$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yYUDsW0BUdgij5PS8YubnkQOY_U.roa File: yYUDsW0BUdgij5PS8YubnkQOY_U.roa (raw, json) Hash identifier: T9oT2gTKQ+p6UsxSXZMDQnpGXXAHG08tvK3p3DxPifQ= Subject key identifier: C9:85:03:B1:6D:01:51:D8:22:8F:93:D2:F1:8B:9B:9E:44:0E:63:F5 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3A97 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yYUDsW0BUdgij5PS8YubnkQOY_U.roa Signing time: Fri 22 Aug 2025 08:47:32 +0000 ROA not before: Fri 22 Aug 2025 08:47:32 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 180.177.184.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14999 (0x3a97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:32 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=C98503B16D0151D8228F93D2F18B9B9E440E63F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ff:4a:04:c0:41:c1:d4:ef:fa:40:6e:d3:a4: 36:a0:26:f2:90:c2:50:14:cf:da:ee:2e:44:4b:06: 80:64:da:5e:5e:ba:0d:30:be:dd:66:42:ad:26:3f: 6b:1e:ae:11:20:5a:6c:45:bc:b7:9b:2c:4d:21:1e: f2:fd:a6:67:a3:4a:2e:17:97:9d:fd:f7:d8:0a:48: 74:43:66:7f:35:d3:53:f7:9f:4d:24:c9:c3:45:ce: 37:53:56:e8:d2:ed:6f:fd:90:25:b6:9b:51:48:49: 41:89:e2:b6:16:8c:96:df:53:2a:3d:e6:f4:cd:bd: 06:61:5b:ce:19:73:f2:26:28:ac:aa:ab:c7:54:5b: 43:8d:bb:e5:97:c3:38:fa:b7:71:2c:69:51:ee:fc: b0:d7:02:dc:23:bf:dd:fc:a1:4e:2b:9c:f4:40:25: 32:c9:bd:b5:ff:20:e5:6d:de:0c:17:da:97:44:ff: 69:78:da:cf:3e:9f:76:83:1f:24:bd:ba:a9:b2:6c: af:56:92:1c:8c:16:da:56:19:98:a8:e6:98:62:6e: 48:e2:42:4c:2b:9a:17:51:8c:b2:16:d8:3b:13:42: bf:6d:48:08:94:4d:d6:fa:4f:30:92:7f:2e:b7:0d: fd:a6:9a:98:cf:66:c3:de:f4:44:09:af:a0:fa:63: ce:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:85:03:B1:6D:01:51:D8:22:8F:93:D2:F1:8B:9B:9E:44:0E:63:F5 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yYUDsW0BUdgij5PS8YubnkQOY_U.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.184.0/21 Signature Algorithm: sha256WithRSAEncryption 6c:5a:5d:4b:e0:04:c4:1b:03:e6:0c:2a:74:e8:d1:bc:6e:50: 7e:de:cd:d1:79:4d:66:b5:4a:50:39:bc:06:67:cf:28:8e:b8: 67:3c:fc:30:58:41:4e:7c:f6:69:f0:f8:ea:7a:1a:fe:f8:f6: 35:99:06:21:6a:2c:14:bf:a7:17:29:64:e8:66:ac:2e:8e:f2: fc:0a:87:d6:c2:37:31:bc:06:95:97:af:36:88:1a:97:bf:ea: 7b:3d:56:78:e9:9a:05:9c:b7:44:d3:09:b4:6a:ed:92:99:e3: f7:ee:bf:98:51:ff:1e:c1:7e:20:fe:9c:1f:da:a2:c4:a9:67: 72:cc:c3:13:a5:63:49:75:40:50:51:f2:1a:da:13:6c:61:67: 39:41:12:66:23:8b:22:e8:47:f7:0e:d9:f4:7d:c6:5f:9d:7e: 51:d4:d0:1f:e4:c0:ce:77:d8:96:10:87:8f:32:45:8c:ec:35: f0:fc:c7:4b:ec:89:5d:a0:56:63:1a:36:b3:4f:40:4c:54:2f: 45:2c:72:c3:70:54:60:c1:7c:b4:0a:3c:d6:e8:8e:2f:67:d6: 0d:88:03:fc:d5:18:5f:d9:7a:2c:fe:bd:1f:de:90:eb:04:cc: ba:6a:8f:d5:2f:09:c2:b9:59:85:41:80:eb:40:dc:12:2f:52: 62:c4:ee:3c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOpcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3MzJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEM5ODUwM0IxNkQwMTUx RDgyMjhGOTNEMkYxOEI5QjlFNDQwRTYzRjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDA/0oEwEHB1O/6QG7TpDagJvKQwlAUz9ruLkRLBoBk2l5eug0w vt1mQq0mP2serhEgWmxFvLebLE0hHvL9pmejSi4Xl53999gKSHRDZn8101P3n00k ycNFzjdTVujS7W/9kCW2m1FISUGJ4rYWjJbfUyo95vTNvQZhW84Zc/ImKKyqq8dU W0ONu+WXwzj6t3EsaVHu/LDXAtwjv938oU4rnPRAJTLJvbX/IOVt3gwX2pdE/2l4 2s8+n3aDHyS9uqmybK9WkhyMFtpWGZio5phibkjiQkwrmhdRjLIW2DsTQr9tSAiU Tdb6TzCSfy63Df2mmpjPZsPe9EQJr6D6Y85/AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUyYUDsW0BUdgij5PS8YubnkQOY/UwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3lZVURzVzBCVWRnaWo1UFM4 WXVibmtRT1lfVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 sbgwDQYJKoZIhvcNAQELBQADggEBAGxaXUvgBMQbA+YMKnTo0bxuUH7ezdF5TWa1 SlA5vAZnzyiOuGc8/DBYQU589mnw+Op6Gv749jWZBiFqLBS/pxcpZOhmrC6O8vwK h9bCNzG8BpWXrzaIGpe/6ns9VnjpmgWct0TTCbRq7ZKZ4/fuv5hR/x7BfiD+nB/a osSpZ3LMwxOlY0l1QFBR8hraE2xhZzlBEmYjiyLoR/cO2fR9xl+dflHU0B/kwM53 2JYQh48yRYzsNfD8x0vsiV2gVmMaNrNPQExUL0UscsNwVGDBfLQKPNboji9n1g2I A/zVGF/Zeiz+vR/ekOsEzLpqj9UvCcK5WYVBgOtA3BIvUmLE7jw= -----END CERTIFICATE-----Generated at Fri Oct 24 19:24:55 2025 by rpki-client