$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/7EGTgJyjCW5hAxvIm2Zf9ca13Q8.roa File: 7EGTgJyjCW5hAxvIm2Zf9ca13Q8.roa (raw, json) Hash identifier: vtYqFP3w8kVH/dUgdDIPC9dyFG3k2T0ncXd76uvTTyc= Subject key identifier: EC:41:93:80:9C:A3:09:6E:61:03:1B:C8:9B:66:5F:F5:C6:B5:DD:0F Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Certificate serial: 0F67 Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/7EGTgJyjCW5hAxvIm2Zf9ca13Q8.roa Signing time: Fri 22 Aug 2025 08:51:20 +0000 ROA not before: Fri 22 Aug 2025 08:51:20 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18429 IP address blocks: 124.155.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3943 (0xf67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Validity Not Before: Aug 22 08:51:20 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=EC4193809CA3096E61031BC89B665FF5C6B5DD0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:dd:ef:fb:c4:76:75:e7:c6:d3:92:61:b1:e7: 23:a8:f0:94:26:f6:83:84:28:48:bc:97:fc:11:81: 57:03:19:4c:05:a5:a0:ea:91:f0:c6:d1:f9:6e:fb: 2a:f7:4a:43:d5:ce:dc:dd:00:2a:5b:d0:41:57:1d: 29:1b:73:57:76:5e:ac:10:6a:a3:13:ab:d3:7b:12: 7b:ec:5e:85:e6:5e:1c:c4:22:19:6b:0b:d8:58:39: c5:c7:f5:fe:49:53:74:69:cb:45:bd:48:5f:c0:60: a9:06:44:f1:f1:f5:c0:8f:6d:83:31:e1:fe:c6:c8: 38:f0:a6:27:95:36:e6:50:67:c2:30:ef:a9:fb:66: 44:d6:1c:c6:7a:d9:78:7e:9a:6d:db:4a:a5:04:c9: 31:cc:81:0f:f8:b7:a5:3f:00:36:5d:5d:83:28:c5: df:c3:7c:f0:2d:8e:ef:96:fd:74:9c:d8:f1:fa:95: d9:a2:d5:07:4e:f1:33:ad:1c:55:88:9f:eb:b7:d9: 3c:1f:8d:e8:13:ea:e3:be:7f:d7:55:3d:8a:0e:b9: 2b:af:46:0a:bc:6a:df:df:da:5e:85:17:e3:4e:ff: 17:90:97:27:59:31:80:4f:9e:d8:eb:6f:ea:44:d1: 05:a5:b3:d7:c9:00:96:6f:b5:97:4e:56:61:28:bb: ba:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:41:93:80:9C:A3:09:6E:61:03:1B:C8:9B:66:5F:F5:C6:B5:DD:0F X509v3 Authority Key Identifier: keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/7EGTgJyjCW5hAxvIm2Zf9ca13Q8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.155.168.0/23 Signature Algorithm: sha256WithRSAEncryption 7f:c3:61:94:67:f1:47:fb:b2:03:64:0b:d2:c0:a4:07:45:13: 11:a1:9e:ac:01:8d:dd:94:79:8c:75:30:be:4b:bb:f1:c9:2d: 73:00:10:41:73:d6:32:51:93:af:51:5b:b2:94:2f:0e:4e:45: ba:d2:fd:42:9d:ce:b8:d7:06:4e:26:1d:9f:2c:83:52:ef:d1: cf:29:6a:5f:36:be:9d:93:b2:72:a1:d7:97:87:bf:79:70:64: ef:7d:70:69:70:bc:ca:ec:cd:91:6c:31:31:d2:4e:90:99:58: e0:b4:bf:81:52:41:7e:5a:01:f5:07:33:2c:2a:91:01:64:a6: f3:ef:1d:95:fe:0c:5e:53:5e:27:cf:33:20:08:84:6e:97:27: d4:6b:df:a4:8b:b6:ec:a7:14:67:a3:92:4e:f4:41:05:74:b2: 21:e4:d8:d7:49:84:36:48:21:29:bb:8b:cf:8f:c8:ae:c0:7c: d5:7c:e0:cf:57:ba:84:8d:08:57:26:8d:1f:9e:2c:8a:d4:4c: 87:e7:4c:3d:9c:0d:63:0b:63:95:78:57:72:5e:df:43:7a:38: bb:5b:16:35:ba:2e:54:31:07:dd:fa:6a:3b:df:2b:1d:6c:22: 10:ad:2a:58:34:7e:43:b8:4b:8e:3c:90:ad:7a:d2:38:07:ce: 8f:c8:2e:be -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICD2cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQx RTNGM0M4QkE4OURDMTMxMDQxMDM0NUY1MEMxMDA3NjE4MTI2MTAeFw0yNTA4MjIw ODUxMjBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEVDNDE5MzgwOUNBMzA5 NkU2MTAzMUJDODlCNjY1RkY1QzZCNUREMEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDp3e/7xHZ158bTkmGx5yOo8JQm9oOEKEi8l/wRgVcDGUwFpaDq kfDG0flu+yr3SkPVztzdACpb0EFXHSkbc1d2XqwQaqMTq9N7EnvsXoXmXhzEIhlr C9hYOcXH9f5JU3Rpy0W9SF/AYKkGRPHx9cCPbYMx4f7GyDjwpieVNuZQZ8Iw76n7 ZkTWHMZ62Xh+mm3bSqUEyTHMgQ/4t6U/ADZdXYMoxd/DfPAtju+W/XSc2PH6ldmi 1QdO8TOtHFWIn+u32TwfjegT6uO+f9dVPYoOuSuvRgq8at/f2l6FF+NO/xeQlydZ MYBPntjrb+pE0QWls9fJAJZvtZdOVmEou7pzAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU7EGTgJyjCW5hAxvIm2Zf9ca13Q8wHwYDVR0jBBgwFoAUXR4/PIuoncExBBA0 X1DBAHYYEmEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0dORVQv WFI0X1BJdW9uY0V4QkJBMFgxREJBSFlZRW1FLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9YUjRfUEl1b25jRXhCQkEwWDFEQkFIWVlFbUUuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DR05FVC83RUdUZ0p5akNXNWhBeHZJbTJa ZjljYTEzUTgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBfJuo MA0GCSqGSIb3DQEBCwUAA4IBAQB/w2GUZ/FH+7IDZAvSwKQHRRMRoZ6sAY3dlHmM dTC+S7vxyS1zABBBc9YyUZOvUVuylC8OTkW60v1Cnc641wZOJh2fLINS79HPKWpf Nr6dk7JyodeXh795cGTvfXBpcLzK7M2RbDEx0k6QmVjgtL+BUkF+WgH1BzMsKpEB ZKbz7x2V/gxeU14nzzMgCIRulyfUa9+ki7bspxRno5JO9EEFdLIh5NjXSYQ2SCEp u4vPj8iuwHzVfODPV7qEjQhXJo0fniyK1EyH50w9nA1jC2OVeFdyXt9Deji7WxY1 ui5UMQfd+mo73ysdbCIQrSpYNH5DuEuOPJCtetI4B86PyC6+ -----END CERTIFICATE-----Generated at Sun Aug 24 16:07:10 2025 by rpki-client