$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aPi7nJFcnhwRmO_Te5-7Zl5MNu0.roa File: aPi7nJFcnhwRmO_Te5-7Zl5MNu0.roa (raw, json) Hash identifier: EPJuA3kunfNi8bsGEqEtv8JudrYAv0pPo9snZkVZNFU= Subject key identifier: 68:F8:BB:9C:91:5C:9E:1C:11:98:EF:D3:7B:9F:BB:66:5E:4C:36:ED Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3B17 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aPi7nJFcnhwRmO_Te5-7Zl5MNu0.roa Signing time: Fri 22 Aug 2025 08:48:03 +0000 ROA not before: Fri 22 Aug 2025 08:48:03 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 180.177.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15127 (0x3b17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:48:03 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=68F8BB9C915C9E1C1198EFD37B9FBB665E4C36ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:aa:ef:75:8c:2e:60:1d:f6:42:6b:ca:6a:29: ff:b6:00:a2:88:51:11:19:9a:d9:c7:e0:7c:3b:35: 86:17:67:a1:b1:67:c0:ac:02:b5:bc:a0:1d:ba:0c: f9:99:02:a2:ca:11:6d:25:19:f3:aa:2f:5f:28:d9: 8d:61:cc:3f:56:a6:ab:1c:85:b0:ea:55:ca:3d:88: b8:1f:7a:78:e3:99:ca:8d:37:54:cf:bc:d2:ad:30: 04:16:9f:bf:3e:21:38:f9:20:5b:63:6a:a0:b3:b4: 2e:bc:25:d1:71:f4:ce:f9:74:12:c7:7b:b3:cb:ce: 45:62:4c:cb:c6:75:fa:95:dc:3f:d1:96:65:91:e2: 80:e7:dd:63:9c:28:ad:67:80:1c:8b:52:12:31:df: 5f:dc:09:50:ee:e5:6c:16:12:c9:37:3f:07:eb:30: 70:a2:2c:67:6b:ee:cd:f4:79:d3:52:24:cd:a9:ac: 87:41:4e:4e:f0:42:50:cc:e4:b6:8d:58:9c:02:c9: 1e:9f:ec:b5:84:53:c5:d8:e7:04:8a:ce:d5:8f:58: 4d:24:54:63:81:2f:83:b5:94:e3:af:99:ed:56:21: a6:f6:6d:b5:1c:bf:d2:fd:19:99:42:51:cd:6f:47: 63:60:b5:88:d7:c1:3d:ad:d1:ef:3a:7e:01:65:99: d1:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F8:BB:9C:91:5C:9E:1C:11:98:EF:D3:7B:9F:BB:66:5E:4C:36:ED X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aPi7nJFcnhwRmO_Te5-7Zl5MNu0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.96.0/21 Signature Algorithm: sha256WithRSAEncryption 73:98:11:d9:f3:4b:ea:d4:61:38:12:46:9f:bf:8c:2e:c8:63: b0:fc:cc:19:53:55:98:5a:0b:90:82:a7:a0:9d:3d:34:21:0d: cf:15:f2:6e:be:d9:cf:16:91:5f:5d:18:24:e9:5a:c3:13:62: cf:81:3a:01:4b:7c:10:32:3c:84:3f:53:84:59:15:9b:44:a9: 73:7b:2c:ba:a0:30:2e:18:64:06:76:2b:d0:39:a5:77:1d:82: f0:1b:27:78:a3:ab:8d:cc:88:d6:84:b0:86:76:6b:f0:50:86: 4c:a4:4f:db:e9:e7:cb:a5:ee:93:fb:fa:b4:a2:e6:ee:6c:63: 8b:68:9a:68:a9:16:81:da:42:e7:df:1b:f0:14:27:70:f5:0b: 15:94:15:e0:b0:5f:2a:9f:4b:ea:eb:d7:9b:15:c1:93:35:04: bd:7e:1b:af:85:7d:08:03:86:6d:66:85:de:15:d1:80:60:ad: e9:c8:f9:a4:4f:85:0b:df:ad:29:20:28:9f:6c:ad:3e:9f:43: 02:5a:b9:38:77:d6:89:08:e6:ec:af:c9:19:3a:fc:9e:27:3d: e3:11:d7:7a:5b:e8:cb:bc:7f:f7:da:87:b7:81:32:5b:da:2d: 65:fd:9e:78:a2:72:80:51:ed:c0:64:2a:a2:f4:d4:66:b0:57: 98:47:2e:37 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOxcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ4MDNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDY4RjhCQjlDOTE1QzlF MUMxMTk4RUZEMzdCOUZCQjY2NUU0QzM2RUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDhqu91jC5gHfZCa8pqKf+2AKKIUREZmtnH4Hw7NYYXZ6GxZ8Cs ArW8oB26DPmZAqLKEW0lGfOqL18o2Y1hzD9WpqschbDqVco9iLgfenjjmcqNN1TP vNKtMAQWn78+ITj5IFtjaqCztC68JdFx9M75dBLHe7PLzkViTMvGdfqV3D/RlmWR 4oDn3WOcKK1ngByLUhIx31/cCVDu5WwWEsk3PwfrMHCiLGdr7s30edNSJM2prIdB Tk7wQlDM5LaNWJwCyR6f7LWEU8XY5wSKztWPWE0kVGOBL4O1lOOvme1WIab2bbUc v9L9GZlCUc1vR2NgtYjXwT2t0e86fgFlmdElAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUaPi7nJFcnhwRmO/Te5+7Zl5MNu0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2FQaTduSkZjbmh3Um1PX1Rl NS03Wmw1TU51MC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 sWAwDQYJKoZIhvcNAQELBQADggEBAHOYEdnzS+rUYTgSRp+/jC7IY7D8zBlTVZha C5CCp6CdPTQhDc8V8m6+2c8WkV9dGCTpWsMTYs+BOgFLfBAyPIQ/U4RZFZtEqXN7 LLqgMC4YZAZ2K9A5pXcdgvAbJ3ijq43MiNaEsIZ2a/BQhkykT9vp58ul7pP7+rSi 5u5sY4tommipFoHaQuffG/AUJ3D1CxWUFeCwXyqfS+rr15sVwZM1BL1+G6+FfQgD hm1mhd4V0YBgrenI+aRPhQvfrSkgKJ9srT6fQwJauTh31okI5uyvyRk6/J4nPeMR 13pb6Mu8f/fah7eBMlvaLWX9nniicoBR7cBkKqL01GawV5hHLjc= -----END CERTIFICATE-----Generated at Fri Oct 24 19:25:06 2025 by rpki-client