$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/1yNXIN1iM0Kzi1ImIUShU0FVmUA.roa File: 1yNXIN1iM0Kzi1ImIUShU0FVmUA.roa (raw, json) Hash identifier: bJQwmnN+XU8i//H2QRn2lGfxiJY1X53wdGMSGtP6YLA= Subject key identifier: D7:23:57:20:DD:62:33:42:B3:8B:52:26:21:44:A1:53:41:55:99:40 Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Certificate serial: 0F73 Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/1yNXIN1iM0Kzi1ImIUShU0FVmUA.roa Signing time: Fri 22 Aug 2025 08:51:23 +0000 ROA not before: Fri 22 Aug 2025 08:51:23 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18429 IP address blocks: 27.147.62.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3955 (0xf73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Validity Not Before: Aug 22 08:51:23 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=D7235720DD623342B38B52262144A15341559940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d6:22:bb:42:c6:a1:d9:b4:9a:b7:8e:ad:f3: 2a:4d:51:68:07:68:64:2d:87:61:b6:a3:f4:ed:6c: f6:22:78:d8:0c:2d:74:db:40:d8:a5:e6:a7:7c:0a: 7a:74:a0:d3:0f:6c:c7:7c:49:59:23:43:2a:06:79: 8e:fa:9c:45:6a:b2:c0:90:3a:e0:56:2f:46:a6:ba: a9:71:28:69:27:64:75:63:ff:71:65:fc:76:be:d7: 4e:c8:8a:ea:2d:b5:34:91:8c:dc:83:c7:34:79:d2: 79:36:79:e0:20:a9:94:a4:c7:a1:c1:d7:8f:83:78: 2a:3d:40:c4:fb:e0:63:a1:29:9d:ba:ed:27:b7:c0: e2:9e:eb:62:a9:8a:7a:bb:56:67:7e:3c:8d:22:ad: 9e:52:6b:d3:1f:72:19:9d:1f:3b:03:74:96:80:2a: 8a:04:30:44:68:02:bb:32:ca:38:1c:f9:56:69:1d: 2f:d9:50:ca:be:fe:73:0c:be:61:a4:3f:cc:3d:cc: bf:b5:f1:ae:77:cc:18:65:20:d9:b9:d4:17:53:91: b9:cf:7b:25:c3:1d:76:8c:58:3d:03:b7:0a:49:00: fc:e2:72:38:ce:8f:3f:11:9e:fb:5d:0c:d3:bf:75: 6b:98:52:f6:5a:e5:a7:50:3a:8d:1a:43:9b:20:36: 36:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:23:57:20:DD:62:33:42:B3:8B:52:26:21:44:A1:53:41:55:99:40 X509v3 Authority Key Identifier: keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/1yNXIN1iM0Kzi1ImIUShU0FVmUA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 27.147.62.0/23 Signature Algorithm: sha256WithRSAEncryption 53:8b:5f:c3:71:48:cb:31:bd:82:5c:3f:64:b1:35:64:ff:b4: cb:1d:d0:bb:2b:85:9a:28:db:1a:51:4d:0a:94:df:5e:bd:df: d5:61:f1:61:46:c7:75:58:fb:e3:f5:ce:26:df:48:43:78:5f: 21:92:1c:d9:74:9f:a8:38:e3:fd:48:4e:2a:8c:bd:f1:de:af: f0:c2:c6:e1:0a:c6:32:5d:a2:d6:6a:bb:13:72:22:1d:e7:9d: cf:f2:68:6e:32:62:e2:7f:1d:e0:f2:48:e2:15:d4:cc:8e:47: d0:69:bf:1b:36:30:f3:e4:df:84:42:a6:17:a8:52:78:89:aa: da:55:78:77:4f:c3:78:1c:1c:ab:ea:78:82:ba:61:b8:37:fc: 97:15:ce:2c:bd:9d:4d:f9:9a:71:5b:0f:d6:0d:18:2b:47:cb: c6:04:58:f5:1a:c1:3e:b5:a2:90:31:4d:ff:70:01:14:07:83: 9f:5b:84:2e:15:17:b1:56:b3:29:12:08:3f:36:28:c2:c6:71: e4:b7:27:5e:38:9d:40:2c:5e:fc:28:19:63:58:d9:e9:d5:39: 31:7c:be:4c:ce:6f:dc:ef:16:2f:26:8a:65:d9:6f:e8:d7:93: e2:50:cc:72:28:ee:db:1a:a2:2b:d7:90:f8:69:0b:de:ef:6e: 9a:13:3e:71 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICD3MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQx RTNGM0M4QkE4OURDMTMxMDQxMDM0NUY1MEMxMDA3NjE4MTI2MTAeFw0yNTA4MjIw ODUxMjNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEQ3MjM1NzIwREQ2MjMz NDJCMzhCNTIyNjIxNDRBMTUzNDE1NTk5NDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDT1iK7Qsah2bSat46t8ypNUWgHaGQth2G2o/TtbPYieNgMLXTb QNil5qd8Cnp0oNMPbMd8SVkjQyoGeY76nEVqssCQOuBWL0amuqlxKGknZHVj/3Fl /Ha+107IiuottTSRjNyDxzR50nk2eeAgqZSkx6HB14+DeCo9QMT74GOhKZ267Se3 wOKe62Kpinq7Vmd+PI0irZ5Sa9MfchmdHzsDdJaAKooEMERoArsyyjgc+VZpHS/Z UMq+/nMMvmGkP8w9zL+18a53zBhlINm51BdTkbnPeyXDHXaMWD0DtwpJAPzicjjO jz8RnvtdDNO/dWuYUvZa5adQOo0aQ5sgNjYvAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU1yNXIN1iM0Kzi1ImIUShU0FVmUAwHwYDVR0jBBgwFoAUXR4/PIuoncExBBA0 X1DBAHYYEmEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0dORVQv WFI0X1BJdW9uY0V4QkJBMFgxREJBSFlZRW1FLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9YUjRfUEl1b25jRXhCQkEwWDFEQkFIWVlFbUUuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DR05FVC8xeU5YSU4xaU0wS3ppMUltSVVT aFUwRlZtVUEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBG5M+ MA0GCSqGSIb3DQEBCwUAA4IBAQBTi1/DcUjLMb2CXD9ksTVk/7TLHdC7K4WaKNsa UU0KlN9evd/VYfFhRsd1WPvj9c4m30hDeF8hkhzZdJ+oOOP9SE4qjL3x3q/wwsbh CsYyXaLWarsTciId553P8mhuMmLifx3g8kjiFdTMjkfQab8bNjDz5N+EQqYXqFJ4 iaraVXh3T8N4HByr6niCumG4N/yXFc4svZ1N+ZpxWw/WDRgrR8vGBFj1GsE+taKQ MU3/cAEUB4OfW4QuFRexVrMpEgg/NijCxnHktydeOJ1ALF78KBljWNnp1TkxfL5M zm/c7xYvJopl2W/o15PiUMxyKO7bGqIr15D4aQve726aEz5x -----END CERTIFICATE-----Generated at Sun Aug 24 16:08:55 2025 by rpki-client