$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ws_NjdmTXwP2R4uH8RgtACUZO3c.roa File: Ws_NjdmTXwP2R4uH8RgtACUZO3c.roa (raw, json) Hash identifier: NBPZAD5riq2MqSecfGnfsKxRYwNXp5IiRDdK2ug9KF4= Subject key identifier: 5A:CF:CD:8D:D9:93:5F:03:F6:47:8B:87:F1:18:2D:00:25:19:3B:77 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 38C3 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ws_NjdmTXwP2R4uH8RgtACUZO3c.roa Signing time: Fri 22 Aug 2025 08:45:36 +0000 ROA not before: Fri 22 Aug 2025 08:45:36 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 180.177.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14531 (0x38c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:36 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=5ACFCD8DD9935F03F6478B87F1182D0025193B77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b6:ac:9e:93:38:8d:09:a3:60:34:50:b1:4a: 60:3d:c6:ce:eb:ed:a0:19:b9:74:62:8c:9a:a3:ff: ae:97:63:cb:3c:91:22:ba:d3:9f:7d:70:a6:50:70: b7:19:c9:df:b1:06:ef:0c:5b:26:2d:89:14:40:75: cb:48:e0:05:34:ea:15:b8:a4:b9:8b:d8:a1:f7:3c: 0d:b9:38:d6:11:15:58:2f:2e:c7:54:87:c7:a9:dd: ae:cf:81:6f:f3:2d:c2:62:4d:ef:05:93:dd:3f:48: 21:b7:32:a2:c4:ee:80:82:a7:95:70:4e:eb:65:c2: 4a:44:06:37:6c:9c:28:ec:34:c5:ef:3c:0f:59:c7: 8c:95:e1:4b:fb:76:db:19:8c:b0:ef:0c:2a:45:7d: 11:1f:1b:0a:93:b0:16:29:af:cc:3f:13:ae:22:4c: 68:d6:fd:2d:1c:2e:43:1a:37:87:35:0e:99:eb:a2: fe:15:87:e2:d0:e6:a0:b4:f5:3e:e5:b5:c4:2c:7d: e0:79:ca:be:2a:d3:34:d8:5d:4b:46:0d:30:75:c4: fb:04:07:bb:7f:73:ac:6f:c0:2c:d6:15:02:ba:f9: fb:95:80:06:55:ad:f3:f2:a7:08:35:4b:f3:fc:f3: b9:0a:54:40:b6:d5:ae:de:96:5f:83:5f:d4:0c:41: 0f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:CF:CD:8D:D9:93:5F:03:F6:47:8B:87:F1:18:2D:00:25:19:3B:77 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ws_NjdmTXwP2R4uH8RgtACUZO3c.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.228.0/23 Signature Algorithm: sha256WithRSAEncryption 7b:98:43:05:59:b7:41:80:a9:18:11:ca:1e:f5:83:88:ce:a0: e2:d3:a0:6e:c8:f2:d3:d8:16:44:ba:97:3a:c9:80:c4:45:86: 3b:fc:99:ed:cb:d0:b8:e6:36:21:1e:36:4a:83:30:06:3d:93: d7:30:58:93:c3:be:2a:65:a5:fb:2c:c0:5c:37:bd:95:c7:1a: f4:0b:eb:4f:32:dc:25:24:c8:f6:a7:96:34:14:39:e0:39:9d: b0:92:67:9f:74:dd:7f:47:68:19:30:b2:5f:d9:8f:15:22:6d: 86:29:63:15:8f:54:25:0b:ef:5d:19:fb:29:93:6c:11:51:e2: ca:4e:cb:46:bf:a0:be:45:79:bb:be:1f:f3:ce:08:0b:42:a6: ae:16:c5:ad:e3:f2:18:3c:4e:1f:8a:80:75:31:65:0b:42:03: 76:5e:88:24:64:7a:04:74:5b:12:4b:77:45:db:10:c5:c7:e9: d2:51:6a:20:a3:81:26:43:63:0c:48:b0:dc:53:c5:40:b1:c7: 0b:38:f9:a6:6b:fd:8c:8c:14:34:c0:ae:1b:2d:d6:3c:9b:69: 12:1d:01:28:f7:a1:10:af:ab:a7:0e:aa:5c:03:89:e6:4d:98: 32:e0:95:f7:f6:e9:95:89:ef:d0:60:93:50:05:45:a2:ff:25: b3:ad:9b:89 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOMMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1MzZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDVBQ0ZDRDhERDk5MzVG MDNGNjQ3OEI4N0YxMTgyRDAwMjUxOTNCNzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDItqyekziNCaNgNFCxSmA9xs7r7aAZuXRijJqj/66XY8s8kSK6 0599cKZQcLcZyd+xBu8MWyYtiRRAdctI4AU06hW4pLmL2KH3PA25ONYRFVgvLsdU h8ep3a7PgW/zLcJiTe8Fk90/SCG3MqLE7oCCp5VwTutlwkpEBjdsnCjsNMXvPA9Z x4yV4Uv7dtsZjLDvDCpFfREfGwqTsBYpr8w/E64iTGjW/S0cLkMaN4c1Dpnrov4V h+LQ5qC09T7ltcQsfeB5yr4q0zTYXUtGDTB1xPsEB7t/c6xvwCzWFQK6+fuVgAZV rfPypwg1S/P887kKVEC21a7ell+DX9QMQQ/HAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUWs/NjdmTXwP2R4uH8RgtACUZO3cwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1dzX05qZG1UWHdQMlI0dUg4 Umd0QUNVWk8zYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG0 seQwDQYJKoZIhvcNAQELBQADggEBAHuYQwVZt0GAqRgRyh71g4jOoOLToG7I8tPY FkS6lzrJgMRFhjv8me3L0LjmNiEeNkqDMAY9k9cwWJPDviplpfsswFw3vZXHGvQL 608y3CUkyPanljQUOeA5nbCSZ5903X9HaBkwsl/ZjxUibYYpYxWPVCUL710Z+ymT bBFR4spOy0a/oL5Febu+H/POCAtCpq4Wxa3j8hg8Th+KgHUxZQtCA3ZeiCRkegR0 WxJLd0XbEMXH6dJRaiCjgSZDYwxIsNxTxUCxxws4+aZr/YyMFDTArhst1jybaRId ASj3oRCvq6cOqlwDieZNmDLglff26ZWJ79Bgk1AFRaL/JbOtm4k= -----END CERTIFICATE-----Generated at Fri Oct 24 19:25:06 2025 by rpki-client