$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rVSNzyk3zxJ6Kq0OHAOshR7vDmQ.roa File: rVSNzyk3zxJ6Kq0OHAOshR7vDmQ.roa (raw, json) Hash identifier: HzAYP/EKhDWU7uolfOgRo0DLlmPk7eGS7bDZ8rpdiJ0= Subject key identifier: AD:54:8D:CF:29:37:CF:12:7A:2A:AD:0E:1C:03:AC:85:1E:EF:0E:64 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 39EB Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rVSNzyk3zxJ6Kq0OHAOshR7vDmQ.roa Signing time: Fri 22 Aug 2025 08:46:48 +0000 ROA not before: Fri 22 Aug 2025 08:46:48 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 180.177.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14827 (0x39eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:48 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=AD548DCF2937CF127A2AAD0E1C03AC851EEF0E64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:40:24:29:42:a7:bb:1e:4e:e1:61:b0:73:47: 25:ef:35:41:bb:c2:73:bd:94:8c:e4:9b:69:a1:a5: b9:e3:c1:69:ee:ec:0a:c7:a4:d4:76:48:92:ae:6c: ca:13:c1:ef:03:69:1f:61:66:40:4e:15:d6:17:26: ef:d5:32:9e:37:95:13:b6:d0:e4:ad:5a:01:73:a2: aa:f3:ac:b3:62:82:7d:63:cf:9b:43:a5:4a:88:1a: 01:6a:3f:ce:13:4f:a4:5a:b5:65:75:92:4a:10:77: 58:62:cf:c3:13:1a:8a:fe:6b:9e:ec:53:8f:1d:8b: b5:ca:07:b4:da:4a:3d:20:e2:c9:02:ce:bb:9f:2a: af:68:be:3b:8c:8b:36:71:02:61:95:4e:33:b0:36: 8f:1a:46:5d:ba:cc:d3:99:4c:a8:08:90:af:40:04: 60:dc:b0:2d:6f:78:32:72:65:05:ef:38:49:62:f5: b9:bd:18:1a:52:68:eb:ee:cb:65:ab:75:14:4b:47: d9:bb:5f:41:ed:61:23:7b:c7:0b:59:80:4f:41:49: f1:3a:4a:27:18:96:03:84:18:b9:10:e0:38:f8:55: fa:85:80:62:8c:ec:77:7c:28:c6:5e:1e:cb:09:ce: 29:b3:28:75:be:91:2f:11:72:df:5e:45:63:76:5b: 66:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:54:8D:CF:29:37:CF:12:7A:2A:AD:0E:1C:03:AC:85:1E:EF:0E:64 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rVSNzyk3zxJ6Kq0OHAOshR7vDmQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.168.0/22 Signature Algorithm: sha256WithRSAEncryption 9b:ad:71:8d:26:61:9f:aa:fc:37:1c:f5:c2:cf:f6:8b:0c:85: bd:ab:bf:95:15:13:74:5a:a7:2d:d5:6b:a7:1b:81:3c:53:69: 04:92:b5:f7:bb:60:ab:c0:0e:e9:c6:a8:0f:41:b4:1c:ed:05: 25:8f:d1:37:ce:cb:6e:99:36:be:86:4e:58:a2:95:8b:45:e7: 74:ec:6a:8c:42:94:aa:88:58:88:18:88:a6:a8:f9:70:a6:62: 76:80:76:28:bf:ce:f6:cb:4a:82:d4:77:ad:e7:0e:e7:5e:07: ed:2b:85:40:94:09:f1:40:5b:bb:bb:8e:7c:88:75:fa:3c:a8: 1a:db:e4:f3:21:4d:ee:ed:c7:01:61:86:c8:2b:fd:f1:e9:dc: 58:a2:0a:68:c6:ae:fd:b3:29:ee:80:c6:ab:94:52:4f:bd:36: b2:d2:fd:3a:50:06:11:cf:95:03:81:02:f3:07:9e:64:a4:51: 98:28:c6:e2:84:7f:83:2c:14:f2:b1:11:d6:4e:23:51:29:d9: b2:e3:74:eb:da:bc:51:b7:c3:56:b3:90:9d:3f:72:f4:11:a1: ff:00:aa:d9:90:d6:7d:5f:4e:58:bc:7a:64:9e:ee:d4:53:b5: e8:4c:42:cb:12:40:03:22:d4:57:3f:08:50:58:2e:f2:0c:cc: 29:32:f6:63 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOeswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2NDhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEFENTQ4RENGMjkzN0NG MTI3QTJBQUQwRTFDMDNBQzg1MUVFRjBFNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCmQCQpQqe7Hk7hYbBzRyXvNUG7wnO9lIzkm2mhpbnjwWnu7ArH pNR2SJKubMoTwe8DaR9hZkBOFdYXJu/VMp43lRO20OStWgFzoqrzrLNign1jz5tD pUqIGgFqP84TT6RatWV1kkoQd1hiz8MTGor+a57sU48di7XKB7TaSj0g4skCzruf Kq9ovjuMizZxAmGVTjOwNo8aRl26zNOZTKgIkK9ABGDcsC1veDJyZQXvOEli9bm9 GBpSaOvuy2WrdRRLR9m7X0HtYSN7xwtZgE9BSfE6SicYlgOEGLkQ4Dj4VfqFgGKM 7Hd8KMZeHssJzimzKHW+kS8Rct9eRWN2W2ZHAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUrVSNzyk3zxJ6Kq0OHAOshR7vDmQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3JWU056eWszenhKNktxME9I QU9zaFI3dkRtUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 sagwDQYJKoZIhvcNAQELBQADggEBAJutcY0mYZ+q/Dcc9cLP9osMhb2rv5UVE3Ra py3Va6cbgTxTaQSStfe7YKvADunGqA9BtBztBSWP0TfOy26ZNr6GTliilYtF53Ts aoxClKqIWIgYiKao+XCmYnaAdii/zvbLSoLUd63nDudeB+0rhUCUCfFAW7u7jnyI dfo8qBrb5PMhTe7txwFhhsgr/fHp3FiiCmjGrv2zKe6AxquUUk+9NrLS/TpQBhHP lQOBAvMHnmSkUZgoxuKEf4MsFPKxEdZOI1Ep2bLjdOvavFG3w1azkJ0/cvQRof8A qtmQ1n1fTli8emSe7tRTtehMQssSQAMi1Fc/CFBYLvIMzCky9mM= -----END CERTIFICATE-----Generated at Fri Oct 24 19:24:34 2025 by rpki-client