$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pRFdsOFn6Oa2dGu18ACdkfz9YtU.roa File: pRFdsOFn6Oa2dGu18ACdkfz9YtU.roa (raw, json) Hash identifier: 0fxTQHWFAQzg5OkPCQ70ULZ3ic+l9eV35cN64D49Ct4= Subject key identifier: A5:11:5D:B0:E1:67:E8:E6:B6:74:6B:B5:F0:00:9D:91:FC:FD:62:D5 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3A8E Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pRFdsOFn6Oa2dGu18ACdkfz9YtU.roa Signing time: Fri 22 Aug 2025 08:47:29 +0000 ROA not before: Fri 22 Aug 2025 08:47:29 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 180.177.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14990 (0x3a8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:29 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=A5115DB0E167E8E6B6746BB5F0009D91FCFD62D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a4:86:d7:10:19:f5:b8:4c:d6:d9:27:c3:a3: 01:ef:c0:44:23:cc:db:12:bc:ad:fb:a5:55:26:79: dd:84:aa:77:0d:85:89:b1:c1:69:00:26:3e:ef:77: 6b:c7:9c:30:e7:c6:20:aa:9f:1c:f0:f6:4d:f2:c7: 8d:f1:2d:67:39:66:1b:33:14:ea:be:e4:3b:2a:46: 37:7c:25:84:a9:f4:99:54:37:75:8f:0d:f5:87:f1: 5d:6c:f6:c5:66:e9:c3:c4:59:ad:cb:27:d6:cf:eb: b3:a7:a0:9a:54:0a:a0:70:51:a9:4d:59:d0:21:3f: ab:29:09:6b:31:f8:f3:92:f8:3f:85:46:5d:14:89: b0:a8:9a:d4:21:20:dd:57:58:b3:53:2e:97:fb:3a: c2:a2:ee:0a:e8:13:42:5f:a8:41:02:5f:d9:7e:4a: f4:2e:00:71:6b:00:45:6d:da:ea:b5:eb:03:68:e7: 77:93:b3:81:2d:89:af:63:c0:64:55:f5:35:98:70: 9c:2d:12:2f:d0:8e:2a:fc:85:ed:9c:73:a8:15:ec: e3:a9:3b:9d:d2:06:38:ca:fa:65:09:14:fa:9e:7d: ef:a5:4d:78:6d:cc:d4:22:67:e1:59:04:fa:8a:73: 57:b1:ef:fa:90:6a:d5:8c:64:e8:fc:04:86:8d:a5: 73:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:11:5D:B0:E1:67:E8:E6:B6:74:6B:B5:F0:00:9D:91:FC:FD:62:D5 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pRFdsOFn6Oa2dGu18ACdkfz9YtU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.200.0/21 Signature Algorithm: sha256WithRSAEncryption a6:62:4a:1a:b2:9b:1f:b7:c0:71:73:74:1e:83:70:f7:91:87: b2:8e:d1:e0:58:dc:23:04:7d:1c:ec:b6:3a:05:5c:1a:72:e6: d7:30:b7:2d:2d:19:65:c5:75:ba:ee:cd:6a:5f:55:47:bc:16: 0b:69:42:8d:f0:c7:3b:cc:df:8e:ed:0e:42:2d:d2:89:38:e5: d7:4c:29:be:30:c3:ff:60:93:aa:ec:f7:05:ab:b0:c3:4e:7c: d6:1f:05:5c:d3:17:ff:05:87:5b:19:9b:e3:b3:33:07:98:51: 02:7c:26:b0:f4:dc:96:a6:05:9a:07:eb:b4:cd:cd:53:b3:41: f9:e1:90:0c:b9:02:79:ac:1d:d9:b6:fb:8d:10:18:42:e2:0d: b1:34:71:a2:5b:1f:f0:97:b3:91:f9:b2:5c:f6:0b:b2:f1:2c: 28:e2:d6:78:f7:62:1b:cf:f6:74:f4:df:6c:3d:27:41:7f:1d: a2:d9:5a:c5:93:9f:ae:2c:54:d7:83:db:58:f6:4c:d6:bd:35: 2c:c6:cb:a3:f4:9c:89:f0:44:57:c3:97:df:09:19:c6:03:7f: 6f:74:8c:a3:1c:98:68:79:d4:ed:a6:f4:7e:29:75:3f:e0:c1: 06:74:74:5f:ca:aa:1e:37:44:5d:fb:92:a1:cd:3f:7e:c1:60: b5:57:ec:ee -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOo4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3MjlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEE1MTE1REIwRTE2N0U4 RTZCNjc0NkJCNUYwMDA5RDkxRkNGRDYyRDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4pIbXEBn1uEzW2SfDowHvwEQjzNsSvK37pVUmed2EqncNhYmx wWkAJj7vd2vHnDDnxiCqnxzw9k3yx43xLWc5ZhszFOq+5DsqRjd8JYSp9JlUN3WP DfWH8V1s9sVm6cPEWa3LJ9bP67OnoJpUCqBwUalNWdAhP6spCWsx+POS+D+FRl0U ibComtQhIN1XWLNTLpf7OsKi7groE0JfqEECX9l+SvQuAHFrAEVt2uq16wNo53eT s4Etia9jwGRV9TWYcJwtEi/Qjir8he2cc6gV7OOpO53SBjjK+mUJFPqefe+lTXht zNQiZ+FZBPqKc1ex7/qQatWMZOj8BIaNpXOVAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUpRFdsOFn6Oa2dGu18ACdkfz9YtUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3BSRmRzT0ZuNk9hMmRHdTE4 QUNka2Z6OVl0VS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 scgwDQYJKoZIhvcNAQELBQADggEBAKZiShqymx+3wHFzdB6DcPeRh7KO0eBY3CME fRzstjoFXBpy5tcwty0tGWXFdbruzWpfVUe8FgtpQo3wxzvM347tDkIt0ok45ddM Kb4ww/9gk6rs9wWrsMNOfNYfBVzTF/8Fh1sZm+OzMweYUQJ8JrD03JamBZoH67TN zVOzQfnhkAy5AnmsHdm2+40QGELiDbE0caJbH/CXs5H5slz2C7LxLCji1nj3YhvP 9nT032w9J0F/HaLZWsWTn64sVNeD21j2TNa9NSzGy6P0nInwRFfDl98JGcYDf290 jKMcmGh51O2m9H4pdT/gwQZ0dF/Kqh43RF37kqHNP37BYLVX7O4= -----END CERTIFICATE-----Generated at Fri Oct 24 19:24:59 2025 by rpki-client