$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XFpEX1V_QA5JPWfEQPl9-6RofMA.roa File: XFpEX1V_QA5JPWfEQPl9-6RofMA.roa (raw, json) Hash identifier: ZuDedK5wOXdeWa4OeVHO4Urte+TnDsbxH5sANSDG1nA= Subject key identifier: 5C:5A:44:5F:55:7F:40:0E:49:3D:67:C4:40:F9:7D:FB:A4:68:7C:C0 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 387E Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XFpEX1V_QA5JPWfEQPl9-6RofMA.roa Signing time: Fri 22 Aug 2025 08:45:21 +0000 ROA not before: Fri 22 Aug 2025 08:45:21 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 180.176.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14462 (0x387e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:21 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=5C5A445F557F400E493D67C440F97DFBA4687CC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:84:6d:a6:7d:83:40:96:8c:b6:a0:0b:6a:92: 66:da:bd:de:f4:f3:4b:af:97:6d:a4:d9:d6:ed:b6: 6f:88:e1:5a:22:64:73:3d:8f:7f:49:9d:a9:5d:3b: 4d:d6:ed:b5:9e:e6:ad:7f:8b:9f:b1:b6:bc:ae:a5: e0:88:79:b3:11:fd:fd:5c:ee:39:5e:08:72:86:56: e0:40:4f:db:49:95:be:d8:31:52:6b:15:56:9a:0f: 0e:31:b4:90:62:f9:39:bb:67:a6:99:f9:7c:d0:82: f9:62:fb:f9:80:c0:37:e0:8e:a4:b6:ab:1d:39:c8: 34:85:27:8b:e2:78:4c:f2:41:fa:3e:7c:21:d4:a8: ba:2d:3e:a5:69:81:28:66:15:20:6d:4c:dd:9a:c7: 86:cb:00:55:61:97:4a:67:e0:f3:ca:f2:3e:c5:a5: 0e:90:6c:7e:ce:b9:67:7e:7a:23:20:15:a4:47:7c: d0:5c:e3:29:99:7f:90:60:e0:9a:30:fc:39:d7:c8: 2d:82:e9:4b:06:48:2f:98:f3:0d:61:b2:00:53:a4: f5:e8:c5:99:d8:ef:01:5a:c4:5f:e7:0c:17:63:23: 7e:45:e1:63:c4:19:0f:2c:93:b5:0e:93:78:1d:3c: da:1b:23:7f:2b:6a:83:46:2e:03:2e:aa:35:c9:3b: d0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:5A:44:5F:55:7F:40:0E:49:3D:67:C4:40:F9:7D:FB:A4:68:7C:C0 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XFpEX1V_QA5JPWfEQPl9-6RofMA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.200.0/21 Signature Algorithm: sha256WithRSAEncryption 05:ef:89:ee:08:2f:01:b1:71:b1:fc:6f:c4:67:d3:81:dc:bc: 3e:47:54:14:2c:44:08:3f:a4:c1:1d:e4:76:40:ce:8c:72:65: 1c:bb:6e:c3:86:4e:3d:df:72:0f:02:e8:37:9e:a6:4e:2c:14: 04:a2:95:32:d2:45:fe:49:1e:35:7d:ad:e6:9e:83:eb:8e:36: 3c:61:22:3f:c3:d4:3f:57:5d:02:bc:75:02:0a:65:c6:aa:c3: cb:8b:03:7d:0f:b9:fa:db:59:6f:89:74:aa:d8:65:39:a8:6b: 8a:9d:d4:b2:2f:aa:a3:21:15:eb:e1:fc:18:b4:bb:b6:0d:f8: 7c:a5:78:8a:71:bb:bb:6d:6c:bf:ac:cc:53:b8:63:be:02:a0: 2b:74:3f:65:16:12:9e:0a:f6:9d:98:71:bb:a9:88:fe:ad:81: a6:25:85:6a:8b:33:3b:b0:f2:8a:b6:be:aa:d7:57:a4:9f:6a: bc:45:71:16:af:f3:35:22:4a:82:c5:a0:5c:ae:17:f9:5b:f0: 9b:cf:2c:e3:8e:e0:b4:03:89:f7:59:99:3e:24:1a:68:93:fd: 66:00:ba:a2:d7:cd:59:a4:b9:a5:1f:ce:99:ac:92:2b:0c:92: b1:dd:7e:7a:1c:64:ce:d2:e5:94:a5:58:e2:55:de:cb:67:36: 2e:cb:ed:e0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOH4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1MjFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDVDNUE0NDVGNTU3RjQw MEU0OTNENjdDNDQwRjk3REZCQTQ2ODdDQzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwhG2mfYNAloy2oAtqkmbavd7080uvl22k2dbttm+I4VoiZHM9 j39JnaldO03W7bWe5q1/i5+xtryupeCIebMR/f1c7jleCHKGVuBAT9tJlb7YMVJr FVaaDw4xtJBi+Tm7Z6aZ+XzQgvli+/mAwDfgjqS2qx05yDSFJ4vieEzyQfo+fCHU qLotPqVpgShmFSBtTN2ax4bLAFVhl0pn4PPK8j7FpQ6QbH7OuWd+eiMgFaRHfNBc 4ymZf5Bg4Jow/DnXyC2C6UsGSC+Y8w1hsgBTpPXoxZnY7wFaxF/nDBdjI35F4WPE GQ8sk7UOk3gdPNobI38raoNGLgMuqjXJO9A/AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUXFpEX1V/QA5JPWfEQPl9+6RofMAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1hGcEVYMVZfUUE1SlBXZkVR UGw5LTZSb2ZNQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 sMgwDQYJKoZIhvcNAQELBQADggEBAAXvie4ILwGxcbH8b8Rn04HcvD5HVBQsRAg/ pMEd5HZAzoxyZRy7bsOGTj3fcg8C6Deepk4sFASilTLSRf5JHjV9reaeg+uONjxh Ij/D1D9XXQK8dQIKZcaqw8uLA30PufrbWW+JdKrYZTmoa4qd1LIvqqMhFevh/Bi0 u7YN+HyleIpxu7ttbL+szFO4Y74CoCt0P2UWEp4K9p2YcbupiP6tgaYlhWqLMzuw 8oq2vqrXV6SfarxFcRav8zUiSoLFoFyuF/lb8JvPLOOO4LQDifdZmT4kGmiT/WYA uqLXzVmkuaUfzpmskisMkrHdfnocZM7S5ZSlWOJV3stnNi7L7eA= -----END CERTIFICATE-----Generated at Fri Oct 24 19:27:45 2025 by rpki-client