$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/X_4k4BlsQBX7ytM9lB_gfs8fDVg.roa File: X_4k4BlsQBX7ytM9lB_gfs8fDVg.roa (raw, json) Hash identifier: ud43v1lijVM3r5rm/KyyKAnPsx4nj4QCkf8x1agEdfA= Subject key identifier: 5F:FE:24:E0:19:6C:40:15:FB:CA:D3:3D:94:1F:E0:7E:CF:1F:0D:58 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 37EE Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/X_4k4BlsQBX7ytM9lB_gfs8fDVg.roa Signing time: Fri 22 Aug 2025 08:44:48 +0000 ROA not before: Fri 22 Aug 2025 08:44:48 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 180.176.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14318 (0x37ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:44:48 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=5FFE24E0196C4015FBCAD33D941FE07ECF1F0D58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:bb:cf:43:9a:5b:4f:e3:aa:0d:2a:87:1a:4f: 43:6f:16:8b:ce:66:76:5a:23:30:33:56:d6:a9:c4: f3:02:04:da:36:3e:e0:0b:6a:64:90:fc:5a:c6:a9: 33:c8:5b:bb:7d:9b:2e:db:49:ee:b4:c5:23:1b:55: 65:2b:f5:55:54:9a:6c:12:62:78:25:cf:22:50:45: f1:30:ec:9e:d9:e2:ec:35:2f:9e:3d:13:28:36:7e: 9e:3e:f4:6b:bd:ba:64:ba:8b:b3:03:3b:59:0b:67: 6a:3f:fd:a4:10:c8:f4:18:e1:20:17:b1:95:9d:ec: 1e:f7:a4:ef:c6:77:dd:cb:77:be:c1:96:b4:3b:c2: a3:97:9b:93:96:8e:ea:1c:42:b6:c3:88:3d:43:b3: 7a:28:43:4b:32:96:e9:4f:2a:27:75:63:da:65:e4: d1:fe:b6:48:c1:d0:f1:c4:70:34:38:c8:d8:de:5e: ac:23:7b:6c:5b:b2:24:44:9d:41:1d:2b:6b:69:78: f7:a1:c9:54:a3:f8:ec:0e:42:30:8c:0d:86:1e:ab: 13:e1:a6:bc:4d:85:39:42:c8:5a:98:cd:d8:00:dc: a1:0c:25:0c:28:6e:e7:7b:f0:27:8b:fa:11:f5:ed: e9:16:29:2a:6f:67:fe:81:e8:3c:37:f3:bd:ee:6c: 59:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:FE:24:E0:19:6C:40:15:FB:CA:D3:3D:94:1F:E0:7E:CF:1F:0D:58 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/X_4k4BlsQBX7ytM9lB_gfs8fDVg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.23.0/24 Signature Algorithm: sha256WithRSAEncryption 80:ad:df:2a:9a:0a:1b:e5:83:16:2a:3e:9e:af:ae:5b:63:d0: a0:88:e7:39:9f:49:1e:8e:db:27:92:8d:1c:2e:04:8a:db:6c: f6:42:fa:b5:5a:0b:a4:3d:03:28:e4:fe:81:63:a0:75:23:4e: 60:3b:fe:94:78:2e:8e:51:04:f9:8c:36:d0:75:8d:ad:56:89: 54:57:c5:f0:36:f6:57:e2:8c:9d:42:2e:99:8f:b5:35:b2:a0: 22:54:df:9d:bf:15:f4:94:1d:67:39:60:db:7c:95:a0:52:61: fe:63:05:4e:3e:04:cf:83:f6:8d:be:cb:77:33:3e:4c:64:91: 19:05:93:5d:fd:4d:00:f0:1f:7d:3e:32:2a:69:40:fc:45:53: 3d:f7:ca:c0:20:69:e5:ec:43:40:f3:f1:1a:b4:d4:ac:98:f8: df:2b:fe:17:7b:76:f1:6c:5f:74:0a:02:97:11:13:87:54:c9: ec:bb:48:04:eb:e4:09:3a:09:4c:5b:7f:93:15:34:b3:7e:db: dd:a9:f8:55:5c:f7:e2:af:83:48:cb:1f:48:5e:22:ec:7a:06: 21:a1:dc:44:3f:6e:80:30:fe:53:7b:a6:f4:fc:dd:bb:e8:b5: d9:d8:b7:64:3f:9b:5b:b7:78:c5:c0:15:5f:d4:a7:b0:8f:23: a7:12:37:41 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICN+4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ0NDhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDVGRkUyNEUwMTk2QzQw MTVGQkNBRDMzRDk0MUZFMDdFQ0YxRjBENTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDcu89DmltP46oNKocaT0NvFovOZnZaIzAzVtapxPMCBNo2PuAL amSQ/FrGqTPIW7t9my7bSe60xSMbVWUr9VVUmmwSYnglzyJQRfEw7J7Z4uw1L549 Eyg2fp4+9Gu9umS6i7MDO1kLZ2o//aQQyPQY4SAXsZWd7B73pO/Gd93Ld77BlrQ7 wqOXm5OWjuocQrbDiD1Ds3ooQ0sylulPKid1Y9pl5NH+tkjB0PHEcDQ4yNjeXqwj e2xbsiREnUEdK2tpePehyVSj+OwOQjCMDYYeqxPhprxNhTlCyFqYzdgA3KEMJQwo bud78CeL+hH17ekWKSpvZ/6B6Dw3873ubFmlAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUX/4k4BlsQBX7ytM9lB/gfs8fDVgwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1hfNGs0QmxzUUJYN3l0TTls Ql9nZnM4ZkRWZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0 sBcwDQYJKoZIhvcNAQELBQADggEBAICt3yqaChvlgxYqPp6vrltj0KCI5zmfSR6O 2yeSjRwuBIrbbPZC+rVaC6Q9Ayjk/oFjoHUjTmA7/pR4Lo5RBPmMNtB1ja1WiVRX xfA29lfijJ1CLpmPtTWyoCJU352/FfSUHWc5YNt8laBSYf5jBU4+BM+D9o2+y3cz PkxkkRkFk139TQDwH30+MippQPxFUz33ysAgaeXsQ0Dz8Rq01KyY+N8r/hd7dvFs X3QKApcRE4dUyey7SATr5Ak6CUxbf5MVNLN+292p+FVc9+Kvg0jLH0heIux6BiGh 3EQ/boAw/lN7pvT83bvotdnYt2Q/m1u3eMXAFV/Up7CPI6cSN0E= -----END CERTIFICATE-----Generated at Fri Oct 24 19:27:25 2025 by rpki-client