$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ulMbHfW-7a2cktN7e9qB_ZP0uwI.roa File: ulMbHfW-7a2cktN7e9qB_ZP0uwI.roa (raw, json) Hash identifier: OZHaiG+jmUTexoSKkJ0ruDbiMBki+zgz8KRbcg7tXDk= Subject key identifier: BA:53:1B:1D:F5:BE:ED:AD:9C:92:D3:7B:7B:DA:81:FD:93:F4:BB:02 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 38EC Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ulMbHfW-7a2cktN7e9qB_ZP0uwI.roa Signing time: Fri 22 Aug 2025 08:45:46 +0000 ROA not before: Fri 22 Aug 2025 08:45:46 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 180.177.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14572 (0x38ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:46 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=BA531B1DF5BEEDAD9C92D37B7BDA81FD93F4BB02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:79:08:56:2c:81:3e:e2:a9:c0:08:dc:15:40: a7:68:cf:61:ef:f4:91:55:c2:0f:2f:10:f6:38:e6: f9:10:e1:09:2d:60:cb:7c:b0:f3:ff:fb:f8:98:d6: 0a:93:8f:c3:de:ae:0f:3e:29:b0:59:83:5e:b9:52: 2b:a3:5c:92:49:09:57:9e:47:5a:4e:b9:92:c2:12: 83:7c:2a:2b:23:6b:89:c1:b9:c0:6e:16:7e:4b:73: f3:65:c9:b7:8c:43:5d:85:81:22:99:a2:2a:d5:74: dc:4f:c6:5c:14:62:cf:3a:fe:77:ad:d8:22:55:49: df:5c:95:d0:44:c2:c3:92:e9:7d:2f:88:35:e8:07: 65:ec:79:3e:34:7a:64:3f:bd:d5:60:bf:75:16:b1: ff:c2:d7:69:af:76:5e:4f:99:f1:ae:27:fb:26:c1: b2:6a:01:8d:05:10:e0:f0:91:d0:51:3e:97:0f:16: ff:ee:f5:af:de:10:f2:a2:a2:78:b9:b6:30:06:ac: f2:db:0f:99:6c:23:49:39:e0:d9:f9:89:7a:88:94: a4:f8:6f:62:bb:e4:6e:5e:d5:da:a3:aa:7e:d0:df: 05:c8:fd:14:29:7a:23:3a:2f:0b:2b:a5:16:26:fb: 32:c9:d3:04:dd:1e:53:8c:e3:c5:b4:80:a7:e1:89: 5d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:53:1B:1D:F5:BE:ED:AD:9C:92:D3:7B:7B:DA:81:FD:93:F4:BB:02 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ulMbHfW-7a2cktN7e9qB_ZP0uwI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.223.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:dd:44:1a:da:a0:f3:b5:4f:18:07:0c:ac:05:a4:dd:3b:13: b7:e8:56:db:5a:7c:a3:f6:e5:b9:62:41:f5:39:f8:c5:8e:fe: e0:5f:4d:01:fa:ab:95:71:79:8e:4f:d0:bd:41:5a:47:08:32: 21:7b:93:77:d9:27:41:65:24:0a:08:38:8a:52:3d:2c:27:dc: de:65:9d:d0:f5:f3:e0:67:df:63:a4:1a:df:0a:d2:f8:8f:26: e3:74:1d:93:f4:a2:d5:9c:e7:6d:05:83:e1:8c:69:76:4f:15: ff:2c:60:0e:8c:bf:3f:8e:41:1a:5d:5e:32:a9:4c:67:5e:34: b8:9f:bd:01:4f:e4:f8:51:2e:f7:96:5c:27:17:ca:db:45:a9: 10:17:78:07:e5:15:77:17:5d:01:71:88:a1:a7:28:c9:77:b0: a5:80:3a:81:30:02:f8:0e:77:e0:59:cc:c5:9e:11:e6:21:6a: 7f:5e:4c:ee:df:e5:30:a8:f9:dd:7a:75:4d:a7:29:70:2d:22: 08:b1:0f:1c:98:75:3f:d5:fe:1e:16:cb:3a:70:93:5d:75:2a: 87:2b:0c:f1:81:fa:ac:37:d0:76:55:22:ec:b5:46:17:63:00: 89:1d:e6:3d:fd:64:35:28:3f:90:46:10:62:02:8a:23:23:57: 1e:11:84:e8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOOwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1NDZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEJBNTMxQjFERjVCRUVE QUQ5QzkyRDM3QjdCREE4MUZEOTNGNEJCMDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBeQhWLIE+4qnACNwVQKdoz2Hv9JFVwg8vEPY45vkQ4QktYMt8 sPP/+/iY1gqTj8Perg8+KbBZg165UiujXJJJCVeeR1pOuZLCEoN8Kisja4nBucBu Fn5Lc/NlybeMQ12FgSKZoirVdNxPxlwUYs86/net2CJVSd9cldBEwsOS6X0viDXo B2XseT40emQ/vdVgv3UWsf/C12mvdl5PmfGuJ/smwbJqAY0FEODwkdBRPpcPFv/u 9a/eEPKioni5tjAGrPLbD5lsI0k54Nn5iXqIlKT4b2K75G5e1dqjqn7Q3wXI/RQp eiM6LwsrpRYm+zLJ0wTdHlOM48W0gKfhiV13AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUulMbHfW+7a2cktN7e9qB/ZP0uwIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3VsTWJIZlctN2EyY2t0Tjdl OXFCX1pQMHV3SS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0 sd8wDQYJKoZIhvcNAQELBQADggEBACvdRBraoPO1TxgHDKwFpN07E7foVttafKP2 5bliQfU5+MWO/uBfTQH6q5VxeY5P0L1BWkcIMiF7k3fZJ0FlJAoIOIpSPSwn3N5l ndD18+Bn32OkGt8K0viPJuN0HZP0otWc520Fg+GMaXZPFf8sYA6Mvz+OQRpdXjKp TGdeNLifvQFP5PhRLveWXCcXyttFqRAXeAflFXcXXQFxiKGnKMl3sKWAOoEwAvgO d+BZzMWeEeYhan9eTO7f5TCo+d16dU2nKXAtIgixDxyYdT/V/h4Wyzpwk111Kocr DPGB+qw30HZVIuy1RhdjAIkd5j39ZDUoP5BGEGICiiMjVx4RhOg= -----END CERTIFICATE-----Generated at Fri Oct 24 19:21:19 2025 by rpki-client