$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kRJYceZ6OvptQ0eEhcVeCy58fWc.roa File: kRJYceZ6OvptQ0eEhcVeCy58fWc.roa (raw, json) Hash identifier: X4I9QNsmO0KiYnQMeHKDLMz7p8fNvm/k43trk8aDcD0= Subject key identifier: 91:12:58:71:E6:7A:3A:FA:6D:43:47:84:85:C5:5E:0B:2E:7C:7D:67 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3B11 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kRJYceZ6OvptQ0eEhcVeCy58fWc.roa Signing time: Fri 22 Aug 2025 08:48:02 +0000 ROA not before: Fri 22 Aug 2025 08:48:02 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 180.177.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15121 (0x3b11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:48:02 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=91125871E67A3AFA6D43478485C55E0B2E7C7D67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:02:eb:92:24:c7:a2:ac:52:3f:4c:11:f5:0c: a8:50:8b:e6:9c:5b:e8:2c:21:14:f1:c8:1d:a5:e8: 10:a7:db:1d:96:82:fc:de:6f:6f:6a:ba:42:9e:18: 80:c8:5f:bd:9a:cc:c1:92:3a:68:ba:3c:e5:03:d5: f5:ae:d4:fc:87:04:e8:35:70:69:e8:e8:f1:b8:a5: 3d:5f:49:37:ff:12:02:32:c2:50:49:e9:c5:3d:63: 90:9a:ce:08:38:6a:dc:dc:07:a2:73:a1:5b:e8:c3: a0:73:d4:45:c5:11:13:99:52:54:17:46:65:23:1b: 0e:f0:2a:d0:73:aa:ac:fa:7f:64:89:9a:67:7d:3a: 98:fa:72:d8:a3:77:b2:01:19:62:ae:d8:0e:1b:e7: f0:58:4c:2f:77:76:47:e4:1b:ad:90:d2:1b:80:66: 97:d7:d3:03:e9:37:bc:76:94:98:c0:ef:30:e9:b5: 98:a2:3e:8a:c9:ce:10:a1:a0:09:c8:a8:25:c1:2d: ba:23:cc:7b:95:4d:11:6f:df:03:1e:d2:6a:b7:c4: eb:cb:88:3e:fc:0c:f7:fc:70:51:ef:ee:55:b6:de: 35:6f:be:2d:a9:d8:6a:64:4e:17:ff:c9:bb:41:ec: ca:0d:4d:33:b4:5c:62:a2:e3:76:76:7a:6a:23:29: c6:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:12:58:71:E6:7A:3A:FA:6D:43:47:84:85:C5:5E:0B:2E:7C:7D:67 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kRJYceZ6OvptQ0eEhcVeCy58fWc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.112.0/21 Signature Algorithm: sha256WithRSAEncryption 78:bd:5e:08:94:e5:cf:d3:55:91:03:43:41:11:e7:d4:2d:54: 27:ab:cf:c1:50:f1:cf:32:a8:08:e7:8d:91:f8:e0:39:43:2a: 16:b7:c9:3f:c7:54:2c:40:c5:32:b5:d5:1b:0b:24:aa:e5:f6: de:e9:e8:e9:f7:9b:a6:a9:4d:02:9b:d7:9b:74:b7:1f:5b:0a: 43:b4:21:c8:0e:fe:9b:3d:ed:65:01:d9:90:2d:c3:d1:a8:18: cd:71:76:6c:81:73:9e:a1:4b:4d:a6:18:5f:ea:b4:d7:b3:47: 9b:03:96:98:a3:26:04:fb:67:f1:a1:06:c3:e4:c1:26:51:26: a9:cd:bd:22:8f:b6:b0:96:5b:b4:7a:47:ce:12:94:fb:a5:c4: 8b:db:a5:e6:dc:82:4f:da:80:2f:9d:75:ae:79:b5:19:81:ef: 9e:5f:eb:39:65:be:85:5f:87:d5:05:e5:b2:47:10:c1:73:02: ed:55:63:78:27:f2:7e:df:eb:e0:46:26:01:80:a4:84:da:14: 5b:fc:d1:f6:38:e6:4c:3d:81:e9:de:e2:2e:57:4f:18:fa:5c: b8:2c:56:5d:a0:d2:77:7a:b8:fe:ee:32:0c:4f:e4:ea:13:96: b8:de:4f:85:5d:19:bb:26:53:a9:39:9c:0a:bd:c6:71:6d:39: b8:65:e6:0f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOxEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ4MDJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDkxMTI1ODcxRTY3QTNB RkE2RDQzNDc4NDg1QzU1RTBCMkU3QzdENjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPAuuSJMeirFI/TBH1DKhQi+acW+gsIRTxyB2l6BCn2x2Wgvze b29qukKeGIDIX72azMGSOmi6POUD1fWu1PyHBOg1cGno6PG4pT1fSTf/EgIywlBJ 6cU9Y5Cazgg4atzcB6JzoVvow6Bz1EXFEROZUlQXRmUjGw7wKtBzqqz6f2SJmmd9 Opj6ctijd7IBGWKu2A4b5/BYTC93dkfkG62Q0huAZpfX0wPpN7x2lJjA7zDptZii PorJzhChoAnIqCXBLbojzHuVTRFv3wMe0mq3xOvLiD78DPf8cFHv7lW23jVvvi2p 2GpkThf/ybtB7MoNTTO0XGKi43Z2emojKcaTAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUkRJYceZ6OvptQ0eEhcVeCy58fWcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2tSSlljZVo2T3ZwdFEwZUVo Y1ZlQ3k1OGZXYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 sXAwDQYJKoZIhvcNAQELBQADggEBAHi9XgiU5c/TVZEDQ0ER59QtVCerz8FQ8c8y qAjnjZH44DlDKha3yT/HVCxAxTK11RsLJKrl9t7p6On3m6apTQKb15t0tx9bCkO0 IcgO/ps97WUB2ZAtw9GoGM1xdmyBc56hS02mGF/qtNezR5sDlpijJgT7Z/GhBsPk wSZRJqnNvSKPtrCWW7R6R84SlPulxIvbpebcgk/agC+dda55tRmB755f6zllvoVf h9UF5bJHEMFzAu1VY3gn8n7f6+BGJgGApITaFFv80fY45kw9gene4i5XTxj6XLgs Vl2g0nd6uP7uMgxP5OoTlrjeT4VdGbsmU6k5nAq9xnFtObhl5g8= -----END CERTIFICATE-----Generated at Fri Oct 24 19:25:06 2025 by rpki-client