/21 Signature Algorithm: sha256WithRSAEncryption 8d:f9:df:0e:19:f8:ca:f2:58:be:41:4c:14:09:e8:04:5b:31: cc:79:fb:81:b5:7a:c6:2e:33:5c:87:7b:ca:56:a7:0e:67:46: d1:e0:7b:2f:87:c8:cf:7c:8b:40:48:bc:4c:f2:6c:8c:fd:4b: ea:9d:ec:29:36:46:45:a8:30:b0:da:15:57:7f:bf:75:f0:f0: 99:dd:a4:a4:c0:1c:51:50:26:22:3c:30:a0:e3:ca:54:6b:22: 8a:6b:4c:04:25:ed:12:30:7e:5b:6c:19:49:01:c3:dd:e4:2f: 0d:82:e2:ad:3b:36:08:8b:9e:64:3e:c6:1e:0c:e3:49:c4:0b: cd:91:92:f2:75:eb:d0:78:a0:b5:5c:ae:fe:38:5f:33:38:77: 8c:02:9f:bf:6a:b5:9c:a2:17:dd:b1:2b:87:cb:77:47:47:28: a1:8d:b7:65:1c:0a:55:c5:53:e8:9b:b6:61:07:8e:77:bd:70: 28:25:e1:c9:bf:7c:4a:5f:7d:1e:ce:ef:04:0a:9a:26:c2:bd: 20:2a:7a:6b:6d:29:c5:f8:97:52:e3:85:eb:72:91:f5:8a:4e: 0d:7a:3d:a5:1c:c9:34:f7:85:32:b4:a3:42:5f:4b:a1:c4:6c: 79:89:2e:83:18:41:93:dc:83:74:b4:bf:1e:c4:13:dd:f0:61: 82:35:1b:2e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOUwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2MDlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDMwRjcyMEJFQjkxMTBC NzdGODM1ODRCMEU1RDdDRUYzMDZCQzI1MzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDaaXBDDnm4+6rod5iqdO2TaM5zre0xecNG017p1kWfJ8R8tgfC FOYSsAGE9rcx0iaaL0IRaVBoiEwLbzSnxALu2XhSsJqi7w0YoBzS45uhFDCWd1sl uDDpwPo5CVdVKOGSGVSHDOUbLE+AY8T6rrAfTFROF/WwbNGqDVJFqLpOALZcOtim AP5HPl3cymf1QCQ4SzBrQfmTXwsya/AxzsZVlk/GOOHDFhyidgAX7XwRVtn1RhMr pnoTNNKkEhP5uDvU9++cMy5BnaVBTblF70r78HZAHHgAWXxv8abKkf8L+ZCZxf4g fc+PWImbgsZEMdsrSY/MGl7NQRnViN4sm8axAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUMPcgvrkRC3f4NYSw5dfO8wa8JTQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL01QY2d2cmtSQzNmNE5ZU3c1 ZGZPOHdhOEpUUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 sMAwDQYJKoZIhvcNAQELBQADggEBAI353w4Z+MryWL5BTBQJ6ARbMcx5+4G1esYu M1yHe8pWpw5nRtHgey+HyM98i0BIvEzybIz9S+qd7Ck2RkWoMLDaFVd/v3Xw8Jnd pKTAHFFQJiI8MKDjylRrIoprTAQl7RIwfltsGUkBw93kLw2C4q07NgiLnmQ+xh4M 40nEC82RkvJ169B4oLVcrv44XzM4d4wCn79qtZyiF92xK4fLd0dHKKGNt2UcClXF U+ibtmEHjne9cCgl4cm/fEpffR7O7wQKmibCvSAqemttKcX4l1LjhetykfWKTg16 PaUcyTT3hTK0o0JfS6HEbHmJLoMYQZPcg3S0vx7EE93wYYI1Gy4= -----END CERTIFICATE-----Generated at Fri Oct 24 19:21:45 2025 by rpki-client