$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WvFqnOzhgoAniG9AGqY1CsICyGo.roa File: WvFqnOzhgoAniG9AGqY1CsICyGo.roa (raw, json) Hash identifier: tKuxsD7NyQ3MWSvJaW7GyNe+yvCDaR7uW3cM21TSTxc= Subject key identifier: 5A:F1:6A:9C:EC:E1:82:80:27:88:6F:40:1A:A6:35:0A:C2:02:C8:6A Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3A59 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WvFqnOzhgoAniG9AGqY1CsICyGo.roa Signing time: Fri 22 Aug 2025 08:47:16 +0000 ROA not before: Fri 22 Aug 2025 08:47:16 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 180.176.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14937 (0x3a59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:16 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=5AF16A9CECE1828027886F401AA6350AC202C86A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d8:ac:b3:af:c7:81:75:44:00:1d:e7:6a:57: 11:a5:82:7a:84:d6:c5:d0:7a:b0:a8:b4:1f:11:ea: 8f:c2:38:96:11:6d:59:3c:b1:ad:e0:b9:de:c8:27: 56:0a:10:c6:49:0e:bb:8a:cb:dc:e6:79:3c:64:a3: d3:cb:2c:73:71:bb:d2:08:c4:7a:3d:ed:aa:0a:f8: fa:cb:19:8f:d3:5a:cb:2f:bd:86:0b:5b:98:13:68: 35:e9:0b:6a:8d:5e:40:6a:06:fa:09:9f:62:01:1a: 12:00:cc:48:fe:25:b8:e7:a7:9f:f2:99:b5:74:8e: 49:f1:de:7b:c6:1d:e2:3e:e4:20:44:5d:ac:92:9a: 4b:fd:37:b7:c9:1c:87:58:f4:85:2f:53:36:da:fb: eb:09:f4:3d:d2:37:2e:c1:96:78:02:c3:ee:00:69: f1:51:69:4e:41:82:7b:c7:04:4b:26:9f:ee:0f:96: 81:f2:b9:c3:60:ca:bc:34:95:51:5b:c0:9e:c8:c2: 78:83:c3:cf:52:87:23:72:b5:98:6b:06:44:41:f4: 08:6c:6e:4b:51:91:19:94:c5:f9:64:f6:50:6c:0e: 6c:26:81:d3:47:32:d9:6d:ae:aa:14:94:56:84:4d: 7b:c7:c7:f3:dd:8c:b8:bd:00:a1:9b:91:db:86:54: d4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:F1:6A:9C:EC:E1:82:80:27:88:6F:40:1A:A6:35:0A:C2:02:C8:6A X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WvFqnOzhgoAniG9AGqY1CsICyGo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.128.0/21 Signature Algorithm: sha256WithRSAEncryption 4a:d7:0a:90:b5:50:16:4d:bd:ec:b1:7c:8e:42:93:c8:c9:2e: 66:bd:f4:5f:7e:25:1f:ab:2d:df:07:a7:33:cd:61:9b:09:f6: f0:b1:5d:72:bf:23:fa:1b:63:25:dd:1a:4a:fd:cb:b8:18:c3: d5:4e:fa:b1:3a:30:87:df:b7:b9:a8:1c:c5:e1:ec:14:5c:22: 2e:d9:ea:ad:f7:71:cb:69:96:ad:af:ab:f1:d3:c2:fd:54:d6: 0f:9e:29:32:1e:0d:1e:11:27:d8:8c:ff:b5:f4:f6:a4:aa:0a: 58:4e:a9:3d:10:64:20:ae:d0:ab:d5:6f:9c:cc:ee:18:39:1e: 8d:88:45:63:81:23:af:e6:d1:72:4b:f8:96:b2:e1:23:df:12: 8d:e3:28:8d:9c:51:5a:17:20:25:6d:44:4a:d4:b0:9f:a4:62: 59:80:2e:7a:3e:45:00:76:60:da:34:84:e9:f1:e0:fb:b6:fb: a3:11:2d:ad:03:8f:51:9a:10:2b:07:2b:1f:64:00:23:be:bb: 26:b3:44:9e:a0:8d:b7:9b:7f:3c:91:11:08:26:69:23:a9:92: 80:27:65:e3:a4:66:bd:49:b1:5c:2f:c7:16:e2:58:f9:12:eb: 0d:61:d2:00:91:ad:25:c4:6d:f3:43:48:b6:f4:23:e1:dd:2e: e8:d9:f5:8d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOlkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3MTZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDVBRjE2QTlDRUNFMTgy ODAyNzg4NkY0MDFBQTYzNTBBQzIwMkM4NkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC42Kyzr8eBdUQAHedqVxGlgnqE1sXQerCotB8R6o/COJYRbVk8 sa3gud7IJ1YKEMZJDruKy9zmeTxko9PLLHNxu9IIxHo97aoK+PrLGY/TWssvvYYL W5gTaDXpC2qNXkBqBvoJn2IBGhIAzEj+Jbjnp5/ymbV0jknx3nvGHeI+5CBEXayS mkv9N7fJHIdY9IUvUzba++sJ9D3SNy7BlngCw+4AafFRaU5BgnvHBEsmn+4PloHy ucNgyrw0lVFbwJ7IwniDw89ShyNytZhrBkRB9AhsbktRkRmUxflk9lBsDmwmgdNH MtltrqoUlFaETXvHx/PdjLi9AKGbkduGVNT9AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUWvFqnOzhgoAniG9AGqY1CsICyGowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1d2RnFuT3poZ29BbmlHOUFH cVkxQ3NJQ3lHby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 sIAwDQYJKoZIhvcNAQELBQADggEBAErXCpC1UBZNveyxfI5Ck8jJLma99F9+JR+r Ld8HpzPNYZsJ9vCxXXK/I/obYyXdGkr9y7gYw9VO+rE6MIfft7moHMXh7BRcIi7Z 6q33cctplq2vq/HTwv1U1g+eKTIeDR4RJ9iM/7X09qSqClhOqT0QZCCu0KvVb5zM 7hg5Ho2IRWOBI6/m0XJL+Jay4SPfEo3jKI2cUVoXICVtRErUsJ+kYlmALno+RQB2 YNo0hOnx4Pu2+6MRLa0Dj1GaECsHKx9kACO+uyazRJ6gjbebfzyREQgmaSOpkoAn ZeOkZr1JsVwvxxbiWPkS6w1h0gCRrSXEbfNDSLb0I+HdLujZ9Y0= -----END CERTIFICATE-----Generated at Fri Oct 24 19:25:04 2025 by rpki-client