$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/M-jQ-Ythtwpv01-Nfig1buuZNxw.roa File: M-jQ-Ythtwpv01-Nfig1buuZNxw.roa (raw, json) Hash identifier: vfUOBDMklrcl78pBtPmpD0tfy+CVQDc1ZJE5ITvcHHE= Subject key identifier: 33:E8:D0:F9:8B:61:B7:0A:6F:D3:5F:8D:7E:28:35:6E:EB:99:37:1C Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Certificate serial: 0F74 Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/M-jQ-Ythtwpv01-Nfig1buuZNxw.roa Signing time: Fri 22 Aug 2025 08:51:23 +0000 ROA not before: Fri 22 Aug 2025 08:51:23 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18429 IP address blocks: 124.155.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3956 (0xf74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Validity Not Before: Aug 22 08:51:23 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=33E8D0F98B61B70A6FD35F8D7E28356EEB99371C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:40:d4:44:a8:32:d4:2f:f4:1d:a0:3c:30:f7: be:95:b9:d5:f9:1e:3e:80:81:75:f3:db:ef:f2:9a: 4d:0b:1a:3c:de:d9:79:66:76:7b:ce:e7:47:38:2f: a2:1b:d6:bd:54:d9:13:99:c5:b2:ad:08:dd:bb:a5: db:15:eb:ea:00:c8:b6:d7:65:ec:3c:c5:79:bb:62: e8:e4:59:a2:13:df:6c:ff:7f:dc:9f:e1:83:44:22: c6:fa:27:90:a5:26:a4:8f:37:46:6c:b4:ad:e3:d8: 49:87:a3:c4:b3:cf:ed:20:2f:7b:d1:8a:55:83:4f: 2d:3b:78:08:54:82:da:26:b5:35:7e:d3:09:4c:e4: ea:87:1b:04:ed:96:38:e8:ce:18:68:98:9c:19:8e: 07:3e:8f:fd:12:63:7e:cc:e1:61:e2:9f:7e:39:04: c3:77:ad:3d:35:e9:ed:4c:19:07:7e:45:a1:72:74: 06:08:52:00:8b:70:18:02:cd:d1:3b:a6:53:6a:db: 51:2b:88:d9:36:12:e8:06:f3:1c:2c:b3:5d:73:86: cc:6c:df:82:5f:2a:96:f9:58:6a:21:e9:7f:c0:46: 3a:29:a2:d4:a8:e9:0a:0e:5b:80:7f:ac:13:26:24: b1:30:4f:12:9e:81:1b:49:d6:a4:70:c3:98:38:9a: 69:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:E8:D0:F9:8B:61:B7:0A:6F:D3:5F:8D:7E:28:35:6E:EB:99:37:1C X509v3 Authority Key Identifier: keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/M-jQ-Ythtwpv01-Nfig1buuZNxw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.155.160.0/19 Signature Algorithm: sha256WithRSAEncryption 01:71:6d:a2:21:e5:74:e1:21:ac:14:c8:58:d1:b1:4e:76:b0: 84:e8:5c:41:c9:e1:97:9b:c2:7d:a8:eb:c4:a6:35:82:47:2c: de:a3:8f:7d:fa:19:4c:47:15:46:62:36:f5:3e:73:17:ea:af: a8:24:6f:14:9b:4b:c3:55:30:61:22:17:b8:73:dd:c8:d0:9e: d2:2b:16:0d:f6:7b:2b:22:78:65:0a:71:b4:51:ab:34:ac:fb: f3:1e:b1:c2:6e:50:9e:e4:f3:33:5a:c1:b5:88:86:e5:99:78: 79:00:2b:8b:09:ca:0b:d5:10:f7:84:fb:1f:fd:a3:cb:9f:ba: 90:5b:83:99:b6:51:fb:e6:e1:1e:17:32:77:23:c3:ba:e7:61: 27:94:65:ae:a0:db:cd:93:3a:c9:34:f6:01:a9:1e:dd:b1:94: d6:8c:fe:5d:43:8d:c8:89:48:11:40:6a:73:0a:70:7f:b0:b6: f4:7b:d2:d8:e9:aa:25:3f:d7:3a:b9:dd:83:8c:36:a6:6d:90: ca:ef:aa:ba:f7:20:d9:f6:db:51:fc:bf:a6:97:10:6d:9f:32: 48:d3:82:aa:0e:e8:e0:38:70:06:17:4f:02:bc:0b:7f:30:65: 2d:6f:b0:c2:44:59:45:5b:0a:00:a4:93:50:16:5d:fb:19:b7: fd:5c:ea:61 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICD3QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQx RTNGM0M4QkE4OURDMTMxMDQxMDM0NUY1MEMxMDA3NjE4MTI2MTAeFw0yNTA4MjIw ODUxMjNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDMzRThEMEY5OEI2MUI3 MEE2RkQzNUY4RDdFMjgzNTZFRUI5OTM3MUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvQNREqDLUL/QdoDww976VudX5Hj6AgXXz2+/ymk0LGjze2Xlm dnvO50c4L6Ib1r1U2ROZxbKtCN27pdsV6+oAyLbXZew8xXm7YujkWaIT32z/f9yf 4YNEIsb6J5ClJqSPN0ZstK3j2EmHo8Szz+0gL3vRilWDTy07eAhUgtomtTV+0wlM 5OqHGwTtljjozhhomJwZjgc+j/0SY37M4WHin345BMN3rT016e1MGQd+RaFydAYI UgCLcBgCzdE7plNq21EriNk2EugG8xwss11zhsxs34JfKpb5WGoh6X/ARjopotSo 6QoOW4B/rBMmJLEwTxKegRtJ1qRww5g4mmlpAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUM+jQ+Ythtwpv01+Nfig1buuZNxwwHwYDVR0jBBgwFoAUXR4/PIuoncExBBA0 X1DBAHYYEmEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0dORVQv WFI0X1BJdW9uY0V4QkJBMFgxREJBSFlZRW1FLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9YUjRfUEl1b25jRXhCQkEwWDFEQkFIWVlFbUUuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DR05FVC9NLWpRLVl0aHR3cHYwMS1OZmln MWJ1dVpOeHcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFfJug MA0GCSqGSIb3DQEBCwUAA4IBAQABcW2iIeV04SGsFMhY0bFOdrCE6FxByeGXm8J9 qOvEpjWCRyzeo499+hlMRxVGYjb1PnMX6q+oJG8Um0vDVTBhIhe4c93I0J7SKxYN 9nsrInhlCnG0Uas0rPvzHrHCblCe5PMzWsG1iIblmXh5ACuLCcoL1RD3hPsf/aPL n7qQW4OZtlH75uEeFzJ3I8O652EnlGWuoNvNkzrJNPYBqR7dsZTWjP5dQ43IiUgR QGpzCnB/sLb0e9LY6aolP9c6ud2DjDambZDK76q69yDZ9ttR/L+mlxBtnzJI04Kq DujgOHAGF08CvAt/MGUtb7DCRFlFWwoApJNQFl37Gbf9XOph -----END CERTIFICATE-----Generated at Sun Aug 24 16:08:55 2025 by rpki-client