$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WarsZFNM177vv2fQpWfJy7uo-xs.roa File: WarsZFNM177vv2fQpWfJy7uo-xs.roa (raw, json) Hash identifier: 1K0FkB48rNGiryV+DS4lScONewV1C+cu1kzVqOrZrd4= Subject key identifier: 59:AA:EC:64:53:4C:D7:BE:EF:BF:67:D0:A5:67:C9:CB:BB:A8:FB:1B Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 38F5 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WarsZFNM177vv2fQpWfJy7uo-xs.roa Signing time: Fri 22 Aug 2025 08:45:48 +0000 ROA not before: Fri 22 Aug 2025 08:45:48 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 118.232.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14581 (0x38f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:48 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=59AAEC64534CD7BEEFBF67D0A567C9CBBBA8FB1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:5a:ca:89:2b:12:12:2a:9a:50:07:17:ad:50: b9:3e:7f:33:a3:d9:11:b7:71:f0:2f:7e:3b:35:ba: e6:d5:21:a4:96:74:07:76:7a:7c:df:7a:50:0c:fb: e4:c8:a5:da:09:79:9f:66:74:6c:4a:71:ed:c9:4c: d8:40:7a:6b:f3:da:1c:ff:ba:d5:2f:c0:b5:db:5f: 3a:18:72:bb:c0:a6:a3:86:a6:a3:2f:aa:67:dd:c9: 62:22:cc:3f:41:7f:3f:e1:44:bb:5f:88:3f:f8:50: 4d:a2:d7:61:bc:2d:4d:13:be:e6:f8:73:68:61:2d: f8:7d:2b:ff:85:a5:0f:cb:a2:19:2f:e4:6e:2b:ee: 09:3c:c2:fe:b1:4b:a1:db:fb:70:5f:1e:a9:cc:0a: 8e:f7:46:6c:a5:41:61:62:53:53:25:d8:38:df:4c: 89:53:1d:5b:69:0b:f4:48:33:af:3a:a5:2f:0a:80: 21:ad:b2:aa:cd:93:e4:56:55:79:c0:b1:58:3c:e7: 18:65:99:4c:99:2f:b9:04:41:19:a6:e8:84:03:8c: 9e:21:f2:60:87:97:1e:b1:79:bf:6a:46:57:e1:44: 73:5c:c0:84:e2:f7:d3:b2:5a:41:80:ec:5d:97:aa: be:4d:09:45:64:b7:d4:bd:06:b2:9f:67:66:ce:4d: d1:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:AA:EC:64:53:4C:D7:BE:EF:BF:67:D0:A5:67:C9:CB:BB:A8:FB:1B X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WarsZFNM177vv2fQpWfJy7uo-xs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.144.0/21 Signature Algorithm: sha256WithRSAEncryption 0d:27:ba:4b:0b:4f:b4:56:c5:f3:17:5a:74:48:e3:a1:de:4e: 8e:e0:5e:0d:bf:68:2a:7c:b1:81:1f:9d:be:ad:11:18:ee:a0: 3a:b2:3a:cb:a9:04:51:fb:b5:1c:9a:47:a0:61:3e:3f:6e:86: 4c:fa:ac:9a:21:38:5b:ee:6c:a0:0e:3b:b6:cd:42:60:bf:65: 2c:57:a7:ea:e2:5b:91:03:1d:2f:3a:c0:21:b8:6b:fe:00:69: 16:5d:cb:ee:2d:31:94:78:11:1c:52:20:02:35:1b:d4:8a:e3: b2:e0:25:85:79:33:e5:6c:5b:43:67:7e:b2:34:bf:a3:3a:8f: a8:e9:d7:5a:92:01:cf:e7:2d:0f:98:b2:51:bc:73:dc:3f:80: f9:c4:ec:f1:68:cf:ca:39:58:ce:92:43:da:fa:4f:0a:c3:3f: 57:74:38:e3:a7:28:3d:dd:16:28:c5:84:6a:7c:8b:de:8f:7d: 5b:27:bb:20:a0:ca:2d:2b:a2:d2:95:81:be:f3:62:d8:29:73: 9e:1d:f9:b6:e4:60:2a:93:62:0f:f4:e7:44:b4:64:5c:1f:c4: 9d:03:94:c0:be:2f:00:51:b7:27:c9:87:c6:38:89:66:74:ed: 7c:bc:fc:cf:0d:5a:99:1c:90:94:22:69:ef:42:ea:11:b9:93: 47:2a:5e:1a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOPUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1NDhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDU5QUFFQzY0NTM0Q0Q3 QkVFRkJGNjdEMEE1NjdDOUNCQkJBOEZCMUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDyWsqJKxISKppQBxetULk+fzOj2RG3cfAvfjs1uubVIaSWdAd2 enzfelAM++TIpdoJeZ9mdGxKce3JTNhAemvz2hz/utUvwLXbXzoYcrvApqOGpqMv qmfdyWIizD9Bfz/hRLtfiD/4UE2i12G8LU0Tvub4c2hhLfh9K/+FpQ/Lohkv5G4r 7gk8wv6xS6Hb+3BfHqnMCo73RmylQWFiU1Ml2DjfTIlTHVtpC/RIM686pS8KgCGt sqrNk+RWVXnAsVg85xhlmUyZL7kEQRmm6IQDjJ4h8mCHlx6xeb9qRlfhRHNcwITi 99OyWkGA7F2Xqr5NCUVkt9S9BrKfZ2bOTdGrAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUWarsZFNM177vv2fQpWfJy7uo+xswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1dhcnNaRk5NMTc3dnYyZlFw V2ZKeTd1by14cy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2 6JAwDQYJKoZIhvcNAQELBQADggEBAA0nuksLT7RWxfMXWnRI46HeTo7gXg2/aCp8 sYEfnb6tERjuoDqyOsupBFH7tRyaR6BhPj9uhkz6rJohOFvubKAOO7bNQmC/ZSxX p+riW5EDHS86wCG4a/4AaRZdy+4tMZR4ERxSIAI1G9SK47LgJYV5M+VsW0NnfrI0 v6M6j6jp11qSAc/nLQ+YslG8c9w/gPnE7PFoz8o5WM6SQ9r6TwrDP1d0OOOnKD3d FijFhGp8i96PfVsnuyCgyi0rotKVgb7zYtgpc54d+bbkYCqTYg/050S0ZFwfxJ0D lMC+LwBRtyfJh8Y4iWZ07Xy8/M8NWpkckJQiae9C6hG5k0cqXho= -----END CERTIFICATE-----Generated at Fri Oct 24 19:24:37 2025 by rpki-client