$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/d2awcubkDO4e7m1QB-ci1oEUt5M.roa File: d2awcubkDO4e7m1QB-ci1oEUt5M.roa (raw, json) Hash identifier: zIIS8HqR6hz8FvMVpp7eDJMMb40uuWRwJwEoKzKONIk= Subject key identifier: 77:66:B0:72:E6:E4:0C:EE:1E:EE:6D:50:07:E7:22:D6:81:14:B7:93 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3876 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/d2awcubkDO4e7m1QB-ci1oEUt5M.roa Signing time: Fri 22 Aug 2025 08:45:19 +0000 ROA not before: Fri 22 Aug 2025 08:45:19 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 180.176.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14454 (0x3876) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:19 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=7766B072E6E40CEE1EEE6D5007E722D68114B793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f9:2b:f7:cb:1a:0b:07:7e:e4:b2:c5:ce:a1: e4:ff:b3:e2:6e:09:4f:d6:0a:05:c4:ec:a2:d6:4b: 41:87:1c:cc:e8:27:f9:48:b5:c3:31:50:57:51:bf: 99:a9:3f:f0:99:9a:6e:00:ae:e0:33:71:63:d1:b9: fe:4c:ae:12:35:20:19:9b:d1:f8:55:df:bf:e3:00: 63:f7:4d:d8:3e:28:2b:af:9b:3a:c4:5e:07:56:fc: 2d:a7:f1:14:02:44:e4:55:4d:93:2c:84:79:d1:2e: 0d:af:18:7f:83:70:c2:1a:91:e5:38:25:1d:36:c3: 96:80:c4:12:b5:4a:5c:28:c2:00:de:f9:70:d2:4d: 3e:38:83:6d:83:82:c2:55:a5:96:ef:d2:98:2a:e7: 4b:14:ff:7b:91:19:ea:fc:fb:7b:9d:a4:6d:05:41: 6e:6e:54:7a:b8:e6:2b:83:cf:38:37:71:6f:9b:ad: dc:b3:97:19:d1:52:7a:cb:1f:09:12:b8:a4:34:cb: 58:ad:f2:a1:ad:05:44:98:00:73:7c:dd:f9:b5:72: 32:a7:b3:0f:7e:4a:12:68:56:21:35:cc:1f:4c:93: d3:80:30:3d:32:47:f5:cd:89:bd:7c:ec:2c:13:14: 54:14:d0:88:aa:34:a8:eb:c5:b7:f0:88:41:37:4f: 21:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:66:B0:72:E6:E4:0C:EE:1E:EE:6D:50:07:E7:22:D6:81:14:B7:93 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/d2awcubkDO4e7m1QB-ci1oEUt5M.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.208.0/21 Signature Algorithm: sha256WithRSAEncryption 0f:61:c6:09:b6:09:10:82:65:19:42:43:a1:bb:cc:c7:9b:98: 5a:ea:ea:f1:35:4b:53:4e:c1:ac:f2:f6:1d:cf:73:dc:ea:58: 89:62:4a:53:2b:c9:0e:91:92:f6:92:3d:9a:06:50:6b:fa:d6: 8f:31:43:dc:23:71:0b:a5:25:04:e5:3d:a0:5c:92:51:5a:f7: a1:6b:12:b1:02:59:18:a9:cd:ba:96:76:73:f0:75:2d:95:a1: 08:c4:16:49:77:78:2b:5b:8b:3a:a0:fa:ac:4e:e0:71:8f:2f: dc:d9:4e:64:73:09:40:bf:3d:ce:3e:2f:38:fb:44:58:b0:b9: c4:cd:50:35:2a:3b:b7:c4:85:4b:85:0f:bd:fe:20:4f:0b:dd: 87:67:91:75:24:fd:7b:8b:09:d1:f2:b6:f1:57:58:f4:74:2c: c8:be:b6:9e:4c:97:2c:59:b1:29:67:7c:72:52:96:a0:c7:c2: c8:95:d2:d6:57:9f:a5:a1:14:2d:81:ed:5a:ee:48:22:5c:2d: 0a:7e:e0:be:4d:a1:43:f4:1b:3a:f4:6e:8b:26:d4:d9:88:31: f6:85:ea:5b:56:8d:67:52:8d:51:49:01:24:45:6e:c7:60:96: fd:8f:d3:96:88:41:aa:35:c8:60:16:83:b6:3a:a0:bb:7f:a8: 08:4c:eb:d5 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOHYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1MTlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDc3NjZCMDcyRTZFNDBD RUUxRUVFNkQ1MDA3RTcyMkQ2ODExNEI3OTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDa+Sv3yxoLB37kssXOoeT/s+JuCU/WCgXE7KLWS0GHHMzoJ/lI tcMxUFdRv5mpP/CZmm4AruAzcWPRuf5MrhI1IBmb0fhV37/jAGP3Tdg+KCuvmzrE XgdW/C2n8RQCRORVTZMshHnRLg2vGH+DcMIakeU4JR02w5aAxBK1SlwowgDe+XDS TT44g22DgsJVpZbv0pgq50sU/3uRGer8+3udpG0FQW5uVHq45iuDzzg3cW+brdyz lxnRUnrLHwkSuKQ0y1it8qGtBUSYAHN83fm1cjKnsw9+ShJoViE1zB9Mk9OAMD0y R/XNib187CwTFFQU0IiqNKjrxbfwiEE3TyEHAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUd2awcubkDO4e7m1QB+ci1oEUt5MwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2QyYXdjdWJrRE80ZTdtMVFC LWNpMW9FVXQ1TS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 sNAwDQYJKoZIhvcNAQELBQADggEBAA9hxgm2CRCCZRlCQ6G7zMebmFrq6vE1S1NO wazy9h3Pc9zqWIliSlMryQ6RkvaSPZoGUGv61o8xQ9wjcQulJQTlPaBcklFa96Fr ErECWRipzbqWdnPwdS2VoQjEFkl3eCtbizqg+qxO4HGPL9zZTmRzCUC/Pc4+Lzj7 RFiwucTNUDUqO7fEhUuFD73+IE8L3YdnkXUk/XuLCdHytvFXWPR0LMi+tp5MlyxZ sSlnfHJSlqDHwsiV0tZXn6WhFC2B7VruSCJcLQp+4L5NoUP0Gzr0bosm1NmIMfaF 6ltWjWdSjVFJASRFbsdglv2P05aIQao1yGAWg7Y6oLt/qAhM69U= -----END CERTIFICATE-----Generated at Fri Oct 24 19:24:59 2025 by rpki-client