$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/Hod9ZCHmELmeOXVSWgnfG4HdWW4.roa File: Hod9ZCHmELmeOXVSWgnfG4HdWW4.roa (raw, json) Hash identifier: zotqIdGtaVwTYnA8hySEK9doQB+uveme1FKlUfLCgI0= Subject key identifier: 1E:87:7D:64:21:E6:10:B9:9E:39:75:52:5A:09:DF:1B:81:DD:59:6E Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Certificate serial: 0F7A Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/Hod9ZCHmELmeOXVSWgnfG4HdWW4.roa Signing time: Fri 22 Aug 2025 08:51:25 +0000 ROA not before: Fri 22 Aug 2025 08:51:25 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18429 IP address blocks: 123.50.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3962 (0xf7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Validity Not Before: Aug 22 08:51:25 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=1E877D6421E610B99E3975525A09DF1B81DD596E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:85:09:3e:fa:04:c3:6d:b0:f2:8e:69:41:fd: 31:2c:87:10:1e:a8:f9:f9:67:40:a8:b3:d1:6c:4b: d3:bd:a3:bb:6d:88:87:3d:08:cc:8d:c4:94:8f:cc: 07:b6:3f:7a:31:c9:fa:a1:8b:b2:fb:7f:51:b2:a2: 32:90:85:41:aa:5f:1b:f1:83:8e:45:5c:b6:38:84: 3f:4c:a8:a9:a6:fa:b7:9f:a0:1d:cb:33:e7:eb:8c: 12:4f:08:16:b0:ba:02:d8:1b:42:bd:d5:f0:d5:58: c7:71:c7:5d:60:37:a9:09:d4:73:b3:73:ed:a6:32: b7:e9:99:92:14:95:8f:57:45:f9:f7:56:ad:4d:fb: fd:32:c3:d4:71:d8:14:24:1d:51:4a:d4:fb:66:ed: 0e:8b:52:12:4f:c8:15:28:7e:7d:20:4a:e3:06:88: ec:25:77:06:7b:a1:4e:05:22:96:9f:d7:e7:d0:e4: d6:44:a4:ad:69:4b:e6:84:b8:a1:08:1d:ab:ac:50: 3f:7d:a0:02:67:9f:4f:ea:d3:9d:c6:02:d8:1a:03: 11:1a:0d:77:55:51:69:b3:32:8d:b6:17:ae:db:b8: 6b:5d:84:49:a9:0a:c1:d3:fe:84:b5:db:3f:ce:38: 41:ba:cb:2d:83:99:81:3d:5f:73:86:3d:d3:d4:2d: cc:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:87:7D:64:21:E6:10:B9:9E:39:75:52:5A:09:DF:1B:81:DD:59:6E X509v3 Authority Key Identifier: keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/Hod9ZCHmELmeOXVSWgnfG4HdWW4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.50.56.0/21 Signature Algorithm: sha256WithRSAEncryption 51:e5:83:40:35:4f:2f:f7:03:fd:72:2c:9e:47:36:18:de:6b: 37:cb:3a:d3:6f:4e:e3:a2:25:47:dd:d6:6e:12:db:f3:e3:1b: 14:89:82:8a:df:5c:91:84:c7:00:c5:2f:e0:ae:d7:ff:38:3e: a6:14:be:60:5b:43:f7:56:be:cb:b3:39:34:86:65:93:20:39: 96:39:28:86:85:41:8f:7b:4d:50:59:d1:86:e9:76:20:19:83: 95:c3:60:16:58:5f:64:a0:80:03:6c:f7:f2:32:35:d1:16:f7: b3:d5:59:57:19:dc:d3:98:8a:33:53:29:6f:7a:18:35:2f:af: c3:b5:08:b9:1c:3b:ce:e1:b4:97:25:25:cf:69:9a:ba:b9:99: 4c:c1:40:0d:51:99:5a:46:9b:8e:65:e4:64:a8:32:6f:30:01: 0a:0a:2d:3d:d0:d2:f8:23:61:f3:2a:69:ec:3e:ec:4b:97:1e: 01:55:3c:d9:18:cb:24:6f:03:68:f7:3b:27:c9:d2:de:e7:1b: 1a:c2:d3:47:97:0f:e2:5c:a2:97:f1:e8:3b:71:15:fa:07:9a: 20:fd:50:c1:e2:40:b0:fe:63:ab:3c:2b:1b:75:25:3b:c0:59: 37:1f:21:60:a9:f5:2b:ee:99:27:f6:35:fc:0f:8e:36:05:1d: 01:1b:b3:34 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICD3owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQx RTNGM0M4QkE4OURDMTMxMDQxMDM0NUY1MEMxMDA3NjE4MTI2MTAeFw0yNTA4MjIw ODUxMjVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDFFODc3RDY0MjFFNjEw Qjk5RTM5NzU1MjVBMDlERjFCODFERDU5NkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCihQk++gTDbbDyjmlB/TEshxAeqPn5Z0Cos9FsS9O9o7ttiIc9 CMyNxJSPzAe2P3oxyfqhi7L7f1GyojKQhUGqXxvxg45FXLY4hD9MqKmm+refoB3L M+frjBJPCBawugLYG0K91fDVWMdxx11gN6kJ1HOzc+2mMrfpmZIUlY9XRfn3Vq1N +/0yw9Rx2BQkHVFK1Ptm7Q6LUhJPyBUofn0gSuMGiOwldwZ7oU4FIpaf1+fQ5NZE pK1pS+aEuKEIHausUD99oAJnn0/q053GAtgaAxEaDXdVUWmzMo22F67buGtdhEmp CsHT/oS12z/OOEG6yy2DmYE9X3OGPdPULcytAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUHod9ZCHmELmeOXVSWgnfG4HdWW4wHwYDVR0jBBgwFoAUXR4/PIuoncExBBA0 X1DBAHYYEmEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0dORVQv WFI0X1BJdW9uY0V4QkJBMFgxREJBSFlZRW1FLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9YUjRfUEl1b25jRXhCQkEwWDFEQkFIWVlFbUUuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DR05FVC9Ib2Q5WkNIbUVMbWVPWFZTV2du Zkc0SGRXVzQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDezI4 MA0GCSqGSIb3DQEBCwUAA4IBAQBR5YNANU8v9wP9ciyeRzYY3ms3yzrTb07joiVH 3dZuEtvz4xsUiYKK31yRhMcAxS/grtf/OD6mFL5gW0P3Vr7Lszk0hmWTIDmWOSiG hUGPe01QWdGG6XYgGYOVw2AWWF9koIADbPfyMjXRFvez1VlXGdzTmIozUylvehg1 L6/DtQi5HDvO4bSXJSXPaZq6uZlMwUANUZlaRpuOZeRkqDJvMAEKCi090NL4I2Hz KmnsPuxLlx4BVTzZGMskbwNo9zsnydLe5xsawtNHlw/iXKKX8eg7cRX6B5og/VDB 4kCw/mOrPCsbdSU7wFk3HyFgqfUr7pkn9jX8D442BR0BG7M0 -----END CERTIFICATE-----Generated at Sun Aug 24 16:05:09 2025 by rpki-client