$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cDDlI3YDKvrbkCXMcQkDPX0rDhA.roa File: cDDlI3YDKvrbkCXMcQkDPX0rDhA.roa (raw, json) Hash identifier: xmQ2t3f4FBjBckMan4VGVn+VMv0zL2IP6ms7CCtnxj0= Subject key identifier: 70:30:E5:23:76:03:2A:FA:DB:90:25:CC:71:09:03:3D:7D:2B:0E:10 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 38FA Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cDDlI3YDKvrbkCXMcQkDPX0rDhA.roa Signing time: Fri 22 Aug 2025 08:45:49 +0000 ROA not before: Fri 22 Aug 2025 08:45:49 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 211.76.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14586 (0x38fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:49 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=7030E52376032AFADB9025CC7109033D7D2B0E10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:44:3c:d1:23:e9:70:c4:ea:e0:a9:86:e8:da: 24:db:7f:82:93:05:2c:90:ae:43:88:38:d5:91:c7: 02:43:2a:4c:9a:cb:c6:d4:8e:4e:21:f2:86:e1:b8: e1:a9:58:5e:8e:18:9f:06:2d:cc:30:04:13:39:bb: 47:f1:d5:c7:b5:4e:c3:40:e1:a8:da:a1:ef:76:11: 1f:14:69:32:f1:9f:75:a1:38:70:91:1e:47:8b:1d: c8:64:ba:22:6e:65:ed:ab:e3:ab:36:5c:a2:3d:d4: 0f:cc:ca:cf:97:29:62:5d:e6:eb:bd:e6:30:8d:01: f9:4a:76:5f:c5:bd:be:79:6c:bb:c2:02:76:0d:2a: ba:c7:da:59:43:31:01:a7:ea:0f:92:e3:af:4c:5d: a1:be:fe:d8:70:a6:a2:46:90:5c:df:a2:04:01:86: 77:31:4d:ad:70:f4:04:30:06:d0:87:b1:7e:90:6b: 79:9f:a3:4b:0d:7e:43:9a:92:cf:73:fb:ce:e2:70: ca:9e:b8:6b:5b:30:e3:f0:da:42:32:7d:9c:f7:31: 43:46:ad:0b:58:6b:1a:b7:bb:4b:f8:12:9d:b1:6c: ad:01:7f:53:ed:e3:fa:7c:22:aa:ba:e5:0f:86:ff: 84:af:b8:89:a9:a1:d7:5a:3a:0a:a8:ae:3d:41:b4: 4f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:30:E5:23:76:03:2A:FA:DB:90:25:CC:71:09:03:3D:7D:2B:0E:10 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cDDlI3YDKvrbkCXMcQkDPX0rDhA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.118.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:38:ed:49:27:47:09:44:fc:b9:67:2b:b6:af:55:75:f9:61: 0f:44:15:28:ff:33:bb:8e:94:d5:22:e8:fb:c1:63:b1:01:36: af:1d:ed:1d:35:70:78:8a:d2:f8:fe:fd:70:9e:bd:90:86:cf: 33:ab:18:16:76:e3:15:91:a6:3f:e6:92:b2:f4:98:f2:87:f8: 15:2d:21:23:1f:3e:ec:cf:f3:5e:f6:f2:9f:5c:74:eb:24:b2: 8c:eb:22:1c:6f:39:ec:89:3c:b6:87:a1:bb:9b:9e:63:72:90: 92:75:6a:99:a9:26:32:ce:0a:b2:a5:97:d8:34:f6:6c:2c:40: 2b:64:cd:39:76:03:ad:df:f5:9f:2c:fe:5a:d9:25:3e:6f:3f: be:d8:af:69:35:a5:fa:ec:fc:43:75:79:cd:e3:c5:f4:fa:47: ff:39:10:d3:bf:a1:99:5d:fe:56:bb:f4:61:ea:9c:8e:c5:b3: d8:3b:05:e1:a4:d0:91:74:31:9f:a1:de:9c:a8:92:cc:b9:a6: ef:04:7b:af:d6:0b:36:61:45:f1:26:20:bd:59:c8:f7:38:47: d4:ef:c4:3b:32:70:15:37:4d:b6:3b:7c:50:6f:d3:46:32:28: 98:db:4f:82:99:d7:df:d2:a9:2a:d6:e3:06:02:45:26:95:6d: b1:f3:fc:66 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOPowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1NDlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDcwMzBFNTIzNzYwMzJB RkFEQjkwMjVDQzcxMDkwMzNEN0QyQjBFMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDaRDzRI+lwxOrgqYbo2iTbf4KTBSyQrkOIONWRxwJDKkyay8bU jk4h8obhuOGpWF6OGJ8GLcwwBBM5u0fx1ce1TsNA4ajaoe92ER8UaTLxn3WhOHCR HkeLHchkuiJuZe2r46s2XKI91A/Mys+XKWJd5uu95jCNAflKdl/Fvb55bLvCAnYN KrrH2llDMQGn6g+S469MXaG+/thwpqJGkFzfogQBhncxTa1w9AQwBtCHsX6Qa3mf o0sNfkOaks9z+87icMqeuGtbMOPw2kIyfZz3MUNGrQtYaxq3u0v4Ep2xbK0Bf1Pt 4/p8Iqq65Q+G/4SvuImpoddaOgqorj1BtE9vAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUcDDlI3YDKvrbkCXMcQkDPX0rDhAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2NERGxJM1lES3ZyYmtDWE1j UWtEUFgwckRoQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADT THYwDQYJKoZIhvcNAQELBQADggEBAC047UknRwlE/LlnK7avVXX5YQ9EFSj/M7uO lNUi6PvBY7EBNq8d7R01cHiK0vj+/XCevZCGzzOrGBZ24xWRpj/mkrL0mPKH+BUt ISMfPuzP81728p9cdOsksozrIhxvOeyJPLaHobubnmNykJJ1apmpJjLOCrKll9g0 9mwsQCtkzTl2A63f9Z8s/lrZJT5vP77Yr2k1pfrs/EN1ec3jxfT6R/85ENO/oZld /la79GHqnI7Fs9g7BeGk0JF0MZ+h3pyoksy5pu8Ee6/WCzZhRfEmIL1ZyPc4R9Tv xDsycBU3TbY7fFBv00YyKJjbT4KZ19/SqSrW4wYCRSaVbbHz/GY= -----END CERTIFICATE-----Generated at Fri Oct 24 19:21:26 2025 by rpki-client