$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/olhjk57V1tTQ-e95GsWQdgcOHz0.roa File: olhjk57V1tTQ-e95GsWQdgcOHz0.roa (raw, json) Hash identifier: tzP0TnXZM3uFzDyp5Es1ZNlAepZ7GCmpTeiDyK6BODE= Subject key identifier: A2:58:63:93:9E:D5:D6:D4:D0:F9:EF:79:1A:C5:90:76:07:0E:1F:3D Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3A4C Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/olhjk57V1tTQ-e95GsWQdgcOHz0.roa Signing time: Fri 22 Aug 2025 08:47:12 +0000 ROA not before: Fri 22 Aug 2025 08:47:12 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 180.177.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14924 (0x3a4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:12 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=A25863939ED5D6D4D0F9EF791AC59076070E1F3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:f2:af:4b:10:24:07:ae:68:05:f0:68:c5:92: 0b:56:a2:ea:78:10:31:5a:8a:cc:db:de:17:e2:bf: ca:20:96:96:7e:cd:2c:31:98:a9:b9:02:89:44:78: 13:24:65:98:5d:83:7b:0b:10:e7:c9:ba:d6:1b:70: 4b:50:61:ee:e4:37:bf:80:3e:e4:7f:2c:41:a0:d8: 34:30:ad:7f:42:cc:20:66:b2:82:00:aa:80:5d:db: b0:93:86:f9:55:2b:7f:9d:bc:53:ed:64:c6:a5:72: d8:3f:e9:79:ee:9a:b0:03:05:ef:f6:2f:20:9b:f4: 83:a3:3c:99:53:7b:da:5e:55:b8:e2:70:b9:7e:a3: ef:54:33:2b:59:b4:60:ae:02:0e:04:89:7c:5e:2d: 37:72:14:51:c9:bb:3c:91:44:34:f6:d4:2c:f7:74: 87:e2:4e:0a:38:c9:a9:3a:f1:cd:5b:7e:28:20:45: 35:e3:0d:80:0e:ae:6c:a0:b9:f4:d8:b7:31:e2:a0: 16:c5:35:86:e6:0a:06:5f:a9:4b:be:8f:20:84:da: f4:f5:e5:71:7c:4d:c6:ad:46:91:c3:b8:87:9c:82: c7:99:c8:4d:d4:68:ca:0b:3d:20:1b:79:11:ef:90: 03:83:cc:e1:6d:aa:56:51:91:b5:b1:11:60:b2:02: f7:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:58:63:93:9E:D5:D6:D4:D0:F9:EF:79:1A:C5:90:76:07:0E:1F:3D X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/olhjk57V1tTQ-e95GsWQdgcOHz0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.140.0/22 Signature Algorithm: sha256WithRSAEncryption 46:70:a8:d6:1f:b3:bd:72:f5:98:ef:3c:d1:77:57:dd:f6:9f: 22:2a:ae:58:19:c6:cb:92:fc:e9:5d:5e:ad:04:85:cd:58:b4: 33:d5:c0:4b:f5:c3:1b:3f:e9:75:26:26:f4:6e:6c:d5:48:99: 4f:1e:b1:ac:34:9c:94:99:e3:69:f9:da:b5:d4:df:c4:1e:9b: 3c:22:e3:88:42:69:ff:c6:bd:df:56:21:f0:e5:ee:5a:7d:fb: 46:dc:f7:65:c9:17:1b:e8:3f:e1:f9:c8:c4:56:fd:9d:6b:e0: db:c7:b4:20:3d:7b:de:a8:0a:69:d1:4c:c1:97:07:29:61:78: ce:a8:12:98:a9:6f:24:b8:5a:1e:2f:be:8e:da:74:01:22:de: ed:f4:bd:19:1b:96:0f:56:54:96:a0:1b:2c:d2:47:82:be:b3: dd:79:21:2f:fe:ca:e3:f6:cc:50:eb:5a:4d:ce:81:f6:82:5e: a3:54:44:d4:e0:18:f7:da:6b:cc:03:9d:6f:a4:a8:af:57:d0: 82:f8:00:2c:6a:67:48:5f:c8:a8:6e:bd:c0:b5:f3:3d:e0:0b: f7:d5:09:91:94:a2:35:69:a8:64:5d:6c:34:71:b4:5d:41:3b: 7b:fb:32:38:8d:cd:56:c6:5e:81:f4:2e:74:4a:ee:15:0c:b3: 4a:12:c7:13 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOkwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3MTJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEEyNTg2MzkzOUVENUQ2 RDREMEY5RUY3OTFBQzU5MDc2MDcwRTFGM0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDo8q9LECQHrmgF8GjFkgtWoup4EDFaiszb3hfiv8oglpZ+zSwx mKm5AolEeBMkZZhdg3sLEOfJutYbcEtQYe7kN7+APuR/LEGg2DQwrX9CzCBmsoIA qoBd27CThvlVK3+dvFPtZMalctg/6XnumrADBe/2LyCb9IOjPJlTe9peVbjicLl+ o+9UMytZtGCuAg4EiXxeLTdyFFHJuzyRRDT21Cz3dIfiTgo4yak68c1bfiggRTXj DYAOrmygufTYtzHioBbFNYbmCgZfqUu+jyCE2vT15XF8TcatRpHDuIecgseZyE3U aMoLPSAbeRHvkAODzOFtqlZRkbWxEWCyAvfPAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUolhjk57V1tTQ+e95GsWQdgcOHz0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL29saGprNTdWMXRUUS1lOTVH c1dRZGdjT0h6MC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 sYwwDQYJKoZIhvcNAQELBQADggEBAEZwqNYfs71y9ZjvPNF3V932nyIqrlgZxsuS /OldXq0Ehc1YtDPVwEv1wxs/6XUmJvRubNVImU8esaw0nJSZ42n52rXU38Qemzwi 44hCaf/Gvd9WIfDl7lp9+0bc92XJFxvoP+H5yMRW/Z1r4NvHtCA9e96oCmnRTMGX BylheM6oEpipbyS4Wh4vvo7adAEi3u30vRkblg9WVJagGyzSR4K+s915IS/+yuP2 zFDrWk3OgfaCXqNURNTgGPfaa8wDnW+kqK9X0IL4ACxqZ0hfyKhuvcC18z3gC/fV CZGUojVpqGRdbDRxtF1BO3v7MjiNzVbGXoH0LnRK7hUMs0oSxxM= -----END CERTIFICATE-----Generated at Fri Oct 24 19:21:44 2025 by rpki-client