$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xpHB1XjBZb2xek_6u_pmLBL882Q.roa File: xpHB1XjBZb2xek_6u_pmLBL882Q.roa (raw, json) Hash identifier: UlXdwOVifaiL6GSs9b96iWxSezgdm8Wg78sosLSOoPU= Subject key identifier: C6:91:C1:D5:78:C1:65:BD:B1:7A:4F:FA:BB:FA:66:2C:12:FC:F3:64 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3882 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xpHB1XjBZb2xek_6u_pmLBL882Q.roa Signing time: Fri 22 Aug 2025 08:45:22 +0000 ROA not before: Fri 22 Aug 2025 08:45:22 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 180.176.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14466 (0x3882) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:45:22 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=C691C1D578C165BDB17A4FFABBFA662C12FCF364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:46:fe:bd:04:f7:38:f9:31:ae:69:23:46:3b: 83:03:1e:a5:67:54:61:12:23:fb:f0:4a:af:d4:b4: 74:a0:cb:08:f3:59:7d:df:5f:4f:6e:02:94:31:0f: ba:46:e7:0e:49:81:dc:f6:ba:f1:3e:26:c3:c0:47: f3:a1:e8:0b:2b:7a:98:a4:82:98:79:23:95:a8:35: 54:c2:a9:2c:0b:2d:b7:7a:12:41:97:b8:29:a4:f4: 0c:97:45:c1:8e:8c:dc:a8:93:e2:55:9d:43:04:00: 72:7d:4f:77:01:d9:9a:a1:ad:7c:ca:e1:f0:00:72: 8a:f1:0a:6f:2e:64:5a:3a:b1:94:46:c7:e3:ad:3c: 59:ca:a1:83:87:0e:74:1f:6b:1d:03:27:2d:a4:02: 73:86:12:77:8a:44:54:47:43:61:0c:f4:fa:96:97: 0f:62:20:bf:b1:8b:8a:e2:09:d8:0a:5e:47:b9:a2: 54:83:b4:8a:86:9d:45:fd:45:ee:fb:1c:73:46:39: 38:79:94:a5:e1:64:11:ba:a6:7d:ff:0f:e3:5d:32: 9a:1b:3d:4e:ae:f3:05:40:f9:cf:f6:4b:b3:32:67: 95:3d:fe:44:8b:1b:4a:0a:da:93:59:a9:dd:0a:2d: f3:6b:1f:dd:b2:da:c2:0f:48:83:0f:44:d8:30:50: 8f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:91:C1:D5:78:C1:65:BD:B1:7A:4F:FA:BB:FA:66:2C:12:FC:F3:64 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xpHB1XjBZb2xek_6u_pmLBL882Q.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.172.0/22 Signature Algorithm: sha256WithRSAEncryption 00:63:82:17:4a:d3:51:7f:77:2b:82:0c:eb:12:21:84:82:a7: ba:77:dc:69:79:80:34:74:5a:f8:aa:b8:ea:19:f2:70:a8:6b: 14:4a:a3:56:96:9e:d4:80:51:6b:f7:f0:59:73:55:69:9c:f1: ae:c7:1e:6d:cf:91:9c:04:31:39:c1:47:1b:16:13:fd:2b:b2: 72:c4:ca:35:cd:df:e2:f9:b5:d2:9e:bf:28:b1:11:a4:12:b6: c2:97:44:bf:5d:79:18:65:1a:7b:17:c4:73:54:5f:db:5f:ba: f6:8d:a3:14:b5:76:8f:a9:2c:1c:4c:a5:1b:d5:45:71:fb:8c: f8:26:00:09:07:eb:3b:1e:71:0d:87:fb:f4:28:6a:e0:26:56: cf:aa:fa:ce:fd:32:31:74:b3:4a:d2:7a:29:02:da:5e:e8:d5: 5f:4b:bd:5d:93:6c:5e:60:a9:41:25:e2:cf:8f:06:6c:39:48: 09:6b:02:15:6e:e7:9a:0b:6c:d1:c6:bb:43:e4:ba:61:3f:07: 92:da:49:5d:a3:ef:e0:ee:be:03:c8:27:3c:65:b2:4f:a2:b2: eb:b7:7f:50:1f:e1:3b:12:01:00:b0:a3:b5:6b:ab:08:01:7b: 8c:63:71:9a:0d:95:9d:c6:7e:f8:dc:63:a8:9d:e1:b9:3e:5f: dc:be:1a:e5 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOIIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ1MjJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEM2OTFDMUQ1NzhDMTY1 QkRCMTdBNEZGQUJCRkE2NjJDMTJGQ0YzNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDRv69BPc4+TGuaSNGO4MDHqVnVGESI/vwSq/UtHSgywjzWX3f X09uApQxD7pG5w5Jgdz2uvE+JsPAR/Oh6Asrepikgph5I5WoNVTCqSwLLbd6EkGX uCmk9AyXRcGOjNyok+JVnUMEAHJ9T3cB2ZqhrXzK4fAAcorxCm8uZFo6sZRGx+Ot PFnKoYOHDnQfax0DJy2kAnOGEneKRFRHQ2EM9PqWlw9iIL+xi4riCdgKXke5olSD tIqGnUX9Re77HHNGOTh5lKXhZBG6pn3/D+NdMpobPU6u8wVA+c/2S7MyZ5U9/kSL G0oK2pNZqd0KLfNrH92y2sIPSIMPRNgwUI99AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUxpHB1XjBZb2xek/6u/pmLBL882QwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3hwSEIxWGpCWmIyeGVrXzZ1 X3BtTEJMODgyUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 sKwwDQYJKoZIhvcNAQELBQADggEBAABjghdK01F/dyuCDOsSIYSCp7p33Gl5gDR0 WviquOoZ8nCoaxRKo1aWntSAUWv38FlzVWmc8a7HHm3PkZwEMTnBRxsWE/0rsnLE yjXN3+L5tdKevyixEaQStsKXRL9deRhlGnsXxHNUX9tfuvaNoxS1do+pLBxMpRvV RXH7jPgmAAkH6zsecQ2H+/QoauAmVs+q+s79MjF0s0rSeikC2l7o1V9LvV2TbF5g qUEl4s+PBmw5SAlrAhVu55oLbNHGu0PkumE/B5LaSV2j7+DuvgPIJzxlsk+isuu3 f1Af4TsSAQCwo7VrqwgBe4xjcZoNlZ3GfvjcY6id4bk+X9y+GuU= -----END CERTIFICATE-----Generated at Fri Oct 24 19:21:52 2025 by rpki-client