$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NRYsisVDcNopInsN26NdIKHE9bs.roa File: NRYsisVDcNopInsN26NdIKHE9bs.roa (raw, json) Hash identifier: dtKlN1yGytorrpfYhndJhBxZFipiuDpDL+spXeyNOFY= Subject key identifier: 35:16:2C:8A:C5:43:70:DA:29:22:7B:0D:DB:A3:5D:20:A1:C4:F5:BB Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 38EA Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NRYsisVDcNopInsN26NdIKHE9bs.roa Signing time: Fri 22 Aug 2025 08:45:45 +0000 ROA not before: Fri 22 Aug 2025 08:45:45 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 180.176.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14570 (0x38ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:45 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=35162C8AC54370DA29227B0DDBA35D20A1C4F5BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:63:86:03:29:04:fb:02:a1:74:c6:c9:17:5d: e0:74:09:eb:00:d1:99:28:5b:77:f9:80:ea:34:70: 33:88:90:6e:38:b0:5c:29:af:fb:2d:3f:d6:94:b9: c8:45:91:ea:09:ce:01:1d:61:db:e8:2a:bb:2c:7c: 32:56:6d:2b:6d:bd:1e:6d:ee:f0:ea:94:96:25:de: b0:9b:f8:51:f3:1e:9a:b9:c9:ef:c2:43:0b:2c:49: 68:12:d2:87:9e:41:09:4d:39:b0:6c:c7:6f:61:4d: b0:e7:bf:f4:cc:48:50:3e:4c:96:1b:52:1f:5f:63: 45:8f:a9:cc:b2:2d:15:58:34:11:f5:68:ae:72:cf: e6:b2:1c:ae:15:a6:ce:34:51:58:8d:38:3e:5a:91: 36:62:61:c5:6c:e0:46:84:bd:3f:a8:d7:c5:47:32: b9:b9:62:07:81:f2:2f:97:0b:6f:27:bc:fc:2f:42: 0c:e6:02:19:6b:62:cf:31:20:4d:65:57:a2:a1:06: c1:31:e2:b3:70:ea:39:13:cb:f7:cc:4f:2f:a3:4f: 5a:0c:a0:41:95:61:88:ce:80:54:3d:56:b1:bc:f7: 83:09:e8:59:2b:d9:e1:de:d6:f3:f5:6c:cb:cb:64: 88:a3:52:5d:ad:87:6f:2e:e1:d2:3a:f7:d7:31:dd: 1a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:16:2C:8A:C5:43:70:DA:29:22:7B:0D:DB:A3:5D:20:A1:C4:F5:BB X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NRYsisVDcNopInsN26NdIKHE9bs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.22.0/24 Signature Algorithm: sha256WithRSAEncryption 09:cb:f8:67:65:5d:a8:65:89:be:52:22:d8:85:de:bd:3b:ad: a6:5e:7f:93:a0:e0:ff:90:24:c7:84:1e:99:e2:a1:64:53:ad: 81:44:d6:5d:0b:73:c8:ed:54:14:b4:d1:40:f7:89:bf:e9:1f: f4:e6:28:a0:80:93:36:6b:76:e6:dd:85:89:33:35:a3:1a:d7: 17:ec:85:4f:35:f6:13:a9:39:10:74:05:50:d0:e1:aa:18:d3: 89:93:26:41:ef:b6:0b:f0:b3:85:80:ef:7a:fa:a6:56:4c:10: 0e:06:d6:fa:29:ca:c7:35:61:ed:af:fd:84:e2:d8:b6:a9:79: 47:d4:86:7e:41:56:02:07:62:f7:4a:4b:45:91:6a:98:c4:16: 2d:5a:4e:3b:62:be:0e:cb:92:86:73:7c:2f:48:d4:24:ff:44: 5d:a2:00:8d:d3:ee:6a:9b:e1:4b:63:d1:b3:da:7c:dd:e6:5b: 92:e2:0a:ce:15:cb:13:bc:1e:e1:43:77:f0:54:05:09:13:d9: 96:7f:b8:92:8d:96:50:ab:96:21:fc:5f:fa:ea:f3:88:19:f2: fb:2c:56:c6:4b:b6:00:78:b3:f3:d1:3a:1f:7e:a4:d8:2e:b5: 5a:e7:d2:d3:0a:43:ab:bf:df:ac:47:22:36:a0:4d:c1:3c:09: 17:1a:e8:bf -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOOowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1NDVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDM1MTYyQzhBQzU0Mzcw REEyOTIyN0IwRERCQTM1RDIwQTFDNEY1QkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLY4YDKQT7AqF0xskXXeB0CesA0ZkoW3f5gOo0cDOIkG44sFwp r/stP9aUuchFkeoJzgEdYdvoKrssfDJWbSttvR5t7vDqlJYl3rCb+FHzHpq5ye/C QwssSWgS0oeeQQlNObBsx29hTbDnv/TMSFA+TJYbUh9fY0WPqcyyLRVYNBH1aK5y z+ayHK4Vps40UViNOD5akTZiYcVs4EaEvT+o18VHMrm5YgeB8i+XC28nvPwvQgzm AhlrYs8xIE1lV6KhBsEx4rNw6jkTy/fMTy+jT1oMoEGVYYjOgFQ9VrG894MJ6Fkr 2eHe1vP1bMvLZIijUl2th28u4dI699cx3RpXAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUNRYsisVDcNopInsN26NdIKHE9bswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL05SWXNpc1ZEY05vcEluc04y Nk5kSUtIRTlicy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0 sBYwDQYJKoZIhvcNAQELBQADggEBAAnL+GdlXahlib5SItiF3r07raZef5Og4P+Q JMeEHpnioWRTrYFE1l0Lc8jtVBS00UD3ib/pH/TmKKCAkzZrdubdhYkzNaMa1xfs hU819hOpORB0BVDQ4aoY04mTJkHvtgvws4WA73r6plZMEA4G1vopysc1Ye2v/YTi 2LapeUfUhn5BVgIHYvdKS0WRapjEFi1aTjtivg7LkoZzfC9I1CT/RF2iAI3T7mqb 4Utj0bPafN3mW5LiCs4VyxO8HuFDd/BUBQkT2ZZ/uJKNllCrliH8X/rq84gZ8vss VsZLtgB4s/PROh9+pNgutVrn0tMKQ6u/36xHIjagTcE8CRca6L8= -----END CERTIFICATE-----Generated at Fri Oct 24 19:21:55 2025 by rpki-client